cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local, @empty, @loopback, 0x3}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, @perf_bp={&(0x7f0000000280)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000480), &(0x7f00000004c0)=0x8) io_setup(0x100, &(0x7f0000000680)) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r3}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) 13:17:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xffffffff00000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 386.972418] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 387.012373] syz-executor2 cpuset=syz2 mems_allowed=0 [ 387.027761] CPU: 1 PID: 22932 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 387.035158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.044518] Call Trace: [ 387.044682] kvm_hv_set_msr: 81 callbacks suppressed [ 387.044711] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001e data 0x0 [ 387.047123] dump_stack+0x1c4/0x2b4 [ 387.047143] ? dump_stack_print_info.cold.2+0x52/0x52 [ 387.047160] ? mark_held_locks+0x130/0x130 [ 387.047172] ? mark_held_locks+0x130/0x130 13:17:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x48}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 387.047193] dump_header+0x27b/0xf72 [ 387.060803] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000033 data 0x0 [ 387.060869] ? pagefault_out_of_memory+0x197/0x197 [ 387.060890] ? mark_held_locks+0x130/0x130 [ 387.070317] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000001d data 0x0 [ 387.073909] ? rcu_read_unlock+0x16/0x60 [ 387.073926] ? lock_downgrade+0x900/0x900 [ 387.073947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.073974] ? css_next_child+0x1c3/0x620 13:17:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 387.091924] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000069 data 0x0 [ 387.095493] ? find_lock_task_mm+0x22e/0x4d0 [ 387.095513] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.095525] ? task_will_free_mem+0x239/0xb30 [ 387.095558] ? ___ratelimit+0x36f/0x655 [ 387.109454] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000075 data 0x0 [ 387.112497] ? lock_downgrade+0x900/0x900 [ 387.112516] ? trace_hardirqs_on+0xbd/0x310 [ 387.112528] ? kasan_check_read+0x11/0x20 13:17:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x500000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 387.112543] ? ___ratelimit+0x36f/0x655 [ 387.112561] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 387.120815] kvm [22922]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x4000002d data 0x0 [ 387.122229] ? trace_hardirqs_on+0x310/0x310 [ 387.122245] ? lock_downgrade+0x900/0x900 [ 387.122262] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 387.122289] ? ___ratelimit+0xaa/0x655 [ 387.211792] ? idr_get_free+0xec0/0xec0 [ 387.215774] ? kasan_check_write+0x14/0x20 [ 387.220029] ? do_raw_spin_lock+0xc1/0x200 [ 387.224624] oom_kill_process.cold.27+0x10/0x903 [ 387.229397] ? kasan_check_write+0x14/0x20 [ 387.233644] ? do_raw_spin_lock+0xc1/0x200 [ 387.237887] ? oom_evaluate_task+0x540/0x540 [ 387.242308] ? cgroup_procs_next+0x70/0x70 [ 387.246562] ? _raw_spin_unlock_irq+0x60/0x80 [ 387.248846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 387.251063] ? oom_badness+0xaa0/0xaa0 [ 387.251080] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 387.251095] ? mem_cgroup_iter_break+0x30/0x30 [ 387.251116] ? cgroup_file_notify+0x226/0x2f0 [ 387.277197] out_of_memory+0xa84/0x1430 [ 387.281190] ? kasan_check_read+0x11/0x20 [ 387.285354] ? oom_killer_disable+0x3a0/0x3a0 [ 387.289853] ? kasan_check_write+0x14/0x20 [ 387.290001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 387.294098] ? do_raw_spin_lock+0xc1/0x200 [ 387.294119] mem_cgroup_out_of_memory+0x15e/0x210 [ 387.294137] ? memcg_memory_event+0x40/0x40 [ 387.311594] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 387.321822] ? page_counter_try_charge+0x1c1/0x220 [ 387.321836] try_charge+0xc43/0x1690 [ 387.321850] ? lock_downgrade+0x900/0x900 [ 387.321867] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 387.321883] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.321903] ? should_fail+0x22d/0xd01 [ 387.340709] ? percpu_ref_tryget_live+0x168/0x460 [ 387.340723] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 387.340737] ? lock_downgrade+0x900/0x900 [ 387.340751] ? lock_release+0x970/0x970 [ 387.340767] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 387.340790] ? __debug_object_init+0x57d/0x1290 [ 387.340804] ? lock_downgrade+0x900/0x900 [ 387.340821] ? get_mem_cgroup_from_mm+0x206/0x440 [ 387.340835] ? fs_reclaim_acquire+0x20/0x20 [ 387.340853] memcg_kmem_charge_memcg+0x7c/0x120 [ 387.340878] ? memcg_kmem_put_cache+0xb0/0xb0 [ 387.364122] memcg_kmem_charge+0x135/0x300 [ 387.364141] __alloc_pages_nodemask+0x72e/0xde0 [ 387.364159] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 387.387595] ? mark_held_locks+0x130/0x130 [ 387.387611] ? aa_file_perm+0x469/0x1060 [ 387.387625] ? lock_downgrade+0x900/0x900 [ 387.387654] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 387.401126] alloc_pages_current+0x10c/0x210 [ 387.423288] __pmd_alloc+0x3e/0x450 [ 387.423304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.423321] __handle_mm_fault+0x2098/0x53e0 [ 387.423341] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 387.423362] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 387.446584] ? rcu_is_watching+0x30/0x30 [ 387.446598] ? __kasan_slab_free+0x119/0x150 [ 387.446632] ? lock_acquire+0x1ed/0x520 [ 387.455877] ? handle_mm_fault+0x42a/0xc70 [ 387.455895] ? lock_downgrade+0x900/0x900 [ 387.455914] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 387.455942] ? __do_page_fault+0x67d/0xed0 [ 387.465463] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 387.473826] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 387.473843] ? check_preemption_disabled+0x48/0x200 [ 387.473863] handle_mm_fault+0x54f/0xc70 [ 387.473881] ? __handle_mm_fault+0x53e0/0x53e0 [ 387.482249] ? find_vma+0x34/0x190 [ 387.482268] __do_page_fault+0x67d/0xed0 [ 387.482287] ? mm_fault_error+0x380/0x380 [ 387.482301] ? trace_hardirqs_off+0xb8/0x310 [ 387.482325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 387.492342] ? trace_hardirqs_on+0x310/0x310 [ 387.492361] do_page_fault+0xf2/0x7e0 [ 387.492376] ? vmalloc_sync_all+0x30/0x30 [ 387.492391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.492410] ? error_entry+0x70/0xd0 [ 387.503370] ? trace_hardirqs_off_caller+0xbb/0x310 [ 387.503384] ? trace_hardirqs_on_caller+0xc0/0x310 [ 387.503400] ? syscall_return_slowpath+0x5e0/0x5e0 [ 387.503413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.503432] ? trace_hardirqs_on_caller+0x310/0x310 [ 387.512490] ? trace_hardirqs_off+0x310/0x310 [ 387.512511] ? prepare_exit_to_usermode+0x291/0x3b0 [ 387.594347] ? page_fault+0x8/0x30 [ 387.597890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.602728] ? page_fault+0x8/0x30 [ 387.606265] page_fault+0x1e/0x30 [ 387.609716] RIP: 0033:0x4016a7 [ 387.612913] Code: 00 00 00 48 83 ec 08 48 8b 15 a5 e9 63 00 48 8b 05 96 e9 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 78 e9 63 00 48 83 c4 08 c3 48 89 c6 bf f8 56 4c 00 [ 387.631814] RSP: 002b:0000000000a3fbf0 EFLAGS: 00010287 [ 387.637172] RAX: 0000001b31e20000 RBX: 0000000000000003 RCX: 0000001b32e20000 [ 387.644440] RDX: 0000001b31e20004 RSI: 0000000000a3f9a0 RDI: 0000000000000000 [ 387.651701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 387.658969] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 387.666236] R13: 0000000000000001 R14: 0000000000000229 R15: 0000000000000002 [ 387.705944] Task in /syz2 killed as a result of limit of /syz2 [ 387.712480] memory: usage 204784kB, limit 204800kB, failcnt 1729 [ 387.719137] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 387.725991] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 387.733430] Memory cgroup stats for /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x900, @empty, [0x0, 0x2000000]}, 0x6) 13:17:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x600000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 387.757357] Memory cgroup out of memory: Kill process 22932 (syz-executor2) score 161 or sacrifice child [ 387.767183] Killed process 22932 (syz-executor2) total-vm:70208kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 387.778820] oom_reaper: reaped process 22932 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB [ 387.835062] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=-1000 [ 387.848168] syz-executor2 cpuset=syz2 mems_allowed=0 [ 387.853595] CPU: 1 PID: 22968 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 387.860963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.870313] Call Trace: [ 387.870335] dump_stack+0x1c4/0x2b4 [ 387.870353] ? dump_stack_print_info.cold.2+0x52/0x52 [ 387.870372] dump_header+0x27b/0xf72 [ 387.870392] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 387.891243] ? pagefault_out_of_memory+0x197/0x197 [ 387.896173] ? rcu_read_unlock+0x33/0x60 [ 387.900234] ? mem_cgroup_iter+0x514/0x1160 [ 387.904560] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 387.909316] ? css_task_iter_end+0x222/0x490 [ 387.913723] ? lock_downgrade+0x900/0x900 [ 387.917868] ? oom_kill_memcg_member+0xc0/0xc0 [ 387.922449] ? trace_hardirqs_on+0xbd/0x310 [ 387.926764] ? kasan_check_read+0x11/0x20 [ 387.930915] ? css_task_iter_end+0x222/0x490 [ 387.935322] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 387.940772] ? kasan_check_write+0x14/0x20 [ 387.945044] ? do_raw_spin_lock+0xc1/0x200 [ 387.949292] ? _raw_spin_unlock_irq+0x60/0x80 [ 387.953806] ? css_task_iter_end+0x2ce/0x490 [ 387.958216] ? cgroup_procs_next+0x70/0x70 [ 387.962538] ? _raw_spin_unlock_irq+0x60/0x80 [ 387.967033] ? oom_badness+0xaa0/0xaa0 [ 387.970919] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 387.975684] ? mem_cgroup_iter_break+0x30/0x30 [ 387.980271] ? cgroup_file_notify+0x226/0x2f0 [ 387.984771] out_of_memory.cold.30+0xf/0x184 [ 387.989185] ? kasan_check_read+0x11/0x20 [ 387.993331] ? oom_killer_disable+0x3a0/0x3a0 [ 387.997824] ? kasan_check_write+0x14/0x20 [ 388.002059] ? do_raw_spin_lock+0xc1/0x200 [ 388.006300] mem_cgroup_out_of_memory+0x15e/0x210 [ 388.011146] ? memcg_memory_event+0x40/0x40 [ 388.015464] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 388.020223] ? page_counter_try_charge+0x1c1/0x220 [ 388.025154] try_charge+0xc43/0x1690 [ 388.028867] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 388.033979] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 388.040038] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 388.044880] ? lock_downgrade+0x900/0x900 [ 388.049024] ? lock_release+0x970/0x970 [ 388.053000] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 388.058802] ? lock_downgrade+0x900/0x900 [ 388.062966] ? get_mem_cgroup_from_mm+0x206/0x440 [ 388.067815] ? mem_cgroup_can_attach+0x580/0x580 [ 388.072571] ? __this_cpu_preempt_check+0x1c/0x1f [ 388.077417] ? __might_sleep+0x95/0x190 [ 388.081410] mem_cgroup_try_charge+0x5ea/0xe10 [ 388.085997] ? mem_cgroup_protected+0xa60/0xa60 [ 388.090669] ? swp_swapcount+0x530/0x530 [ 388.094762] ? mark_held_locks+0x130/0x130 [ 388.099017] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 388.104561] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 388.109505] wp_page_copy+0x46c/0x14f0 [ 388.113413] ? follow_pfn+0x2e0/0x2e0 [ 388.117214] ? mem_cgroup_iter+0x514/0x1160 [ 388.121534] ? do_wp_page+0x76c/0x1390 [ 388.125435] ? lock_downgrade+0x900/0x900 [ 388.129583] ? kasan_check_write+0x14/0x20 [ 388.133818] ? kasan_check_read+0x11/0x20 [ 388.137972] ? do_raw_spin_unlock+0xa7/0x2f0 [ 388.142469] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 388.147048] ? __pte_alloc_kernel+0x220/0x220 [ 388.151545] ? pvclock_read_flags+0x160/0x160 [ 388.156045] do_wp_page+0x774/0x1390 [ 388.159763] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 388.164447] ? trace_hardirqs_on+0xbd/0x310 [ 388.168769] ? lock_release+0x970/0x970 [ 388.172748] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.178314] ? kasan_check_write+0x14/0x20 [ 388.182576] ? do_raw_spin_lock+0xc1/0x200 [ 388.186831] __handle_mm_fault+0x2c60/0x53e0 [ 388.191250] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 388.196119] ? shrink_node+0x16b0/0x16b0 [ 388.200185] ? lock_acquire+0x1ed/0x520 [ 388.204163] ? handle_mm_fault+0x42a/0xc70 [ 388.208398] ? lock_downgrade+0x900/0x900 [ 388.212552] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 388.218355] ? __do_page_fault+0x67d/0xed0 [ 388.222593] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 388.228042] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.233583] ? check_preemption_disabled+0x48/0x200 [ 388.238600] handle_mm_fault+0x54f/0xc70 [ 388.242668] ? __handle_mm_fault+0x53e0/0x53e0 [ 388.247246] ? find_vma+0x34/0x190 [ 388.250798] __do_page_fault+0x67d/0xed0 [ 388.254868] ? mm_fault_error+0x380/0x380 [ 388.259018] ? trace_hardirqs_on+0x310/0x310 [ 388.263424] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.268795] ? trace_hardirqs_on+0x310/0x310 [ 388.273213] do_page_fault+0xf2/0x7e0 [ 388.277032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.282570] ? vmalloc_sync_all+0x30/0x30 [ 388.286720] ? error_entry+0x70/0xd0 [ 388.290433] ? trace_hardirqs_off_caller+0xbb/0x310 [ 388.295447] ? trace_hardirqs_on_caller+0xc0/0x310 [ 388.300377] ? syscall_return_slowpath+0x5e0/0x5e0 [ 388.305311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.310155] ? trace_hardirqs_on_caller+0x310/0x310 [ 388.315171] ? trace_hardirqs_off+0x310/0x310 [ 388.319676] ? prepare_exit_to_usermode+0x291/0x3b0 [ 388.324693] ? page_fault+0x8/0x30 [ 388.328235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.333078] ? page_fault+0x8/0x30 [ 388.336618] page_fault+0x1e/0x30 [ 388.340064] RIP: 0033:0x40d4f6 [ 388.343290] Code: 2b 63 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 89 4a 08 49 8b 89 c8 02 00 00 48 89 11 48 c7 05 5a 2b 63 00 00 00 00 00 <48> c7 05 97 e9 2f 00 90 be 70 00 31 d2 48 c7 05 82 e9 2f 00 90 be [ 388.362743] RSP: 002b:0000000000a3fd48 EFLAGS: 00010246 [ 388.368117] RAX: 00000000020f0c00 RBX: 0000000000a3fd50 RCX: 0000000000a40040 [ 388.375390] RDX: 0000000000a40040 RSI: 000000000070be90 RDI: 00000000020f0c20 [ 388.382660] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 00000000020f0940 [ 388.389926] R10: 00000000020f0c10 R11: 0000000000000202 R12: 0000000000000001 [ 388.397200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 388.407181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 388.423664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 388.470133] Memory limit reached of cgroup /syz2 [ 388.474935] memory: usage 204796kB, limit 204800kB, failcnt 1750 [ 388.474944] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 388.474961] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 388.474970] Memory cgroup stats for 13:17:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffffffffffffd, @ipv4={[], [], @local}, 0x1}, 0x2d1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000640)="69726c61f407000000000000000700") setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x1, 0x800000000000000a}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000600)={'vcan0\x00', r3}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r5, &(0x7f0000000300)={0x2c, 0x2, r4}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000800)=ANY=[], 0x0) socketpair$inet(0x2, 0x803, 0x10000000000a, &(0x7f0000000940)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x2, 0x2, 0x6b, 0x2b, 0x50}, &(0x7f0000000840)=0x98) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x400) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000740)={r7, 0x6000000000000}, 0x8) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mixer\x00', 0x210000, 0x0) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000000700)={@multicast1, @loopback}, 0x8) recvmmsg(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000140)=""/3, 0x3}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000400)=""/169, 0xa9}], 0x6, 0x0, 0x0, 0x7}, 0x7ff}], 0x1, 0x40000000, &(0x7f0000000540)) lstat(&(0x7f0000000900)='./file0/file0/file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000000580)='./file0/file0\x00', r10, &(0x7f0000000680)="f2dae9eebf36c7575760f53d411f314c531251c81c38e52263cfd1d2c243253c0b571724f3bcd7054f96dd891a25d29d0b47c72d57e0") r11 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FICLONE(r11, 0x40049409, r6) 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x10000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:38 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xc00e000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010000904000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012000c000100677265000000008921cf12a62274dd00"], 0x38}}, 0x0) [ 388.503455] /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 388.521941] Out of memory and no killable processes... [ 388.551882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") unshare(0x8000400) fcntl$setflags(r0, 0x2, 0x8000000000005) [ 388.555748] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 388.578479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 388.589545] syz-executor2 cpuset=syz2 mems_allowed=0 [ 388.600920] CPU: 0 PID: 22968 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 388.608402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.617765] Call Trace: [ 388.620365] dump_stack+0x1c4/0x2b4 [ 388.624007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 388.629212] ? mark_held_locks+0x130/0x130 [ 388.633455] ? mark_held_locks+0x130/0x130 [ 388.637696] dump_header+0x27b/0xf72 [ 388.641421] ? pagefault_out_of_memory+0x197/0x197 [ 388.646361] ? mark_held_locks+0x130/0x130 [ 388.650596] ? rcu_read_unlock+0x16/0x60 [ 388.650610] ? lock_downgrade+0x900/0x900 [ 388.650630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.650649] ? css_next_child+0x1c3/0x620 [ 388.664397] ? find_lock_task_mm+0x22e/0x4d0 [ 388.664417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.664434] ? task_will_free_mem+0x239/0xb30 [ 388.683012] ? ___ratelimit+0x36f/0x655 [ 388.686995] ? lock_downgrade+0x900/0x900 [ 388.691154] ? trace_hardirqs_on+0xbd/0x310 [ 388.695490] ? kasan_check_read+0x11/0x20 [ 388.699658] ? ___ratelimit+0x36f/0x655 [ 388.703640] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 388.709097] ? trace_hardirqs_on+0x310/0x310 [ 388.713509] ? lock_downgrade+0x900/0x900 [ 388.717666] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 388.722774] ? ___ratelimit+0xaa/0x655 [ 388.726667] ? idr_get_free+0xec0/0xec0 [ 388.730644] ? kasan_check_write+0x14/0x20 [ 388.734881] ? do_raw_spin_lock+0xc1/0x200 [ 388.739125] oom_kill_process.cold.27+0x10/0x903 [ 388.743885] ? kasan_check_write+0x14/0x20 [ 388.748124] ? do_raw_spin_lock+0xc1/0x200 [ 388.752378] ? oom_evaluate_task+0x540/0x540 [ 388.756801] ? cgroup_procs_next+0x70/0x70 [ 388.761056] ? _raw_spin_unlock_irq+0x60/0x80 [ 388.765566] ? oom_badness+0xaa0/0xaa0 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x7ece7feff428338, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa8aaaafffeaaaa19, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa8aaaafffeaaaa15, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 388.769458] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 388.774217] ? mem_cgroup_iter_break+0x30/0x30 [ 388.778817] ? cgroup_file_notify+0x226/0x2f0 [ 388.783324] out_of_memory+0xa84/0x1430 [ 388.787304] ? kasan_check_read+0x11/0x20 [ 388.791470] ? oom_killer_disable+0x3a0/0x3a0 [ 388.795972] ? kasan_check_write+0x14/0x20 [ 388.800216] ? do_raw_spin_lock+0xc1/0x200 [ 388.804472] mem_cgroup_out_of_memory+0x15e/0x210 [ 388.809323] ? memcg_memory_event+0x40/0x40 [ 388.813651] ? memcg_kmem_charge_memcg+0x7c/0x120 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 388.818508] ? page_counter_try_charge+0x1c1/0x220 [ 388.823447] try_charge+0xc43/0x1690 [ 388.827166] ? lock_downgrade+0x900/0x900 [ 388.831338] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 388.837409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.842969] ? should_fail+0x22d/0xd01 [ 388.846868] ? percpu_ref_tryget_live+0x168/0x460 [ 388.851726] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 388.856577] ? lock_downgrade+0x900/0x900 [ 388.860736] ? lock_release+0x970/0x970 [ 388.864719] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 13:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa0f721fffeeb6f26, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 388.870531] ? create_empty_buffers+0xdb0/0xdb0 [ 388.875276] ? __ext4_journal_stop+0x106/0x1f0 [ 388.879915] ? ext4_dirty_inode+0xb0/0xc0 [ 388.884197] ? get_mem_cgroup_from_mm+0x206/0x440 [ 388.889067] ? fs_reclaim_acquire+0x20/0x20 [ 388.893397] memcg_kmem_charge_memcg+0x7c/0x120 [ 388.898074] ? memcg_kmem_put_cache+0xb0/0xb0 [ 388.902571] ? lock_downgrade+0x900/0x900 [ 388.906731] memcg_kmem_charge+0x135/0x300 [ 388.910979] __alloc_pages_nodemask+0x72e/0xde0 [ 388.910998] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 388.911015] ? lock_acquire+0x1ed/0x520 [ 388.924634] ? ext4_page_mkwrite+0x211/0x14a0 [ 388.924657] ? set_page_dirty_lock+0x190/0x190 [ 388.924675] ? ext4_page_mkwrite+0xcd9/0x14a0 [ 388.938218] ? lock_downgrade+0x900/0x900 [ 388.942395] ? lock_downgrade+0x900/0x900 [ 388.942414] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 388.942434] alloc_pages_current+0x10c/0x210 [ 388.952102] pte_alloc_one+0x1b/0x1a0 [ 388.952119] __pte_alloc+0x2a/0x350 [ 388.952137] alloc_set_pte+0x1352/0x17d0 [ 388.968009] ? do_swap_page+0x2c60/0x2c60 [ 388.972173] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 388.977722] ? up_read+0x1a/0x110 [ 388.981189] ? ext4_filemap_fault+0x8d/0xad [ 388.985611] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.991153] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 388.996695] ? unlock_page+0x2c2/0x4c0 [ 389.000592] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.006126] ? do_page_mkwrite+0x380/0x660 [ 389.010356] ? lock_page+0x170/0x170 [ 389.014055] ? kasan_check_write+0x14/0x20 [ 389.018275] ? do_raw_spin_lock+0xc1/0x200 [ 389.022589] finish_fault+0x179/0x2d0 [ 389.026376] __handle_mm_fault+0x361a/0x53e0 [ 389.030772] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 389.035631] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.041082] ? rcu_is_watching+0x30/0x30 [ 389.045128] ? __kasan_slab_free+0x119/0x150 [ 389.049527] ? lock_acquire+0x1ed/0x520 [ 389.053502] ? handle_mm_fault+0x42a/0xc70 [ 389.057733] ? lock_downgrade+0x900/0x900 [ 389.061868] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 389.067656] ? __do_page_fault+0x67d/0xed0 [ 389.071874] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.077418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.082941] ? check_preemption_disabled+0x48/0x200 [ 389.087962] handle_mm_fault+0x54f/0xc70 [ 389.092009] ? __handle_mm_fault+0x53e0/0x53e0 [ 389.096577] ? find_vma+0x34/0x190 [ 389.100106] __do_page_fault+0x67d/0xed0 [ 389.104152] ? mm_fault_error+0x380/0x380 [ 389.108287] ? trace_hardirqs_off+0xb8/0x310 [ 389.112693] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.118052] ? trace_hardirqs_on+0x310/0x310 [ 389.122447] do_page_fault+0xf2/0x7e0 [ 389.126233] ? vmalloc_sync_all+0x30/0x30 [ 389.130365] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.135913] ? error_entry+0x70/0xd0 [ 389.139617] ? trace_hardirqs_off_caller+0xbb/0x310 [ 389.144617] ? trace_hardirqs_on_caller+0xc0/0x310 [ 389.149537] ? syscall_return_slowpath+0x5e0/0x5e0 [ 389.154450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.159279] ? trace_hardirqs_on_caller+0x310/0x310 [ 389.164314] ? trace_hardirqs_off+0x310/0x310 [ 389.168800] ? prepare_exit_to_usermode+0x291/0x3b0 [ 389.173806] ? page_fault+0x8/0x30 [ 389.177341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.182192] ? page_fault+0x8/0x30 [ 389.185724] page_fault+0x1e/0x30 [ 389.189159] RIP: 0033:0x4016a7 [ 389.192334] Code: 00 00 00 48 83 ec 08 48 8b 15 a5 e9 63 00 48 8b 05 96 e9 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 78 e9 63 00 48 83 c4 08 c3 48 89 c6 bf f8 56 4c 00 [ 389.211222] RSP: 002b:0000000000a3fbf0 EFLAGS: 00010287 [ 389.216567] RAX: 0000001b31e20000 RBX: 0000000000000003 RCX: 0000001b32e20000 [ 389.223828] RDX: 0000001b31e20004 RSI: 0000000000a3f9a0 RDI: 0000000000000000 [ 389.231079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 389.238333] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 389.245600] R13: 0000000000000001 R14: 000000000000022a R15: 0000000000000002 [ 389.261456] Task in /syz2 killed as a result of limit of /syz2 [ 389.269867] memory: usage 204800kB, limit 204800kB, failcnt 1759 [ 389.276151] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.290200] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.296376] Memory cgroup stats for /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x700, @empty, [0x0, 0x2000000]}, 0x6) 13:17:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7400}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 389.316983] Memory cgroup out of memory: Kill process 22968 (syz-executor2) score 161 or sacrifice child [ 389.327018] Killed process 22968 (syz-executor2) total-vm:70208kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 389.338261] oom_reaper: reaped process 22968 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB [ 389.376238] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 389.393210] syz-executor2 cpuset=syz2 mems_allowed=0 [ 389.399099] CPU: 1 PID: 23020 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 389.406486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.415838] Call Trace: [ 389.418426] dump_stack+0x1c4/0x2b4 [ 389.422063] ? dump_stack_print_info.cold.2+0x52/0x52 [ 389.427245] ? mark_held_locks+0x130/0x130 [ 389.431474] ? mark_held_locks+0x130/0x130 [ 389.435692] dump_header+0x27b/0xf72 [ 389.439395] ? pagefault_out_of_memory+0x197/0x197 [ 389.444334] ? mark_held_locks+0x130/0x130 [ 389.448560] ? rcu_read_unlock+0x16/0x60 [ 389.452753] ? lock_downgrade+0x900/0x900 [ 389.456890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.462416] ? css_next_child+0x1c3/0x620 [ 389.466546] ? find_lock_task_mm+0x22e/0x4d0 [ 389.470939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.476490] ? task_will_free_mem+0x239/0xb30 [ 389.480983] ? ___ratelimit+0x36f/0x655 [ 389.484945] ? lock_downgrade+0x900/0x900 [ 389.489095] ? trace_hardirqs_on+0xbd/0x310 [ 389.493401] ? kasan_check_read+0x11/0x20 [ 389.497535] ? ___ratelimit+0x36f/0x655 [ 389.501495] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.506935] ? trace_hardirqs_on+0x310/0x310 [ 389.511337] ? lock_downgrade+0x900/0x900 [ 389.515474] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 389.520577] ? ___ratelimit+0xaa/0x655 [ 389.524465] ? idr_get_free+0xec0/0xec0 [ 389.528433] ? kasan_check_write+0x14/0x20 [ 389.532654] ? do_raw_spin_lock+0xc1/0x200 [ 389.536878] oom_kill_process.cold.27+0x10/0x903 [ 389.541620] ? kasan_check_write+0x14/0x20 [ 389.545842] ? do_raw_spin_lock+0xc1/0x200 [ 389.550068] ? oom_evaluate_task+0x540/0x540 [ 389.554476] ? cgroup_procs_next+0x70/0x70 [ 389.558702] ? _raw_spin_unlock_irq+0x60/0x80 [ 389.563198] ? oom_badness+0xaa0/0xaa0 [ 389.567084] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 389.571823] ? mem_cgroup_iter_break+0x30/0x30 [ 389.576396] ? cgroup_file_notify+0x226/0x2f0 [ 389.580888] out_of_memory+0xa84/0x1430 [ 389.584861] ? kasan_check_read+0x11/0x20 [ 389.589008] ? oom_killer_disable+0x3a0/0x3a0 [ 389.593514] ? kasan_check_write+0x14/0x20 [ 389.597838] ? do_raw_spin_lock+0xc1/0x200 [ 389.602059] mem_cgroup_out_of_memory+0x15e/0x210 [ 389.606889] ? memcg_memory_event+0x40/0x40 [ 389.611202] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 389.616027] ? page_counter_try_charge+0x1c1/0x220 [ 389.620940] try_charge+0xc43/0x1690 [ 389.624646] ? lock_downgrade+0x900/0x900 [ 389.628787] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 389.634846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.640366] ? should_fail+0x22d/0xd01 [ 389.644239] ? percpu_ref_tryget_live+0x168/0x460 [ 389.649063] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 389.653892] ? lock_downgrade+0x900/0x900 [ 389.658111] ? lock_release+0x970/0x970 [ 389.662092] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 389.667877] ? __debug_object_init+0x57d/0x1290 [ 389.672532] ? lock_downgrade+0x900/0x900 [ 389.676680] ? get_mem_cgroup_from_mm+0x206/0x440 [ 389.681510] ? fs_reclaim_acquire+0x20/0x20 [ 389.685841] memcg_kmem_charge_memcg+0x7c/0x120 [ 389.690504] ? memcg_kmem_put_cache+0xb0/0xb0 [ 389.694993] memcg_kmem_charge+0x135/0x300 [ 389.699218] __alloc_pages_nodemask+0x72e/0xde0 [ 389.703877] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 389.708888] ? mark_held_locks+0x130/0x130 [ 389.713130] ? aa_file_perm+0x469/0x1060 [ 389.717180] ? lock_downgrade+0x900/0x900 [ 389.721319] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 389.726845] alloc_pages_current+0x10c/0x210 [ 389.731244] __pmd_alloc+0x3e/0x450 [ 389.734872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.740396] __handle_mm_fault+0x2098/0x53e0 [ 389.744814] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 389.749643] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.755081] ? rcu_is_watching+0x30/0x30 [ 389.759124] ? __kasan_slab_free+0x119/0x150 [ 389.763525] ? lock_acquire+0x1ed/0x520 [ 389.767509] ? handle_mm_fault+0x42a/0xc70 [ 389.771743] ? lock_downgrade+0x900/0x900 [ 389.775877] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 389.781664] ? __do_page_fault+0x67d/0xed0 [ 389.785885] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 389.791322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.796858] ? check_preemption_disabled+0x48/0x200 [ 389.801867] handle_mm_fault+0x54f/0xc70 [ 389.805917] ? __handle_mm_fault+0x53e0/0x53e0 [ 389.810483] ? find_vma+0x34/0x190 [ 389.814018] __do_page_fault+0x67d/0xed0 [ 389.818073] ? mm_fault_error+0x380/0x380 [ 389.822212] ? trace_hardirqs_off+0xb8/0x310 [ 389.826611] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.831969] ? trace_hardirqs_on+0x310/0x310 [ 389.836393] do_page_fault+0xf2/0x7e0 [ 389.840192] ? vmalloc_sync_all+0x30/0x30 [ 389.844326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.849854] ? error_entry+0x70/0xd0 [ 389.853559] ? trace_hardirqs_off_caller+0xbb/0x310 [ 389.858563] ? trace_hardirqs_on_caller+0xc0/0x310 [ 389.863481] ? syscall_return_slowpath+0x5e0/0x5e0 [ 389.868421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.873254] ? trace_hardirqs_on_caller+0x310/0x310 [ 389.878262] ? trace_hardirqs_off+0x310/0x310 [ 389.882749] ? prepare_exit_to_usermode+0x291/0x3b0 [ 389.887768] ? page_fault+0x8/0x30 [ 389.891297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.896147] ? page_fault+0x8/0x30 [ 389.899676] page_fault+0x1e/0x30 [ 389.903112] RIP: 0033:0x4016a7 [ 389.906288] Code: 00 00 00 48 83 ec 08 48 8b 15 a5 e9 63 00 48 8b 05 96 e9 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 78 e9 63 00 48 83 c4 08 c3 48 89 c6 bf f8 56 4c 00 [ 389.925174] RSP: 002b:0000000000a3fbf0 EFLAGS: 00010287 [ 389.930519] RAX: 0000001b31e20000 RBX: 0000000000000003 RCX: 0000001b32e20000 [ 389.937884] RDX: 0000001b31e20004 RSI: 0000000000a3f9a0 RDI: 0000000000000000 [ 389.945139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 389.952393] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 389.959643] R13: 0000000000000001 R14: 000000000000022b R15: 0000000000000002 [ 389.968393] Task in /syz2 killed as a result of limit of /syz2 13:17:39 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, 0xfffffffffffffd97) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8) 13:17:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x40000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20000) r2 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='vmnet1security@systemem1:\x00', r2}, 0xffffffffffffff59) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) rmdir(&(0x7f0000001540)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 13:17:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000880)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000006c0)=0x1e) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x2) ptrace$setopts(0xffffffffffffffff, 0x0, 0x2, 0x1) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000600)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000000)="81"}) close(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r4, &(0x7f0000000080)=""/154, 0x9a, 0x100, 0x0, 0x0) 13:17:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 389.974431] memory: usage 204796kB, limit 204800kB, failcnt 1781 [ 389.981246] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.988126] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.031247] Memory cgroup stats for /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x16aaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:39 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000880)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000006c0)=0x1e) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x4, 0x2) ptrace$setopts(0xffffffffffffffff, 0x0, 0x2, 0x1) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000600)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f0000000000)="81"}) close(r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r4, &(0x7f0000000080)=""/154, 0x9a, 0x100, 0x0, 0x0) [ 390.075605] Memory cgroup out of memory: Kill process 23020 (syz-executor2) score 161 or sacrifice child 13:17:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6c00000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 390.131946] Killed process 23020 (syz-executor2) total-vm:70208kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 390.160876] oom_reaper: reaped process 23020 (syz-executor2), now anon-rss:0kB, file-rss:32128kB, shmem-rss:0kB 13:17:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5580, @empty, [0x0, 0x2000000]}, 0x6) 13:17:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x80fe, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 390.198523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 390.215508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = gettid() syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) readv(0xffffffffffffffff, &(0x7f0000001940), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) connect(r2, &(0x7f0000000400)=@nfc, 0x80) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r0, 0xd, 0x3}, 0x14) tkill(r3, 0x1004000000016) [ 390.245845] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 390.273342] syz-executor2 cpuset=syz2 mems_allowed=0 [ 390.284621] CPU: 1 PID: 23059 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 390.292037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.301395] Call Trace: [ 390.304003] dump_stack+0x1c4/0x2b4 [ 390.307638] ? dump_stack_print_info.cold.2+0x52/0x52 [ 390.312840] ? mark_held_locks+0x130/0x130 [ 390.317091] ? mark_held_locks+0x130/0x130 [ 390.321338] dump_header+0x27b/0xf72 [ 390.325065] ? pagefault_out_of_memory+0x197/0x197 [ 390.330108] ? mark_held_locks+0x130/0x130 [ 390.334350] ? rcu_read_unlock+0x16/0x60 [ 390.338416] ? lock_downgrade+0x900/0x900 [ 390.342574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.348122] ? css_next_child+0x1c3/0x620 [ 390.352275] ? find_lock_task_mm+0x22e/0x4d0 [ 390.357174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.362720] ? task_will_free_mem+0x239/0xb30 [ 390.367225] ? ___ratelimit+0x36f/0x655 [ 390.371215] ? lock_downgrade+0x900/0x900 [ 390.375377] ? trace_hardirqs_on+0xbd/0x310 [ 390.379704] ? kasan_check_read+0x11/0x20 [ 390.383854] ? ___ratelimit+0x36f/0x655 [ 390.387843] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 390.393298] ? trace_hardirqs_on+0x310/0x310 [ 390.397724] ? lock_downgrade+0x900/0x900 [ 390.401883] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 390.406997] ? ___ratelimit+0xaa/0x655 [ 390.410895] ? idr_get_free+0xec0/0xec0 [ 390.414866] ? kasan_check_write+0x14/0x20 [ 390.419112] ? do_raw_spin_lock+0xc1/0x200 [ 390.423360] oom_kill_process.cold.27+0x10/0x903 [ 390.428102] ? kasan_check_write+0x14/0x20 [ 390.432321] ? do_raw_spin_lock+0xc1/0x200 [ 390.436541] ? oom_evaluate_task+0x540/0x540 [ 390.440966] ? cgroup_procs_next+0x70/0x70 [ 390.445204] ? _raw_spin_unlock_irq+0x60/0x80 [ 390.449701] ? oom_badness+0xaa0/0xaa0 [ 390.453595] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 390.458367] ? mem_cgroup_iter_break+0x30/0x30 [ 390.462974] ? cgroup_file_notify+0x226/0x2f0 [ 390.462991] out_of_memory+0xa84/0x1430 [ 390.471453] ? kasan_check_read+0x11/0x20 [ 390.471474] ? oom_killer_disable+0x3a0/0x3a0 [ 390.480091] ? kasan_check_write+0x14/0x20 [ 390.484338] ? do_raw_spin_lock+0xc1/0x200 [ 390.488587] mem_cgroup_out_of_memory+0x15e/0x210 [ 390.493427] ? memcg_memory_event+0x40/0x40 [ 390.497736] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 390.502575] ? page_counter_try_charge+0x1c1/0x220 [ 390.507495] try_charge+0xc43/0x1690 [ 390.511196] ? lock_downgrade+0x900/0x900 [ 390.515331] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 390.521390] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.526930] ? should_fail+0x22d/0xd01 [ 390.530811] ? percpu_ref_tryget_live+0x168/0x460 [ 390.535647] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 390.540481] ? lock_downgrade+0x900/0x900 [ 390.544614] ? lock_release+0x970/0x970 [ 390.548575] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 390.554370] ? __debug_object_init+0x57d/0x1290 [ 390.559027] ? lock_downgrade+0x900/0x900 [ 390.563169] ? get_mem_cgroup_from_mm+0x206/0x440 [ 390.568013] ? fs_reclaim_acquire+0x20/0x20 [ 390.572326] memcg_kmem_charge_memcg+0x7c/0x120 [ 390.576986] ? memcg_kmem_put_cache+0xb0/0xb0 [ 390.581472] memcg_kmem_charge+0x135/0x300 [ 390.585699] __alloc_pages_nodemask+0x72e/0xde0 [ 390.590355] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 390.595363] ? mark_held_locks+0x130/0x130 [ 390.599590] ? aa_file_perm+0x469/0x1060 [ 390.603643] ? lock_downgrade+0x900/0x900 [ 390.607779] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 390.613311] alloc_pages_current+0x10c/0x210 [ 390.617709] __pmd_alloc+0x3e/0x450 [ 390.621326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.626851] __handle_mm_fault+0x2098/0x53e0 [ 390.631245] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 390.636081] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 390.641534] ? rcu_is_watching+0x30/0x30 [ 390.645575] ? __kasan_slab_free+0x119/0x150 [ 390.649993] ? lock_acquire+0x1ed/0x520 [ 390.653961] ? handle_mm_fault+0x42a/0xc70 [ 390.658185] ? lock_downgrade+0x900/0x900 [ 390.662322] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 390.668105] ? __do_page_fault+0x67d/0xed0 [ 390.672327] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 390.677795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 390.683324] ? check_preemption_disabled+0x48/0x200 [ 390.688328] handle_mm_fault+0x54f/0xc70 [ 390.692378] ? __handle_mm_fault+0x53e0/0x53e0 [ 390.696947] ? find_vma+0x34/0x190 [ 390.700504] __do_page_fault+0x67d/0xed0 [ 390.704554] ? mm_fault_error+0x380/0x380 [ 390.708700] ? trace_hardirqs_off+0xb8/0x310 [ 390.713095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 390.718443] ? trace_hardirqs_on+0x310/0x310 [ 390.722836] do_page_fault+0xf2/0x7e0 [ 390.726623] ? vmalloc_sync_all+0x30/0x30 [ 390.730758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.736303] ? error_entry+0x70/0xd0 [ 390.740012] ? trace_hardirqs_off_caller+0xbb/0x310 [ 390.745012] ? trace_hardirqs_on_caller+0xc0/0x310 [ 390.749928] ? syscall_return_slowpath+0x5e0/0x5e0 [ 390.754843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.759673] ? trace_hardirqs_on_caller+0x310/0x310 [ 390.764675] ? trace_hardirqs_off+0x310/0x310 [ 390.769249] ? prepare_exit_to_usermode+0x291/0x3b0 [ 390.774252] ? page_fault+0x8/0x30 [ 390.777795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.782623] ? page_fault+0x8/0x30 [ 390.786158] page_fault+0x1e/0x30 [ 390.789615] RIP: 0033:0x4016a7 [ 390.792806] Code: 00 00 00 48 83 ec 08 48 8b 15 a5 e9 63 00 48 8b 05 96 e9 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 78 e9 63 00 48 83 c4 08 c3 48 89 c6 bf f8 56 4c 00 [ 390.811704] RSP: 002b:0000000000a3fbf0 EFLAGS: 00010287 [ 390.817064] RAX: 0000001b31e20000 RBX: 0000000000000003 RCX: 0000001b32e20000 [ 390.824323] RDX: 0000001b31e20004 RSI: 0000000000a3f9a0 RDI: 0000000000000000 [ 390.831578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 390.838854] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 390.846113] R13: 0000000000000001 R14: 000000000000022c R15: 0000000000000002 [ 390.856603] Task in /syz2 killed as a result of limit of /syz2 [ 390.863249] memory: usage 204796kB, limit 204800kB, failcnt 1805 [ 390.869539] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.878542] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:40 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000000c0)=[0x2, 0x2, 0x1, 0x0], 0x4, 0x5, 0x3, 0x8, 0x8001, 0x5, {0x4, 0x10000, 0x3ff, 0x4, 0x401, 0xff, 0x3, 0x100000001, 0x400, 0x4, 0xff, 0x2, 0x1c0000000000, 0xfff, "66ca9026001d9a5398eb65de0417e162b1b9817a624781a8f64a6addee436204"}}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) 13:17:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1700000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:40 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x806, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)) r3 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x40) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000200)) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @dev}, &(0x7f0000000440)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000480)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000000580)={0x214, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x104, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x6, 0xc030, 0x6, 0x2}, {0xeed, 0x7fffffff, 0xffffffffffffffc3, 0x2}, {0x4, 0x0, 0xfffffffffffffe25, 0x7}, {0x80, 0x1, 0x5, 0x6}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r7}, {0xec, 0x2, [{0xfffffffffffffd33, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x214}}, 0x0) [ 390.884771] Memory cgroup stats for /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 390.905544] Memory cgroup out of memory: Kill process 23059 (syz-executor2) score 161 or sacrifice child [ 390.917504] Killed process 23059 (syz-executor2) total-vm:70208kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:17:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xfdffffff00000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xc00e}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 390.948836] oom_reaper: reaped process 23059 (syz-executor2), now anon-rss:0kB, file-rss:32128kB, shmem-rss:0kB 13:17:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x15aaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000380), 0x194, &(0x7f0000000340)={0x0, 0x989680}) r0 = open(&(0x7f0000000200)='./file0\x00', 0x80000, 0x120) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/183) r1 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="2a2b212e656d3124776c616e30293a656d30195d747275737465646c6f2b", 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r1, 0x4) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1) r3 = getgid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f4f746d6f64653d306c96e261fdc5e27aa365bf70303030303030303030303090be3030303030903114323b6c61885f69853d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000004,blksize=0x0000000000001e00,allow_other,max_read=0x00000000ffffffff,default_permissions,smackfsroot=md5sum$,\x00']) socket$inet_tcp(0x2, 0x1, 0x0) [ 391.022255] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 13:17:40 executing program 3: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = fcntl$getown(r1, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r3}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0x8bda, 0x3, 0x4, 0x5}, 0x8) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x10000, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1089000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r6, 0xc, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x4090) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0xd2ea, @mcast2}}, [0x5, 0x89db, 0x800, 0xffff, 0x91d, 0x3f, 0x5, 0x1, 0x577, 0x6, 0x5, 0x20, 0x4, 0x7f, 0xfffffffffffffff7]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000580)={r7, 0x6}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000600)={r7, 0x88, 0x1f, 0x1, 0x100000000, 0x80000000}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000640)={r7, 0x83, "5d597f3730772f1525305ab503862a9c27fe4d06603ea7206473a87bb5977119b00eefa669c3fbc132e558d5ac4cbef90b8a81d8238b00981a54dd47761bce879415b638fb31f69c5b84524b25f74e8bcf78e116abd54e6d2ca8c31625dc4c28e5fdd0bc36ab77a8ab333025125708dfeabcc8134400a436b9972a89ffb99bc420ad13"}, &(0x7f0000000700)=0x8b) ioctl$FICLONE(r2, 0x40049409, r0) write$P9_RAUTH(r5, &(0x7f0000000740)={0x14, 0x67, 0x2, {0x4, 0x3, 0x8}}, 0x14) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000003d40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003d00)={&(0x7f0000000880)={0x344c, 0x1b, 0x0, 0x70bd25, 0x25dfdbfd, {0x17}, [@generic="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", @generic="df3529df39aa744aa2c516094c86ec239ac595f2976fa4e308bbde8afcc5b7066c942b94325c4d10a6b21e138792f9e9928ff5d635f64007f20018d0349a4319438929a4da9f5995d3ecb34e7ca513619dd1d7074ef9dd3d67f01e71a7e303f069dd10486b5e90b77ce98a445cdc84e281cf010c585a10790a50e988d7db95b62845ad2ea622d5f6ceeb5c2278528a54288dc328098377ad8b4daf4f964d7e4f6bfbf18c8b7d5a85697f0ceecb3b9e0e18d527cdf952119869848409068062cc879affd4fc223013f6eec8bc33e96f0940ebe84afa", @typed={0x8, 0x2, @uid=r9}, @generic="ae090e6ab8fa0618dd866bb7cec3c3a202db15a6143fef3ae770385c4de3984a585eaadd6c54cedc2052362c8956cdfa2c12c0db43b752e762e5af864affa6963a9133c2c9497f12fec3bf761d0b24d828b614c1219a0d15192829be850c1a22a298ea458f7bb91a75e38ab0a9a581f518d285dd72f80b964a5fdd1295e93835121402ee459a68ac233b1f61e614821ad9e40f0998374a4974d409cdae53ab6199e20649f36e913196060254a0b44f1ae1e9f86839a666e60ee1430e56225877757089a16ba8af31d9ba9b1e4ca4b51806f0c801fb33", @generic="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", @nested={0x1004, 0x77, [@generic="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", @generic]}, @generic="c3eb63c532b29f82f50681b3037e97960d3f3ee643a36e21547bde2caa6ad69f0a424b01452cb5ccdb8f1c26cc47ad9ceaf2a0512cbf3c2631c26cc1f97107edd61f3f666eb3ab842205206bbfa159043f2c", @nested={0x22c, 0x78, [@typed={0x14, 0x6f, @ipv6=@dev={0xfe, 0x80, [], 0x1b}}, @typed={0x8, 0x46, @pid=r3}, @generic="81970513a87069beae382b04f1432a6fb59b734780574b00635e302c194b2c6004a8a4840b11b9c06fd9a94aee480c920aa7b0681d66bf697da7279df5b27b685c7af5cb4dd018dc71a596e043b7fb3c97b2fe9b97092167f206da25e6aa64b784d9abef8a8b8304ffcdf8f4f4b068f482070d217d2bf57d08efe5beff36c926e2981a441b7085a6535375fcf19c25ed64d45a06eb69dd8c952b875241fd0edf8ed24f35aeafc07aa3f8070cd532d9ad4e701df0d70b5f32d76ebfcbd5ecc76fd04bb28da1e3057b89b0e8425d81306980fe1f6abdb81ee2a3d03df6d65cd3f21f", @generic="41800c94ec58164524c125d9db232c8f50e88474a0ad9ee4bca04f968f2610c86ea5e6e5bbc4824c296f949c8840", @generic="d05f01f5dc06a9dc87a7437675e0360f74bdd2ae72e10cf4c74458749ca5b9d5b85bbce61c7ea33fb2d49fe487f79b4ca9d21173d1e08b8f977f770c54238ac38520cdddd5ed8a23e49c1228c924548aea4b102dc77a9d0bccf5fb9be609f6fe82f753c1ab93b9889575ff83f2031a741df44c04b95002fe72279aee70cf200b7b10c4919825a41bb063f577d8610db5c6bfcc9914b8ba36125529f0d61e81948a22de4f4ba606d709fcac0efa1631d77dac2a4fff3d3e44e1df68a86c29ed8527b03ccd4d9c4c088f34cfeb7605a01ec137b578b0107bdc1aff42137400685bec", @typed={0x8, 0x1a, @u32=0x40}, @typed={0x14, 0x77, @ipv6=@dev={0xfe, 0x80, [], 0x11}}]}]}, 0x344c}, 0x1, 0x0, 0x0, 0x48000}, 0xc674e6aaaeffdfbe) fsync(r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000003d80)={r8, 0xc38, 0xb9, "23f60aa018a727603226b70667f1d9e2aaa1e45578000e1168cbfa2d44cf0608d9dfce4d5451ad9c11a5abd6eaae6f5ef393e9372df9a33f6a1407b742662c6af5810295277fa7345a2181338772f32c5745b47adb8314e43c1df0245782692778695c17ecfaa77574f917d72eb2d274399e659acada029bc5a90d178e22ab48409ab640fe7fb31b1b945dcdfbb51a34be3d750e07c100c3b0455d0bcd0490434a8de82e7d98a4467cf00afc4dcce000035179ebf98d1563a9"}, 0xc1) getpgid(r3) fcntl$setown(r0, 0x8, r3) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x64) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000003e80)=""/130) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000003f40)={r7, @in={{0x2, 0x4e21, @remote}}}, 0x84) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000004000)) 13:17:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000372000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000280)=ANY=[@ANYBLOB="2f6465762f6e624d3000cd6a8079edea7b8ea339599831a83e67daf76897b5292604f42fb38b672c61e4a540fa3e85d1c140f613df0fedf46aff15349797845889659a2f14e642c08039400714f6b1482d6157101722050a675df9b15251a50dfd6ffa40ae0f28450ca45feb853997defe9f67ea70f2ec81c1f1ff3eefa26d751250afa8dc9854e27f02000000294ec362f646bb9d4af8dd3d0a2bbb24b3a51e8129d6a20bcf96709b43fde99e34efac90efb52bf75853388eb02efab079b4c406443e8395cd519d9199f061602cc3880e604813b6b48ac8a060f7be8382e676d054628095"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hostfs\x00', 0x1000, &(0x7f0000000180)='\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000240)="2f6476bc863d4a91bf3b3632ad7865762f617564696f00"}, 0x391) [ 391.070719] syz-executor2 cpuset=syz2 mems_allowed=0 [ 391.084431] CPU: 0 PID: 23093 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 391.091901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.101259] Call Trace: [ 391.103864] dump_stack+0x1c4/0x2b4 [ 391.107500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 391.112695] ? mark_held_locks+0x130/0x130 [ 391.116935] ? mark_held_locks+0x130/0x130 [ 391.121177] dump_header+0x27b/0xf72 [ 391.121196] ? pagefault_out_of_memory+0x197/0x197 [ 391.121214] ? mark_held_locks+0x130/0x130 [ 391.121231] ? rcu_read_unlock+0x16/0x60 [ 391.138153] ? lock_downgrade+0x900/0x900 [ 391.142324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.147875] ? css_next_child+0x1c3/0x620 [ 391.152033] ? find_lock_task_mm+0x22e/0x4d0 [ 391.156462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.162048] ? task_will_free_mem+0x239/0xb30 [ 391.166560] ? ___ratelimit+0x36f/0x655 13:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x2000000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000380), 0x194, &(0x7f0000000340)={0x0, 0x989680}) r0 = open(&(0x7f0000000200)='./file0\x00', 0x80000, 0x120) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/183) r1 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="2a2b212e656d3124776c616e30293a656d30195d747275737465646c6f2b", 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r1, 0x4) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1) r3 = getgid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f4f746d6f64653d306c96e261fdc5e27aa365bf70303030303030303030303090be3030303030903114323b6c61885f69853d", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',max_read=0x0000000000000004,blksize=0x0000000000001e00,allow_other,max_read=0x00000000ffffffff,default_permissions,smackfsroot=md5sum$,\x00']) socket$inet_tcp(0x2, 0x1, 0x0) [ 391.170551] ? lock_downgrade+0x900/0x900 [ 391.174708] ? trace_hardirqs_on+0xbd/0x310 [ 391.179044] ? kasan_check_read+0x11/0x20 [ 391.183203] ? ___ratelimit+0x36f/0x655 [ 391.187190] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 391.192651] ? trace_hardirqs_on+0x310/0x310 [ 391.197071] ? lock_downgrade+0x900/0x900 [ 391.201235] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 391.206343] ? ___ratelimit+0xaa/0x655 [ 391.210246] ? idr_get_free+0xec0/0xec0 [ 391.214241] ? kasan_check_write+0x14/0x20 [ 391.218488] ? do_raw_spin_lock+0xc1/0x200 [ 391.218506] oom_kill_process.cold.27+0x10/0x903 [ 391.218520] ? kasan_check_write+0x14/0x20 [ 391.218539] ? do_raw_spin_lock+0xc1/0x200 [ 391.236470] ? oom_evaluate_task+0x540/0x540 [ 391.236493] ? cgroup_procs_next+0x70/0x70 [ 391.245135] ? _raw_spin_unlock_irq+0x60/0x80 [ 391.249639] ? oom_badness+0xaa0/0xaa0 [ 391.253534] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 391.258302] ? mem_cgroup_iter_break+0x30/0x30 [ 391.262908] ? cgroup_file_notify+0x226/0x2f0 [ 391.267422] out_of_memory+0xa84/0x1430 13:17:41 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @empty, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x1, 0x4e21, 0x1, 0xa, 0x20, 0xa0, 0x29, r2, r3}, {0x1659, 0xfff, 0x2800000, 0xffffffff, 0x3, 0x2, 0x2, 0x101}, {0xc1, 0x0, 0xffffffff, 0x2}, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d6, 0x6c}, 0x2, @in6=@loopback, 0x3507, 0x1, 0x1, 0xffff, 0x0, 0x3, 0x7e4}}, 0xe8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x0, 0x2, 0x7}, 0xfffffffffffffffd, 0x4, 0x1}) fcntl$getownex(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r5, 0xe, 0x0, &(0x7f0000000400)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8922ff4fcd3f"], &(0x7f00000011c0)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000005, 0x42010, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000100)=0x8) close(r0) [ 391.271408] ? kasan_check_read+0x11/0x20 [ 391.275561] ? oom_killer_disable+0x3a0/0x3a0 [ 391.280071] ? kasan_check_write+0x14/0x20 [ 391.284319] ? do_raw_spin_lock+0xc1/0x200 [ 391.288563] mem_cgroup_out_of_memory+0x15e/0x210 [ 391.293419] ? memcg_memory_event+0x40/0x40 [ 391.297746] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 391.302599] ? page_counter_try_charge+0x1c1/0x220 [ 391.307535] try_charge+0xc43/0x1690 [ 391.311257] ? lock_downgrade+0x900/0x900 [ 391.315426] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 391.321502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.327049] ? should_fail+0x22d/0xd01 [ 391.330945] ? percpu_ref_tryget_live+0x168/0x460 [ 391.335839] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 391.340692] ? lock_downgrade+0x900/0x900 [ 391.344848] ? lock_release+0x970/0x970 [ 391.348845] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 391.354647] ? create_empty_buffers+0xdb0/0xdb0 [ 391.359321] ? __ext4_journal_stop+0x106/0x1f0 [ 391.363918] ? ext4_dirty_inode+0xb0/0xc0 13:17:41 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1b58, 0x7, 0x6}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x2bc, 0x7, 0xedbd, 0x4e112efd, 0x60}, 0x98) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000180)=0x7) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) read$FUSE(r2, &(0x7f00000016c0), 0x9f2) read$FUSE(r2, &(0x7f00000050c0), 0xfffffffffffffe0b) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) [ 391.368088] ? get_mem_cgroup_from_mm+0x206/0x440 [ 391.372934] ? fs_reclaim_acquire+0x20/0x20 [ 391.377301] memcg_kmem_charge_memcg+0x7c/0x120 [ 391.381985] ? memcg_kmem_put_cache+0xb0/0xb0 [ 391.386489] ? lock_downgrade+0x900/0x900 [ 391.390643] memcg_kmem_charge+0x135/0x300 [ 391.390662] __alloc_pages_nodemask+0x72e/0xde0 [ 391.390679] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 391.404588] ? lock_acquire+0x1ed/0x520 [ 391.408573] ? ext4_page_mkwrite+0x211/0x14a0 [ 391.413091] ? set_page_dirty_lock+0x190/0x190 [ 391.417689] ? ext4_page_mkwrite+0xcd9/0x14a0 [ 391.422198] ? lock_downgrade+0x900/0x900 [ 391.426353] ? lock_downgrade+0x900/0x900 [ 391.430517] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 391.436193] alloc_pages_current+0x10c/0x210 [ 391.440605] pte_alloc_one+0x1b/0x1a0 [ 391.440623] __pte_alloc+0x2a/0x350 [ 391.440639] alloc_set_pte+0x1352/0x17d0 [ 391.440660] ? do_swap_page+0x2c60/0x2c60 [ 391.452133] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 391.461816] ? up_read+0x1a/0x110 [ 391.465294] ? ext4_filemap_fault+0x8d/0xad [ 391.469629] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.475171] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 391.480714] ? unlock_page+0x2c2/0x4c0 [ 391.480730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.480744] ? do_page_mkwrite+0x380/0x660 [ 391.480759] ? lock_page+0x170/0x170 [ 391.480771] ? kasan_check_write+0x14/0x20 [ 391.480786] ? do_raw_spin_lock+0xc1/0x200 [ 391.480807] finish_fault+0x179/0x2d0 [ 391.510407] __handle_mm_fault+0x361a/0x53e0 [ 391.514830] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 13:17:41 executing program 5: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000000)={0x800000, 0xfffffffffff7fffb}) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) get_robust_list(r0, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000140)=0x18) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000001c0)=0x6, 0x4) [ 391.519693] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 391.525160] ? rcu_is_watching+0x30/0x30 [ 391.529229] ? __kasan_slab_free+0x119/0x150 [ 391.533653] ? lock_acquire+0x1ed/0x520 [ 391.537644] ? handle_mm_fault+0x42a/0xc70 [ 391.541886] ? lock_downgrade+0x900/0x900 [ 391.546047] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 391.551851] ? __do_page_fault+0x67d/0xed0 [ 391.556095] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 391.561551] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 391.567098] ? check_preemption_disabled+0x48/0x200 13:17:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') ioctl$FICLONE(r0, 0x40049409, r0) sendmsg(r0, &(0x7f0000002e00)={&(0x7f0000001600)=@ipx={0x4, 0xffffffff, 0xa1ad, "55b3ee2f6f71", 0x6}, 0x80, &(0x7f0000001b80), 0x0, &(0x7f0000001c00)=ANY=[], 0x0, 0x40000}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0xfffffffffffffffd, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'syzkaller0\x00', @local}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x1, r1, 0x2a, r0}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/self/net/pfkey\x00', 0x202, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x4007, 0x3, 0x0, 0x1}, 0x2c) fgetxattr(r0, &(0x7f00000015c0)=ANY=[], &(0x7f0000002e80)=""/231, 0xffffff70) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x7) getrandom(&(0x7f0000000500)=""/4096, 0x1000, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x1ff, 0x4, 0x0, 0x0, r3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000280), &(0x7f0000000340)="438a93e05a0bf956bde3197040047851e40909bed2d5221bd4bcd5bcc2cd54abd1827388531c5364db56d64e709681b28c6f3619644763a1cc565583fb39214e7638076f61889d8dffc499291f09e0018747266e9aeaf4ff0313429c6a416da1e74a2ab58713d3d6e62b9d03c6ea8120bb439d1a69d9c8b5b8a975baa7692f8485baeba2e1ed9c1f3e8df514a89fadc0838f2d183b23285da5f5701486ca673d448198826de69ee682a9b21e1943b25f355fed57c9eb3f174e72bf917ae5d2025a019b72702d8940815f8b45a38666c021babc239adba36d0ac7", 0x1}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000003000)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e22, 0xe7e3, @loopback, 0x9}, @in6={0xa, 0x4e22, 0xe2, @ipv4={[], [], @multicast1}, 0x4}], 0x58) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x8}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000140)="c9366b28eba43a62334f31fa6113610e83f8ef89108c7f747d40323b2316c48549e63ee948fdd97b4686059e532a30edea5cfd09265b68fcfb83b108cb3a5d1715607ff87312d4fd0bb66107f2e9a765dca2b25f5f9304f4d2586d98fb8acf40c482b897e8f20987c8fe7669db053fa11053ff93f984f42c1e109bb71ac75f58d7f9aca49b29d50a2db683b1549d"}, 0x10) linkat(r2, &(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x1ff, 0x2, 0x3}, &(0x7f0000001500)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001540)={r5, 0x200, 0x0, 0x20, 0x6}, &(0x7f0000001580)=0x18) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 391.572125] handle_mm_fault+0x54f/0xc70 [ 391.576193] ? __handle_mm_fault+0x53e0/0x53e0 [ 391.580779] ? find_vma+0x34/0x190 [ 391.584326] __do_page_fault+0x67d/0xed0 [ 391.588399] ? mm_fault_error+0x380/0x380 [ 391.592553] ? trace_hardirqs_off+0xb8/0x310 [ 391.596982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 391.602354] ? trace_hardirqs_on+0x310/0x310 [ 391.606780] do_page_fault+0xf2/0x7e0 [ 391.610586] ? vmalloc_sync_all+0x30/0x30 [ 391.614753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 391.620300] ? error_entry+0x70/0xd0 [ 391.620316] ? trace_hardirqs_off_caller+0xbb/0x310 [ 391.620329] ? trace_hardirqs_on_caller+0xc0/0x310 [ 391.620349] ? syscall_return_slowpath+0x5e0/0x5e0 [ 391.629052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.629067] ? trace_hardirqs_on_caller+0x310/0x310 [ 391.629080] ? trace_hardirqs_off+0x310/0x310 [ 391.629097] ? prepare_exit_to_usermode+0x291/0x3b0 [ 391.629113] ? page_fault+0x8/0x30 [ 391.661743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.666606] ? page_fault+0x8/0x30 [ 391.670128] page_fault+0x1e/0x30 [ 391.673561] RIP: 0033:0x4016a7 [ 391.676737] Code: 00 00 00 48 83 ec 08 48 8b 15 a5 e9 63 00 48 8b 05 96 e9 63 00 48 39 d0 48 8d 8a 00 00 00 01 72 17 48 39 c8 73 12 48 8d 50 04 <89> 38 48 89 15 78 e9 63 00 48 83 c4 08 c3 48 89 c6 bf f8 56 4c 00 [ 391.695620] RSP: 002b:0000000000a3fbf0 EFLAGS: 00010287 [ 391.700973] RAX: 0000001b31e20000 RBX: 0000000000000003 RCX: 0000001b32e20000 [ 391.708231] RDX: 0000001b31e20004 RSI: 0000000000a3f9a0 RDI: 0000000000000000 [ 391.715494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 391.722746] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 391.729995] R13: 0000000000000001 R14: 000000000000022d R15: 0000000000000002 [ 391.751007] Task in /syz2 killed as a result of limit of /syz2 [ 391.757730] memory: usage 204784kB, limit 204800kB, failcnt 1829 [ 391.767833] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 391.774654] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 391.781330] Memory cgroup stats for /syz2: cache:8KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:104KB inactive_file:0KB active_file:0KB unevictable:0KB [ 391.814884] Memory cgroup out of memory: Kill process 23093 (syz-executor2) score 161 or sacrifice child [ 391.844264] Killed process 23093 (syz-executor2) total-vm:70208kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:17:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x4000000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x34000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x9ad7bcfeff3fda98, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:41 executing program 3: socket$inet_sctp(0x2, 0xfffffffffffffff9, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1f}, &(0x7f0000000200)={r2}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:17:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x61, 0x1, 0x4, 0x0, 0x7}) r3 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r2}]) 13:17:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$setlease(r1, 0x400, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0xaaaaaaaaaaaab18, 0x0, &(0x7f00000001c0), 0x226) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) [ 391.864379] oom_reaper: reaped process 23093 (syz-executor2), now anon-rss:0kB, file-rss:32128kB, shmem-rss:0kB 13:17:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7a}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 391.942616] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 391.962084] syz-executor2 cpuset=syz2 mems_allowed=0 [ 391.969425] kvm: emulating exchange as write [ 391.983529] CPU: 1 PID: 23158 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 391.990918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.000388] Call Trace: [ 392.002992] dump_stack+0x1c4/0x2b4 [ 392.006622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 392.011818] ? perf_trace_lock+0x14d/0x7a0 [ 392.016054] dump_header+0x27b/0xf72 [ 392.019783] ? check_preemption_disabled+0x48/0x200 [ 392.024818] ? mark_held_locks+0x130/0x130 [ 392.029060] ? pagefault_out_of_memory+0x197/0x197 [ 392.033997] ? debug_smp_processor_id+0x1c/0x20 [ 392.038679] ? perf_trace_lock+0x14d/0x7a0 [ 392.042912] ? perf_trace_lock+0x14d/0x7a0 [ 392.047147] ? zap_class+0x640/0x640 [ 392.050866] ? debug_smp_processor_id+0x1c/0x20 [ 392.055534] ? perf_trace_lock+0x14d/0x7a0 [ 392.059768] ? mark_held_locks+0x130/0x130 [ 392.064018] ? zap_class+0x640/0x640 [ 392.067734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.073264] ? task_will_free_mem+0x239/0xb30 [ 392.077760] ? zap_class+0x640/0x640 [ 392.081488] ? zap_class+0x640/0x640 [ 392.085217] ? ___ratelimit+0x36f/0x655 [ 392.089192] ? lock_downgrade+0x900/0x900 [ 392.093341] ? trace_hardirqs_on+0xbd/0x310 [ 392.097675] ? kasan_check_read+0x11/0x20 [ 392.101823] ? ___ratelimit+0x36f/0x655 [ 392.105800] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 392.111249] ? trace_hardirqs_on+0x310/0x310 [ 392.115652] ? lock_downgrade+0x900/0x900 [ 392.119807] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 392.124908] ? ___ratelimit+0xaa/0x655 [ 392.128799] ? idr_get_free+0xec0/0xec0 [ 392.132769] ? kasan_check_write+0x14/0x20 [ 392.137006] ? do_raw_spin_lock+0xc1/0x200 [ 392.141255] oom_kill_process.cold.27+0x10/0x903 [ 392.146010] ? kasan_check_write+0x14/0x20 [ 392.150249] ? do_raw_spin_lock+0xc1/0x200 [ 392.154484] ? oom_evaluate_task+0x540/0x540 [ 392.158894] ? cgroup_procs_next+0x70/0x70 [ 392.163126] ? _raw_spin_unlock_irq+0x60/0x80 [ 392.167619] ? oom_badness+0xaa0/0xaa0 [ 392.171508] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 392.176265] ? mem_cgroup_iter_break+0x30/0x30 [ 392.180859] ? cgroup_file_notify+0x226/0x2f0 [ 392.185355] out_of_memory+0xa84/0x1430 [ 392.189330] ? kasan_check_read+0x11/0x20 [ 392.193474] ? oom_killer_disable+0x3a0/0x3a0 [ 392.197973] ? kasan_check_write+0x14/0x20 [ 392.202210] ? do_raw_spin_lock+0xc1/0x200 [ 392.206449] mem_cgroup_out_of_memory+0x15e/0x210 [ 392.211298] ? memcg_memory_event+0x40/0x40 [ 392.215621] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 392.220462] ? page_counter_try_charge+0x1c1/0x220 [ 392.225392] try_charge+0xc43/0x1690 [ 392.229109] ? lock_downgrade+0x900/0x900 [ 392.233262] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 392.239320] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 392.244857] ? should_fail+0x22d/0xd01 [ 392.248741] ? zap_class+0x640/0x640 [ 392.252455] ? percpu_ref_tryget_live+0x168/0x460 [ 392.257293] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 392.262136] ? lock_downgrade+0x900/0x900 [ 392.266284] ? lock_release+0x970/0x970 [ 392.270261] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 392.276063] ? __kernel_text_address+0xd/0x40 [ 392.280565] ? unwind_get_return_address+0x61/0xa0 [ 392.285504] ? get_mem_cgroup_from_mm+0x206/0x440 [ 392.290355] ? fs_reclaim_acquire+0x20/0x20 [ 392.294680] memcg_kmem_charge_memcg+0x7c/0x120 [ 392.299355] ? memcg_kmem_put_cache+0xb0/0xb0 [ 392.303848] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.309211] ? zap_class+0x640/0x640 [ 392.312930] memcg_kmem_charge+0x135/0x300 [ 392.317274] __alloc_pages_nodemask+0x72e/0xde0 [ 392.321945] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 392.326976] ? percpu_ref_put_many+0x13e/0x260 [ 392.331560] ? trace_hardirqs_on+0xbd/0x310 [ 392.335885] ? mem_cgroup_charge_statistics+0x780/0x780 [ 392.341253] ? kasan_kmalloc+0xc7/0xe0 [ 392.345138] ? kasan_slab_alloc+0x12/0x20 [ 392.349285] ? kmem_cache_alloc_node+0x303/0x730 [ 392.354037] ? kasan_check_write+0x14/0x20 [ 392.358737] ? do_raw_spin_lock+0xc1/0x200 [ 392.362997] copy_process+0xa09/0x8780 [ 392.366890] ? check_preemption_disabled+0x48/0x200 [ 392.371902] ? check_preemption_disabled+0x48/0x200 [ 392.377010] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.382556] ? check_preemption_disabled+0x48/0x200 [ 392.387572] ? debug_smp_processor_id+0x1c/0x20 [ 392.392803] ? perf_trace_lock+0x14d/0x7a0 [ 392.397046] ? perf_sched_cb_inc+0x350/0x350 [ 392.401464] ? __cleanup_sighand+0x70/0x70 [ 392.405708] ? lock_downgrade+0x900/0x900 [ 392.409864] ? finish_task_switch+0x1b5/0x900 [ 392.414362] ? trace_hardirqs_on+0xbd/0x310 [ 392.418682] ? kasan_check_read+0x11/0x20 [ 392.422830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.428369] ? check_preemption_disabled+0x48/0x200 [ 392.433382] ? compat_start_thread+0x80/0x80 [ 392.437800] ? debug_smp_processor_id+0x1c/0x20 [ 392.442472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.448008] ? check_preemption_disabled+0x48/0x200 [ 392.453025] ? debug_smp_processor_id+0x1c/0x20 [ 392.457690] ? perf_trace_lock+0x14d/0x7a0 [ 392.461925] ? zap_class+0x640/0x640 [ 392.465643] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 392.471091] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 392.476536] ? kasan_check_write+0x14/0x20 [ 392.480773] ? mark_held_locks+0x130/0x130 [ 392.485015] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 392.490729] ? rcu_gp_kthread+0x2310/0x2310 [ 392.495049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.500595] ? check_preemption_disabled+0x48/0x200 [ 392.505622] ? debug_smp_processor_id+0x1c/0x20 [ 392.510292] ? perf_trace_lock+0x14d/0x7a0 [ 392.514534] ? rcu_read_unlock+0x16/0x60 [ 392.518599] ? zap_class+0x640/0x640 [ 392.522312] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 392.528121] ? mark_held_locks+0x130/0x130 [ 392.532364] ? rcu_read_unlock+0x33/0x60 [ 392.536428] ? mem_cgroup_iter+0x514/0x1160 [ 392.540751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.546298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.551854] ? check_preemption_disabled+0x48/0x200 [ 392.556872] ? mark_held_locks+0x130/0x130 [ 392.561106] ? perf_trace_lock+0x14d/0x7a0 [ 392.565343] ? zap_class+0x640/0x640 [ 392.569061] ? zap_class+0x640/0x640 [ 392.572773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.578319] ? check_preemption_disabled+0x48/0x200 [ 392.583336] ? debug_smp_processor_id+0x1c/0x20 [ 392.588003] ? perf_trace_lock+0x14d/0x7a0 [ 392.592237] ? zap_class+0x640/0x640 [ 392.595943] ? rcu_read_unlock+0x33/0x60 [ 392.600020] ? mem_cgroup_iter+0x514/0x1160 [ 392.604341] ? _raw_spin_unlock+0x3f/0x50 [ 392.608492] ? zap_class+0x640/0x640 [ 392.612211] ? delayacct_end+0x25/0x100 [ 392.616194] ? lock_downgrade+0x900/0x900 [ 392.620352] ? pvclock_read_flags+0x160/0x160 [ 392.624846] ? delayacct_end+0x25/0x100 [ 392.628824] ? zap_class+0x640/0x640 [ 392.632536] ? delayacct_end+0xc5/0x100 [ 392.636512] ? lock_downgrade+0x900/0x900 [ 392.640662] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 392.645684] ? trace_hardirqs_on+0xbd/0x310 [ 392.650005] ? kasan_check_read+0x11/0x20 [ 392.654157] ? delayacct_end+0xc5/0x100 [ 392.658133] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 392.663583] ? kasan_check_write+0x14/0x20 [ 392.667825] ? do_raw_spin_lock+0xc1/0x200 [ 392.672063] ? mark_held_locks+0x130/0x130 [ 392.676299] ? delayacct_end+0x5a/0x100 [ 392.680277] ? __delayacct_freepages_end+0xe0/0x140 [ 392.685290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 392.690827] ? do_try_to_free_pages+0xe68/0x1290 [ 392.695577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 392.701115] ? check_preemption_disabled+0x48/0x200 [ 392.706196] ? debug_smp_processor_id+0x1c/0x20 [ 392.710866] ? perf_trace_lock+0x14d/0x7a0 [ 392.715101] ? zap_class+0x640/0x640 [ 392.718819] ? zap_class+0x640/0x640 [ 392.722534] ? try_to_free_mem_cgroup_pages+0x58b/0xca0 [ 392.727901] _do_fork+0x1cb/0x11d0 [ 392.731442] ? fork_idle+0x1d0/0x1d0 [ 392.735149] ? zap_class+0x640/0x640 [ 392.738860] ? percpu_ref_put_many+0x11c/0x260 [ 392.743443] ? lock_downgrade+0x900/0x900 [ 392.747592] ? lock_release+0x970/0x970 [ 392.751574] ? __handle_mm_fault+0x53e0/0x53e0 [ 392.756161] ? get_mem_cgroup_from_mm+0x206/0x440 [ 392.761011] ? trace_hardirqs_off+0xb8/0x310 [ 392.765416] ? trace_hardirqs_on+0xbd/0x310 [ 392.769739] ? trace_hardirqs_on+0x310/0x310 [ 392.774146] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.779508] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 392.784972] __x64_sys_clone+0xbf/0x150 [ 392.788950] do_syscall_64+0x1b9/0x820 [ 392.792846] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 392.798208] ? syscall_return_slowpath+0x5e0/0x5e0 [ 392.803136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.807985] ? trace_hardirqs_on_caller+0x310/0x310 [ 392.813004] ? prepare_exit_to_usermode+0x291/0x3b0 [ 392.818019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 392.822868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 392.828051] RIP: 0033:0x459f49 [ 392.831242] Code: ff 48 85 f6 0f 84 47 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 1e 8a fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 392.850148] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 392.857864] RAX: ffffffffffffffda RBX: 00007f6bef287700 RCX: 0000000000459f49 [ 392.865146] RDX: 00007f6bef2879d0 RSI: 00007f6bef286db0 RDI: 00000000003d0f00 [ 392.872419] RBP: 0000000000a3fcd0 R08: 00007f6bef287700 R09: 00007f6bef287700 [ 392.879691] R10: 00007f6bef2879d0 R11: 0000000000000202 R12: 0000000000000000 [ 392.886968] R13: 0000000000a3fb7f R14: 00007f6bef2879c0 R15: 0000000000000000 13:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1500000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6800000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 392.899274] Task in /syz2 killed as a result of limit of /syz2 [ 392.905319] memory: usage 204788kB, limit 204800kB, failcnt 1869 [ 392.938982] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:42 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000adf000)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20}}, 0x3, 0x7, 0x6, 0x8562, 0x3}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0xa2}, 0x8) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000340)={{0x7}}, 0x10) [ 392.966524] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xfec0000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 392.997675] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 393.005645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) kcmp(r1, r2, 0x0, r0, r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000028000108001a2c961500000000000000"], 0x14}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x3f, 0x40) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000240)=0x4000) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000280)="2c0430090aae17a55658d1519aafe6e061eecf4bb9f63801e6ee4dc0bbbc5a76724e6f8698f9e9b9c10e86258d3e9cdb0e96c226d969efab46d5d8a2fa75e12a914ce7a31c6c015180e8775762aed297f4f60b292086fe09d979fd12c5de8a4de453e01de7782f26520d2fd1d06e13913c9d55885ead8dd19264") 13:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x3, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 393.086549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 393.136080] Memory cgroup out of memory: Kill process 23158 (syz-executor2) score 161 or sacrifice child [ 393.170840] Killed process 23158 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 393.191169] oom_reaper: reaped process 23158 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB 13:17:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1100000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x14000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) accept(r1, &(0x7f0000000280)=@pppol2tpv3in6, &(0x7f0000000300)=0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x10, 0x0, 0x1000000005}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040), 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "60af854918fbb3438f4653beafae9eda487332"}, 0x17) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000540)={0x48, @time={r3, r4+10000000}, 0x0, {0x20, 0x81}, 0xc38, 0x3, 0x3b}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)) 13:17:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='/dev/sequencer2\x00', 0x6) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xd1, 0x7ff, 0xe1, 0x9, 0xfffffffffffffff9, 0x4, 0x69fe, 0x2, 0x9, 0xffffffffffffffdf, 0xffffffff, 0x7}) ioctl$TCSETSF(r0, 0x4004510d, &(0x7f0000000000)) 13:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xffffff7f00000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(r0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8777a2555a90ec9392f4f947a8b76f6c8b5a1c9823f3c8cfa28f1113b2ff8863d38cae95897d54d16b28d16eb0b2cf319c3540fb1d76bb9932098fdc89515ac6eae4a2cca2076b06bda22ef8b229aa51e782a37f1ce09a1e2abac1b13f679b5f288957f400f5eb616f3c57281c690466589d477c4eb224409ca1d5f6818"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x81}, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) setuid(r2) sendmmsg(r0, &(0x7f0000000900), 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000400)='..\x00', 0x0, 0x0, &(0x7f0000000440)={0x1, 0x400, 0x0, 0xe3a}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40004) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 13:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xe, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 393.265001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 393.291526] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 393.303285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 393.361074] syz-executor2 cpuset=syz2 mems_allowed=0 [ 393.366236] CPU: 1 PID: 23213 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 393.373700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.373706] Call Trace: [ 393.373728] dump_stack+0x1c4/0x2b4 [ 393.373746] ? dump_stack_print_info.cold.2+0x52/0x52 [ 393.373763] ? percpu_ref_put_many+0x13e/0x260 [ 393.373784] dump_header+0x27b/0xf72 [ 393.394527] ? mark_held_locks+0x130/0x130 [ 393.407021] ? pagefault_out_of_memory+0x197/0x197 [ 393.407042] ? mark_held_locks+0x130/0x130 [ 393.416194] ? rcu_read_unlock+0x16/0x60 [ 393.420268] ? lock_downgrade+0x900/0x900 [ 393.424420] ? shrink_active_list+0x1c20/0x1c20 [ 393.429102] ? mark_held_locks+0x130/0x130 [ 393.433347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.438887] ? css_next_child+0x1c3/0x620 [ 393.438901] ? find_lock_task_mm+0x22e/0x4d0 [ 393.438924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.447457] ? task_will_free_mem+0x239/0xb30 [ 393.447481] ? ___ratelimit+0x36f/0x655 [ 393.447503] ? lock_downgrade+0x900/0x900 [ 393.447522] ? trace_hardirqs_on+0xbd/0x310 [ 393.447533] ? kasan_check_read+0x11/0x20 [ 393.447546] ? ___ratelimit+0x36f/0x655 [ 393.447561] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 393.447575] ? trace_hardirqs_on+0x310/0x310 [ 393.447592] ? lock_downgrade+0x900/0x900 [ 393.474186] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 393.483582] ? ___ratelimit+0xaa/0x655 [ 393.483598] ? idr_get_free+0xec0/0xec0 [ 393.483621] ? kasan_check_write+0x14/0x20 13:17:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000200)=0x2) write(0xffffffffffffffff, &(0x7f0000000040)="3e0000004e001f00ff03f4f9002304000a04f511280001", 0x17) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, r2, {0xffed, 0xa}, {0x0, 0xfff7}, {0xd, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7bc4}, @TCA_RATE={0x8, 0x5, {0x80}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044090}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x89fb, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=ANY=[]}) ftruncate(r3, 0x7) 13:17:43 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x80004, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="006f70f1c090e824aa5d270ada6a86e93c066a307c74000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="d01694abb6a85058ec80f8dad21390a064858f", 0x13}], 0x1, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000003680)=""/4096) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'ip6gre0\x00', 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x4, 0x665, [0x20002980, 0x0, 0x0, 0x20002c80, 0x20002cb0], 0x0, &(0x7f0000000380), &(0x7f0000003000)=ANY=[@ANYBLOB="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"]}, 0x6dd) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 13:17:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf00}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 393.501118] ? do_raw_spin_lock+0xc1/0x200 [ 393.513521] oom_kill_process.cold.27+0x10/0x903 [ 393.518285] ? kasan_check_write+0x14/0x20 [ 393.522524] ? do_raw_spin_lock+0xc1/0x200 [ 393.522543] ? oom_evaluate_task+0x540/0x540 [ 393.522562] ? cgroup_procs_next+0x70/0x70 [ 393.535420] ? _raw_spin_unlock_irq+0x60/0x80 [ 393.539920] ? oom_badness+0xaa0/0xaa0 [ 393.543823] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 393.548587] ? mem_cgroup_iter_break+0x30/0x30 [ 393.553184] ? cgroup_file_notify+0x226/0x2f0 [ 393.557689] out_of_memory+0xa84/0x1430 [ 393.561680] ? kasan_check_read+0x11/0x20 [ 393.565845] ? oom_killer_disable+0x3a0/0x3a0 [ 393.570349] ? kasan_check_write+0x14/0x20 [ 393.574590] ? do_raw_spin_lock+0xc1/0x200 [ 393.574612] mem_cgroup_out_of_memory+0x15e/0x210 [ 393.574626] ? memcg_memory_event+0x40/0x40 [ 393.574639] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 393.574665] ? page_counter_try_charge+0x1c1/0x220 [ 393.592872] try_charge+0xc43/0x1690 [ 393.592889] ? lock_downgrade+0x900/0x900 [ 393.592910] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 393.592926] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 393.592943] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 393.592972] ? should_fail+0x22d/0xd01 [ 393.623124] ? percpu_ref_tryget_live+0x168/0x460 [ 393.623139] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 393.623155] ? lock_downgrade+0x900/0x900 [ 393.623169] ? lock_release+0x970/0x970 [ 393.623187] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 393.623206] ? __kernel_text_address+0xd/0x40 [ 393.644852] ? unwind_get_return_address+0x61/0xa0 [ 393.644870] ? __save_stack_trace+0x8d/0xf0 [ 393.644892] ? get_mem_cgroup_from_mm+0x206/0x440 [ 393.644905] ? fs_reclaim_acquire+0x20/0x20 [ 393.644932] memcg_kmem_charge_memcg+0x7c/0x120 [ 393.678261] ? memcg_kmem_put_cache+0xb0/0xb0 [ 393.682765] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.683310] kernel msg: ebtables bug: please report to author: entries_size too small [ 393.688144] memcg_kmem_charge+0x135/0x300 [ 393.688163] __alloc_pages_nodemask+0x72e/0xde0 [ 393.688180] ? __alloc_pages_slowpath+0x2d80/0x2d80 13:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa00000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 393.688195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.688212] ? percpu_ref_put_many+0x13e/0x260 [ 393.688226] ? trace_hardirqs_on+0xbd/0x310 [ 393.688239] ? mem_cgroup_charge_statistics+0x780/0x780 [ 393.688254] ? kasan_kmalloc+0xc7/0xe0 [ 393.688275] ? kasan_slab_alloc+0x12/0x20 [ 393.705164] ? kmem_cache_alloc_node+0x303/0x730 [ 393.705178] ? kasan_check_write+0x14/0x20 [ 393.705194] ? do_raw_spin_lock+0xc1/0x200 [ 393.705216] copy_process+0xa09/0x8780 [ 393.724636] ? mark_held_locks+0x130/0x130 [ 393.733867] ? lock_downgrade+0x900/0x900 [ 393.733888] ? __cleanup_sighand+0x70/0x70 [ 393.733904] ? bio_cur_bytes+0x1e0/0x1e0 [ 393.747015] ? mark_held_locks+0x130/0x130 [ 393.747030] ? __pagevec_lru_add+0x30/0x30 [ 393.747044] ? mark_held_locks+0x130/0x130 [ 393.747061] ? mark_held_locks+0x130/0x130 [ 393.747079] ? lru_cache_add+0x417/0xa50 [ 393.763548] ? lru_cache_add_file+0x20/0x20 [ 393.763579] ? blk_flush_plug_list+0x72d/0x990 [ 393.763608] ? mark_held_locks+0x130/0x130 [ 393.763627] ? blk_init_request_from_bio+0x3c0/0x3c0 [ 393.763641] ? mark_held_locks+0x130/0x130 [ 393.763663] ? mark_held_locks+0x130/0x130 [ 393.763685] ? percpu_ref_put_many+0x11c/0x260 [ 393.763699] ? lock_downgrade+0x900/0x900 [ 393.763716] ? lock_release+0x970/0x970 [ 393.772011] ? rcu_read_unlock+0x16/0x60 [ 393.772026] ? lock_downgrade+0x900/0x900 [ 393.772039] ? lock_downgrade+0x900/0x900 [ 393.772058] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 393.772076] ? mark_held_locks+0x130/0x130 [ 393.772093] ? rcu_read_unlock+0x33/0x60 [ 393.780543] ? mem_cgroup_iter+0x514/0x1160 [ 393.780558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.780573] ? css_next_child+0x1c3/0x620 [ 393.780590] ? mark_held_locks+0x130/0x130 [ 393.780605] ? rcu_read_unlock+0x16/0x60 [ 393.780619] ? lock_downgrade+0x900/0x900 [ 393.780637] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 393.780653] ? unregister_memcg_shrinker.isra.43+0x50/0x50 [ 393.780673] ? rcu_read_unlock+0x33/0x60 [ 393.780685] ? mem_cgroup_iter+0x514/0x1160 [ 393.780707] ? delayacct_end+0x25/0x100 [ 393.780721] ? lock_downgrade+0x900/0x900 [ 393.780740] ? pvclock_read_flags+0x160/0x160 [ 393.780761] ? delayacct_end+0x25/0x100 [ 393.793265] ? delayacct_end+0xc5/0x100 [ 393.793281] ? lock_downgrade+0x900/0x900 [ 393.793294] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 393.793311] ? trace_hardirqs_on+0xbd/0x310 [ 393.793323] ? kasan_check_read+0x11/0x20 [ 393.793336] ? delayacct_end+0xc5/0x100 [ 393.793356] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 393.802241] ? kasan_check_write+0x14/0x20 [ 393.802258] ? do_raw_spin_lock+0xc1/0x200 [ 393.802274] ? mark_held_locks+0x130/0x130 [ 393.802289] ? delayacct_end+0x5a/0x100 [ 393.802307] ? __delayacct_freepages_end+0xe0/0x140 [ 393.802322] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 393.802342] ? do_try_to_free_pages+0xe68/0x1290 [ 393.811666] ? shrink_node+0x16b0/0x16b0 [ 393.811689] ? percpu_ref_tryget_live+0x146/0x460 [ 393.811703] ? lock_downgrade+0x900/0x900 [ 393.811724] ? try_to_free_mem_cgroup_pages+0x58b/0xca0 [ 393.811743] _do_fork+0x1cb/0x11d0 [ 393.820196] ? fork_idle+0x1d0/0x1d0 [ 393.820213] ? percpu_ref_put_many+0x11c/0x260 [ 393.820227] ? lock_downgrade+0x900/0x900 [ 393.820242] ? lock_release+0x970/0x970 [ 393.820257] ? __handle_mm_fault+0x53e0/0x53e0 [ 393.820275] ? get_mem_cgroup_from_mm+0x206/0x440 [ 393.820294] ? trace_hardirqs_off+0xb8/0x310 [ 393.820308] ? trace_hardirqs_on+0xbd/0x310 [ 393.820321] ? trace_hardirqs_on+0x310/0x310 [ 393.820337] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.820351] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 393.820366] __x64_sys_clone+0xbf/0x150 [ 393.820384] do_syscall_64+0x1b9/0x820 [ 393.820398] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 393.820421] ? syscall_return_slowpath+0x5e0/0x5e0 [ 393.829163] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.829180] ? trace_hardirqs_on_caller+0x310/0x310 [ 393.829197] ? prepare_exit_to_usermode+0x291/0x3b0 [ 393.829214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.829233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.829243] RIP: 0033:0x459f49 [ 393.829258] Code: ff 48 85 f6 0f 84 47 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 1e 8a fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 393.829266] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 393.829280] RAX: ffffffffffffffda RBX: 00007f6bef287700 RCX: 0000000000459f49 [ 393.829288] RDX: 00007f6bef2879d0 RSI: 00007f6bef286db0 RDI: 00000000003d0f00 [ 393.829297] RBP: 0000000000a3fcd0 R08: 00007f6bef287700 R09: 00007f6bef287700 [ 393.829305] R10: 00007f6bef2879d0 R11: 0000000000000202 R12: 0000000000000000 13:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xfc000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 393.829313] R13: 0000000000a3fb7f R14: 00007f6bef2879c0 R15: 0000000000000000 [ 393.844807] Task in [ 393.858249] /syz2 [ 393.869087] killed as a result of limit of [ 393.876186] /syz2 [ 393.907386] memory: usage 204788kB, limit 204800kB, failcnt 1895 [ 393.932605] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 393.955689] kernel msg: ebtables bug: please report to author: entries_size too small [ 394.093893] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 394.124170] Memory cgroup stats for [ 394.164497] /syz2 [ 394.270173] : cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 394.328164] dccp_close: ABORT with 8192 bytes unread [ 394.333503] dccp_close: ABORT with 1 bytes unread [ 394.347356] Memory cgroup out of memory: Kill process 23213 (syz-executor2) score 161 or sacrifice child [ 394.367531] Killed process 23213 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:17:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1f000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:44 executing program 5: r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x3) socketpair$inet(0x2, 0x6, 0x7fffffff, &(0x7f0000000340)) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400000, 0x0) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x80800) ioctl$TIOCCONS(r1, 0x541d) connect$packet(r1, &(0x7f0000000240)={0x11, 0x1f, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000280)={0x1, 0x8001, 0x20200, 'queue1\x00', 0x200}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) 13:17:44 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x3f00, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 394.379047] oom_reaper: reaped process 23213 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB [ 394.389903] dccp_close: ABORT with 8192 bytes unread 13:17:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x80004, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="006f70f1c090e824aa5d270ada6a86e93c066a307c74000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="d01694abb6a85058ec80f8dad21390a064858f", 0x13}], 0x1, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000003680)=""/4096) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'ip6gre0\x00', 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x4, 0x665, [0x20002980, 0x0, 0x0, 0x20002c80, 0x20002cb0], 0x0, &(0x7f0000000380), &(0x7f0000003000)=ANY=[@ANYBLOB="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"]}, 0x6dd) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) [ 394.433758] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 394.461940] syz-executor2 cpuset=syz2 mems_allowed=0 [ 394.467213] CPU: 1 PID: 23266 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 394.474580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.483932] Call Trace: [ 394.486539] dump_stack+0x1c4/0x2b4 [ 394.490171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 394.495366] ? percpu_ref_put_many+0x13e/0x260 [ 394.499953] dump_header+0x27b/0xf72 [ 394.499986] ? mark_held_locks+0x130/0x130 [ 394.500008] ? pagefault_out_of_memory+0x197/0x197 [ 394.507969] ? mark_held_locks+0x130/0x130 [ 394.507981] ? rcu_read_unlock+0x16/0x60 [ 394.507995] ? lock_downgrade+0x900/0x900 [ 394.508009] ? shrink_active_list+0x1c20/0x1c20 [ 394.508024] ? mark_held_locks+0x130/0x130 [ 394.508037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.508049] ? css_next_child+0x1c3/0x620 [ 394.508060] ? find_lock_task_mm+0x22e/0x4d0 [ 394.508077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.530069] ? task_will_free_mem+0x239/0xb30 [ 394.530091] ? ___ratelimit+0x36f/0x655 [ 394.530106] ? lock_downgrade+0x900/0x900 [ 394.530130] ? trace_hardirqs_on+0xbd/0x310 [ 394.539998] ? kasan_check_read+0x11/0x20 [ 394.540014] ? ___ratelimit+0x36f/0x655 [ 394.540037] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 394.584664] ? trace_hardirqs_on+0x310/0x310 [ 394.589088] ? lock_downgrade+0x900/0x900 [ 394.593252] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 394.598366] ? ___ratelimit+0xaa/0x655 [ 394.602289] ? idr_get_free+0xec0/0xec0 [ 394.606271] ? kasan_check_write+0x14/0x20 [ 394.610512] ? do_raw_spin_lock+0xc1/0x200 [ 394.614761] oom_kill_process.cold.27+0x10/0x903 [ 394.619547] ? kasan_check_write+0x14/0x20 [ 394.623810] ? do_raw_spin_lock+0xc1/0x200 [ 394.626368] kernel msg: ebtables bug: please report to author: entries_size too small [ 394.628063] ? oom_evaluate_task+0x540/0x540 [ 394.628080] ? cgroup_procs_next+0x70/0x70 [ 394.628096] ? _raw_spin_unlock_irq+0x60/0x80 [ 394.628109] ? oom_badness+0xaa0/0xaa0 [ 394.628125] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 394.628140] ? mem_cgroup_iter_break+0x30/0x30 [ 394.628162] ? cgroup_file_notify+0x226/0x2f0 [ 394.628184] out_of_memory+0xa84/0x1430 [ 394.670853] ? kasan_check_read+0x11/0x20 [ 394.674989] ? oom_killer_disable+0x3a0/0x3a0 [ 394.679466] ? kasan_check_write+0x14/0x20 [ 394.683687] ? do_raw_spin_lock+0xc1/0x200 [ 394.687910] mem_cgroup_out_of_memory+0x15e/0x210 [ 394.692736] ? memcg_memory_event+0x40/0x40 [ 394.697040] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 394.701873] ? page_counter_try_charge+0x1c1/0x220 [ 394.706791] try_charge+0xc43/0x1690 [ 394.710492] ? lock_downgrade+0x900/0x900 [ 394.714629] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 394.720671] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 394.726453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 394.731979] ? should_fail+0x22d/0xd01 [ 394.735850] ? percpu_ref_tryget_live+0x168/0x460 [ 394.740673] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 394.745503] ? lock_downgrade+0x900/0x900 [ 394.749632] ? lock_release+0x970/0x970 [ 394.753591] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 394.759375] ? __kernel_text_address+0xd/0x40 [ 394.763858] ? unwind_get_return_address+0x61/0xa0 [ 394.768773] ? __save_stack_trace+0x8d/0xf0 [ 394.773088] ? get_mem_cgroup_from_mm+0x206/0x440 [ 394.777920] ? fs_reclaim_acquire+0x20/0x20 [ 394.782244] memcg_kmem_charge_memcg+0x7c/0x120 [ 394.786916] ? memcg_kmem_put_cache+0xb0/0xb0 [ 394.791399] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.796762] memcg_kmem_charge+0x135/0x300 [ 394.800993] __alloc_pages_nodemask+0x72e/0xde0 [ 394.805648] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 394.810653] ? percpu_ref_put_many+0x13e/0x260 [ 394.815232] ? trace_hardirqs_on+0xbd/0x310 [ 394.819538] ? mem_cgroup_charge_statistics+0x780/0x780 [ 394.824888] ? kasan_kmalloc+0xc7/0xe0 [ 394.828759] ? kasan_slab_alloc+0x12/0x20 [ 394.832894] ? kmem_cache_alloc_node+0x303/0x730 [ 394.837631] ? kasan_check_write+0x14/0x20 [ 394.841851] ? do_raw_spin_lock+0xc1/0x200 [ 394.846072] copy_process+0xa09/0x8780 [ 394.849948] ? check_preemption_disabled+0x48/0x200 [ 394.854967] ? check_preemption_disabled+0x48/0x200 [ 394.859979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.865505] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 394.870716] ? perf_sched_cb_inc+0x350/0x350 [ 394.875121] ? __cleanup_sighand+0x70/0x70 [ 394.879343] ? lock_downgrade+0x900/0x900 [ 394.883478] ? finish_task_switch+0x1b5/0x900 [ 394.887979] ? trace_hardirqs_on+0xbd/0x310 [ 394.892328] ? kasan_check_read+0x11/0x20 [ 394.896495] ? finish_task_switch+0x1f5/0x900 [ 394.900994] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 394.906469] ? compat_start_thread+0x80/0x80 [ 394.910872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.916405] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 394.922109] ? lock_downgrade+0x900/0x900 [ 394.926243] ? preempt_notifier_register+0x200/0x200 [ 394.931346] ? __switch_to_asm+0x34/0x70 [ 394.935404] ? trace_hardirqs_on+0xbd/0x310 [ 394.939709] ? kasan_check_read+0x11/0x20 [ 394.943843] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 394.949541] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 394.954982] ? __rcu_read_unlock+0x2e5/0x2f0 [ 394.959376] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 394.964818] ? kasan_check_write+0x14/0x20 [ 394.969038] ? mark_held_locks+0x130/0x130 [ 394.973260] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 394.978956] ? __sched_text_start+0x8/0x8 [ 394.983102] ? rcu_gp_kthread+0x2310/0x2310 [ 394.987416] ? lock_release+0x970/0x970 [ 394.991378] ? rcu_read_unlock+0x16/0x60 [ 394.995425] ? lock_downgrade+0x900/0x900 [ 394.999584] ? __rcu_read_unlock+0x2e5/0x2f0 [ 395.003986] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 395.009980] ? mark_held_locks+0x130/0x130 [ 395.014472] ? rcu_read_unlock+0x33/0x60 [ 395.018518] ? mem_cgroup_iter+0x514/0x1160 [ 395.022826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.028347] ? css_next_child+0x1c3/0x620 [ 395.032486] ? mark_held_locks+0x130/0x130 [ 395.036703] ? rcu_read_unlock+0x16/0x60 [ 395.040748] ? lock_downgrade+0x900/0x900 [ 395.044885] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 395.050670] ? unregister_memcg_shrinker.isra.43+0x50/0x50 [ 395.056303] ? rcu_read_unlock+0x33/0x60 [ 395.060354] ? mem_cgroup_iter+0x514/0x1160 [ 395.064662] ? _raw_spin_unlock+0x3f/0x50 [ 395.068807] ? delayacct_end+0x25/0x100 [ 395.072764] ? lock_downgrade+0x900/0x900 [ 395.076908] ? pvclock_read_flags+0x160/0x160 [ 395.081389] ? delayacct_end+0x25/0x100 [ 395.085349] ? delayacct_end+0xc5/0x100 [ 395.089316] ? lock_downgrade+0x900/0x900 [ 395.093464] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 395.098483] ? trace_hardirqs_on+0xbd/0x310 [ 395.102790] ? kasan_check_read+0x11/0x20 [ 395.106922] ? delayacct_end+0xc5/0x100 [ 395.110880] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 395.116313] ? kasan_check_write+0x14/0x20 [ 395.120532] ? do_raw_spin_lock+0xc1/0x200 [ 395.124771] ? mark_held_locks+0x130/0x130 [ 395.129055] ? delayacct_end+0x5a/0x100 [ 395.133015] ? __delayacct_freepages_end+0xe0/0x140 [ 395.138017] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 395.143557] ? do_try_to_free_pages+0xe68/0x1290 [ 395.148305] ? shrink_node+0x16b0/0x16b0 [ 395.152386] ? percpu_ref_tryget_live+0x146/0x460 [ 395.157218] ? lock_downgrade+0x900/0x900 [ 395.161368] ? try_to_free_mem_cgroup_pages+0x58b/0xca0 [ 395.166731] _do_fork+0x1cb/0x11d0 [ 395.170273] ? fork_idle+0x1d0/0x1d0 [ 395.173985] ? percpu_ref_put_many+0x11c/0x260 [ 395.178551] ? lock_downgrade+0x900/0x900 [ 395.182684] ? lock_release+0x970/0x970 [ 395.186650] ? __handle_mm_fault+0x53e0/0x53e0 [ 395.191232] ? get_mem_cgroup_from_mm+0x206/0x440 [ 395.196062] ? trace_hardirqs_off+0xb8/0x310 [ 395.200452] ? trace_hardirqs_on+0xbd/0x310 [ 395.204757] ? trace_hardirqs_on+0x310/0x310 [ 395.209150] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.214497] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 395.219943] __x64_sys_clone+0xbf/0x150 [ 395.223920] do_syscall_64+0x1b9/0x820 [ 395.228167] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 395.233514] ? syscall_return_slowpath+0x5e0/0x5e0 [ 395.238426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.243265] ? trace_hardirqs_on_caller+0x310/0x310 [ 395.248295] ? prepare_exit_to_usermode+0x291/0x3b0 [ 395.253392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.258222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 395.263395] RIP: 0033:0x459f49 [ 395.266580] Code: ff 48 85 f6 0f 84 47 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 1e 8a fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 13:17:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1f2, 0x38, 0x0, 0x0, 0x80000}, [{0x0, 0x3}]}, 0x58) creat(&(0x7f0000001140)='./file0\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f00000004c0)=0x100000035) 13:17:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x80004, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="006f70f1c090e824aa5d270ada6a86e93c066a307c74000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="d01694abb6a85058ec80f8dad21390a064858f", 0x13}], 0x1, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000003680)=""/4096) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'ip6gre0\x00', 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x4, 0x665, [0x20002980, 0x0, 0x0, 0x20002c80, 0x20002cb0], 0x0, &(0x7f0000000380), &(0x7f0000003000)=ANY=[@ANYBLOB="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"]}, 0x6dd) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 13:17:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x500, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 395.285481] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 395.293189] RAX: ffffffffffffffda RBX: 00007f6bef287700 RCX: 0000000000459f49 [ 395.300460] RDX: 00007f6bef2879d0 RSI: 00007f6bef286db0 RDI: 00000000003d0f00 [ 395.307750] RBP: 0000000000a3fcd0 R08: 00007f6bef287700 R09: 00007f6bef287700 [ 395.315026] R10: 00007f6bef2879d0 R11: 0000000000000202 R12: 0000000000000000 [ 395.322282] R13: 0000000000a3fb7f R14: 00007f6bef2879c0 R15: 0000000000000000 [ 395.360742] Task in /syz2 killed as a result of limit of /syz2 [ 395.370908] memory: usage 204780kB, limit 204800kB, failcnt 1923 [ 395.379745] dccp_close: ABORT with 4096 bytes unread 13:17:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4c00000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x266febfeff21f7a0, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x80000, r0}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000640)) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000340)="22b7502811f55782e8e252296c38f8b2", 0x80) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x40010, r2, 0x1) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) syz_open_dev$dri(&(0x7f0000000540)='/dev/dri/card#\x00', 0x0, 0x10800) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000000000000040000000700000001000094ff0000000400000003000000003d80f945aae3448c00000000000000"]) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0x42d218d2a1096030, &(0x7f0000000240), 0x4) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x400000000000, &(0x7f0000000200), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x11, 0x65, &(0x7f0000000000)="05786b733a6a91a82f7270fae8d0908a6f", &(0x7f0000000380)=""/101, 0xfff}, 0x28) [ 395.410102] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.468401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 395.482928] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.500345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 395.507670] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 395.532666] Memory cgroup out of memory: Kill process 23266 (syz-executor2) score 161 or sacrifice child [ 395.543739] Killed process 23266 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:17:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x1f4, @empty, [0x0, 0x2000000]}, 0x6) 13:17:45 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 13:17:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xc0fe, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 395.578202] kernel msg: ebtables bug: please report to author: entries_size too small [ 395.589604] oom_reaper: reaped process 23266 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB 13:17:45 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 13:17:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x5000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 395.677904] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 395.696597] syz-executor2 cpuset=syz2 mems_allowed=0 [ 395.714602] CPU: 0 PID: 23321 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 395.721993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.731342] Call Trace: [ 395.733949] dump_stack+0x1c4/0x2b4 [ 395.737595] ? dump_stack_print_info.cold.2+0x52/0x52 [ 395.742803] ? percpu_ref_put_many+0x13e/0x260 [ 395.747408] dump_header+0x27b/0xf72 [ 395.747428] ? mark_held_locks+0x130/0x130 [ 395.747441] ? pagefault_out_of_memory+0x197/0x197 [ 395.747464] ? mark_held_locks+0x130/0x130 [ 395.755405] ? rcu_read_unlock+0x16/0x60 [ 395.768603] ? lock_downgrade+0x900/0x900 [ 395.772762] ? shrink_active_list+0x1c20/0x1c20 [ 395.777443] ? mark_held_locks+0x130/0x130 [ 395.781688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.787232] ? css_next_child+0x1c3/0x620 [ 395.791387] ? find_lock_task_mm+0x22e/0x4d0 [ 395.795800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.801339] ? task_will_free_mem+0x239/0xb30 [ 395.805850] ? ___ratelimit+0x36f/0x655 [ 395.805867] ? lock_downgrade+0x900/0x900 [ 395.805886] ? trace_hardirqs_on+0xbd/0x310 [ 395.813996] ? kasan_check_read+0x11/0x20 [ 395.814012] ? ___ratelimit+0x36f/0x655 [ 395.814031] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 395.831889] ? trace_hardirqs_on+0x310/0x310 [ 395.836321] ? lock_downgrade+0x900/0x900 [ 395.840484] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 395.845598] ? ___ratelimit+0xaa/0x655 [ 395.849491] ? idr_get_free+0xec0/0xec0 [ 395.853472] ? kasan_check_write+0x14/0x20 [ 395.857725] ? do_raw_spin_lock+0xc1/0x200 [ 395.857743] oom_kill_process.cold.27+0x10/0x903 [ 395.857757] ? kasan_check_write+0x14/0x20 [ 395.857769] ? do_raw_spin_lock+0xc1/0x200 [ 395.857790] ? oom_evaluate_task+0x540/0x540 [ 395.879715] ? cgroup_procs_next+0x70/0x70 [ 395.883981] ? _raw_spin_unlock_irq+0x60/0x80 [ 395.888498] ? oom_badness+0xaa0/0xaa0 [ 395.892382] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 395.897134] ? mem_cgroup_iter_break+0x30/0x30 [ 395.901730] ? cgroup_file_notify+0x226/0x2f0 [ 395.906259] out_of_memory+0xa84/0x1430 [ 395.910224] ? kasan_check_read+0x11/0x20 [ 395.914357] ? oom_killer_disable+0x3a0/0x3a0 [ 395.918841] ? kasan_check_write+0x14/0x20 [ 395.923060] ? do_raw_spin_lock+0xc1/0x200 [ 395.927305] mem_cgroup_out_of_memory+0x15e/0x210 [ 395.932144] ? memcg_memory_event+0x40/0x40 [ 395.936458] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 395.941311] ? page_counter_try_charge+0x1c1/0x220 [ 395.946322] try_charge+0xc43/0x1690 [ 395.950022] ? lock_downgrade+0x900/0x900 [ 395.954157] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 395.960198] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 395.965987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 395.971514] ? should_fail+0x22d/0xd01 [ 395.975388] ? percpu_ref_tryget_live+0x168/0x460 [ 395.980239] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 395.985083] ? lock_downgrade+0x900/0x900 [ 395.989215] ? lock_release+0x970/0x970 [ 395.993175] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 395.998993] ? __kernel_text_address+0xd/0x40 [ 396.003476] ? unwind_get_return_address+0x61/0xa0 [ 396.008392] ? __save_stack_trace+0x8d/0xf0 [ 396.012703] ? get_mem_cgroup_from_mm+0x206/0x440 [ 396.017533] ? fs_reclaim_acquire+0x20/0x20 [ 396.021844] memcg_kmem_charge_memcg+0x7c/0x120 [ 396.026585] ? memcg_kmem_put_cache+0xb0/0xb0 [ 396.031065] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.036424] memcg_kmem_charge+0x135/0x300 [ 396.040658] __alloc_pages_nodemask+0x72e/0xde0 [ 396.045331] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 396.050344] ? percpu_ref_put_many+0x13e/0x260 [ 396.054914] ? trace_hardirqs_on+0xbd/0x310 [ 396.059223] ? mem_cgroup_charge_statistics+0x780/0x780 [ 396.064573] ? kasan_kmalloc+0xc7/0xe0 [ 396.068448] ? kasan_slab_alloc+0x12/0x20 [ 396.072599] ? kmem_cache_alloc_node+0x303/0x730 [ 396.077341] ? kasan_check_write+0x14/0x20 [ 396.081581] ? do_raw_spin_lock+0xc1/0x200 [ 396.085814] copy_process+0xa09/0x8780 [ 396.089699] ? check_preemption_disabled+0x48/0x200 [ 396.094729] ? check_preemption_disabled+0x48/0x200 [ 396.099758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.105284] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 396.110475] ? perf_sched_cb_inc+0x350/0x350 [ 396.114908] ? __cleanup_sighand+0x70/0x70 [ 396.119141] ? lock_downgrade+0x900/0x900 [ 396.123270] ? finish_task_switch+0x1b5/0x900 [ 396.127755] ? trace_hardirqs_on+0xbd/0x310 [ 396.132061] ? kasan_check_read+0x11/0x20 [ 396.136193] ? finish_task_switch+0x1f5/0x900 [ 396.140675] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 396.146111] ? compat_start_thread+0x80/0x80 [ 396.150503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.156033] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 396.161730] ? lock_downgrade+0x900/0x900 [ 396.165861] ? preempt_notifier_register+0x200/0x200 [ 396.170949] ? __switch_to_asm+0x34/0x70 [ 396.175004] ? trace_hardirqs_on+0xbd/0x310 [ 396.179327] ? kasan_check_read+0x11/0x20 [ 396.183473] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 396.189185] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 396.194624] ? __rcu_read_unlock+0x2e5/0x2f0 [ 396.199024] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 396.204465] ? kasan_check_write+0x14/0x20 [ 396.208693] ? mark_held_locks+0x130/0x130 [ 396.212923] ? rcu_read_unlock_special.part.39+0x8a4/0x11f0 [ 396.218625] ? __sched_text_start+0x8/0x8 [ 396.222761] ? rcu_gp_kthread+0x2310/0x2310 [ 396.227073] ? lock_release+0x970/0x970 [ 396.231038] ? rcu_read_unlock+0x16/0x60 [ 396.235088] ? lock_downgrade+0x900/0x900 [ 396.239226] ? __rcu_read_unlock+0x2e5/0x2f0 [ 396.243630] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 396.249477] ? mark_held_locks+0x130/0x130 [ 396.253701] ? rcu_read_unlock+0x33/0x60 [ 396.257746] ? mem_cgroup_iter+0x514/0x1160 [ 396.262055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.267605] ? css_next_child+0x1c3/0x620 [ 396.271749] ? mark_held_locks+0x130/0x130 [ 396.275992] ? rcu_read_unlock+0x16/0x60 [ 396.280035] ? lock_downgrade+0x900/0x900 [ 396.284172] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 396.289983] ? unregister_memcg_shrinker.isra.43+0x50/0x50 [ 396.295594] ? rcu_read_unlock+0x33/0x60 [ 396.299639] ? mem_cgroup_iter+0x514/0x1160 [ 396.303947] ? _raw_spin_unlock+0x3f/0x50 [ 396.308091] ? delayacct_end+0x25/0x100 [ 396.312057] ? lock_downgrade+0x900/0x900 [ 396.316191] ? pvclock_read_flags+0x160/0x160 [ 396.320686] ? delayacct_end+0x25/0x100 [ 396.324661] ? delayacct_end+0xc5/0x100 [ 396.328619] ? lock_downgrade+0x900/0x900 [ 396.332753] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 396.337773] ? trace_hardirqs_on+0xbd/0x310 [ 396.342082] ? kasan_check_read+0x11/0x20 [ 396.346212] ? delayacct_end+0xc5/0x100 [ 396.350182] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 396.355629] ? kasan_check_write+0x14/0x20 [ 396.360200] ? do_raw_spin_lock+0xc1/0x200 [ 396.364420] ? mark_held_locks+0x130/0x130 [ 396.368639] ? delayacct_end+0x5a/0x100 [ 396.372601] ? __delayacct_freepages_end+0xe0/0x140 [ 396.377604] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.383152] ? do_try_to_free_pages+0xe68/0x1290 [ 396.387918] ? shrink_node+0x16b0/0x16b0 [ 396.391973] ? percpu_ref_tryget_live+0x146/0x460 [ 396.396807] ? lock_downgrade+0x900/0x900 [ 396.400975] ? try_to_free_mem_cgroup_pages+0x58b/0xca0 [ 396.406332] _do_fork+0x1cb/0x11d0 [ 396.409870] ? fork_idle+0x1d0/0x1d0 [ 396.413580] ? percpu_ref_put_many+0x11c/0x260 [ 396.418150] ? lock_downgrade+0x900/0x900 [ 396.422284] ? lock_release+0x970/0x970 [ 396.426251] ? __handle_mm_fault+0x53e0/0x53e0 [ 396.430829] ? get_mem_cgroup_from_mm+0x206/0x440 [ 396.435673] ? trace_hardirqs_off+0xb8/0x310 [ 396.440082] ? trace_hardirqs_on+0xbd/0x310 [ 396.444388] ? trace_hardirqs_on+0x310/0x310 [ 396.448783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.454143] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 396.459580] __x64_sys_clone+0xbf/0x150 [ 396.463540] do_syscall_64+0x1b9/0x820 [ 396.467412] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 396.472767] ? syscall_return_slowpath+0x5e0/0x5e0 [ 396.477703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.482532] ? trace_hardirqs_on_caller+0x310/0x310 [ 396.487543] ? prepare_exit_to_usermode+0x291/0x3b0 [ 396.492568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.497413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.502587] RIP: 0033:0x459f49 [ 396.505765] Code: ff 48 85 f6 0f 84 47 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c 1e 8a fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 396.524661] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 396.532361] RAX: ffffffffffffffda RBX: 00007f6bef287700 RCX: 0000000000459f49 [ 396.539639] RDX: 00007f6bef2879d0 RSI: 00007f6bef286db0 RDI: 00000000003d0f00 [ 396.546893] RBP: 0000000000a3fcd0 R08: 00007f6bef287700 R09: 00007f6bef287700 [ 396.554144] R10: 00007f6bef2879d0 R11: 0000000000000202 R12: 0000000000000000 [ 396.561396] R13: 0000000000a3fb7f R14: 00007f6bef2879c0 R15: 0000000000000000 [ 396.573929] Task in /syz2 [ 396.576778] killed as a result of limit of /syz2 [ 396.581747] memory: usage 204740kB, limit 204800kB, failcnt 1933 [ 396.588679] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.595500] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.601925] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 396.622008] Memory cgroup out of memory: Kill process 23321 (syz-executor2) score 161 or sacrifice child 13:17:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x80004, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="006f70f1c090e824aa5d270ada6a86e93c066a307c74000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="d01694abb6a85058ec80f8dad21390a064858f", 0x13}], 0x1, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000003680)=""/4096) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'ip6gre0\x00', 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x4, 0x665, [0x20002980, 0x0, 0x0, 0x20002c80, 0x20002cb0], 0x0, &(0x7f0000000380), &(0x7f0000003000)=ANY=[@ANYBLOB="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"]}, 0x6dd) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 13:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x388342fffee7ec07, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:46 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x48, 0x14, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) 13:17:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6c00}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:46 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x60002) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000140)={[0x9, 0x1f, 0x73c7, 0x2, 0x8, 0x59, 0xffffffffffffffc1, 0x0, 0x1, 0x8c45, 0x2f49, 0xe31b, 0x10001, 0x20, 0x95f1, 0x1], 0x10000}) r2 = getpid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x140, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000080)={0x60, 0x0, 0x8, {{0x2, 0x101, 0x7, 0x100, 0x1, 0x10000, 0x1, 0x62}}}, 0x60) sched_setscheduler(r2, 0x3, &(0x7f0000000200)) getsockopt(r0, 0xff, 0x1, &(0x7f0000001180)=""/166, &(0x7f0000000040)=0xa6) 13:17:46 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) socketpair$unix(0x1, 0x405, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x1, 0xb9, 0x2}) r4 = dup2(r2, r1) clone(0x0, &(0x7f0000000340), &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000380)) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000180)={{0x8, 0x1}, {0xfffffffffffffff7, 0x81}, 0xc354, 0x4, 0x38ffc91c}) [ 396.631717] Killed process 23321 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 396.642836] oom_reaper: reaped process 23321 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB 13:17:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5103000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:46 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@rc, &(0x7f0000001280)=0x80) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000012c0), &(0x7f0000001300)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x5, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c01000000000065750ede825e45a90f1c09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a915932f764b262ba615a1402f2058d207916a0dc38b518cdf4dba35cebb98b7559414d05501b53517cdf50a6294335b7189c3003b2cbdae69c720"], 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x440000) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000001240)={{&(0x7f0000000240)=""/4096, 0x1000}, &(0x7f0000000080), 0x70}, 0x20) getpgid(0x0) 13:17:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x700}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:46 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa8aaaafffeaaaa18, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 396.765518] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 396.803553] syz-executor2 cpuset=syz2 mems_allowed=0 [ 396.820104] CPU: 0 PID: 23360 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 396.824584] kernel msg: ebtables bug: please report to author: entries_size too small [ 396.827487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.827492] Call Trace: [ 396.827514] dump_stack+0x1c4/0x2b4 [ 396.827532] ? dump_stack_print_info.cold.2+0x52/0x52 [ 396.827548] ? percpu_ref_put_many+0x13e/0x260 [ 396.827565] dump_header+0x27b/0xf72 [ 396.827585] ? mark_held_locks+0x130/0x130 13:17:46 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:46 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7068a9ffffff0000dffc0c00000000000000000000005b659a62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c298497cf455615aa75dcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce56aa166b5000d"], 0x83}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x60d) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1a) [ 396.827599] ? pagefault_out_of_memory+0x197/0x197 [ 396.827619] ? mark_held_locks+0x130/0x130 [ 396.827630] ? rcu_read_unlock+0x16/0x60 [ 396.827644] ? lock_downgrade+0x900/0x900 [ 396.827658] ? shrink_active_list+0x1c20/0x1c20 [ 396.827675] ? mark_held_locks+0x130/0x130 [ 396.827691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.827705] ? css_next_child+0x1c3/0x620 [ 396.827717] ? find_lock_task_mm+0x22e/0x4d0 [ 396.827734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.827746] ? task_will_free_mem+0x239/0xb30 [ 396.827768] ? ___ratelimit+0x36f/0x655 [ 396.827782] ? lock_downgrade+0x900/0x900 [ 396.827800] ? trace_hardirqs_on+0xbd/0x310 [ 396.827811] ? kasan_check_read+0x11/0x20 [ 396.827825] ? ___ratelimit+0x36f/0x655 [ 396.827839] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 396.827853] ? trace_hardirqs_on+0x310/0x310 [ 396.827866] ? lock_downgrade+0x900/0x900 [ 396.827885] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 396.827898] ? ___ratelimit+0xaa/0x655 [ 396.827913] ? idr_get_free+0xec0/0xec0 [ 396.827931] ? kasan_check_write+0x14/0x20 [ 396.971159] ? do_raw_spin_lock+0xc1/0x200 [ 396.975418] oom_kill_process.cold.27+0x10/0x903 [ 396.980177] ? kasan_check_write+0x14/0x20 [ 396.980192] ? do_raw_spin_lock+0xc1/0x200 [ 396.980211] ? oom_evaluate_task+0x540/0x540 [ 396.988668] ? cgroup_procs_next+0x70/0x70 [ 396.988685] ? _raw_spin_unlock_irq+0x60/0x80 [ 396.988698] ? oom_badness+0xaa0/0xaa0 [ 396.988713] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 396.988732] ? mem_cgroup_iter_break+0x30/0x30 [ 396.997360] ? cgroup_file_notify+0x226/0x2f0 [ 396.997377] out_of_memory+0xa84/0x1430 [ 396.997391] ? kasan_check_read+0x11/0x20 [ 396.997408] ? oom_killer_disable+0x3a0/0x3a0 [ 397.005774] ? kasan_check_write+0x14/0x20 [ 397.005790] ? do_raw_spin_lock+0xc1/0x200 [ 397.005811] mem_cgroup_out_of_memory+0x15e/0x210 [ 397.005827] ? memcg_memory_event+0x40/0x40 [ 397.015141] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 397.015158] ? page_counter_try_charge+0x1c1/0x220 [ 397.015179] try_charge+0xc43/0x1690 [ 397.023631] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.023652] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 397.023669] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 397.032304] ? lock_downgrade+0x900/0x900 [ 397.032319] ? lock_release+0x970/0x970 [ 397.032340] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 397.040794] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 397.040806] ? kasan_check_write+0x14/0x20 [ 397.040825] ? get_mem_cgroup_from_mm+0x206/0x440 [ 397.040839] ? mem_cgroup_can_attach+0x580/0x580 [ 397.040860] ? __might_sleep+0x95/0x190 [ 397.040876] mem_cgroup_try_charge+0x5ea/0xe10 [ 397.040893] ? mem_cgroup_protected+0xa60/0xa60 [ 397.125888] ? mark_held_locks+0x130/0x130 [ 397.130116] ? css_next_child+0x1c3/0x620 [ 397.134253] ? mark_held_locks+0x130/0x130 [ 397.138826] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 397.144368] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 397.149373] wp_page_copy+0x46c/0x14f0 [ 397.153275] ? follow_pfn+0x2e0/0x2e0 [ 397.157075] ? mem_cgroup_iter+0x514/0x1160 [ 397.161390] ? do_wp_page+0x76c/0x1390 [ 397.165264] ? lock_downgrade+0x900/0x900 [ 397.169411] ? kasan_check_read+0x11/0x20 [ 397.173554] ? do_raw_spin_unlock+0xa7/0x2f0 [ 397.177948] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 397.182559] ? __pte_alloc_kernel+0x220/0x220 [ 397.187041] ? pvclock_read_flags+0x160/0x160 [ 397.191541] do_wp_page+0x774/0x1390 [ 397.195255] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 397.199931] ? __handle_mm_fault+0x1e6c/0x53e0 [ 397.204505] ? lock_downgrade+0x900/0x900 [ 397.208646] ? trace_hardirqs_on+0xbd/0x310 [ 397.212956] ? lock_release+0x970/0x970 [ 397.217212] ? kasan_check_read+0x11/0x20 [ 397.221372] ? pmd_val+0x88/0x100 [ 397.224831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 397.230362] ? kasan_check_write+0x14/0x20 [ 397.234599] ? do_raw_spin_lock+0xc1/0x200 [ 397.238867] __handle_mm_fault+0x2c60/0x53e0 [ 397.243269] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 397.248104] ? shrink_node+0x16b0/0x16b0 [ 397.252154] ? lock_acquire+0x1ed/0x520 [ 397.256132] ? handle_mm_fault+0x42a/0xc70 [ 397.260530] ? lock_downgrade+0x900/0x900 [ 397.264668] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 397.270449] ? __do_page_fault+0x67d/0xed0 [ 397.274673] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 397.280108] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 397.285633] ? check_preemption_disabled+0x48/0x200 [ 397.290657] handle_mm_fault+0x54f/0xc70 [ 397.294702] ? __handle_mm_fault+0x53e0/0x53e0 [ 397.299354] ? find_vma+0x34/0x190 [ 397.302882] __do_page_fault+0x67d/0xed0 [ 397.306947] ? mm_fault_error+0x380/0x380 [ 397.311087] ? trace_hardirqs_on+0x310/0x310 [ 397.315483] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.320834] ? trace_hardirqs_on+0x310/0x310 [ 397.325241] do_page_fault+0xf2/0x7e0 [ 397.329030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.334817] ? vmalloc_sync_all+0x30/0x30 [ 397.338952] ? error_entry+0x70/0xd0 [ 397.342657] ? trace_hardirqs_off_caller+0xbb/0x310 [ 397.347663] ? trace_hardirqs_on_caller+0xc0/0x310 [ 397.352603] ? syscall_return_slowpath+0x5e0/0x5e0 [ 397.357544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.362375] ? trace_hardirqs_on_caller+0x310/0x310 [ 397.367374] ? trace_hardirqs_off+0x310/0x310 [ 397.371856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.377380] ? prepare_exit_to_usermode+0x291/0x3b0 [ 397.382588] ? page_fault+0x8/0x30 [ 397.386125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.390969] ? page_fault+0x8/0x30 [ 397.394498] page_fault+0x1e/0x30 [ 397.397934] RIP: 0033:0x40c4f0 [ 397.401114] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 7a ce 4b 00 31 c0 e8 98 53 ff ff 31 ff e8 71 50 ff ff 90 <89> 3c b5 00 00 72 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 12 3b 63 00 [ 397.420002] RSP: 002b:0000000000a3fb30 EFLAGS: 00010246 [ 397.425350] RAX: 00000000b9d91f4d RBX: 00000000a68b48b2 RCX: 0000001b32e20000 [ 397.432599] RDX: 0000000000000000 RSI: 0000000000001f4d RDI: ffffffffb9d91f4d [ 397.439852] RBP: 0000000000000003 R08: 00000000b9d91f4d R09: 00000000b9d91f51 [ 397.447104] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf00 [ 397.454363] R13: 0000000080000000 R14: 00007f6bf1088008 R15: 0000000000000003 [ 397.463438] Task in /syz2 killed as a result of limit of /syz2 [ 397.469538] memory: usage 204796kB, limit 204800kB, failcnt 1963 [ 397.469547] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 397.469555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 397.469560] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 397.469649] Memory cgroup out of memory: Kill process 23360 (syz-executor2) score 161 or sacrifice child 13:17:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x80004, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="006f70f1c090e824aa5d270ada6a86e93c066a307c74000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="d01694abb6a85058ec80f8dad21390a064858f", 0x13}], 0x1, 0x0, 0x0, 0x20008014}, 0x2}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000280)=""/130, &(0x7f00000000c0)=0x82) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000003680)=""/4096) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="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", 0x1000}], 0x1, &(0x7f0000000440), 0x0, 0x20000000}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000440)={'ip6gre0\x00', 0x3ff}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r4, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x4, 0x665, [0x20002980, 0x0, 0x0, 0x20002c80, 0x20002cb0], 0x0, &(0x7f0000000380), &(0x7f0000003000)=ANY=[@ANYBLOB="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"]}, 0x6dd) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0)}}], 0x1, 0x0) 13:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x200000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:47 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x1, 0x807, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000b56f40)=""/192, &(0x7f0000000080)=0xc0) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000200)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f00000003c0)=""/28, 0x1c}], 0x3, &(0x7f0000000440)=""/170, 0xaa, 0x10001}, 0x10020) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={@mcast2, 0x73, r3}) 13:17:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe75, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0xfffffffffffffd80) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0x674f, 0x20000005, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) r3 = fcntl$dupfd(r1, 0x0, r1) accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14, 0x80000) bind$can_raw(r3, &(0x7f0000000240)={0x1d, r4}, 0x10) 13:17:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xffffffe0, @empty, [0x0, 0x2000000]}, 0x6) [ 397.469691] Killed process 23360 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 397.566589] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 397.606924] syz-executor2 cpuset=syz2 mems_allowed=0 [ 397.617728] CPU: 1 PID: 23390 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 397.625107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.634464] Call Trace: [ 397.637068] dump_stack+0x1c4/0x2b4 [ 397.640708] ? dump_stack_print_info.cold.2+0x52/0x52 [ 397.645905] ? percpu_ref_put_many+0x13e/0x260 [ 397.650495] dump_header+0x27b/0xf72 [ 397.654223] ? mark_held_locks+0x130/0x130 [ 397.658467] ? pagefault_out_of_memory+0x197/0x197 [ 397.663405] ? mark_held_locks+0x130/0x130 [ 397.667639] ? rcu_read_unlock+0x16/0x60 [ 397.671712] ? lock_downgrade+0x900/0x900 [ 397.675871] ? shrink_active_list+0x1c20/0x1c20 [ 397.680550] ? mark_held_locks+0x130/0x130 [ 397.684813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.690367] ? css_next_child+0x1c3/0x620 [ 397.694518] ? find_lock_task_mm+0x22e/0x4d0 [ 397.698941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:17:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x3, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8800, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x6, 0x2, [0xfffffffffffffeff, 0x401]}, 0xc) 13:17:47 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0x7a) 13:17:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x7000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 397.704502] ? task_will_free_mem+0x239/0xb30 [ 397.709037] ? ___ratelimit+0x36f/0x655 [ 397.713035] ? lock_downgrade+0x900/0x900 [ 397.717194] ? trace_hardirqs_on+0xbd/0x310 [ 397.719055] kernel msg: ebtables bug: please report to author: entries_size too small [ 397.721520] ? kasan_check_read+0x11/0x20 [ 397.733620] ? ___ratelimit+0x36f/0x655 [ 397.737606] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 397.743071] ? trace_hardirqs_on+0x310/0x310 [ 397.747486] ? lock_downgrade+0x900/0x900 [ 397.747505] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 397.747519] ? ___ratelimit+0xaa/0x655 [ 397.747532] ? idr_get_free+0xec0/0xec0 [ 397.747545] ? kasan_check_write+0x14/0x20 [ 397.747558] ? do_raw_spin_lock+0xc1/0x200 [ 397.747580] oom_kill_process.cold.27+0x10/0x903 [ 397.756817] ? kasan_check_write+0x14/0x20 [ 397.764652] ? do_raw_spin_lock+0xc1/0x200 [ 397.764672] ? oom_evaluate_task+0x540/0x540 [ 397.764689] ? cgroup_procs_next+0x70/0x70 [ 397.764707] ? _raw_spin_unlock_irq+0x60/0x80 [ 397.773155] ? oom_badness+0xaa0/0xaa0 [ 397.773172] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 397.773188] ? mem_cgroup_iter_break+0x30/0x30 [ 397.773212] ? cgroup_file_notify+0x226/0x2f0 [ 397.782185] out_of_memory+0xa84/0x1430 [ 397.782200] ? kasan_check_read+0x11/0x20 [ 397.782216] ? oom_killer_disable+0x3a0/0x3a0 [ 397.782233] ? kasan_check_write+0x14/0x20 [ 397.790855] ? do_raw_spin_lock+0xc1/0x200 [ 397.790875] mem_cgroup_out_of_memory+0x15e/0x210 [ 397.790889] ? memcg_memory_event+0x40/0x40 [ 397.790903] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 397.790919] ? page_counter_try_charge+0x1c1/0x220 13:17:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x101) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x1d, @multicast1, 0x4e21, 0x0, 'fo\x00', 0x1, 0x6, 0x33}, {@rand_addr=0x20, 0x4e23, 0x2, 0x1, 0x7, 0x79}}, 0x44) shutdown(r1, 0x0) getsockname(r0, &(0x7f00000001c0)=@l2, &(0x7f0000000040)=0x80) sendto$inet6(r1, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="c7", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) close(r0) [ 397.790936] try_charge+0xc43/0x1690 [ 397.799643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.799664] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 397.799676] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 397.799692] ? lock_downgrade+0x900/0x900 [ 397.799705] ? lock_release+0x970/0x970 [ 397.799721] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 397.799741] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 397.808357] ? kasan_check_write+0x14/0x20 [ 397.808380] ? get_mem_cgroup_from_mm+0x206/0x440 13:17:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)="696f2e77656967687400aad17e0aac0cbbd7aca0b97a762f443011da3936865b4a2eb36fe60428a59fa3cf29de207ca15c7ad7a4ad3d78d5380616746ef9b070116a9bab01cd62cb7dbca4a546857013062a7741099eba1e03ddd3d05ea4d0679c81aee5f506e3d6ac6994d1449e5356d0e8c3084814041a21927ad5", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2009) [ 397.808395] ? mem_cgroup_can_attach+0x580/0x580 [ 397.808417] ? __might_sleep+0x95/0x190 [ 397.808438] mem_cgroup_try_charge+0x5ea/0xe10 [ 397.918683] ? mem_cgroup_protected+0xa60/0xa60 [ 397.923372] ? mark_held_locks+0x130/0x130 [ 397.927630] ? css_next_child+0x1c3/0x620 [ 397.931805] ? mark_held_locks+0x130/0x130 [ 397.936064] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 397.941654] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 397.946605] wp_page_copy+0x46c/0x14f0 [ 397.950513] ? follow_pfn+0x2e0/0x2e0 [ 397.954330] ? mem_cgroup_iter+0x514/0x1160 [ 397.958683] ? do_wp_page+0x76c/0x1390 [ 397.962671] ? lock_downgrade+0x900/0x900 [ 397.966841] ? kasan_check_read+0x11/0x20 [ 397.971007] ? do_raw_spin_unlock+0xa7/0x2f0 [ 397.975440] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 397.980034] ? __pte_alloc_kernel+0x220/0x220 [ 397.984541] ? pvclock_read_flags+0x160/0x160 [ 397.989053] do_wp_page+0x774/0x1390 [ 397.992798] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 397.997482] ? __handle_mm_fault+0x1e6c/0x53e0 [ 398.002090] ? lock_downgrade+0x900/0x900 [ 398.006249] ? trace_hardirqs_on+0xbd/0x310 [ 398.010589] ? lock_release+0x970/0x970 [ 398.014583] ? kasan_check_read+0x11/0x20 [ 398.018742] ? pmd_val+0x88/0x100 [ 398.022204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.027755] ? kasan_check_write+0x14/0x20 [ 398.032014] ? do_raw_spin_lock+0xc1/0x200 [ 398.036272] __handle_mm_fault+0x2c60/0x53e0 [ 398.040710] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 398.045580] ? shrink_node+0x16b0/0x16b0 [ 398.049663] ? lock_acquire+0x1ed/0x520 [ 398.053656] ? handle_mm_fault+0x42a/0xc70 [ 398.057909] ? lock_downgrade+0x900/0x900 [ 398.062073] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 398.067883] ? __do_page_fault+0x67d/0xed0 [ 398.067899] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 398.067913] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.067928] ? check_preemption_disabled+0x48/0x200 [ 398.067948] handle_mm_fault+0x54f/0xc70 [ 398.067976] ? __handle_mm_fault+0x53e0/0x53e0 [ 398.077660] ? find_vma+0x34/0x190 [ 398.077678] __do_page_fault+0x67d/0xed0 [ 398.077694] ? mm_fault_error+0x380/0x380 [ 398.077707] ? trace_hardirqs_on+0x310/0x310 [ 398.077722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.077733] ? trace_hardirqs_on+0x310/0x310 [ 398.077749] do_page_fault+0xf2/0x7e0 [ 398.077764] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.077781] ? vmalloc_sync_all+0x30/0x30 [ 398.104572] ? error_entry+0x70/0xd0 [ 398.104589] ? trace_hardirqs_off_caller+0xbb/0x310 [ 398.104608] ? trace_hardirqs_on_caller+0xc0/0x310 [ 398.113166] ? syscall_return_slowpath+0x5e0/0x5e0 [ 398.113180] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.113201] ? trace_hardirqs_on_caller+0x310/0x310 [ 398.164735] ? trace_hardirqs_off+0x310/0x310 [ 398.169237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.174776] ? prepare_exit_to_usermode+0x291/0x3b0 [ 398.179795] ? page_fault+0x8/0x30 [ 398.183326] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.188171] ? page_fault+0x8/0x30 [ 398.191712] page_fault+0x1e/0x30 [ 398.195148] RIP: 0033:0x40c4f0 [ 398.198330] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 7a ce 4b 00 31 c0 e8 98 53 ff ff 31 ff e8 71 50 ff ff 90 <89> 3c b5 00 00 72 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 12 3b 63 00 [ 398.217246] RSP: 002b:0000000000a3fb30 EFLAGS: 00010246 [ 398.222617] RAX: 00000000c372baf2 RBX: 00000000821d3563 RCX: 0000001b32e20000 [ 398.229890] RDX: 0000000000000000 RSI: 0000000000001af2 RDI: ffffffffc372baf2 [ 398.237150] RBP: 0000000000000005 R08: 00000000c372baf2 R09: 00000000c372baf6 [ 398.244406] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf00 [ 398.251660] R13: 0000000080000000 R14: 00007f6bf1088008 R15: 0000000000000005 [ 398.259841] Task in /syz2 killed as a result of limit of /syz2 [ 398.265857] memory: usage 204800kB, limit 204800kB, failcnt 1973 [ 398.272082] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.279766] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.285925] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:144KB inactive_file:0KB active_file:0KB unevictable:0KB [ 398.305908] Memory cgroup out of memory: Kill process 23390 (syz-executor2) score 161 or sacrifice child [ 398.315819] Killed process 23390 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 398.327002] oom_reaper: reaped process 23390 (syz-executor2), now anon-rss:0kB, file-rss:32772kB, shmem-rss:0kB 13:17:48 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{0x77359400}, 0x17, 0xf4, 0x1}, {{}, 0x14, 0x8, 0x2e}, {{0x0, 0x2710}, 0x1f, 0x4, 0x4d5}, {{r4, r5/1000+10000}, 0x3, 0x8, 0x7fffffff}], 0x60) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 13:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x56a76ffeff6aa560, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x63c1ee5afae7bd19) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x67) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) fcntl$addseals(r1, 0x409, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x400000000f000) 13:17:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf0}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') splice(r0, &(0x7f0000000040), r0, &(0x7f0000000140)=0x14, 0x7, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0x9, 0x0, 0x1}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r2}, 0x2c) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) fsetxattr(r1, &(0x7f0000000180)=@random={'osx.', 'eth1\x00'}, &(0x7f00000001c0)='em0em1}\'/em0.\x00', 0xe, 0x2) 13:17:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x3f000000, @empty, [0x0, 0x2000000]}, 0x6) [ 398.465947] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 398.497482] syz-executor2 cpuset=syz2 mems_allowed=0 [ 398.502709] CPU: 1 PID: 23440 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 398.510076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.519515] Call Trace: [ 398.522114] dump_stack+0x1c4/0x2b4 [ 398.525748] ? dump_stack_print_info.cold.2+0x52/0x52 [ 398.530974] ? percpu_ref_put_many+0x13e/0x260 [ 398.535584] dump_header+0x27b/0xf72 [ 398.539311] ? mark_held_locks+0x130/0x130 [ 398.543551] ? pagefault_out_of_memory+0x197/0x197 [ 398.548492] ? mark_held_locks+0x130/0x130 [ 398.552724] ? rcu_read_unlock+0x16/0x60 [ 398.556789] ? lock_downgrade+0x900/0x900 [ 398.560947] ? shrink_active_list+0x1c20/0x1c20 [ 398.565646] ? mark_held_locks+0x130/0x130 [ 398.569890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.575443] ? css_next_child+0x1c3/0x620 [ 398.579612] ? find_lock_task_mm+0x22e/0x4d0 [ 398.584039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.589590] ? task_will_free_mem+0x239/0xb30 [ 398.594108] ? ___ratelimit+0x36f/0x655 [ 398.598094] ? lock_downgrade+0x900/0x900 [ 398.602252] ? trace_hardirqs_on+0xbd/0x310 [ 398.606579] ? kasan_check_read+0x11/0x20 [ 398.610735] ? ___ratelimit+0x36f/0x655 [ 398.614712] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 398.620166] ? trace_hardirqs_on+0x310/0x310 [ 398.624579] ? lock_downgrade+0x900/0x900 [ 398.628733] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 398.633848] ? ___ratelimit+0xaa/0x655 [ 398.637743] ? idr_get_free+0xec0/0xec0 [ 398.641714] ? kasan_check_write+0x14/0x20 [ 398.645996] ? do_raw_spin_lock+0xc1/0x200 [ 398.650236] oom_kill_process.cold.27+0x10/0x903 [ 398.654997] ? kasan_check_write+0x14/0x20 [ 398.659235] ? do_raw_spin_lock+0xc1/0x200 [ 398.663469] ? oom_evaluate_task+0x540/0x540 [ 398.667882] ? cgroup_procs_next+0x70/0x70 [ 398.672115] ? _raw_spin_unlock_irq+0x60/0x80 [ 398.676613] ? oom_badness+0xaa0/0xaa0 [ 398.680501] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 398.685257] ? mem_cgroup_iter_break+0x30/0x30 [ 398.689844] ? cgroup_file_notify+0x226/0x2f0 [ 398.694342] out_of_memory+0xa84/0x1430 [ 398.698320] ? kasan_check_read+0x11/0x20 [ 398.702467] ? oom_killer_disable+0x3a0/0x3a0 [ 398.706977] ? kasan_check_write+0x14/0x20 [ 398.711216] ? do_raw_spin_lock+0xc1/0x200 [ 398.715459] mem_cgroup_out_of_memory+0x15e/0x210 [ 398.720304] ? memcg_memory_event+0x40/0x40 [ 398.724633] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 398.729389] ? page_counter_try_charge+0x1c1/0x220 [ 398.734321] try_charge+0xc43/0x1690 [ 398.738051] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 398.743156] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 398.749213] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 398.754057] ? lock_downgrade+0x900/0x900 [ 398.758203] ? lock_release+0x970/0x970 [ 398.762181] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 398.767987] ? rcu_sched_force_quiescent_state+0x20/0x20 [ 398.773437] ? kasan_check_write+0x14/0x20 [ 398.777680] ? get_mem_cgroup_from_mm+0x206/0x440 [ 398.782523] ? mem_cgroup_can_attach+0x580/0x580 [ 398.787283] ? __might_sleep+0x95/0x190 [ 398.791262] mem_cgroup_try_charge+0x5ea/0xe10 [ 398.795842] ? mem_cgroup_protected+0xa60/0xa60 [ 398.800511] ? mark_held_locks+0x130/0x130 [ 398.804750] ? css_next_child+0x1c3/0x620 [ 398.808897] ? mark_held_locks+0x130/0x130 [ 398.813131] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 398.818678] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 398.823607] wp_page_copy+0x46c/0x14f0 [ 398.827495] ? follow_pfn+0x2e0/0x2e0 [ 398.831296] ? mem_cgroup_iter+0x514/0x1160 [ 398.835617] ? do_wp_page+0x76c/0x1390 [ 398.839602] ? lock_downgrade+0x900/0x900 [ 398.843754] ? kasan_check_read+0x11/0x20 [ 398.847898] ? do_raw_spin_unlock+0xa7/0x2f0 [ 398.852337] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 398.856920] ? __pte_alloc_kernel+0x220/0x220 [ 398.861417] ? pvclock_read_flags+0x160/0x160 [ 398.865919] do_wp_page+0x774/0x1390 [ 398.869639] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 398.874312] ? __handle_mm_fault+0x1e6c/0x53e0 [ 398.878897] ? lock_downgrade+0x900/0x900 [ 398.883049] ? trace_hardirqs_on+0xbd/0x310 [ 398.887379] ? lock_release+0x970/0x970 [ 398.891378] ? kasan_check_read+0x11/0x20 [ 398.895531] ? pmd_val+0x88/0x100 [ 398.898992] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.904529] ? kasan_check_write+0x14/0x20 [ 398.908770] ? do_raw_spin_lock+0xc1/0x200 [ 398.913018] __handle_mm_fault+0x2c60/0x53e0 [ 398.917440] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 398.922300] ? shrink_node+0x16b0/0x16b0 [ 398.926372] ? lock_acquire+0x1ed/0x520 [ 398.930351] ? handle_mm_fault+0x42a/0xc70 [ 398.934585] ? lock_downgrade+0x900/0x900 [ 398.938745] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 398.944561] ? __do_page_fault+0x67d/0xed0 [ 398.948812] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 398.954262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.959803] ? check_preemption_disabled+0x48/0x200 [ 398.964826] handle_mm_fault+0x54f/0xc70 [ 398.968892] ? __handle_mm_fault+0x53e0/0x53e0 [ 398.973472] ? find_vma+0x34/0x190 [ 398.977012] __do_page_fault+0x67d/0xed0 [ 398.981076] ? mm_fault_error+0x380/0x380 [ 398.985232] ? trace_hardirqs_on+0x310/0x310 [ 398.989644] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.995017] ? trace_hardirqs_on+0x310/0x310 [ 398.999429] do_page_fault+0xf2/0x7e0 [ 399.003233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.008776] ? vmalloc_sync_all+0x30/0x30 [ 399.012937] ? error_entry+0x70/0xd0 [ 399.016665] ? trace_hardirqs_off_caller+0xbb/0x310 [ 399.021683] ? trace_hardirqs_on_caller+0xc0/0x310 [ 399.026611] ? syscall_return_slowpath+0x5e0/0x5e0 [ 399.031541] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.036391] ? trace_hardirqs_on_caller+0x310/0x310 [ 399.041415] ? trace_hardirqs_off+0x310/0x310 [ 399.045917] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.051476] ? prepare_exit_to_usermode+0x291/0x3b0 [ 399.056504] ? page_fault+0x8/0x30 [ 399.060053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.065000] ? page_fault+0x8/0x30 [ 399.068558] page_fault+0x1e/0x30 [ 399.072042] RIP: 0033:0x40c4f0 [ 399.075236] Code: 89 f8 49 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 74 ff ff ff bf 7a ce 4b 00 31 c0 e8 98 53 ff ff 31 ff e8 71 50 ff ff 90 <89> 3c b5 00 00 72 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 12 3b 63 00 [ 399.094155] RSP: 002b:0000000000a3fb30 EFLAGS: 00010246 [ 399.099520] RAX: 00000000c372baf2 RBX: 00000000821d3563 RCX: 0000001b32e20000 [ 399.106819] RDX: 0000000000000000 RSI: 0000000000001af2 RDI: ffffffffc372baf2 13:17:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:49 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x10000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @rand_addr}, &(0x7f0000000300)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@remote, @empty, @loopback, 0x7, 0x2, 0xffff, 0x400, 0x2, 0x42000015, r2}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_mreqsrc(r3, 0x0, 0x0, &(0x7f00000000c0)={@local, @broadcast, @multicast1}, &(0x7f0000000100)=0xc) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000440)={0x7fffffff, 0xfffffffffffffffb, 0x7fff}) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80800040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@mpls_getroute={0x64, 0x1a, 0x308, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x10, 0x0, 0x1, 0xfc, 0x3, 0x0, 0xb, 0x100}, [@RTA_DST={0x14, 0x1, [{0xa36, 0x5, 0x4, 0x559}, {0xd1, 0x5, 0x6311, 0x6}, {0xffffffffffffc0ff, 0x400, 0x4, 0x4}, {0x1, 0x0, 0x9, 0x4}]}, @RTA_OIF={0x8, 0x4, r2}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x800}, @RTA_OIF={0x8, 0x4, r2}, @RTA_DST={0x14, 0x1, [{0x4, 0x0, 0xd, 0x824f}, {0x5, 0x80000000, 0x81, 0x80000001}, {0x0, 0x9, 0x0, 0x9}, {0x8, 0x401, 0x7, 0x2}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xffffffffffffffc1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xde65, 0xfffffffffffffffb}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r4, 0x543a3597, 0x1, 0x4}, &(0x7f0000000500)=0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000002c0), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$apparmor_current(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="6368616e6765686168ab303030806e57aa760452232ea367cabdf63030"], 0x199) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30) prlimit64(r5, 0xe, &(0x7f00000005c0)={0x16ac, 0x40}, &(0x7f0000000600)) [ 399.114097] RBP: 0000000000000005 R08: 00000000c372baf2 R09: 00000000c372baf6 [ 399.121363] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf00 [ 399.128642] R13: 0000000080000000 R14: 00007f6bf1088008 R15: 0000000000000005 13:17:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x10aaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 399.162529] Task in /syz2 killed as a result of limit of /syz2 [ 399.169204] memory: usage 199632kB, limit 204800kB, failcnt 2006 [ 399.200593] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:49 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1c, 0x20000) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30}, 0x30) getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmp.s\x00', 0x0, &(0x7f0000000300)='&') readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) gettid() r3 = socket$netlink(0x10, 0x3, 0x3) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1, 0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 13:17:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6c}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 399.214294] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 399.222445] Memory cgroup stats for /syz2: cache:8KB rss:200KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:144KB inactive_file:0KB active_file:0KB unevictable:0KB [ 399.251462] Memory cgroup out of memory: Kill process 23440 (syz-executor2) score 161 or sacrifice child 13:17:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7400000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 399.291866] Killed process 23440 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 399.318949] oom_reaper: reaped process 23440 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB [ 399.362338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:49 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800010000000008) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c30000000130000108000"}) r3 = socket(0x3, 0x80006, 0x3a80af11) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000380)={0x2f, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 'wlc\x00', 0x0, 0x1, 0x27}, 0x2c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000300), 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f00000003c0)={0xf002, 0x0, 0xfff, 0x12, 0x8}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x5}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="66bad004ed66baf80cb83eab0286ef66bafc0c66edb9800000c00f3235000100000f30b9800000c00f3235001000000f30c441b95fa1c7828137c744240085ae0000c74424023566de7ac7442406000000000f01142441da93006000000fc7afa6360000c462ad3b8b570000000f20d835200000000f22d8", 0x78}], 0x1, 0x52, &(0x7f0000000100)=[@cr0], 0x1) 13:17:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1000000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x6) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="ffec"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:17:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x40020000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:49 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x500) r1 = signalfd(0xffffffffffffff9c, &(0x7f0000002680)={0x4}, 0x8) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = userfaultfd(0x80800) r4 = syz_open_dev$amidi(&(0x7f0000002700)='/dev/amidi#\x00', 0x4, 0x6000) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = eventfd2(0x6, 0x1) r7 = timerfd_create(0x0, 0x80000) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000002740)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002780)='cgroup.stat\x00', 0x0, 0x0) r10 = accept4(0xffffffffffffff9c, &(0x7f00000027c0)=@nl=@proc, &(0x7f0000002840)=0x80, 0x80800) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$unix(r0, &(0x7f0000002900)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f0000000140)="be3349e9524b2ebb00cd52107161308d2e8f7460ff6e6eba82cfe3d5916903daf762887f4b5206af81adaa86b5518b538f528262c78c0338cfdbb099522d6ae1f88292096a2c37cfa3f690dc45375a48fe5bb7ca77b3402a99886b3c3ef77e6ca73780b018542888a94085139e3ff84be099c0c26ba8df968250051594a0da98a62fe48d210649ff6861357c791bb5805d835acd3d22c20fd6de5bc6601d2a6a64d58400bb224bc98d4b67373fd9d069d1723b27494927b442ae584ab6716f1a94ddd93451ddfac33661eeff5f1bce48edbbdc86edad0e06e69c2d9cdfd0fde7e366e3fcdd5a00dfdc601cd6792865431605ab6b45902138a9f2", 0xfa}, {&(0x7f0000000240)="cfa95133d334f576b27894f98657bdf63a971ba5c41f676fac130a124473c98f5914b3d5a689a395d7fd7f10414825cbef5bd97baf82795741abcbfe5b8c0b6a90b43f194a8a27f1ce1e37dc7354b5", 0x4f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="b705dc0a4b11faa653e69163ea1310b5f5d0a7ce695bf6a456f9fcad2678b367ce403c7a9684f75472e6c59ee82999a89ba615d5f4614c5d1ca67600128a4142f2a9af75b66a5f4469f1785d238ab40033a7885d160fff173a19c01e2a75dd486eb5ad8a808caffe5d557fc2eac0adb4245fef87a99bf16d9313a4a7fe7d78f3345b0f9891248bf97e3b9cd71dd126cbe1b4f9ae896d4db7ffa167bd870e1122dcb30bf295a0", 0xa6}, {&(0x7f0000001380)="352d2cf6c8047df8b71e781aef444f74c4038ddd89aba2a7a53123f3aeaba5c159c9a5944004fd106a59436bd3c25c69485b5602f3dfee09ce0f0504b163e471fe3d3acf590741f25e879a83df383fa19e3bf989eea72567c4fddf0440a7ae7103602d3282deacfb789235d61714a3e5b709392a9a37eb0cf3eaeeba00ffbffde86f97fa3bbe4e0c7afa37a7e431e59f588f1ff51ef5cef31086446270682640e031", 0xa2}, {&(0x7f0000001440)="110ed33ad0802f17ca9526a1271e25850985e60e0d4be373cad1983c514bbac072cebae8966b4bb12a71cff0f3b83d33ae", 0x31}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="cebcfa8f2624d1c27ff230b5b9df81ab65f0655d71c88ba37d21dd6a61d5477cc3be77f440fcb345a0cc55c36a0f225d9d867a74cbac2bd6076415c6", 0x3c}, {&(0x7f00000024c0)="2a5e3a47710e213ace9aab6391d2c1d28f32a7585bd836da2242bcad41d46883b2674f9aceef2e710a29ee0cdebc21b9dad7d883390ca721a7d7596985c2154808e5acffd333b770507cb71e91ef95a8a7360414d363b13b19b4f3438a48b04cf5b47d6d34c25aad786f8a0acb86e1791d1d75a8246007e6e8c06154046b07140edf5101f6de7fb4e919b29ad274e3026a4174fc04f250d81e6e3b4bfcabe85d841c9e743867808eedcdcadaa5d648e537699230cb2eb4e44e65daf217d3e6073c5056208baaa6742a3a3431bde8d6bc9b7cb99be43887448e8699268941f9d9f860561a97", 0xe5}], 0x9, &(0x7f0000002880)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x28, 0x1, 0x1, [r2, r3, r4, r5, r6]}, @rights={0x28, 0x1, 0x1, [r7, r8, r9, r10, r11]}], 0x68, 0x80}, 0x20008000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x1000003bf) unlink(&(0x7f0000000040)='./file0\x00') [ 399.414457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:49 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x1400000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:49 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x21, &(0x7f0000000ec0)={'NETMAP\x00'}, &(0x7f0000000f00)=0x1e) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7fff, 0x4000) socket$inet6(0xa, 0x800, 0x2) sendto$inet(r1, &(0x7f0000000f40)="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", 0x1000, 0x40841, &(0x7f0000000240)={0x2, 0x4e22}, 0x10) socket$inet6_sctp(0xa, 0x80000005, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8000, @empty, 0x1f}}, 0x4, 0x9}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x9e8, 0x8}, &(0x7f0000000200)=0x8) [ 399.505252] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 399.535852] syz-executor2 cpuset=syz2 mems_allowed=0 [ 399.559188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 399.565913] CPU: 0 PID: 23496 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 399.575004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.584390] Call Trace: [ 399.585711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 399.587007] dump_stack+0x1c4/0x2b4 [ 399.587027] ? dump_stack_print_info.cold.2+0x52/0x52 [ 399.587049] ? mark_held_locks+0x130/0x130 [ 399.608488] ? mark_held_locks+0x130/0x130 [ 399.612734] dump_header+0x27b/0xf72 [ 399.616468] ? pagefault_out_of_memory+0x197/0x197 [ 399.621421] ? mark_held_locks+0x130/0x130 [ 399.625669] ? rcu_read_unlock+0x16/0x60 [ 399.629747] ? lock_downgrade+0x900/0x900 [ 399.633915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.639508] ? css_next_child+0x1c3/0x620 [ 399.643672] ? find_lock_task_mm+0x22e/0x4d0 [ 399.648091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.648106] ? task_will_free_mem+0x239/0xb30 [ 399.648128] ? ___ratelimit+0x36f/0x655 [ 399.662127] ? lock_downgrade+0x900/0x900 [ 399.662148] ? trace_hardirqs_on+0xbd/0x310 [ 399.662167] ? kasan_check_read+0x11/0x20 [ 399.674776] ? ___ratelimit+0x36f/0x655 [ 399.678778] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 399.684249] ? trace_hardirqs_on+0x310/0x310 [ 399.686316] Trying to set illegal importance in message [ 399.688676] ? lock_downgrade+0x900/0x900 [ 399.688696] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 399.688713] ? ___ratelimit+0xaa/0x655 [ 399.688735] ? idr_get_free+0xec0/0xec0 [ 399.711196] ? kasan_check_write+0x14/0x20 [ 399.715451] ? do_raw_spin_lock+0xc1/0x200 [ 399.719705] oom_kill_process.cold.27+0x10/0x903 [ 399.724481] ? kasan_check_write+0x14/0x20 [ 399.728729] ? do_raw_spin_lock+0xc1/0x200 [ 399.728747] ? oom_evaluate_task+0x540/0x540 [ 399.728772] ? cgroup_procs_next+0x70/0x70 [ 399.741656] ? _raw_spin_unlock_irq+0x60/0x80 [ 399.741672] ? oom_badness+0xaa0/0xaa0 [ 399.741693] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 399.754828] ? mem_cgroup_iter_break+0x30/0x30 [ 399.759430] ? cgroup_file_notify+0x226/0x2f0 [ 399.759450] out_of_memory+0xa84/0x1430 [ 399.767934] ? kasan_check_read+0x11/0x20 [ 399.772111] ? oom_killer_disable+0x3a0/0x3a0 [ 399.776616] ? kasan_check_write+0x14/0x20 [ 399.780861] ? do_raw_spin_lock+0xc1/0x200 [ 399.785111] mem_cgroup_out_of_memory+0x15e/0x210 [ 399.789993] ? memcg_memory_event+0x40/0x40 [ 399.794339] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 399.799301] ? page_counter_try_charge+0x1c1/0x220 [ 399.804257] try_charge+0xc43/0x1690 [ 399.808005] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 399.814071] ? tcp_sendmsg+0x2f/0x50 [ 399.817788] ? sock_sendmsg+0xd5/0x120 [ 399.817801] ? __sys_sendto+0x3d7/0x670 [ 399.817814] ? __x64_sys_sendto+0xe1/0x1a0 [ 399.817829] ? do_syscall_64+0x1b9/0x820 [ 399.817859] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.839340] ? fs_reclaim_acquire+0x20/0x20 [ 399.843677] ? lock_downgrade+0x900/0x900 [ 399.847836] ? lock_downgrade+0x900/0x900 [ 399.852016] ? ___might_sleep+0x1ed/0x300 [ 399.856181] ? trace_hardirqs_on+0xbd/0x310 13:17:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8915, &(0x7f0000000000)="153f6234488dd25d560a913d2e6532131cee6d0aea5c6070") r1 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r1, 0x10f, 0x7f, &(0x7f00000000c0)="930d1baa", 0x4) 13:17:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x19, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:49 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000080000000000000000000000c4d981ae211e6951be7b1bc02e909e2ee5957499456551b73a609f917c546bec49b9e69ddc5fad1238fcfcc5f89b566e79244f1aee5f35d96b077db1fa4a53e597f8d40220b8647014a95187ffcaf64096d909263a8a2849f6284631bbee8a9ebe547bfa4d4a277c32291ab53af4a7cd56d7de01e30a45cc4e532300a6e0e1304795886bce736d74ea0479e7ec7740d340"], 0x20000108}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000800)={&(0x7f00000006c0), 0x10, &(0x7f00000007c0)={&(0x7f0000000740)={0x5, 0x800, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "60c5ccffa454a890d2ec450e6abaa884541ed0e2f1ac30d2a17c29c9a2978af3fcec4fc145068250bca3ce15790eb7ed09a5cf0029adf82777d2d0a7ddcb3ea4"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000000000000000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="00000000010000000000000000000000c61f2323d752075b"], 0x48}}, 0x0) 13:17:49 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x21, 0x109042) write$sndseq(r1, &(0x7f00000000c0)=[{0x7, 0x7, 0x9, 0x5, @tick=0x2f8, {0x9, 0x7}, {0x8, 0x75}, @time=@time={0x0, 0x1c9c380}}], 0x30) bpf$PROG_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=@raw, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xbf, &(0x7f00000002c0)=""/191}, 0x48) wait4(r0, &(0x7f0000000040), 0x1000000, &(0x7f0000000140)) socket$can_bcm(0x1d, 0x2, 0x2) 13:17:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x8) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) epoll_wait(r3, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) r5 = getpid() getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r6, 0xd26f}, 0x8) timer_create(0x4, &(0x7f0000000380)={0x0, 0x1f, 0x1, @tid=r5}, &(0x7f00000003c0)=0x0) timer_getoverrun(r7) setpriority(0x3, r5, 0x2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) [ 399.860506] ? lock_downgrade+0x900/0x900 [ 399.864674] ? __kmalloc_node_track_caller+0x33/0x70 [ 399.869783] ? kasan_unpoison_shadow+0x35/0x50 [ 399.874392] ? __sk_mem_raise_allocated+0x642/0x1800 [ 399.879512] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 399.885004] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.890564] ? check_preemption_disabled+0x48/0x200 [ 399.895603] mem_cgroup_charge_skmem+0x1e4/0x390 [ 399.900392] ? mem_cgroup_sk_free+0x90/0x90 [ 399.904739] __sk_mem_raise_allocated+0x642/0x1800 [ 399.909687] ? sk_busy_loop_end+0x1c0/0x1c0 [ 399.914013] ? arch_local_save_flags+0x40/0x40 [ 399.918602] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 399.923635] ? skb_page_frag_refill+0x1eb/0x6a0 [ 399.928319] ? sock_kzfree_s+0x60/0x60 [ 399.932207] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 399.937224] ? sk_stream_alloc_skb+0x34b/0x970 [ 399.941820] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 399.946876] ? skb_entail+0x618/0x8c0 [ 399.950674] ? tcp_rate_check_app_limited+0x121/0x460 [ 399.955868] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 399.960541] __sk_mem_schedule+0x6d/0xe0 [ 399.964605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.970152] tcp_sendmsg_locked+0x1c86/0x3f00 [ 399.974653] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 399.979854] ? tcp_sendpage+0x60/0x60 [ 399.983652] ? call_rcu+0x12/0x20 [ 399.987112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.992652] ? aa_label_sk_perm+0x46d/0x8e0 [ 399.996984] ? aa_profile_af_perm+0x410/0x410 [ 400.001484] ? ksys_dup3+0x680/0x680 [ 400.005200] ? lock_acquire+0x1ed/0x520 [ 400.009171] ? tcp_sendmsg+0x21/0x50 [ 400.012886] ? trace_hardirqs_on+0xbd/0x310 [ 400.017204] ? lock_release+0x970/0x970 [ 400.021180] ? lock_sock_nested+0xe2/0x120 [ 400.025419] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 400.030867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.036402] ? check_preemption_disabled+0x48/0x200 [ 400.041417] ? lock_sock_nested+0x9a/0x120 [ 400.045648] ? lock_sock_nested+0x9a/0x120 [ 400.049883] ? __local_bh_enable_ip+0x160/0x260 [ 400.054553] tcp_sendmsg+0x2f/0x50 [ 400.058124] inet_sendmsg+0x1a1/0x690 [ 400.061930] ? ipip_gro_receive+0x100/0x100 [ 400.066261] ? apparmor_socket_sendmsg+0x29/0x30 [ 400.071023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.076564] ? security_socket_sendmsg+0x94/0xc0 [ 400.081332] ? ipip_gro_receive+0x100/0x100 [ 400.085665] sock_sendmsg+0xd5/0x120 [ 400.089377] __sys_sendto+0x3d7/0x670 [ 400.093187] ? __ia32_sys_getpeername+0xb0/0xb0 [ 400.097851] ? lock_release+0x970/0x970 [ 400.101826] ? arch_local_save_flags+0x40/0x40 [ 400.106457] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 400.111905] ? aa_af_perm+0x5a0/0x5a0 [ 400.115720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.121256] ? put_timespec64+0x10f/0x1b0 [ 400.125410] ? nsecs_to_jiffies+0x30/0x30 [ 400.129565] ? trace_hardirqs_on+0xbd/0x310 [ 400.133887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.139421] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.144786] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 400.150239] __x64_sys_sendto+0xe1/0x1a0 [ 400.154314] do_syscall_64+0x1b9/0x820 [ 400.158200] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 400.163570] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.168500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.173346] ? trace_hardirqs_on_caller+0x310/0x310 [ 400.178362] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 400.183409] ? prepare_exit_to_usermode+0x291/0x3b0 [ 400.188434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.193305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.198497] RIP: 0033:0x457579 [ 400.201690] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.220592] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 400.228451] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 400.235718] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 400.242993] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 400.250258] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 400.257522] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 400.293463] Task in /syz2 killed as a result of limit of /syz2 [ 400.299937] memory: usage 204792kB, limit 204800kB, failcnt 2025 [ 400.306182] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.313389] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.319704] Memory cgroup stats for /syz2: cache:8KB rss:4216KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 400.340311] Memory cgroup out of memory: Kill process 23495 (syz-executor2) score 181 or sacrifice child [ 400.350237] Killed process 23495 (syz-executor2) total-vm:70472kB, anon-rss:4212kB, file-rss:32768kB, shmem-rss:0kB [ 400.363291] oom_reaper: reaped process 23495 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 13:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1d, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:50 executing program 3: futex(&(0x7f00000000c0), 0x5, 0x1, &(0x7f00000001c0), &(0x7f0000000280), 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)="6f6f6d5f61646a00000026e7080900040000") clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {r3, r4/1000+10000}}) sendfile(r2, r1, &(0x7f0000000240)=0x5d, 0x239ffffffffffff) 13:17:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x3, 0x40, 0x4, 0x732f, 0x6, 0x9, 0x200, {0x0, @in={{0x2, 0x4e21, @rand_addr}}, 0x6, 0x0, 0xfc00000, 0xf1d, 0x1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x0, 0x7ff}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r1, 0x5, 0x10000}, 0xc) preadv(r0, &(0x7f0000000480), 0x100000000000006a, 0x0) 13:17:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x52030000, @empty, [0x0, 0x2000000]}, 0x6) [ 400.499891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 400.525255] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 400.540143] syz-executor3 (23559): /proc/23558/oom_adj is deprecated, please use /proc/23558/oom_score_adj instead. [ 400.558461] syz-executor2 cpuset=syz2 mems_allowed=0 [ 400.563625] CPU: 1 PID: 23567 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 400.570992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.570999] Call Trace: [ 400.571026] dump_stack+0x1c4/0x2b4 [ 400.571045] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.571066] ? mark_held_locks+0x130/0x130 [ 400.571082] ? mark_held_locks+0x130/0x130 [ 400.571100] dump_header+0x27b/0xf72 [ 400.571124] ? pagefault_out_of_memory+0x197/0x197 [ 400.571144] ? mark_held_locks+0x130/0x130 [ 400.571157] ? rcu_read_unlock+0x16/0x60 [ 400.571178] ? lock_downgrade+0x900/0x900 [ 400.621417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.626972] ? css_next_child+0x1c3/0x620 [ 400.631128] ? find_lock_task_mm+0x22e/0x4d0 [ 400.635550] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.641096] ? task_will_free_mem+0x239/0xb30 [ 400.645615] ? ___ratelimit+0x36f/0x655 13:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xa8aaaafffeaaaa10, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xaaaaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:50 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000000)='./file0\x00'}, 0x10) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x4e24}, 'veth1_to_bond\x00'}) ustat(0x5, &(0x7f0000000240)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) fremovexattr(r0, &(0x7f0000000280)=@known='security.capability\x00') [ 400.649596] ? lock_downgrade+0x900/0x900 [ 400.653761] ? trace_hardirqs_on+0xbd/0x310 [ 400.658121] ? kasan_check_read+0x11/0x20 [ 400.658137] ? ___ratelimit+0x36f/0x655 [ 400.658151] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 400.658164] ? trace_hardirqs_on+0x310/0x310 [ 400.658177] ? lock_downgrade+0x900/0x900 [ 400.658193] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 400.658206] ? ___ratelimit+0xaa/0x655 [ 400.658219] ? idr_get_free+0xec0/0xec0 [ 400.658230] ? kasan_check_write+0x14/0x20 [ 400.658243] ? do_raw_spin_lock+0xc1/0x200 [ 400.658260] oom_kill_process.cold.27+0x10/0x903 [ 400.658274] ? kasan_check_write+0x14/0x20 [ 400.658287] ? do_raw_spin_lock+0xc1/0x200 [ 400.658304] ? oom_evaluate_task+0x540/0x540 [ 400.658321] ? cgroup_procs_next+0x70/0x70 [ 400.658335] ? _raw_spin_unlock_irq+0x60/0x80 [ 400.658347] ? oom_badness+0xaa0/0xaa0 [ 400.658370] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 400.666486] ? mem_cgroup_iter_break+0x30/0x30 [ 400.666509] ? cgroup_file_notify+0x226/0x2f0 [ 400.666527] out_of_memory+0xa84/0x1430 [ 400.732110] ? kasan_check_read+0x11/0x20 [ 400.732129] ? oom_killer_disable+0x3a0/0x3a0 [ 400.732142] ? kasan_check_write+0x14/0x20 [ 400.732162] ? do_raw_spin_lock+0xc1/0x200 [ 400.746176] mem_cgroup_out_of_memory+0x15e/0x210 [ 400.746196] ? memcg_memory_event+0x40/0x40 [ 400.755138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 400.758791] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 400.758818] ? page_counter_try_charge+0x1c1/0x220 [ 400.758834] try_charge+0xc43/0x1690 13:17:50 executing program 3: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'teql0\x00', r2}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0xe00, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) [ 400.758860] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 400.804521] ? tcp_sendmsg+0x2f/0x50 [ 400.808241] ? sock_sendmsg+0xd5/0x120 [ 400.812140] ? __sys_sendto+0x3d7/0x670 [ 400.816122] ? __x64_sys_sendto+0xe1/0x1a0 [ 400.820365] ? do_syscall_64+0x1b9/0x820 [ 400.824439] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.829828] ? fs_reclaim_acquire+0x20/0x20 [ 400.834161] ? lock_downgrade+0x900/0x900 [ 400.838320] ? plist_check_head+0xea/0x150 [ 400.842566] ? ___might_sleep+0x1ed/0x300 [ 400.846734] ? trace_hardirqs_on+0xbd/0x310 13:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x5, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 400.851065] ? lock_downgrade+0x900/0x900 [ 400.855225] ? __kmalloc_node_track_caller+0x33/0x70 [ 400.860340] ? kasan_unpoison_shadow+0x35/0x50 [ 400.864955] ? __sk_mem_raise_allocated+0x642/0x1800 [ 400.870082] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 400.875542] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.881086] ? check_preemption_disabled+0x48/0x200 [ 400.886117] mem_cgroup_charge_skmem+0x1e4/0x390 [ 400.890878] ? mem_cgroup_sk_free+0x90/0x90 [ 400.895215] __sk_mem_raise_allocated+0x642/0x1800 13:17:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 400.900163] ? sk_busy_loop_end+0x1c0/0x1c0 [ 400.904492] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 400.910054] ? alloc_pages_current+0x114/0x210 [ 400.914653] ? skb_page_frag_refill+0x1eb/0x6a0 [ 400.919360] ? sock_kzfree_s+0x60/0x60 [ 400.923258] ? _copy_from_iter_full+0x2b3/0xd20 [ 400.927933] ? tcp_chrono_start+0x190/0x1e0 [ 400.932276] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 400.937314] ? tcp_rate_check_app_limited+0x121/0x460 [ 400.937327] ? iov_iter_advance+0x1460/0x1460 [ 400.937347] __sk_mem_schedule+0x6d/0xe0 [ 400.937362] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.937383] tcp_sendmsg_locked+0x1c86/0x3f00 [ 400.947077] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 400.966356] ? tcp_sendpage+0x60/0x60 [ 400.970180] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.975725] ? aa_label_sk_perm+0x46d/0x8e0 [ 400.980069] ? aa_profile_af_perm+0x410/0x410 [ 400.984576] ? ksys_dup3+0x680/0x680 [ 400.988305] ? lock_acquire+0x1ed/0x520 [ 400.992288] ? tcp_sendmsg+0x21/0x50 [ 400.996011] ? trace_hardirqs_on+0xbd/0x310 13:17:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10000, 0x402242) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000100)={{0xb4}, {0x7, 0x9}, 0x7, 0x2, 0x100000080000000}) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x7) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}) [ 401.000339] ? lock_release+0x970/0x970 [ 401.004325] ? lock_sock_nested+0xe2/0x120 [ 401.008576] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 401.014039] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.019591] ? check_preemption_disabled+0x48/0x200 [ 401.024616] ? lock_sock_nested+0x9a/0x120 [ 401.028863] ? lock_sock_nested+0x9a/0x120 [ 401.033106] ? __local_bh_enable_ip+0x160/0x260 [ 401.033127] tcp_sendmsg+0x2f/0x50 [ 401.033146] inet_sendmsg+0x1a1/0x690 [ 401.045145] ? ipip_gro_receive+0x100/0x100 [ 401.049476] ? apparmor_socket_sendmsg+0x29/0x30 [ 401.054240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.059787] ? security_socket_sendmsg+0x94/0xc0 [ 401.064566] ? ipip_gro_receive+0x100/0x100 [ 401.068895] sock_sendmsg+0xd5/0x120 [ 401.072608] __sys_sendto+0x3d7/0x670 [ 401.076411] ? __ia32_sys_getpeername+0xb0/0xb0 [ 401.081082] ? lock_release+0x970/0x970 [ 401.085057] ? arch_local_save_flags+0x40/0x40 [ 401.089648] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 401.095095] ? aa_af_perm+0x5a0/0x5a0 [ 401.098908] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 401.104444] ? put_timespec64+0x10f/0x1b0 [ 401.108602] ? nsecs_to_jiffies+0x30/0x30 [ 401.112756] ? trace_hardirqs_on+0xbd/0x310 [ 401.117079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.122620] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.127992] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 401.133451] __x64_sys_sendto+0xe1/0x1a0 [ 401.137520] do_syscall_64+0x1b9/0x820 [ 401.141410] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 401.146864] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.151802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.156646] ? trace_hardirqs_on_caller+0x310/0x310 [ 401.161662] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 401.166679] ? prepare_exit_to_usermode+0x291/0x3b0 [ 401.171697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.176542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.181734] RIP: 0033:0x457579 13:17:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000040)=""/42) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) setsockopt(r3, 0x0, 0x4, &(0x7f0000001380), 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x88) [ 401.184932] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.203859] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 401.211680] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 401.218946] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 401.226486] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 401.233756] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 401.241023] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff 13:17:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x60b31bfffedf24bd, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x11, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 401.371114] Task in /syz2 killed as a result of limit of /syz2 [ 401.389918] memory: usage 204792kB, limit 204800kB, failcnt 2045 [ 401.419467] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.432370] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 401.467106] Memory cgroup stats for /syz2: cache:8KB rss:4216KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4268KB inactive_file:0KB active_file:0KB unevictable:0KB [ 401.500560] Memory cgroup out of memory: Kill process 23566 (syz-executor2) score 181 or sacrifice child 13:17:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x9000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x48, 0x4, 0x2}}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0x24, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 13:17:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4c000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x900, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 401.511053] Killed process 23566 (syz-executor2) total-vm:70472kB, anon-rss:4212kB, file-rss:32768kB, shmem-rss:0kB [ 401.528670] oom_reaper: reaped process 23566 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:17:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x200000000, 0x80) r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800), 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0xfffffffffffffe30, 0xfa00, {&(0x7f00000008c0), 0xffffffffffffffff, 0x1}}, 0xfedf) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 13:17:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1a00000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 401.676791] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=2, oom_score_adj=0 [ 401.704432] syz-executor2 cpuset=syz2 mems_allowed=0 [ 401.728617] CPU: 0 PID: 23641 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 401.736023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.736029] Call Trace: [ 401.736055] dump_stack+0x1c4/0x2b4 [ 401.736074] ? dump_stack_print_info.cold.2+0x52/0x52 [ 401.736092] ? mark_held_locks+0x130/0x130 [ 401.736112] ? mark_held_locks+0x130/0x130 [ 401.765324] dump_header+0x27b/0xf72 [ 401.769058] ? pagefault_out_of_memory+0x197/0x197 [ 401.774022] ? mark_held_locks+0x130/0x130 [ 401.778262] ? rcu_read_unlock+0x16/0x60 [ 401.778278] ? lock_downgrade+0x900/0x900 [ 401.778306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.786508] ? css_next_child+0x1c3/0x620 [ 401.796161] ? find_lock_task_mm+0x22e/0x4d0 [ 401.800853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.806404] ? task_will_free_mem+0x239/0xb30 [ 401.810931] ? ___ratelimit+0x36f/0x655 [ 401.814929] ? lock_downgrade+0x900/0x900 [ 401.819105] ? trace_hardirqs_on+0xbd/0x310 [ 401.823433] ? kasan_check_read+0x11/0x20 [ 401.827585] ? ___ratelimit+0x36f/0x655 [ 401.827601] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 401.827620] ? trace_hardirqs_on+0x310/0x310 [ 401.837037] ? lock_downgrade+0x900/0x900 [ 401.845614] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 401.850730] ? ___ratelimit+0xaa/0x655 [ 401.854628] ? idr_get_free+0xec0/0xec0 [ 401.858624] ? kasan_check_write+0x14/0x20 [ 401.862870] ? do_raw_spin_lock+0xc1/0x200 [ 401.867116] oom_kill_process.cold.27+0x10/0x903 [ 401.871879] ? kasan_check_write+0x14/0x20 13:17:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4c}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x14000, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x81, 0x7, 0xffffffff, 0x0, 0x0, 0x10000, 0x40, 0x2, 0x8, 0x85f4c3b, 0x1ff, 0x7ac315b2, 0x0, 0x10001, 0x5, 0x9, 0xffffffffffffff33, 0x8, 0xffffffff, 0x20, 0x4, 0x1, 0x8001, 0x100, 0x8, 0xfffffffffffffffb, 0x100000001, 0x3, 0x101, 0x5, 0x0, 0x401, 0x1, 0x0, 0x9, 0x8, 0x0, 0x8f3d, 0x1, @perf_bp={&(0x7f0000000200)}, 0x4, 0x7, 0x200, 0x5, 0xffffffffffffff97, 0x8}, r4, 0x5, 0xffffffffffffffff, 0x4) r5 = dup3(r1, 0xffffffffffffff9c, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000280)={0x15, 0x7, 0x2, {{0x8, 'cgroup2\x00'}, 0x10001}}, 0x15) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0xffffffffffffff7f) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r8, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000400)='\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f00000003c0)=@add_del={0x2, &(0x7f0000000380)='irlan0\x00', 0x7}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x0, 0x5}) sendfile(r3, r3, &(0x7f0000000000)=0x39044, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) bind$rds(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:17:51 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000017fdc)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80840, 0x0) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002031f001cfffd946fa2830020200a000900010002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 401.876126] ? do_raw_spin_lock+0xc1/0x200 [ 401.880376] ? oom_evaluate_task+0x540/0x540 [ 401.884794] ? cgroup_procs_next+0x70/0x70 [ 401.889040] ? _raw_spin_unlock_irq+0x60/0x80 [ 401.893548] ? oom_badness+0xaa0/0xaa0 [ 401.897441] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 401.902214] ? mem_cgroup_iter_break+0x30/0x30 [ 401.906817] ? cgroup_file_notify+0x226/0x2f0 [ 401.911330] out_of_memory+0xa84/0x1430 [ 401.915318] ? kasan_check_read+0x11/0x20 [ 401.919480] ? oom_killer_disable+0x3a0/0x3a0 [ 401.923986] ? kasan_check_write+0x14/0x20 [ 401.928222] ? do_raw_spin_lock+0xc1/0x200 [ 401.932461] mem_cgroup_out_of_memory+0x15e/0x210 [ 401.937306] ? memcg_memory_event+0x40/0x40 [ 401.941630] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 401.946564] ? page_counter_try_charge+0x1c1/0x220 [ 401.951498] try_charge+0xc43/0x1690 [ 401.955220] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 401.961307] ? tcp_sendmsg+0x2f/0x50 [ 401.965023] ? sock_sendmsg+0xd5/0x120 [ 401.968923] ? __sys_sendto+0x3d7/0x670 [ 401.972893] ? __x64_sys_sendto+0xe1/0x1a0 [ 401.977125] ? do_syscall_64+0x1b9/0x820 [ 401.981183] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.986549] ? fs_reclaim_acquire+0x20/0x20 [ 401.990871] ? lock_downgrade+0x900/0x900 [ 401.995013] ? lock_downgrade+0x900/0x900 [ 401.999161] ? ___might_sleep+0x1ed/0x300 [ 402.003315] ? trace_hardirqs_on+0xbd/0x310 [ 402.007637] ? lock_downgrade+0x900/0x900 [ 402.011782] ? __kmalloc_node_track_caller+0x33/0x70 [ 402.017055] ? kasan_unpoison_shadow+0x35/0x50 [ 402.021644] ? __sk_mem_raise_allocated+0x642/0x1800 [ 402.026775] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 402.032224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 402.037761] ? check_preemption_disabled+0x48/0x200 [ 402.042789] mem_cgroup_charge_skmem+0x1e4/0x390 [ 402.047547] ? mem_cgroup_sk_free+0x90/0x90 [ 402.051875] __sk_mem_raise_allocated+0x642/0x1800 [ 402.056805] ? sk_busy_loop_end+0x1c0/0x1c0 [ 402.061129] ? arch_local_save_flags+0x40/0x40 [ 402.065714] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 402.070729] ? skb_page_frag_refill+0x1eb/0x6a0 [ 402.075398] ? sock_kzfree_s+0x60/0x60 [ 402.079287] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 402.084313] ? sk_stream_alloc_skb+0x34b/0x970 [ 402.088900] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 402.093935] ? skb_entail+0x618/0x8c0 [ 402.097738] ? tcp_rate_check_app_limited+0x121/0x460 [ 402.102926] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 402.107596] __sk_mem_schedule+0x6d/0xe0 [ 402.111654] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 402.117276] tcp_sendmsg_locked+0x1c86/0x3f00 [ 402.121774] ? debug_smp_processor_id+0x1c/0x20 [ 402.126453] ? tcp_sendpage+0x60/0x60 [ 402.130253] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 402.135785] ? aa_label_sk_perm+0x46d/0x8e0 [ 402.140118] ? aa_profile_af_perm+0x410/0x410 [ 402.144631] ? lock_acquire+0x1ed/0x520 [ 402.148606] ? tcp_sendmsg+0x21/0x50 [ 402.152327] ? trace_hardirqs_on+0xbd/0x310 [ 402.156664] ? lock_release+0x970/0x970 [ 402.160636] ? lock_sock_nested+0xe2/0x120 [ 402.164895] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 402.170347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.175897] ? check_preemption_disabled+0x48/0x200 [ 402.180924] ? lock_sock_nested+0x9a/0x120 [ 402.185162] ? lock_sock_nested+0x9a/0x120 [ 402.189400] ? __local_bh_enable_ip+0x160/0x260 [ 402.194080] tcp_sendmsg+0x2f/0x50 [ 402.197623] inet_sendmsg+0x1a1/0x690 [ 402.201421] ? ipip_gro_receive+0x100/0x100 [ 402.205751] ? apparmor_socket_sendmsg+0x29/0x30 [ 402.210506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.216048] ? security_socket_sendmsg+0x94/0xc0 [ 402.220810] ? ipip_gro_receive+0x100/0x100 [ 402.225243] sock_sendmsg+0xd5/0x120 [ 402.228960] __sys_sendto+0x3d7/0x670 [ 402.232767] ? __ia32_sys_getpeername+0xb0/0xb0 [ 402.237433] ? lock_release+0x970/0x970 [ 402.241409] ? arch_local_save_flags+0x40/0x40 [ 402.246001] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 402.251450] ? aa_af_perm+0x5a0/0x5a0 [ 402.255282] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 402.260832] ? put_timespec64+0x10f/0x1b0 [ 402.264993] ? nsecs_to_jiffies+0x30/0x30 [ 402.269250] ? trace_hardirqs_on+0xbd/0x310 [ 402.273570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.279117] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.284485] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 402.289937] __x64_sys_sendto+0xe1/0x1a0 [ 402.294008] do_syscall_64+0x1b9/0x820 [ 402.297898] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 402.303265] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.308198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.313041] ? trace_hardirqs_on_caller+0x310/0x310 [ 402.318060] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 402.323078] ? prepare_exit_to_usermode+0x291/0x3b0 [ 402.328100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.332948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.338146] RIP: 0033:0x457579 [ 402.341338] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.360462] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 402.368175] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 13:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x13, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 402.375450] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 402.382715] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 402.389989] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 402.397255] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 402.412955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 13:17:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 402.439887] Task in /syz2 killed as a result of limit of /syz2 [ 402.448334] memory: usage 204792kB, limit 204800kB, failcnt 2126 [ 402.449654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 402.478879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 402.498940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 402.591738] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 402.605043] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 402.612001] Memory cgroup stats for /syz2: cache:8KB rss:2164KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2224KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x2000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xaa, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:52 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x40) r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000000)={0x2, 0x9, 0xe00000000000000, 0x8, 0x3f, 0x5}) r2 = socket(0xa, 0x1, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) fsync(r0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@remote, @mcast2, @mcast1, 0x88, 0x2, 0x5, 0x400, 0x9, 0xe00010, r3}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000088c000)={@remote, 0x0, 0x0, 0x2, 0x80000000000041}, 0x2f) 13:17:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xdb06000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2003}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "e460bdb3e6ceacfce550e086b3264d9ea64e0a35d0864a4082453d8db2a0264e", "1186e566754c8dc2c5966b7f3da77c2b6f524f83db80aa3bd921f77f2fd89d8e", "3c8dab5397395b82d3ebf0a4d126e266ee335a8d96c450ee5d0e9af091764744", "9ab4bf586b1f29463c6a251a62cc82f42e289be0cd5ce25a21428a44fb4312bf", "2f9086b4653d5a6bc0c735505e2c000093e2eb002447261e5aea6199b66a0ad9", "1e94f6aacdd64002907e1e4f"}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0xe, 0x3, 0x80000001, 0x5}, &(0x7f00000000c0)=0x14) [ 402.632682] Memory cgroup out of memory: Kill process 23638 (syz-executor2) score 171 or sacrifice child [ 402.642445] Killed process 23638 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 402.654945] oom_reaper: reaped process 23638 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 13:17:52 executing program 5: socketpair$inet(0x2, 0x0, 0xc, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfd2) prctl$intptr(0x1c, 0x1) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)="0000000201000000000000010400000000000000", 0x14, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="354e2e96b74ab2ac86a6b0b1d40db09a89e860ef81551f53d3c24260125162bcf9da2c0f497c339cfcee572b05d41da2ca2c6996724d7cf81295beca55903902844fe78d9612e303a21d14b33b2058b14caf4f20258ce303e95cadfbb014b8a130ef623a5a49199e220150f56d1af31343c6c139f7f64cc152b5132cbce57fb9659c48c913c234041b56b82f5b426e7ed68fbff144fe8caa7ad5e4ad3fa8e2811a56128427a5750f6412be50"], 0x2a) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x10, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000300), &(0x7f00000002c0)=0x201) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) creat(&(0x7f0000000080)='./file0\x00', 0x0) 13:17:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xdb060000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x9, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x140, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x6, 0x2080) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x5, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r2+10000000}, 0x8) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x69c, 0x18000) r3 = getpid() getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000004c0)=""/189, &(0x7f0000000580)=0xbd) rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f0000000100)) prctl$seccomp(0x16, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000400)=[{0xd1, 0xb6, 0x4, 0x9b}, {0x401, 0x4, 0x81, 0x1b0e}, {0x1, 0x3f, 0x9, 0x8b4}, {0x20, 0x4, 0x782b, 0x100}, {0x35, 0x40, 0xed, 0x5022}, {0x81, 0x1, 0x9, 0x195d}, {0x9, 0x7f, 0x2e, 0x10000}, {0x400, 0x7f, 0xfc, 0x4}, {0x8, 0x1, 0x3, 0x1ff}, {0xbdd8, 0x1, 0x9, 0x1ff}]}) ptrace(0x10, r3) ptrace(0x4209, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x401, 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="00042bbd7000fedbdf250a0000003c00010008000b007369700008000600776c63000800090053000000080009005f000000080058ea00000000080009007300000008000800080000002c080200080005000200000008000b000a0000000800040000000000080008008000000008000600060000000800040004000000"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x840) 13:17:52 executing program 1: r0 = socket(0xa, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480), 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x5, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0) fcntl$getflags(r0, 0x3) [ 402.808264] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=2, oom_score_adj=0 [ 402.860681] syz-executor2 cpuset=syz2 mems_allowed=0 13:17:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000180), 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x6e, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@dev, @rand_addr=0x5}, 0xfffffffffffffe82) [ 402.881039] CPU: 0 PID: 23707 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 402.888439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.897804] Call Trace: [ 402.900432] dump_stack+0x1c4/0x2b4 [ 402.904090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.909307] ? mark_held_locks+0x130/0x130 [ 402.913554] ? mark_held_locks+0x130/0x130 [ 402.917798] dump_header+0x27b/0xf72 [ 402.921545] ? pagefault_out_of_memory+0x197/0x197 [ 402.926492] ? mark_held_locks+0x130/0x130 13:17:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x10000) writev(r0, &(0x7f0000000080), 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) [ 402.930746] ? rcu_read_unlock+0x16/0x60 [ 402.934819] ? lock_downgrade+0x900/0x900 [ 402.938993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.944556] ? css_next_child+0x1c3/0x620 [ 402.948712] ? find_lock_task_mm+0x22e/0x4d0 [ 402.953138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.958693] ? task_will_free_mem+0x239/0xb30 [ 402.963205] ? ___ratelimit+0x36f/0x655 [ 402.967184] ? lock_downgrade+0x900/0x900 [ 402.971346] ? trace_hardirqs_on+0xbd/0x310 [ 402.975677] ? kasan_check_read+0x11/0x20 [ 402.979873] ? ___ratelimit+0x36f/0x655 [ 402.983862] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 402.989328] ? trace_hardirqs_on+0x310/0x310 [ 402.993746] ? lock_downgrade+0x900/0x900 [ 402.997902] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 403.003019] ? ___ratelimit+0xaa/0x655 [ 403.006915] ? idr_get_free+0xec0/0xec0 [ 403.010899] ? kasan_check_write+0x14/0x20 [ 403.015150] ? do_raw_spin_lock+0xc1/0x200 [ 403.019406] oom_kill_process.cold.27+0x10/0x903 [ 403.024172] ? kasan_check_write+0x14/0x20 [ 403.028412] ? do_raw_spin_lock+0xc1/0x200 [ 403.032645] ? oom_evaluate_task+0x540/0x540 [ 403.037040] ? cgroup_procs_next+0x70/0x70 [ 403.041273] ? _raw_spin_unlock_irq+0x60/0x80 [ 403.045781] ? oom_badness+0xaa0/0xaa0 [ 403.049721] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 403.054463] ? mem_cgroup_iter_break+0x30/0x30 [ 403.059045] ? cgroup_file_notify+0x226/0x2f0 [ 403.063631] out_of_memory+0xa84/0x1430 [ 403.067591] ? kasan_check_read+0x11/0x20 [ 403.071723] ? oom_killer_disable+0x3a0/0x3a0 [ 403.076198] ? kasan_check_write+0x14/0x20 [ 403.080419] ? do_raw_spin_lock+0xc1/0x200 [ 403.084654] mem_cgroup_out_of_memory+0x15e/0x210 [ 403.089494] ? memcg_memory_event+0x40/0x40 [ 403.093802] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 403.098716] ? page_counter_try_charge+0x1c1/0x220 [ 403.103649] try_charge+0xc43/0x1690 [ 403.107352] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 403.113155] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 403.119205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.124730] ? handle_mm_fault+0x56e/0xc70 [ 403.128948] ? __handle_mm_fault+0x53e0/0x53e0 [ 403.133557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.139103] ? __do_page_fault+0x4a6/0xed0 [ 403.143360] ? __sk_mem_raise_allocated+0x642/0x1800 [ 403.148448] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.153885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.159466] ? check_preemption_disabled+0x48/0x200 [ 403.164488] mem_cgroup_charge_skmem+0x1e4/0x390 [ 403.169229] ? mem_cgroup_sk_free+0x90/0x90 [ 403.173546] ? trace_hardirqs_off+0x310/0x310 [ 403.178041] __sk_mem_raise_allocated+0x642/0x1800 [ 403.182956] ? sk_busy_loop_end+0x1c0/0x1c0 [ 403.187281] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 403.192813] ? alloc_pages_current+0x114/0x210 [ 403.197385] ? skb_page_frag_refill+0x1eb/0x6a0 [ 403.202044] ? sock_kzfree_s+0x60/0x60 [ 403.205919] ? _copy_from_iter_full+0x2b3/0xd20 [ 403.210576] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 403.215579] ? tcp_rate_check_app_limited+0x121/0x460 [ 403.220757] ? iov_iter_advance+0x1460/0x1460 [ 403.225242] __sk_mem_schedule+0x6d/0xe0 [ 403.229289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 403.234823] tcp_sendmsg_locked+0x1c86/0x3f00 [ 403.239313] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 403.244497] ? tcp_sendpage+0x60/0x60 [ 403.248285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.253811] ? aa_label_sk_perm+0x46d/0x8e0 [ 403.258121] ? aa_profile_af_perm+0x410/0x410 [ 403.262621] ? ksys_dup3+0x680/0x680 [ 403.266329] ? lock_acquire+0x1ed/0x520 [ 403.270292] ? tcp_sendmsg+0x21/0x50 [ 403.274034] ? trace_hardirqs_on+0xbd/0x310 [ 403.278340] ? lock_release+0x970/0x970 [ 403.282333] ? lock_sock_nested+0xe2/0x120 [ 403.286555] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.292002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.297558] ? check_preemption_disabled+0x48/0x200 [ 403.302574] ? lock_sock_nested+0x9a/0x120 [ 403.306821] ? lock_sock_nested+0x9a/0x120 [ 403.311052] ? __local_bh_enable_ip+0x160/0x260 [ 403.315714] tcp_sendmsg+0x2f/0x50 [ 403.319242] inet_sendmsg+0x1a1/0x690 [ 403.323057] ? ipip_gro_receive+0x100/0x100 [ 403.327364] ? apparmor_socket_sendmsg+0x29/0x30 [ 403.332119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.337648] ? security_socket_sendmsg+0x94/0xc0 [ 403.342391] ? ipip_gro_receive+0x100/0x100 [ 403.346698] sock_sendmsg+0xd5/0x120 [ 403.350396] __sys_sendto+0x3d7/0x670 [ 403.354185] ? __ia32_sys_getpeername+0xb0/0xb0 [ 403.358837] ? lock_release+0x970/0x970 [ 403.362795] ? arch_local_save_flags+0x40/0x40 [ 403.367367] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.372801] ? aa_af_perm+0x5a0/0x5a0 [ 403.376597] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.382123] ? put_timespec64+0x10f/0x1b0 [ 403.386255] ? nsecs_to_jiffies+0x30/0x30 [ 403.390393] ? trace_hardirqs_on+0xbd/0x310 [ 403.394712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.400256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.405616] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.411055] __x64_sys_sendto+0xe1/0x1a0 [ 403.415104] do_syscall_64+0x1b9/0x820 [ 403.418987] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 403.424341] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.429256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.434090] ? trace_hardirqs_on_caller+0x310/0x310 [ 403.439098] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 403.444107] ? prepare_exit_to_usermode+0x291/0x3b0 [ 403.449130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.453985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.459169] RIP: 0033:0x457579 [ 403.462358] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.481270] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 403.488993] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 403.496251] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 403.503510] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 403.510770] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 403.518027] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 403.541876] Task in /syz2 killed as a result of limit of /syz2 [ 403.549049] memory: usage 204784kB, limit 204800kB, failcnt 2162 [ 403.555422] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 403.565824] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xe0, @empty, [0x0, 0x2000000]}, 0x6) 13:17:53 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x100, 0xc6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) clock_getres(0x3, &(0x7f0000000000)) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./control/file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="c25d47527dc70300000000000060ff458f89a9f7f333f511939be7d7e31d9e6d677ba7f5e211dda61ba4"], &(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='~ysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) close(r1) 13:17:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x800000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000180)=0x78) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac1414110c029078000000004b00000000000000002f0000ac5c14aaac141400082c00000000000000000000e000000200000000e000000100000000000000007f000001000000000000000051699b8d28f167fd7f350afe5d41e6ab0fe5115b30bdab7f96df35d70f1d9cdc4411f9160e89f96baebb6657427094c62e1021682faf52afb67dd8d54fd4dfef312bedde2dffa6b5d8736408b43b5fc1d645419055ee3796817940fb085d2aa5b3a1dd32a229e08b093eaf9c3c99c8b2fdc379005a"], &(0x7f0000000140)) 13:17:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000380)=""/150) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000240)) modify_ldt$read_default(0x2, &(0x7f00000000c0)=""/93, 0x5d) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)="b3", 0x1}]) [ 403.573185] Memory cgroup stats for /syz2: cache:8KB rss:80KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:180KB inactive_file:0KB active_file:0KB unevictable:0KB [ 403.593203] Memory cgroup out of memory: Kill process 23705 (syz-executor2) score 161 or sacrifice child [ 403.602923] Killed process 23705 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32832kB, shmem-rss:0kB [ 403.614635] oom_reaper: reaped process 23705 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:17:53 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) waitid(0x3, r0, &(0x7f0000000140), 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) ioctl$KDDELIO(r1, 0x4b35, 0x9) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f564c4600b3000000004000000000000000000000000000000000003800000000000000a2168c86400020000000000000"], 0x31) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x29779204eba9b4ad) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000180)=0xa1, 0x4) 13:17:53 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x3000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 403.699876] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 403.723315] syz-executor2 cpuset=syz2 mems_allowed=0 [ 403.748811] CPU: 1 PID: 23767 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 403.756195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.765546] Call Trace: [ 403.765568] dump_stack+0x1c4/0x2b4 [ 403.765585] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.765601] ? mark_held_locks+0x130/0x130 [ 403.765614] ? mark_held_locks+0x130/0x130 [ 403.765629] dump_header+0x27b/0xf72 [ 403.765649] ? pagefault_out_of_memory+0x197/0x197 [ 403.765668] ? mark_held_locks+0x130/0x130 [ 403.765681] ? rcu_read_unlock+0x16/0x60 [ 403.765695] ? lock_downgrade+0x900/0x900 [ 403.765714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.765729] ? css_next_child+0x1c3/0x620 [ 403.765746] ? find_lock_task_mm+0x22e/0x4d0 [ 403.820699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.826242] ? task_will_free_mem+0x239/0xb30 [ 403.826267] ? ___ratelimit+0x36f/0x655 [ 403.826287] ? lock_downgrade+0x900/0x900 [ 403.834781] ? trace_hardirqs_on+0xbd/0x310 [ 403.834815] ? kasan_check_read+0x11/0x20 13:17:53 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000800084) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x402, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x101, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000006c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000600), r3}}, 0x18) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000007c0)=0x0) ptrace$getregs(0xe, r4, 0xe1, &(0x7f0000000800)=""/118) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) io_destroy(r6) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000700)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x1) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fstat(r7, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) r9 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3, 0x40000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)) ioctl$BLKTRACESTART(r9, 0x1274, 0x0) 13:17:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x300000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 403.834834] ? ___ratelimit+0x36f/0x655 [ 403.851400] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.856863] ? trace_hardirqs_on+0x310/0x310 [ 403.861281] ? lock_downgrade+0x900/0x900 [ 403.865443] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 403.870552] ? ___ratelimit+0xaa/0x655 [ 403.874445] ? idr_get_free+0xec0/0xec0 [ 403.878432] ? kasan_check_write+0x14/0x20 [ 403.882686] ? do_raw_spin_lock+0xc1/0x200 [ 403.886938] oom_kill_process.cold.27+0x10/0x903 [ 403.886950] sg_write: data in/out 45788/1 bytes for SCSI command 0xa2-- guessing data in; [ 403.886950] program syz-executor5 not setting count and/or reply_len properly [ 403.891718] ? kasan_check_write+0x14/0x20 [ 403.891733] ? do_raw_spin_lock+0xc1/0x200 [ 403.891750] ? oom_evaluate_task+0x540/0x540 [ 403.891768] ? cgroup_procs_next+0x70/0x70 [ 403.891786] ? _raw_spin_unlock_irq+0x60/0x80 [ 403.891806] ? oom_badness+0xaa0/0xaa0 [ 403.891823] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 403.891857] ? mem_cgroup_iter_break+0x30/0x30 [ 403.920444] ? cgroup_file_notify+0x226/0x2f0 [ 403.920464] out_of_memory+0xa84/0x1430 [ 403.920479] ? kasan_check_read+0x11/0x20 [ 403.920495] ? oom_killer_disable+0x3a0/0x3a0 [ 403.920513] ? kasan_check_write+0x14/0x20 [ 403.933111] ? do_raw_spin_lock+0xc1/0x200 [ 403.933136] mem_cgroup_out_of_memory+0x15e/0x210 [ 403.933150] ? memcg_memory_event+0x40/0x40 [ 403.933165] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 403.933184] ? page_counter_try_charge+0x1c1/0x220 [ 403.942507] try_charge+0xc43/0x1690 [ 403.942532] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 403.942547] ? tcp_sendmsg+0x2f/0x50 [ 403.942562] ? sock_sendmsg+0xd5/0x120 [ 403.942581] ? __sys_sendto+0x3d7/0x670 [ 403.955165] ? __x64_sys_sendto+0xe1/0x1a0 [ 403.955182] ? do_syscall_64+0x1b9/0x820 [ 403.955199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.955216] ? fs_reclaim_acquire+0x20/0x20 [ 403.955241] ? lock_downgrade+0x900/0x900 [ 403.968183] ? lock_downgrade+0x900/0x900 [ 403.968204] ? ___might_sleep+0x1ed/0x300 [ 403.968222] ? trace_hardirqs_on+0xbd/0x310 [ 403.968239] ? __kmalloc_node_track_caller+0x33/0x70 [ 403.968254] ? kasan_unpoison_shadow+0x35/0x50 [ 403.968275] ? __sk_mem_raise_allocated+0x642/0x1800 [ 403.968291] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 403.968307] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.968325] ? check_preemption_disabled+0x48/0x200 [ 403.968345] mem_cgroup_charge_skmem+0x1e4/0x390 [ 403.968361] ? mem_cgroup_sk_free+0x90/0x90 [ 403.968384] __sk_mem_raise_allocated+0x642/0x1800 [ 403.968403] ? sk_busy_loop_end+0x1c0/0x1c0 [ 403.968419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 403.968436] ? alloc_pages_current+0x114/0x210 [ 403.968454] ? skb_page_frag_refill+0x1eb/0x6a0 [ 403.968471] ? sock_kzfree_s+0x60/0x60 [ 403.968487] ? _copy_from_iter_full+0x2b3/0xd20 [ 403.968500] ? tcp_chrono_start+0x190/0x1e0 [ 403.968519] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 403.982605] ? tcp_rate_check_app_limited+0x121/0x460 [ 403.982621] ? iov_iter_advance+0x1460/0x1460 [ 403.982641] __sk_mem_schedule+0x6d/0xe0 [ 403.982657] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 403.982678] tcp_sendmsg_locked+0x1c86/0x3f00 13:17:54 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="f44f0b48734744a5ceeff04094b2e9e3", 0x10) [ 403.991303] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 403.991333] ? tcp_sendpage+0x60/0x60 [ 403.991351] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.991365] ? aa_label_sk_perm+0x46d/0x8e0 [ 403.991385] ? aa_profile_af_perm+0x410/0x410 [ 404.005021] ? ksys_dup3+0x680/0x680 [ 404.005041] ? lock_acquire+0x1ed/0x520 [ 404.005057] ? tcp_sendmsg+0x21/0x50 [ 404.005075] ? trace_hardirqs_on+0xbd/0x310 [ 404.005093] ? lock_release+0x970/0x970 [ 404.017340] ? lock_sock_nested+0xe2/0x120 13:17:54 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x100, 0xc6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) clock_getres(0x3, &(0x7f0000000000)) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./control/file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="c25d47527dc70300000000000060ff458f89a9f7f333f511939be7d7e31d9e6d677ba7f5e211dda61ba4"], &(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='~ysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) close(r1) [ 404.017359] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 404.017377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.017394] ? check_preemption_disabled+0x48/0x200 [ 404.017410] ? lock_sock_nested+0x9a/0x120 [ 404.017425] ? lock_sock_nested+0x9a/0x120 [ 404.017444] ? __local_bh_enable_ip+0x160/0x260 [ 404.017464] tcp_sendmsg+0x2f/0x50 [ 404.017482] inet_sendmsg+0x1a1/0x690 [ 404.017499] ? ipip_gro_receive+0x100/0x100 [ 404.017515] ? apparmor_socket_sendmsg+0x29/0x30 [ 404.017530] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.017551] ? security_socket_sendmsg+0x94/0xc0 [ 404.035494] ? ipip_gro_receive+0x100/0x100 [ 404.035512] sock_sendmsg+0xd5/0x120 [ 404.043977] __sys_sendto+0x3d7/0x670 [ 404.043997] ? __ia32_sys_getpeername+0xb0/0xb0 [ 404.044014] ? lock_release+0x970/0x970 [ 404.044030] ? arch_local_save_flags+0x40/0x40 [ 404.044047] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 404.044061] ? aa_af_perm+0x5a0/0x5a0 [ 404.044088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.053744] ? put_timespec64+0x10f/0x1b0 [ 404.053760] ? nsecs_to_jiffies+0x30/0x30 [ 404.053781] ? trace_hardirqs_on+0xbd/0x310 [ 404.053802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.053820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.053839] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 404.074926] __x64_sys_sendto+0xe1/0x1a0 [ 404.074947] do_syscall_64+0x1b9/0x820 [ 404.074964] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 404.074991] ? syscall_return_slowpath+0x5e0/0x5e0 [ 404.075015] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.098839] ? trace_hardirqs_on_caller+0x310/0x310 [ 404.098858] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 404.098875] ? prepare_exit_to_usermode+0x291/0x3b0 [ 404.098893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.098913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.098925] RIP: 0033:0x457579 [ 404.098941] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.098949] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 404.098964] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 404.098983] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 404.098991] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 404.099005] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 404.108237] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 404.125627] sg_write: data in/out 45788/1 bytes for SCSI command 0xa2-- guessing data in; [ 404.125627] program syz-executor5 not setting count and/or reply_len properly [ 404.178682] Task in [ 404.208476] /syz2 [ 404.241495] killed as a result of limit of [ 404.314502] /syz2 [ 404.346175] memory: usage 194456kB, limit 204800kB, failcnt 2213 [ 404.358647] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 404.368482] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 404.374509] Memory cgroup stats for [ 404.427909] /syz2 [ 404.435882] : [ 404.459303] cache:8KB [ 404.463625] rss:80KB [ 404.476385] rss_huge:0KB [ 404.492865] shmem:0KB [ 404.553246] mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:192KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, @empty, [0x0, 0x2000000]}, 0x6) 13:17:54 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x100, 0xc6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) clock_getres(0x3, &(0x7f0000000000)) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000100)='./control/file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="c25d47527dc70300000000000060ff458f89a9f7f333f511939be7d7e31d9e6d677ba7f5e211dda61ba4"], &(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='~ysv\x00', 0x1000, &(0x7f0000000240)) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) close(r1) 13:17:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100001e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x1000, 0x0, 0x7, 0x2, 0x3, 0xb41, 0x401}, 0x13) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000101d00226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 13:17:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x98da3ffffebcd79a, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:54 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) io_setup(0x23, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000356ff0)=[&(0x7f0000928fc0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00001b0000)}]) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000240)) [ 404.589489] Memory cgroup out of memory: Kill process 23766 (syz-executor2) score 161 or sacrifice child [ 404.602632] Killed process 23767 (syz-executor2) total-vm:70736kB, anon-rss:192kB, file-rss:33504kB, shmem-rss:0kB [ 404.614609] oom_reaper: reaped process 23767 (syz-executor2), now anon-rss:0kB, file-rss:32736kB, shmem-rss:0kB 13:17:54 executing program 1: r0 = socket$inet(0x2, 0x806, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000080)={@broadcast, @remote, @rand_addr=0xc9}, 0xc) getsockname$inet(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 13:17:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4c00}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:54 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x220200, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20000000008912, &(0x7f0000000280)="153f6234488dd25d766070") acct(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000004000000600", 0xc7, 0x80003}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r1) write$binfmt_misc(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797a31326fdb12a16ed0253187452ffcbddc673443eb29cebf724f681ebe87cea3df81605cc8d0844d7bcead58e1b71afd6b2e3495b364ed4be9205f7f9e71ef0b477bcf402560778638b209fd8f273c4f50c7deeb18adbc287e4e753460a52bfd9c01eb882cfbff64e3893e703ab5982a6910679a5644bf28ea999931ad825beec566eb40f6caf3d6957036d8860d0a936ab75bd97eb9868d238458bfd08144a5913b1b8d69153c02a4c63ea3b6b712c1b3ccef7e18dfa41446093cf180619b8736acc6"], 0xb8) close(r2) 13:17:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xff000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(r2, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(r2, &(0x7f0000000180)=[{}, {}], 0x2, 0x9) unshare(0x40000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x2e0402, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000300)="6ef4efb57ffb37ae0a4f117409e8783d58bdbe8a88547dfbabeca76c90054eb201f80e55bfc832f31a4fede1e68b4d8a6f4b8d67335680ec7da64c31ba194fcd8572f66c1de6a7e4a70643c5859d967a5f8316f8fdbf59760824dd981c2d", 0x5e) openat$cgroup_ro(r2, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) lseek(r3, 0x0, 0x3) r4 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) read(r1, &(0x7f00000004c0)=""/4096, 0x1000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x346) recvmsg(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2}, 0x2000) 13:17:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 404.839833] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 404.883893] syz-executor2 cpuset=syz2 mems_allowed=0 [ 404.898452] CPU: 1 PID: 23832 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 404.905832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.915186] Call Trace: [ 404.917785] dump_stack+0x1c4/0x2b4 [ 404.921429] ? dump_stack_print_info.cold.2+0x52/0x52 [ 404.926626] ? mark_held_locks+0x130/0x130 [ 404.930867] ? mark_held_locks+0x130/0x130 [ 404.935106] dump_header+0x27b/0xf72 [ 404.938854] ? pagefault_out_of_memory+0x197/0x197 [ 404.943803] ? mark_held_locks+0x130/0x130 [ 404.948043] ? rcu_read_unlock+0x16/0x60 [ 404.952140] ? lock_downgrade+0x900/0x900 [ 404.956299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.961869] ? css_next_child+0x1c3/0x620 [ 404.966021] ? find_lock_task_mm+0x22e/0x4d0 [ 404.970443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.972623] IPVS: ftp: loaded support on port[0] = 21 [ 404.975990] ? task_will_free_mem+0x239/0xb30 [ 404.976015] ? ___ratelimit+0x36f/0x655 [ 404.976032] ? lock_downgrade+0x900/0x900 [ 404.976051] ? trace_hardirqs_on+0xbd/0x310 [ 404.998136] ? kasan_check_read+0x11/0x20 [ 405.002291] ? ___ratelimit+0x36f/0x655 [ 405.006273] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.011745] ? trace_hardirqs_on+0x310/0x310 [ 405.011761] ? lock_downgrade+0x900/0x900 [ 405.011780] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 405.011805] ? ___ratelimit+0xaa/0x655 [ 405.025804] ? idr_get_free+0xec0/0xec0 [ 405.025821] ? kasan_check_write+0x14/0x20 [ 405.025853] ? do_raw_spin_lock+0xc1/0x200 [ 405.033697] oom_kill_process.cold.27+0x10/0x903 [ 405.033713] ? kasan_check_write+0x14/0x20 [ 405.033729] ? do_raw_spin_lock+0xc1/0x200 [ 405.033753] ? oom_evaluate_task+0x540/0x540 [ 405.042211] ? cgroup_procs_next+0x70/0x70 [ 405.042230] ? _raw_spin_unlock_irq+0x60/0x80 [ 405.042244] ? oom_badness+0xaa0/0xaa0 [ 405.042261] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 405.042279] ? mem_cgroup_iter_break+0x30/0x30 [ 405.051269] ? cgroup_file_notify+0x226/0x2f0 [ 405.051288] out_of_memory+0xa84/0x1430 [ 405.060282] ? kasan_check_read+0x11/0x20 [ 405.060298] ? oom_killer_disable+0x3a0/0x3a0 [ 405.060312] ? kasan_check_write+0x14/0x20 [ 405.060327] ? do_raw_spin_lock+0xc1/0x200 [ 405.060348] mem_cgroup_out_of_memory+0x15e/0x210 [ 405.060361] ? memcg_memory_event+0x40/0x40 [ 405.060381] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 405.069099] ? page_counter_try_charge+0x1c1/0x220 [ 405.069114] try_charge+0xc43/0x1690 [ 405.069135] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 405.069149] ? tcp_sendmsg+0x2f/0x50 [ 405.069164] ? sock_sendmsg+0xd5/0x120 [ 405.069177] ? __sys_sendto+0x3d7/0x670 [ 405.069191] ? __x64_sys_sendto+0xe1/0x1a0 [ 405.069205] ? do_syscall_64+0x1b9/0x820 [ 405.069219] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.069235] ? fs_reclaim_acquire+0x20/0x20 [ 405.069251] ? lock_downgrade+0x900/0x900 [ 405.069269] ? ___might_sleep+0x1ed/0x300 [ 405.069283] ? lock_downgrade+0x900/0x900 [ 405.069296] ? trace_hardirqs_on+0xbd/0x310 [ 405.069313] ? __kmalloc_node_track_caller+0x33/0x70 [ 405.069326] ? kasan_unpoison_shadow+0x35/0x50 [ 405.069346] ? __sk_mem_raise_allocated+0x642/0x1800 [ 405.069361] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.069377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.069395] ? check_preemption_disabled+0x48/0x200 [ 405.069415] mem_cgroup_charge_skmem+0x1e4/0x390 [ 405.069437] ? mem_cgroup_sk_free+0x90/0x90 [ 405.082646] __sk_mem_raise_allocated+0x642/0x1800 [ 405.082667] ? sk_busy_loop_end+0x1c0/0x1c0 [ 405.082685] ? arch_local_save_flags+0x40/0x40 [ 405.082705] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 405.095301] ? skb_page_frag_refill+0x1eb/0x6a0 [ 405.095320] ? sock_kzfree_s+0x60/0x60 [ 405.095337] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 405.095355] ? sk_stream_alloc_skb+0x34b/0x970 [ 405.095373] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 405.104081] ? skb_entail+0x618/0x8c0 [ 405.104098] ? tcp_rate_check_app_limited+0x121/0x460 [ 405.104123] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 405.113187] __sk_mem_schedule+0x6d/0xe0 [ 405.113204] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.113222] tcp_sendmsg_locked+0x1c86/0x3f00 [ 405.113237] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 405.113262] ? tcp_sendpage+0x60/0x60 [ 405.122482] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.122496] ? aa_label_sk_perm+0x46d/0x8e0 [ 405.122512] ? aa_profile_af_perm+0x410/0x410 [ 405.122531] ? ksys_dup3+0x680/0x680 [ 405.122550] ? lock_acquire+0x1ed/0x520 [ 405.148868] ? tcp_sendmsg+0x21/0x50 13:17:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x8055000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x29, 0x4, @thr={&(0x7f00000001c0)="f87ee19e635faa480cc29bb05d9a9567bd5302510160b8503c68807379b83a64c505deb6fbab6f822c132c44981496f9bbdb87e03bdb52a869b1f8240df7d1482a6a17137d1481ce03ff72c7d07275bb31b49770aa93e2804a95a5042d9e8a9c7ea9c2cdea20121beb4b219596ac805182f23e4dbf6c0806c02b599456a949e7", &(0x7f0000000240)="b685e73cf94ac1878d362cea341fb01507c02cfdddad79a4102319fb5c4093beac3a4e74579fdf1775b7643143848633c861b25fa223657eb343c765fa63d0aeef29ae9573fe"}}, &(0x7f0000000380)=0x0) timer_delete(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166baf80cb81cc1bb8eef66bafc0c66ed66ba4200ed3e0f22d666b813018ed0c44271acb909000000f3a58fc878c2260f450f01dfc46245bbc3", 0x41}], 0x1, 0x0, &(0x7f0000000380), 0x0) r4 = fcntl$dupfd(r2, 0x406, r2) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:17:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xf000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800002100082) r2 = memfd_create(&(0x7f0000000600)="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", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x10, 0x0, 0x400) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) getpid() r5 = getpgid(0x0) r6 = syz_open_procfs(r5, &(0x7f0000000600)='attr/current\x00') ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000300)) r7 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r6, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRES64, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r7, @ANYRES16, @ANYRES32=r4, @ANYRES64=r0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r7, @ANYBLOB="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"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC=r7, @ANYRES16=0x0]], 0x51) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000100)={0x8e, 0xffffffffffff9fcf, 0x7fff, 0x8}, 0x10) recvmsg(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/116, 0x75}, {&(0x7f0000000500)=""/245, 0x19b}, {&(0x7f00000002c0)=""/22, 0x13}, {&(0x7f00000013c0)=""/4096, 0x1350}], 0x4, &(0x7f00000007c0)=""/16, 0x10}, 0x0) [ 405.148886] ? trace_hardirqs_on+0xbd/0x310 [ 405.148900] ? lock_release+0x970/0x970 [ 405.148916] ? lock_sock_nested+0xe2/0x120 [ 405.148931] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.148951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.157248] ? check_preemption_disabled+0x48/0x200 [ 405.157264] ? lock_sock_nested+0x9a/0x120 [ 405.157278] ? lock_sock_nested+0x9a/0x120 [ 405.157301] ? __local_bh_enable_ip+0x160/0x260 [ 405.171135] tcp_sendmsg+0x2f/0x50 [ 405.171152] inet_sendmsg+0x1a1/0x690 [ 405.171167] ? ipip_gro_receive+0x100/0x100 [ 405.171183] ? apparmor_socket_sendmsg+0x29/0x30 [ 405.171199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.171217] ? security_socket_sendmsg+0x94/0xc0 [ 405.171232] ? ipip_gro_receive+0x100/0x100 [ 405.171248] sock_sendmsg+0xd5/0x120 [ 405.171264] __sys_sendto+0x3d7/0x670 [ 405.171280] ? __ia32_sys_getpeername+0xb0/0xb0 [ 405.171307] ? lock_release+0x970/0x970 [ 405.193589] ? arch_local_save_flags+0x40/0x40 [ 405.193608] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.193639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.193654] ? put_timespec64+0x10f/0x1b0 [ 405.193672] ? nsecs_to_jiffies+0x30/0x30 [ 405.204215] ? trace_hardirqs_on+0xbd/0x310 [ 405.204231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.204248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.204272] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.219633] __x64_sys_sendto+0xe1/0x1a0 [ 405.219653] do_syscall_64+0x1b9/0x820 [ 405.219670] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 405.219686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.219703] ? trace_hardirqs_on_caller+0x310/0x310 [ 405.219720] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 405.219735] ? recalc_sigpending_tsk+0x180/0x180 [ 405.219748] ? kasan_check_write+0x14/0x20 [ 405.219767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.229477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.229489] RIP: 0033:0x457579 [ 405.229506] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.229514] RSP: 002b:00007f6bef265c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 405.229529] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 405.229539] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000006 [ 405.229547] RBP: 000000000072bfa0 R08: 00000000200000c0 R09: 0000000000000006 [ 405.229556] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2666d4 [ 405.229565] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 405.249240] Task in /syz2 killed as a result of limit of /syz2 [ 405.249270] memory: usage 204724kB, limit 204800kB, failcnt 2226 [ 405.249279] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.249287] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.249291] Memory cgroup stats for /syz2: cache:8KB rss:4156KB rss_huge:4096KB shmem:0KB mapped_file:132KB [ 405.258456] dirty:0KB [ 405.275048] writeback:0KB [ 405.285000] swap:0KB [ 405.291445] inactive_anon:4KB [ 405.301444] active_anon:4272KB inactive_file:0KB active_file:0KB unevictable:0KB [ 405.301484] Memory cgroup out of memory: Kill process 23816 (syz-executor2) score 181 or sacrifice child [ 405.301523] Killed process 23832 (syz-executor2) total-vm:70472kB, anon-rss:4264kB, file-rss:33612kB, shmem-rss:0kB [ 405.472071] nla_parse: 3 callbacks suppressed [ 405.472082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 405.478560] print_req_error: I/O error, dev loop0, sector 0 [ 405.539023] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 405.571820] syz-executor2 cpuset= [ 405.586447] syz2 [ 405.724965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:55 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/152, 0x98}], 0x2, &(0x7f0000001040)=""/4096, 0x1000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="021200001100020026157000f006d5cd7cf5b1600cdaee98aeb5b9df2501001400790000000800120003010000001100000000000046003270b4a69956a98fe4ed4754c5b310023cbb0000000000000000000400000000000003000400170000001f000000000700003f00000000000000030000000000120002000b0005000000010005000000000050a1"], 0x88}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8002, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 13:17:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x19aaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 405.785787] IPVS: ftp: loaded support on port[0] = 21 13:17:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x18aaaafeffaaaaa8, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 405.836416] mems_allowed=0 [ 405.845672] CPU: 1 PID: 23865 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 405.853057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.862209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 405.862415] Call Trace: [ 405.873416] dump_stack+0x1c4/0x2b4 [ 405.877058] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.882242] ? mark_held_locks+0x130/0x130 [ 405.886462] ? mark_held_locks+0x130/0x130 [ 405.890685] dump_header+0x27b/0xf72 [ 405.894401] ? debug_smp_processor_id+0x1c/0x20 [ 405.899058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.904582] ? pagefault_out_of_memory+0x197/0x197 [ 405.909500] ? debug_smp_processor_id+0x1c/0x20 [ 405.914163] ? perf_trace_lock_acquire+0x15b/0x800 [ 405.919123] ? perf_trace_lock_acquire+0x15b/0x800 [ 405.920463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 405.924086] ? perf_trace_lock+0x7a0/0x7a0 [ 405.924098] ? perf_trace_lock+0x7a0/0x7a0 [ 405.924127] ? debug_smp_processor_id+0x1c/0x20 [ 405.945869] ? perf_trace_lock_acquire+0x15b/0x800 [ 405.950820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.956359] ? perf_trace_lock+0x7a0/0x7a0 [ 405.960588] ? task_will_free_mem+0x239/0xb30 [ 405.965133] ? ___ratelimit+0x36f/0x655 [ 405.969118] ? lock_downgrade+0x900/0x900 [ 405.973285] ? trace_hardirqs_on+0xbd/0x310 [ 405.977594] ? kasan_check_read+0x11/0x20 [ 405.981729] ? ___ratelimit+0x36f/0x655 [ 405.985690] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 405.991125] ? trace_hardirqs_on+0x310/0x310 [ 405.995523] ? lock_downgrade+0x900/0x900 [ 405.999660] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 406.004747] ? ___ratelimit+0xaa/0x655 [ 406.008624] ? idr_get_free+0xec0/0xec0 [ 406.012593] ? kasan_check_write+0x14/0x20 [ 406.016849] ? do_raw_spin_lock+0xc1/0x200 [ 406.021082] oom_kill_process.cold.27+0x10/0x903 [ 406.025828] ? kasan_check_write+0x14/0x20 [ 406.030051] ? do_raw_spin_lock+0xc1/0x200 [ 406.034274] ? oom_evaluate_task+0x540/0x540 [ 406.038685] ? cgroup_procs_next+0x70/0x70 [ 406.042924] ? _raw_spin_unlock_irq+0x60/0x80 [ 406.047414] ? oom_badness+0xaa0/0xaa0 [ 406.051290] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 406.056032] ? mem_cgroup_iter_break+0x30/0x30 [ 406.060606] ? cgroup_file_notify+0x226/0x2f0 [ 406.065085] out_of_memory+0xa84/0x1430 [ 406.069044] ? kasan_check_read+0x11/0x20 [ 406.073176] ? oom_killer_disable+0x3a0/0x3a0 [ 406.077653] ? kasan_check_write+0x14/0x20 [ 406.081882] ? do_raw_spin_lock+0xc1/0x200 [ 406.086105] mem_cgroup_out_of_memory+0x15e/0x210 [ 406.090935] ? memcg_memory_event+0x40/0x40 [ 406.095246] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 406.100175] ? page_counter_try_charge+0x1c1/0x220 [ 406.105103] try_charge+0xc43/0x1690 [ 406.108816] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 406.114891] ? tcp_sendmsg+0x2f/0x50 [ 406.118599] ? sock_sendmsg+0xd5/0x120 [ 406.122479] ? __sys_sendto+0x3d7/0x670 [ 406.126443] ? __x64_sys_sendto+0xe1/0x1a0 [ 406.130759] ? do_syscall_64+0x1b9/0x820 [ 406.134817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.140170] ? fs_reclaim_acquire+0x20/0x20 [ 406.144477] ? lock_downgrade+0x900/0x900 [ 406.148610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.154137] ? check_preemption_disabled+0x48/0x200 [ 406.159165] ? ___might_sleep+0x1ed/0x300 [ 406.163315] ? debug_smp_processor_id+0x1c/0x20 [ 406.167982] ? perf_trace_lock_acquire+0x15b/0x800 [ 406.172906] ? __sk_mem_raise_allocated+0x642/0x1800 [ 406.178000] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 406.183438] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.188964] ? check_preemption_disabled+0x48/0x200 [ 406.194008] mem_cgroup_charge_skmem+0x1e4/0x390 [ 406.198751] ? mem_cgroup_sk_free+0x90/0x90 [ 406.203083] __sk_mem_raise_allocated+0x642/0x1800 [ 406.208090] ? sk_busy_loop_end+0x1c0/0x1c0 [ 406.212414] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 406.217943] ? alloc_pages_current+0x114/0x210 [ 406.222533] ? skb_page_frag_refill+0x1eb/0x6a0 [ 406.227189] ? sock_kzfree_s+0x60/0x60 [ 406.231060] ? _copy_from_iter_full+0x2b3/0xd20 [ 406.235752] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 406.240773] ? tcp_rate_check_app_limited+0x121/0x460 [ 406.245977] ? iov_iter_advance+0x1460/0x1460 [ 406.250470] __sk_mem_schedule+0x6d/0xe0 [ 406.254522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 406.260052] tcp_sendmsg_locked+0x1c86/0x3f00 [ 406.264543] ? tcp_sendpage+0x60/0x60 [ 406.268334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.273874] ? aa_label_sk_perm+0x46d/0x8e0 [ 406.278183] ? aa_profile_af_perm+0x410/0x410 [ 406.282683] ? ksys_dup3+0x680/0x680 [ 406.286385] ? lock_acquire+0x1ed/0x520 [ 406.290347] ? tcp_sendmsg+0x21/0x50 [ 406.294047] ? trace_hardirqs_on+0xbd/0x310 [ 406.298376] ? lock_release+0x970/0x970 [ 406.302337] ? lock_sock_nested+0xe2/0x120 [ 406.306582] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 406.312034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.317556] ? check_preemption_disabled+0x48/0x200 [ 406.322566] ? lock_sock_nested+0x9a/0x120 [ 406.326795] ? lock_sock_nested+0x9a/0x120 [ 406.331055] ? __local_bh_enable_ip+0x160/0x260 [ 406.335739] tcp_sendmsg+0x2f/0x50 [ 406.339272] inet_sendmsg+0x1a1/0x690 [ 406.343068] ? ipip_gro_receive+0x100/0x100 [ 406.347398] ? apparmor_socket_sendmsg+0x29/0x30 [ 406.352141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.357674] ? security_socket_sendmsg+0x94/0xc0 [ 406.362432] ? ipip_gro_receive+0x100/0x100 [ 406.366762] sock_sendmsg+0xd5/0x120 [ 406.370466] __sys_sendto+0x3d7/0x670 [ 406.374256] ? __ia32_sys_getpeername+0xb0/0xb0 [ 406.378912] ? lock_release+0x970/0x970 [ 406.382921] ? arch_local_save_flags+0x40/0x40 [ 406.387510] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 406.392947] ? aa_af_perm+0x5a0/0x5a0 [ 406.396750] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.402281] ? put_timespec64+0x10f/0x1b0 [ 406.406414] ? nsecs_to_jiffies+0x30/0x30 [ 406.410551] ? trace_hardirqs_on+0xbd/0x310 [ 406.414869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.420409] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.425771] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 406.431211] __x64_sys_sendto+0xe1/0x1a0 [ 406.435262] do_syscall_64+0x1b9/0x820 [ 406.439136] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 406.444487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 406.449402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.454235] ? trace_hardirqs_on_caller+0x310/0x310 [ 406.459246] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 406.464260] ? prepare_exit_to_usermode+0x291/0x3b0 [ 406.469269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.474113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.479303] RIP: 0033:0x457579 [ 406.482484] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.501375] RSP: 002b:00007f6bef265c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 406.509075] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 406.516333] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 406.523587] RBP: 000000000072bfa0 R08: 00000000200000c0 R09: 0000000000000006 [ 406.530870] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2666d4 13:17:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x800002100082) r2 = memfd_create(&(0x7f0000000600)="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", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r1, 0x10, 0x0, 0x400) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000340)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) getpid() r5 = getpgid(0x0) r6 = syz_open_procfs(r5, &(0x7f0000000600)='attr/current\x00') ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000300)) r7 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r6, &(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r7, @ANYRES64, @ANYRESOCT, @ANYRESDEC=0x0], @ANYRESDEC=r7, @ANYRES16, @ANYRES32=r4, @ANYRES64=r0, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRESDEC=r7, @ANYBLOB="00008463594f442906a37ca4c5b04bad2d35ec1414cac9f7b5ef39cbc2133fe94e4ada76cb69c300000000000000000400602e3268becdc8616869d683b708c8af0e56d57bc342ce3e39538d824e1439733974527bb1dd0a3608862d8270acc5d9b5bea21d8ed5d530768d4fe62ba5715cc70f11b180c1a17457315384c9377a412d20f7e3be929b2856408bb9c5c1078f445901e9c9e6ce14f9e85cad3ced4e90293fb8d937b6acc4e5cb6da807854db59ea67de9e7b0cf8c8f4775745b3f0cc50c7fb98842b5b58a636dc63b46689cddb8038862fe2527d5dc9bbb8f82912f56e35dd55af62df61a66b36807a067b2102adce1260b8a501fc41c59732815f50c"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC=r7, @ANYRES16=0x0]], 0x51) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000100)={0x8e, 0xffffffffffff9fcf, 0x7fff, 0x8}, 0x10) recvmsg(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/116, 0x75}, {&(0x7f0000000500)=""/245, 0x19b}, {&(0x7f00000002c0)=""/22, 0x13}, {&(0x7f00000013c0)=""/4096, 0x1350}], 0x4, &(0x7f00000007c0)=""/16, 0x10}, 0x0) [ 406.538229] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 406.574601] Task in /syz2 killed as a result of limit of /syz2 [ 406.593422] memory: usage 204784kB, limit 204800kB, failcnt 2405 [ 406.601759] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.608689] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.616145] Memory cgroup stats for /syz2: cache:8KB rss:2148KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 406.636748] Memory cgroup out of memory: Kill process 23858 (syz-executor2) score 171 or sacrifice child [ 406.647017] Killed process 23858 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 406.658965] print_req_error: I/O error, dev loop0, sector 0 [ 406.668335] oom_reaper: reaped process 23858 (syz-executor2), now anon-rss:0kB, file-rss:32720kB, shmem-rss:0kB 13:17:57 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000480)={0xb, 0xfffffd12, 0xfa00, {&(0x7f0000000600), r0, 0xfe}}, 0x18) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x400001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @local}, 0x10) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x8) socketpair(0x40010, 0x80b, 0x5, &(0x7f00000007c0)) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x9, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}}, 0x0) 13:17:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6000000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40820220}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xe0, r1, 0x401, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x75e}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x32d779e2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x10cfbc0c8c3d676a) r2 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x336, 0x200040) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000003c0)=""/98) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x1d, 0xfffffffffffffffb, 0x0, 0x0, {0x7592da20}, [@nested={0x4, 0x3e}]}, 0x18}}, 0x0) r3 = semget$private(0x0, 0x0, 0x400) r4 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x101000) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x102030, r4, 0x180000000) semctl$SETVAL(r3, 0x3, 0x10, &(0x7f0000000000)=0x6) 13:17:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xf00000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x142800, @empty, [0x0, 0x2000000]}, 0x6) 13:17:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mremap(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ef0000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) munmap(&(0x7f00009d4000/0x4000)=nil, 0x4000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x94, &(0x7f00000004c0)=[@in={0x2, 0x4e22}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0x10001}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x0, 0x1, @dev, 0x7}, @in6={0xa, 0x0, 0xb195, @remote, 0x1}, @in={0x2, 0x4e22, @remote}]}, &(0x7f00000005c0)=0x10) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000640)={[], 0xea0b, 0x9, 0x1, 0x0, 0x1f, 0x10f000, 0xf000, [], 0xbc}) socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYBLOB="830000003240dfd6676c7d6d90d890f35cb0dc23472d78fe2464a66dd25fdfcc4210fd850c1d69d50158e01a5d20abb5a48a17a52168beba6a6cdfd5a81526a242f2d32fa8321418569e34f0cbeee08928555e84c0f296e9904a479481196faa5c0a597d198a10f3bcddb4ca72e72f7dec2a651399ebcab28ca47f4092361075d310a1ba963c91"], &(0x7f0000000200)=0x1) socket$netlink(0x10, 0x3, 0x0) mremap(&(0x7f0000b7a000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000003c0)={0x18, 0x0, {0x1, @random="020c1bdf4835", 'vlan0\x00'}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 407.236343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 407.263953] netlink: 'syz-executor3': attribute type 62 has an invalid length. [ 407.267987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:17:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x1b00000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 407.305556] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 407.333242] netlink: 'syz-executor3': attribute type 62 has an invalid length. 13:17:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x400300}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 407.366411] syz-executor2 cpuset=syz2 mems_allowed=0 [ 407.397362] CPU: 0 PID: 23910 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 407.404946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.414322] Call Trace: [ 407.416931] dump_stack+0x1c4/0x2b4 [ 407.420567] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.425771] ? mark_held_locks+0x130/0x130 [ 407.430012] ? mark_held_locks+0x130/0x130 [ 407.434258] dump_header+0x27b/0xf72 [ 407.437998] ? pagefault_out_of_memory+0x197/0x197 [ 407.442955] ? mark_held_locks+0x130/0x130 [ 407.447207] ? rcu_read_unlock+0x16/0x60 [ 407.451277] ? lock_downgrade+0x900/0x900 [ 407.455504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.461047] ? css_next_child+0x1c3/0x620 [ 407.465201] ? find_lock_task_mm+0x22e/0x4d0 [ 407.465227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.475155] ? task_will_free_mem+0x239/0xb30 [ 407.475180] ? ___ratelimit+0x36f/0x655 [ 407.483639] ? lock_downgrade+0x900/0x900 [ 407.487792] ? trace_hardirqs_on+0xbd/0x310 [ 407.492119] ? kasan_check_read+0x11/0x20 [ 407.496274] ? ___ratelimit+0x36f/0x655 [ 407.500266] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 407.505734] ? trace_hardirqs_on+0x310/0x310 [ 407.510146] ? lock_downgrade+0x900/0x900 [ 407.514305] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 407.519498] ? ___ratelimit+0xaa/0x655 [ 407.523412] ? idr_get_free+0xec0/0xec0 [ 407.527396] ? kasan_check_write+0x14/0x20 [ 407.531644] ? do_raw_spin_lock+0xc1/0x200 [ 407.535889] oom_kill_process.cold.27+0x10/0x903 [ 407.540652] ? kasan_check_write+0x14/0x20 [ 407.544895] ? do_raw_spin_lock+0xc1/0x200 [ 407.549143] ? oom_evaluate_task+0x540/0x540 [ 407.553559] ? cgroup_procs_next+0x70/0x70 [ 407.557801] ? _raw_spin_unlock_irq+0x60/0x80 [ 407.562309] ? oom_badness+0xaa0/0xaa0 [ 407.566204] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 407.570961] ? mem_cgroup_iter_break+0x30/0x30 [ 407.575565] ? cgroup_file_notify+0x226/0x2f0 [ 407.580071] out_of_memory+0xa84/0x1430 [ 407.584048] ? kasan_check_read+0x11/0x20 [ 407.588200] ? oom_killer_disable+0x3a0/0x3a0 [ 407.592698] ? kasan_check_write+0x14/0x20 [ 407.596937] ? do_raw_spin_lock+0xc1/0x200 [ 407.601201] mem_cgroup_out_of_memory+0x15e/0x210 [ 407.606059] ? memcg_memory_event+0x40/0x40 [ 407.610390] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 407.615335] ? page_counter_try_charge+0x1c1/0x220 [ 407.620275] try_charge+0xc43/0x1690 [ 407.624019] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 407.630089] ? tcp_sendmsg+0x2f/0x50 [ 407.633812] ? sock_sendmsg+0xd5/0x120 [ 407.637723] ? __sys_sendto+0x3d7/0x670 [ 407.641702] ? __x64_sys_sendto+0xe1/0x1a0 [ 407.645942] ? do_syscall_64+0x1b9/0x820 [ 407.650015] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.655389] ? fs_reclaim_acquire+0x20/0x20 [ 407.659720] ? lock_downgrade+0x900/0x900 [ 407.663874] ? ___might_sleep+0x1ed/0x300 [ 407.668039] ? trace_hardirqs_on+0xbd/0x310 [ 407.672360] ? lock_downgrade+0x900/0x900 [ 407.676510] ? __kmalloc_node_track_caller+0x33/0x70 [ 407.681616] ? kasan_unpoison_shadow+0x35/0x50 [ 407.686204] ? __sk_mem_raise_allocated+0x642/0x1800 [ 407.691320] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 407.696776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 407.702327] ? check_preemption_disabled+0x48/0x200 [ 407.707354] mem_cgroup_charge_skmem+0x1e4/0x390 [ 407.712121] ? mem_cgroup_sk_free+0x90/0x90 [ 407.716454] __sk_mem_raise_allocated+0x642/0x1800 [ 407.721396] ? sk_busy_loop_end+0x1c0/0x1c0 [ 407.725728] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 407.730751] ? skb_page_frag_refill+0x1eb/0x6a0 [ 407.735431] ? sock_kzfree_s+0x60/0x60 [ 407.739330] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 407.744362] ? sk_stream_alloc_skb+0x34b/0x970 [ 407.748954] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 407.753995] ? skb_entail+0x618/0x8c0 [ 407.757800] ? tcp_rate_check_app_limited+0x121/0x460 [ 407.763036] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 407.767806] __sk_mem_schedule+0x6d/0xe0 [ 407.771911] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 407.777467] tcp_sendmsg_locked+0x1c86/0x3f00 [ 407.781980] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 407.787285] ? tcp_sendpage+0x60/0x60 [ 407.791107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 407.796662] ? aa_label_sk_perm+0x46d/0x8e0 [ 407.801003] ? aa_profile_af_perm+0x410/0x410 [ 407.805507] ? ksys_dup3+0x680/0x680 [ 407.809231] ? lock_acquire+0x1ed/0x520 [ 407.813210] ? tcp_sendmsg+0x21/0x50 [ 407.816929] ? trace_hardirqs_on+0xbd/0x310 [ 407.821255] ? lock_release+0x970/0x970 [ 407.825232] ? lock_sock_nested+0xe2/0x120 [ 407.829469] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 407.835027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.840582] ? check_preemption_disabled+0x48/0x200 [ 407.845648] ? lock_sock_nested+0x9a/0x120 [ 407.849891] ? lock_sock_nested+0x9a/0x120 [ 407.854139] ? __local_bh_enable_ip+0x160/0x260 [ 407.858821] tcp_sendmsg+0x2f/0x50 [ 407.862380] inet_sendmsg+0x1a1/0x690 [ 407.866200] ? ipip_gro_receive+0x100/0x100 [ 407.870535] ? apparmor_socket_sendmsg+0x29/0x30 [ 407.875316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.880872] ? security_socket_sendmsg+0x94/0xc0 [ 407.885644] ? ipip_gro_receive+0x100/0x100 [ 407.889991] sock_sendmsg+0xd5/0x120 [ 407.893722] __sys_sendto+0x3d7/0x670 [ 407.897540] ? __ia32_sys_getpeername+0xb0/0xb0 [ 407.902224] ? lock_release+0x970/0x970 [ 407.906214] ? arch_local_save_flags+0x40/0x40 [ 407.910815] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 407.916277] ? aa_af_perm+0x5a0/0x5a0 [ 407.920121] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 407.925676] ? put_timespec64+0x10f/0x1b0 [ 407.929833] ? nsecs_to_jiffies+0x30/0x30 [ 407.934004] ? trace_hardirqs_on+0xbd/0x310 [ 407.938335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.943881] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.949257] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 407.954723] __x64_sys_sendto+0xe1/0x1a0 [ 407.958797] do_syscall_64+0x1b9/0x820 [ 407.962693] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 407.968071] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.973012] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.977866] ? trace_hardirqs_on_caller+0x310/0x310 [ 407.982914] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 407.987951] ? prepare_exit_to_usermode+0x291/0x3b0 [ 407.992996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.997858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.003049] RIP: 0033:0x457579 [ 408.006245] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.025156] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 408.032878] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 408.040153] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 13:17:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x600800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0xff}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x3, 0x9, 0x3f, 0x40}, &(0x7f0000000300)=0x98) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f0000000000)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}) 13:17:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x649976fffea1fdb6, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 408.047428] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 408.054702] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 408.061982] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff 13:17:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6800}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 408.138684] Task in /syz2 killed as a result of limit of /syz2 [ 408.144942] memory: usage 204792kB, limit 204800kB, failcnt 2429 [ 408.151803] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 408.159493] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 408.165961] Memory cgroup stats for /syz2: cache:8KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:180KB inactive_file:0KB active_file:0KB unevictable:0KB 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x4000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:58 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r2 = userfaultfd(0x0) r3 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x12) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000000000000000000000000000000180000204988f94a3a0b612a67a9f4cea51a2a2d586c59900b4e374dd44963ea2153158d20395408b6c80e3312deb639b56f10f413ce6e54359ad7ba18b0e61bb77a3e3e0e752dc21db7dddb000000000000080000000000000000000000000000d342740b389cfec3a4a0d91adfb78d0c75a0b667b29f165f6d83b6545020f4500234b88a8808dcf7f5ff2d00a07d1c4bd8f11d1b076a85fabed58a491155696b4d4b03137a8e3a2d1f1f8aee"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = dup(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r7 = syz_open_procfs(r6, &(0x7f0000000600)='environ\x00') setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r8 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='md5sumtrusted]ppp1\x00', 0xffffffffffffffff) keyctl$describe(0x6, r8, &(0x7f00000001c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x6, 'queue0\x00', 0xffffffff}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) ftruncate(r1, 0x0) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0x280080) sendfile(r5, r9, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) 13:17:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x600800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0xff}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={r2, @in={{0x2, 0x4e21, @multicast2}}, 0x4, 0x3, 0x9, 0x3f, 0x40}, &(0x7f0000000300)=0x98) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f0000000000)={{}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7}) 13:17:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xdb06}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 408.334909] Memory cgroup out of memory: Kill process 23909 (syz-executor2) score 161 or sacrifice child [ 408.375726] Killed process 23909 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32832kB, shmem-rss:0kB [ 408.387177] oom_reaper: reaped process 23909 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:17:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x4, @empty, [0x0, 0x2000000]}, 0x6) 13:17:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_STATFS(0xffffffffffffff9c, &(0x7f0000000100)={0x60, 0x0, 0x2, {{0x81, 0x7, 0x0, 0x6, 0x5, 0x2008, 0x80, 0xffffffffffffff81}}}, 0x60) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/snmp6\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @empty, 0x20}, r1}}, 0x30) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000640)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x91c7, @in6=@mcast1, 0x4e22, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xa0, 0x21, 0x0, r3}, {0x6c0, 0x0, 0x6, 0x10001, 0x3, 0x100000000, 0x156e, 0x8001}, {0x5, 0x7fff, 0x1000, 0x1ff}, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@local, 0x34ff, 0x1, 0x0, 0x10000, 0x0, 0x8289, 0x4}}, 0xe8) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sync() r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)=0x0) sched_setparam(r5, &(0x7f00000001c0)=0x80000000) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="008bf5899c4b44e76e3bc92b684f5b6ebc9a98646c1ccaf617409a25b7c225234b8bbcbabbd899a7fe78ce46faf1e285e0f7cf66604ecdde74089f393bf358a758c052be4a9155f10008f5d42c8307e9d215b965018a88b7fc6a037a094cf45843f4c741f0a7e689bcd5d10b2b70fea33d42219ce35a10c1d6377e0dbaf336e1f1f5da5ea8cd56000000001196934a2cb4fe"], 0x1}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r7 = accept4(r4, 0x0, &(0x7f0000000080), 0x0) shutdown(r7, 0x1) 13:17:58 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x72, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x78, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x74}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0xfe80000000000000, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 408.530954] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x14, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7fffef9c}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 408.641394] syz-executor2 cpuset=syz2 mems_allowed=0 [ 408.661189] CPU: 0 PID: 23985 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 408.668581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.677941] Call Trace: [ 408.680551] dump_stack+0x1c4/0x2b4 [ 408.684190] ? dump_stack_print_info.cold.2+0x52/0x52 [ 408.689430] ? mark_held_locks+0x130/0x130 [ 408.693671] ? mark_held_locks+0x130/0x130 [ 408.697917] dump_header+0x27b/0xf72 [ 408.697939] ? pagefault_out_of_memory+0x197/0x197 [ 408.697959] ? mark_held_locks+0x130/0x130 [ 408.706595] ? rcu_read_unlock+0x16/0x60 [ 408.706612] ? lock_downgrade+0x900/0x900 [ 408.706633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.724577] ? css_next_child+0x1c3/0x620 [ 408.728735] ? find_lock_task_mm+0x22e/0x4d0 [ 408.733160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.738710] ? task_will_free_mem+0x239/0xb30 [ 408.743228] ? ___ratelimit+0x36f/0x655 [ 408.747208] ? lock_downgrade+0x900/0x900 [ 408.751365] ? trace_hardirqs_on+0xbd/0x310 [ 408.755689] ? kasan_check_read+0x11/0x20 [ 408.759838] ? ___ratelimit+0x36f/0x655 [ 408.763823] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 408.769280] ? trace_hardirqs_on+0x310/0x310 [ 408.773697] ? lock_downgrade+0x900/0x900 [ 408.777853] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 408.777868] ? ___ratelimit+0xaa/0x655 [ 408.777883] ? idr_get_free+0xec0/0xec0 [ 408.777901] ? kasan_check_write+0x14/0x20 [ 408.795074] ? do_raw_spin_lock+0xc1/0x200 [ 408.799329] oom_kill_process.cold.27+0x10/0x903 [ 408.804097] ? kasan_check_write+0x14/0x20 [ 408.808345] ? do_raw_spin_lock+0xc1/0x200 [ 408.812602] ? oom_evaluate_task+0x540/0x540 [ 408.817019] ? cgroup_procs_next+0x70/0x70 [ 408.821270] ? _raw_spin_unlock_irq+0x60/0x80 [ 408.825789] ? oom_badness+0xaa0/0xaa0 [ 408.829691] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 408.834461] ? mem_cgroup_iter_break+0x30/0x30 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x600, 0x0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 408.839058] ? cgroup_file_notify+0x226/0x2f0 [ 408.843562] out_of_memory+0xa84/0x1430 [ 408.847556] ? kasan_check_read+0x11/0x20 [ 408.851711] ? oom_killer_disable+0x3a0/0x3a0 [ 408.856215] ? kasan_check_write+0x14/0x20 [ 408.860469] ? do_raw_spin_lock+0xc1/0x200 [ 408.864726] mem_cgroup_out_of_memory+0x15e/0x210 [ 408.869589] ? memcg_memory_event+0x40/0x40 [ 408.873914] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 408.878860] ? page_counter_try_charge+0x1c1/0x220 [ 408.883804] try_charge+0xc43/0x1690 13:17:58 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r2 = userfaultfd(0x0) r3 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x12) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000000000000000000000000000000180000204988f94a3a0b612a67a9f4cea51a2a2d586c59900b4e374dd44963ea2153158d20395408b6c80e3312deb639b56f10f413ce6e54359ad7ba18b0e61bb77a3e3e0e752dc21db7dddb000000000000080000000000000000000000000000d342740b389cfec3a4a0d91adfb78d0c75a0b667b29f165f6d83b6545020f4500234b88a8808dcf7f5ff2d00a07d1c4bd8f11d1b076a85fabed58a491155696b4d4b03137a8e3a2d1f1f8aee"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = dup(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r7 = syz_open_procfs(r6, &(0x7f0000000600)='environ\x00') setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r8 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='md5sumtrusted]ppp1\x00', 0xffffffffffffffff) keyctl$describe(0x6, r8, &(0x7f00000001c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x6, 'queue0\x00', 0xffffffff}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) ftruncate(r1, 0x0) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0x280080) sendfile(r5, r9, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) 13:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1f00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 408.887534] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 408.893605] ? tcp_sendmsg+0x2f/0x50 [ 408.897328] ? sock_sendmsg+0xd5/0x120 [ 408.901217] ? __sys_sendto+0x3d7/0x670 [ 408.905191] ? __x64_sys_sendto+0xe1/0x1a0 [ 408.909429] ? do_syscall_64+0x1b9/0x820 [ 408.913496] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.918875] ? fs_reclaim_acquire+0x20/0x20 [ 408.923206] ? lock_downgrade+0x900/0x900 [ 408.927363] ? plist_check_head+0xea/0x150 [ 408.927382] ? ___might_sleep+0x1ed/0x300 [ 408.927399] ? trace_hardirqs_on+0xbd/0x310 [ 408.927419] ? lock_downgrade+0x900/0x900 [ 408.935800] ? __kmalloc_node_track_caller+0x33/0x70 [ 408.935815] ? kasan_unpoison_shadow+0x35/0x50 [ 408.935838] ? __sk_mem_raise_allocated+0x642/0x1800 [ 408.935858] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 408.964549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.970106] ? check_preemption_disabled+0x48/0x200 [ 408.975138] mem_cgroup_charge_skmem+0x1e4/0x390 [ 408.979907] ? mem_cgroup_sk_free+0x90/0x90 [ 408.984346] __sk_mem_raise_allocated+0x642/0x1800 [ 408.989295] ? sk_busy_loop_end+0x1c0/0x1c0 [ 408.993645] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 408.999202] ? alloc_pages_current+0x114/0x210 [ 409.003809] ? skb_page_frag_refill+0x1eb/0x6a0 [ 409.008493] ? sock_kzfree_s+0x60/0x60 [ 409.012389] ? _copy_from_iter_full+0x2b3/0xd20 [ 409.017070] ? tcp_chrono_start+0x190/0x1e0 [ 409.021406] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 409.026436] ? tcp_rate_check_app_limited+0x121/0x460 [ 409.031639] ? iov_iter_advance+0x1460/0x1460 [ 409.036167] __sk_mem_schedule+0x6d/0xe0 [ 409.040243] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 409.045796] tcp_sendmsg_locked+0x1c86/0x3f00 [ 409.050319] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 409.055539] ? tcp_sendpage+0x60/0x60 [ 409.059359] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 409.064901] ? aa_label_sk_perm+0x46d/0x8e0 [ 409.069345] ? aa_profile_af_perm+0x410/0x410 [ 409.073849] ? ksys_dup3+0x680/0x680 [ 409.077578] ? lock_acquire+0x1ed/0x520 [ 409.081564] ? tcp_sendmsg+0x21/0x50 [ 409.085290] ? trace_hardirqs_on+0xbd/0x310 [ 409.089632] ? lock_release+0x970/0x970 [ 409.093620] ? lock_sock_nested+0xe2/0x120 [ 409.097869] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 409.103344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.108909] ? check_preemption_disabled+0x48/0x200 [ 409.113949] ? lock_sock_nested+0x9a/0x120 [ 409.118200] ? lock_sock_nested+0x9a/0x120 [ 409.122447] ? __local_bh_enable_ip+0x160/0x260 [ 409.127142] tcp_sendmsg+0x2f/0x50 [ 409.130698] inet_sendmsg+0x1a1/0x690 [ 409.134516] ? ipip_gro_receive+0x100/0x100 [ 409.138854] ? apparmor_socket_sendmsg+0x29/0x30 [ 409.143618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.149169] ? security_socket_sendmsg+0x94/0xc0 [ 409.153939] ? ipip_gro_receive+0x100/0x100 [ 409.158290] sock_sendmsg+0xd5/0x120 [ 409.162020] __sys_sendto+0x3d7/0x670 [ 409.165836] ? __ia32_sys_getpeername+0xb0/0xb0 [ 409.170519] ? lock_release+0x970/0x970 [ 409.174506] ? arch_local_save_flags+0x40/0x40 [ 409.179100] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 409.184556] ? aa_af_perm+0x5a0/0x5a0 [ 409.188466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 13:17:59 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r0 = dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$intptr(0x0, 0x7) r2 = userfaultfd(0x0) r3 = socket(0x18, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x12) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000000000000000000000000000000180000204988f94a3a0b612a67a9f4cea51a2a2d586c59900b4e374dd44963ea2153158d20395408b6c80e3312deb639b56f10f413ce6e54359ad7ba18b0e61bb77a3e3e0e752dc21db7dddb000000000000080000000000000000000000000000d342740b389cfec3a4a0d91adfb78d0c75a0b667b29f165f6d83b6545020f4500234b88a8808dcf7f5ff2d00a07d1c4bd8f11d1b076a85fabed58a491155696b4d4b03137a8e3a2d1f1f8aee"], &(0x7f0000000180)=0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = dup(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x4000000) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r5, 0x4, 0x2000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r7 = syz_open_procfs(r6, &(0x7f0000000600)='environ\x00') setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) r8 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='md5sumtrusted]ppp1\x00', 0xffffffffffffffff) keyctl$describe(0x6, r8, &(0x7f00000001c0)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x6, 'queue0\x00', 0xffffffff}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000500)) ftruncate(r1, 0x0) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0x280080) sendfile(r5, r9, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) [ 409.194021] ? put_timespec64+0x10f/0x1b0 [ 409.198188] ? nsecs_to_jiffies+0x30/0x30 [ 409.202353] ? trace_hardirqs_on+0xbd/0x310 [ 409.206686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.212234] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.217611] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 409.223070] __x64_sys_sendto+0xe1/0x1a0 [ 409.227609] do_syscall_64+0x1b9/0x820 [ 409.231515] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 409.236900] ? syscall_return_slowpath+0x5e0/0x5e0 [ 409.241840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.246693] ? trace_hardirqs_on_caller+0x310/0x310 [ 409.251730] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 409.256759] ? prepare_exit_to_usermode+0x291/0x3b0 [ 409.261789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.266651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.271850] RIP: 0033:0x457579 [ 409.275046] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.293946] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.301667] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 409.301675] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 409.301683] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 409.301691] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 409.301699] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 409.321112] Task in /syz2 killed as a result of limit of /syz2 [ 409.321145] memory: usage 184240kB, limit 204800kB, failcnt 2476 [ 409.321154] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.321162] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:17:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x20480, @empty, [0x0, 0x2000000]}, 0x6) 13:17:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_STATFS(0xffffffffffffff9c, &(0x7f0000000100)={0x60, 0x0, 0x2, {{0x81, 0x7, 0x0, 0x6, 0x5, 0x2008, 0x80, 0xffffffffffffff81}}}, 0x60) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/snmp6\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7, @empty, 0x20}, r1}}, 0x30) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000640)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x91c7, @in6=@mcast1, 0x4e22, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0xa0, 0x21, 0x0, r3}, {0x6c0, 0x0, 0x6, 0x10001, 0x3, 0x100000000, 0x156e, 0x8001}, {0x5, 0x7fff, 0x1000, 0x1ff}, 0x1f, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d4, 0x2b}, 0x2, @in=@local, 0x34ff, 0x1, 0x0, 0x10000, 0x0, 0x8289, 0x4}}, 0xe8) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sync() r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)=0x0) sched_setparam(r5, &(0x7f00000001c0)=0x80000000) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="008bf5899c4b44e76e3bc92b684f5b6ebc9a98646c1ccaf617409a25b7c225234b8bbcbabbd899a7fe78ce46faf1e285e0f7cf66604ecdde74089f393bf358a758c052be4a9155f10008f5d42c8307e9d215b965018a88b7fc6a037a094cf45843f4c741f0a7e689bcd5d10b2b70fea33d42219ce35a10c1d6377e0dbaf336e1f1f5da5ea8cd56000000001196934a2cb4fe"], 0x1}, 0x1, 0x0, 0x0, 0x4048090}, 0x8000) r7 = accept4(r4, 0x0, &(0x7f0000000080), 0x0) shutdown(r7, 0x1) 13:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x14, 0x0, 0x0, 0x1ac, 0x0, 0x2, 0x0, 0x5]}, 0x33}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x9, 0x20, 0xfffffffffffffff9, 0x80}, &(0x7f0000000140)=0x18) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000002680), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000300)="8659731986df34aba6d02e64ead9a505d32b57144168bc027711314fae56ccbcefba64eebdf6d219898fea4ce950ec9cfb2ba2a9d8b58b53b0df4ffea15499132b", 0x41, 0x40, &(0x7f00000000c0), 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @dev}, &(0x7f0000000440)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r1, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl=@kern={0x10, 0x0, 0x0, 0x200200}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x60}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 409.321166] Memory cgroup stats for /syz2: cache:8KB rss:88KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:176KB inactive_file:0KB active_file:0KB unevictable:0KB [ 409.321256] Memory cgroup out of memory: Kill process 23984 (syz-executor2) score 161 or sacrifice child [ 409.321313] Killed process 23984 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xb0efff7f}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xcaaaafeffaaaaa8, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x9cefff7f}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'lo\x00', @ifru_addrs=@can={0x1d, 0x0}}}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r2}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x7, 0x2a2, 0x5e0, {}, {0x0, 0x7530}, {0x3, 0x0, 0x9, 0xffffffff}, 0x1, @canfd={{0x0, 0x9, 0xffffffffffffff05, 0x80000001}, 0x3c, 0x2, 0x0, 0x0, "3a9fb4c9636ffadf17cab9a4aa9478f3b9389d8d8f8e3111173ce446412c9d25d3423f632ccef81dc4d343ee046091d59835029a53bf8c6e5f34bc5d4e88e3de"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = accept(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000180)="a93cf9b938a1939b812bbb06727cadc53d5188ae561081949419e2ba9d3aa61eebedc3f5b5e986673dc10bf470fefd87ce35e202abb142eb6769f7cbc3a00ad557748561575d26903177b86ba560a4e1b6a367c5171365a3740076872befe71d9751c68b0b617624c058bc3dacac2952722f3da20ae3cc0da1df6f7e844e4dc0d534ad7df9e1afc523fe71fad83be69f5fd4714644786674de665926b1805e328771c43c71064c6ee9c13afa504b29", 0xaf) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, "5b0c9181be92b50c118cd744e3fb776cee440363b4c1a1e23971ec409f2e76a0"}) r4 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0xcd7, 0x800) write$vnet(r4, &(0x7f0000000640)={0x1, {&(0x7f0000000440)=""/217, 0xd9, &(0x7f0000000540)=""/235, 0x3, 0x3}}, 0x68) 13:17:59 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x4e6) r1 = socket(0x11, 0x80002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x482040, 0x0) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0xffffffffffffff39) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) 13:17:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x900000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x7bc200a39a395d3b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x75b73ebf715d2215}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r3}}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000071, 0xffff8000]}) 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x600}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1d00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x15, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 13:17:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x11000000, @empty, [0x0, 0x2000000]}, 0x6) 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4800}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:17:59 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x20) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc0fe}}, 0xffffffffffffffff}, 0x1c) 13:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3f00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:17:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6db}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000f840)={&(0x7f0000000040), 0xc, &(0x7f000000f800)={&(0x7f0000000280)=ANY=[]}}, 0x8000) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000180)={0x2, [0x80000001, 0x12000000]}) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 13:18:00 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) write$binfmt_elf32(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x4e6) r1 = socket(0x11, 0x80002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x482040, 0x0) sendto$inet(r2, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) recvfrom(r2, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x0, 0x0, 0xffffffffffffff39) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) 13:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1800000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x80550000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:00 executing program 5: utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x81, 0x5}) r0 = socket$inet(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07041dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 13:18:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 410.287561] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 13:18:00 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x150) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpgid(0xffffffffffffffff) gettid() sendmsg$nl_generic(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000008}, 0xfee0, &(0x7f00000000c0)={&(0x7f0000000500)={0x20, 0x36, 0x301, 0x2, 0x0, {0x1}, [@typed={0x0, 0x39, @fd=r0}]}, 0xffffffffffffffdf}}, 0x8800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="00002dbd7000fddbdf250d000000080004003f0000002000020014000100ac1414aa00000000000000000000000008000600040000004000020014000100fe8000000000000000000000000000bb087b0400020000000800060007000000080007000008000008000b000a000000080006000000000008000500010000000800050006000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2ff, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x7fffffff, 0x12200) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x5, 0x8, 0x0, 0x1, 0x9, 0x4, 0x6ab, 0x7, 0x1, 0xfffffffffffffff7}, 0xb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000240)={0x5, 0x0, 0x4, 0x20, 0x3}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x1ff, 0x4, 0x1ff, 0x7, 0x3, 0x80, 0x5, 0x0}, &(0x7f0000000400)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000440)={r4, 0xeae3, 0x3, [0x2, 0x2, 0x6]}, 0xe) 13:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x266febfeff21f7a0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 410.336473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 13:18:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x7800000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb258000000000000"], 0x3b) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x14000, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000300)={@broadcast, @empty, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000940)={0x0, @multicast2, @local}, &(0x7f0000000980)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a80)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @multicast2, @multicast2}, &(0x7f0000000c00)=0xc) accept4$packet(r3, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c80)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000cc0)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000e00)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000f00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000001080)=0xe8) recvmmsg(r3, &(0x7f0000002ec0)=[{{&(0x7f00000010c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/168, 0xa8}, {&(0x7f0000001200)=""/125, 0x7d}, {&(0x7f0000001280)=""/95, 0x5f}], 0x3, &(0x7f0000001340)=""/12, 0xc, 0x2}, 0x71}, {{&(0x7f0000001380), 0x80, &(0x7f0000001600)=[{&(0x7f0000001400)=""/41, 0x29}, {&(0x7f0000001440)=""/73, 0x49}, {&(0x7f00000014c0)=""/244, 0xf4}, {&(0x7f00000015c0)=""/29, 0x1d}], 0x4, &(0x7f0000001640)=""/151, 0x97, 0x1e}, 0x2}, {{&(0x7f0000001700)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001780)=""/84, 0x54}, {&(0x7f0000001800)=""/240, 0xf0}, {&(0x7f0000001900)=""/65, 0x41}], 0x3, &(0x7f00000019c0)=""/224, 0xe0, 0x40}, 0x4}, {{&(0x7f0000001ac0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/147, 0x93}, {&(0x7f0000001c00)=""/137, 0x89}], 0x2, &(0x7f0000001d00)=""/16, 0x10, 0x6}, 0x9}, {{&(0x7f0000001d40)=@can, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/112, 0x70}, {&(0x7f0000002e40)=""/6, 0x6}], 0x3}, 0x3ff}], 0x5, 0x40000002, &(0x7f0000003000)={0x0, 0x1c9c380}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003040)={{{@in6=@ipv4={[], [], @loopback}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000003140)=0xe8) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000003180)={@remote, @loopback, 0x0}, &(0x7f00000031c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000003200)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000003300)=0xe8) accept$packet(r3, &(0x7f0000003340)={0x11, 0x0, 0x0}, &(0x7f0000003380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003400)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000003480)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000003580)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000003c40)={&(0x7f00000000c0), 0xc, &(0x7f0000003c00)={&(0x7f00000035c0)={0x614, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x14c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x8, 0x1, 0xffffffffffff8000, 0x80000000}, {0x9, 0xfffffffffffffffa, 0x2, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0xb8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xbe7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x48, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r11}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff7fff}}}]}}, {{0x8, 0x1, r14}, {0x16c, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xd30a}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r17}, {0x144, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x90}}, {0x8, 0x6, r20}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x40}, 0x14) dup3(r1, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) 13:18:00 executing program 3: socket$packet(0x11, 0x3, 0x300) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = getpid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace(0xe, r1) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff}) 13:18:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x281400, @empty, [0x0, 0x2000000]}, 0x6) 13:18:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0xfffffffffffff682, 0x7}, 0x2) msgrcv(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) 13:18:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfec0, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x74000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:00 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x4e24}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000480)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getgid() fstat(r0, &(0x7f00000008c0)) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x1, 0x2) geteuid() getegid() getegid() getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)) getuid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4}, @sadb_x_nat_t_port={0x1}]}, 0x38}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0), 0xc, &(0x7f0000002980), 0x0, &(0x7f00000029c0), 0x0, 0x881}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x3}, &(0x7f00000006c0)=0x8) write$binfmt_misc(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="3e9c2c0492be84fd7fbe"], 0x1200e) process_vm_writev(0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)=""/247, 0xf7}], 0x1000000000000147, &(0x7f0000121000), 0x34b, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000400), 0x4) [ 410.684162] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 410.713083] syz-executor2 cpuset=syz2 mems_allowed=0 [ 410.719454] CPU: 0 PID: 24174 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 410.726833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.736192] Call Trace: [ 410.738797] dump_stack+0x1c4/0x2b4 [ 410.742447] ? dump_stack_print_info.cold.2+0x52/0x52 [ 410.747655] ? mark_held_locks+0x130/0x130 [ 410.751908] ? mark_held_locks+0x130/0x130 [ 410.756168] dump_header+0x27b/0xf72 [ 410.759911] ? pagefault_out_of_memory+0x197/0x197 [ 410.764862] ? mark_held_locks+0x130/0x130 [ 410.769114] ? rcu_read_unlock+0x16/0x60 [ 410.773199] ? lock_downgrade+0x900/0x900 [ 410.777373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.782931] ? css_next_child+0x1c3/0x620 [ 410.787096] ? find_lock_task_mm+0x22e/0x4d0 [ 410.791534] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.797093] ? task_will_free_mem+0x239/0xb30 [ 410.801612] ? ___ratelimit+0x36f/0x655 [ 410.805613] ? lock_downgrade+0x900/0x900 [ 410.809787] ? trace_hardirqs_on+0xbd/0x310 [ 410.814125] ? kasan_check_read+0x11/0x20 [ 410.818297] ? ___ratelimit+0x36f/0x655 [ 410.822338] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 410.827814] ? trace_hardirqs_on+0x310/0x310 [ 410.832250] ? lock_downgrade+0x900/0x900 [ 410.836413] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 410.841534] ? ___ratelimit+0xaa/0x655 [ 410.845437] ? idr_get_free+0xec0/0xec0 [ 410.849420] ? kasan_check_write+0x14/0x20 [ 410.853672] ? do_raw_spin_lock+0xc1/0x200 [ 410.857939] oom_kill_process.cold.27+0x10/0x903 [ 410.862721] ? kasan_check_write+0x14/0x20 [ 410.866972] ? do_raw_spin_lock+0xc1/0x200 [ 410.871235] ? oom_evaluate_task+0x540/0x540 [ 410.875695] ? cgroup_procs_next+0x70/0x70 [ 410.879960] ? _raw_spin_unlock_irq+0x60/0x80 [ 410.884479] ? oom_badness+0xaa0/0xaa0 [ 410.888379] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 410.893149] ? mem_cgroup_iter_break+0x30/0x30 [ 410.897748] ? cgroup_file_notify+0x226/0x2f0 [ 410.902250] out_of_memory+0xa84/0x1430 [ 410.906239] ? kasan_check_read+0x11/0x20 [ 410.910398] ? oom_killer_disable+0x3a0/0x3a0 [ 410.914898] ? kasan_check_write+0x14/0x20 [ 410.919138] ? do_raw_spin_lock+0xc1/0x200 [ 410.923400] mem_cgroup_out_of_memory+0x15e/0x210 [ 410.928263] ? memcg_memory_event+0x40/0x40 [ 410.932597] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 410.937537] ? page_counter_try_charge+0x1c1/0x220 [ 410.942577] try_charge+0xc43/0x1690 [ 410.946321] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 410.952395] ? tcp_sendmsg+0x2f/0x50 [ 410.956118] ? sock_sendmsg+0xd5/0x120 [ 410.960017] ? __sys_sendto+0x3d7/0x670 [ 410.964279] ? __x64_sys_sendto+0xe1/0x1a0 [ 410.968625] ? do_syscall_64+0x1b9/0x820 [ 410.972732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.978117] ? fs_reclaim_acquire+0x20/0x20 [ 410.982488] ? lock_downgrade+0x900/0x900 [ 410.986653] ? ___might_sleep+0x1ed/0x300 [ 410.990828] ? lock_downgrade+0x900/0x900 [ 410.995442] ? trace_hardirqs_on+0xbd/0x310 [ 410.999799] ? __kmalloc_node_track_caller+0x33/0x70 [ 411.004945] ? kasan_unpoison_shadow+0x35/0x50 [ 411.009566] ? __sk_mem_raise_allocated+0x642/0x1800 [ 411.014774] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 411.020248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.025809] ? check_preemption_disabled+0x48/0x200 [ 411.030876] mem_cgroup_charge_skmem+0x1e4/0x390 [ 411.035671] ? mem_cgroup_sk_free+0x90/0x90 [ 411.040022] __sk_mem_raise_allocated+0x642/0x1800 [ 411.044971] ? sk_busy_loop_end+0x1c0/0x1c0 [ 411.049329] ? arch_local_save_flags+0x40/0x40 [ 411.053933] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 411.058967] ? skb_page_frag_refill+0x1eb/0x6a0 [ 411.063664] ? sock_kzfree_s+0x60/0x60 [ 411.067564] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 411.072588] ? sk_stream_alloc_skb+0x34b/0x970 [ 411.077182] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 411.082207] ? skb_entail+0x618/0x8c0 [ 411.086010] ? tcp_rate_check_app_limited+0x121/0x460 [ 411.091231] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 411.095906] __sk_mem_schedule+0x6d/0xe0 [ 411.099968] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 411.105522] tcp_sendmsg_locked+0x1c86/0x3f00 [ 411.110023] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 411.115225] ? tcp_sendpage+0x60/0x60 [ 411.119024] ? lock_acquire+0x1ed/0x520 [ 411.123006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.128545] ? aa_label_sk_perm+0x46d/0x8e0 [ 411.132870] ? aa_profile_af_perm+0x410/0x410 [ 411.137371] ? ksys_dup3+0x680/0x680 [ 411.141103] ? lock_acquire+0x1ed/0x520 [ 411.145080] ? tcp_sendmsg+0x21/0x50 [ 411.148795] ? trace_hardirqs_on+0xbd/0x310 [ 411.153118] ? lock_release+0x970/0x970 [ 411.157095] ? lock_sock_nested+0xe2/0x120 [ 411.161335] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 411.166791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.172342] ? check_preemption_disabled+0x48/0x200 [ 411.177451] ? lock_sock_nested+0x9a/0x120 [ 411.181707] ? lock_sock_nested+0x9a/0x120 [ 411.185946] ? __local_bh_enable_ip+0x160/0x260 [ 411.190634] tcp_sendmsg+0x2f/0x50 [ 411.194182] inet_sendmsg+0x1a1/0x690 [ 411.197991] ? ipip_gro_receive+0x100/0x100 [ 411.202322] ? apparmor_socket_sendmsg+0x29/0x30 [ 411.207086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.212633] ? security_socket_sendmsg+0x94/0xc0 [ 411.217394] ? ipip_gro_receive+0x100/0x100 [ 411.221718] sock_sendmsg+0xd5/0x120 [ 411.225940] __sys_sendto+0x3d7/0x670 [ 411.229743] ? __ia32_sys_getpeername+0xb0/0xb0 [ 411.234420] ? lock_release+0x970/0x970 [ 411.238395] ? arch_local_save_flags+0x40/0x40 [ 411.242993] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 411.248462] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.254008] ? put_timespec64+0x10f/0x1b0 [ 411.258156] ? nsecs_to_jiffies+0x30/0x30 [ 411.262315] ? trace_hardirqs_on+0xbd/0x310 [ 411.266649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.272206] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.277571] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 411.283034] __x64_sys_sendto+0xe1/0x1a0 [ 411.287102] do_syscall_64+0x1b9/0x820 [ 411.291000] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 411.296385] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.301338] ? trace_hardirqs_on_caller+0x310/0x310 [ 411.306366] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 411.311392] ? recalc_sigpending_tsk+0x180/0x180 [ 411.316163] ? kasan_check_write+0x14/0x20 [ 411.320413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.325265] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.330473] RIP: 0033:0x457579 [ 411.333669] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.352585] RSP: 002b:00007f6bef265c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.360323] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 411.367602] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000006 [ 411.374881] RBP: 000000000072bfa0 R08: 00000000200000c0 R09: 0000000000000006 13:18:01 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0xc02, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x8}]]}}}]}, 0x40}}, 0x0) 13:18:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x7, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x6000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 411.382913] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2666d4 [ 411.390189] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff 13:18:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000030c0)={0x1000, "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"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001040)={0x2, 0x0, 0x2080, {}, [], "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", "0e5f16d758111ee03f8acf33484caabc5542eb3baf573cfab3d6ba622d94c05a7d185154b2886df4451216ab6fe367572b9f55a86c4f65be003c6a40fca2cb20aac230942dab7edf02f2aa379540a9253a796b65935cb2c361ac906ca394ca27ad0f97fbaaa4906da890984d0d14c080a6d12786cb6b48211bbc4217bbd43929e3d210e848b81cc373da95ff1076be7b9a89afb7b0b27924c2587b43c38d05239e7926503c23bba6c7de96211e9134d592702e17ab28fbbc2462cb13708cb70f40be0987227c926aa6df5184e1e9c8779630079f8b8bfe4d51d17cd8a28b7250dbbce4798eb804afa5c8d64159104d76e2aed9b939693d24f7d884711d7f1093f20564d4b44f5f526680f4d4831dda850ca2f9b8a8ab28d07c6e1cb6a68699d19b3dec610424d4442af6f95cbf8445dd5d2a65e2e4d6621b3d1f758696ed0f896e56326bc894ff05d42ecfc98ad6aca4748721cb63f196b899c2e12f33b8ce142e7c22a65d983ffc180b37caa37d2b97af5c7c196778e660db5a072b86b6706a4d7709addb0d276c1b0b35e1612c5db6f3652e02bb60f46a49b4ef7b21fa2dc3a26cf67320d808fb727241d8333731860a23c3d5beba858eabac2a0501fdebfacc4d6b52e6f2d8b9cdea3b8f53abef90cd01ed05ce6a08ed601392c1618975dda9cddd1bb9ad6f8db455e0e47a799eea92d864abe110913788a784c99b57aa23c53570fbbc0409d94c0044a103088c6498add2475168e7aaf2a5e8f0d41945eb560c324ec67f243c979f2859711639ca806ac58dfe854a1276eb58538984736fe731b99677fb7598f2274e236966ad9fcd3952feb90b904a655f5c668ab127ba038b5f7add82d1d54269f5297bdd74245619b7d2fe9992f2d3d26d645f63d7a8b001b02fa1d46d2b73f105760fed0d9c09a22075fd41cc27a8864c31832d4d077923f95cae3940f75df4eb84bcca20673c0dd289cfd29c6aa702dfe56cfe5fde95a21f6e7a4e282e1f44f93819c27e92ccf3d337be2e14f4751001f6648cd5d262dde935bdea2d7bc8f612a3372004106759848dce33d132e63099a4727f9c3c63b929a1ce9cb658151fc8a25bcf2d3d94f34c1b24b8c12d3b1814b52ebb18cc22a235f5c3e3d38e894429c9da9c90dc1b5eacbddac5cd750d1477cae5e367158764e453450234f0da4c2db263d6fb561dc1ebf2ffb51f6d7077986ca279fa9fa5310d074e195ef7ca5933e0836537335dfd43082505524e445f1f9caf15ae0f61437bbcf7d2ddbce9cc2f2ce8a44135d216e4950604f0aa4be8789b641f777bf33b0ee80afd47a0567850d7082fd1c18f9bef5d4d44f2d9b93e231e3d8adf4fe45fb42f210ecfb475decd826297960e3b12bb86e760af0388266f80ee892ccb09d5a1af45e59b3000abf16323c143c83890e0a596b2557730b871349e65e3a77c5dcca566d72e43a52808ccdba406a760278fe75b542a61054024caa046cafa8bff46320efd718e1776a867611d4be5ce10a7035fcbd134a11c058b52507a39aaf87a656a4a5282cbeef8f24383cdfaeeec10c564d739bd975e16c80a0efac08b8dbda8f7098e6b6eb4199c742fde934d78795e7035c3509cb24a07f9c9508d408f4c0a874a42eaed6cb890b2e9e02f7a26d0794241e553a8421fb8b15b1328668bad5b907b9ce3d1990be10211bf44b4453ac8f49b47acffb2dedb882fead54dee15cce01f1a3543af689efcb1ae36699c31b2c8b401a387e2422ce53a404710eb425d5b558c22f58d9d7f6efb25366e2a4b9ef1110d44b74ddc759070c9bcec32ec8edfd6a9b26b1c3d2dffbfcd20b44fe79b770241d546850d75ca3a829c4a7f96093583834aa5ff783d8d1ed896ee5f37046123f2e79e196d0cf437f0adc3b84564ee8d479a2ab4bf3cac5760e1932e8649983c7c39b264926b71e0c031b3188ddf611a304fdc60017198374b8eb4d8a9e160b836ca83826947578cfc0135826e3c4243c34d94c67c24a48aa66becec4d26cf55c04ffe65369d741aff67935e7a167b7632c0a0d5f5828facb231e9527ead11afe80c5a6a05ae5afdb16476c24c88e15292120633926140bf6347d290f63bd2336d5e94624b18b4abc11079e4582985a671eb6fb60f2bd1276f125df48148614bffd70b6d29019ee57718717c12569b38b263bc0724e4a462325857dc9039d3d2b063f18f3b7ab8de0eb17f697e08aa47b7b6b41407700d6049beaf06067e69e4870b70157f67c6baeae26c8f0e7ceafd53f292907c91cd3700283da35ddc16430478529ce85ea28ffedd3e5fd4ec20c6802261bb306e0f7887205842ffe9338c7c358f002ba1b76232d78efb0ab8dfd1474d402beacb65a371cb11dd85cd08147865699951cf741ec450646752b87022d78b3df7587a214114ee54a324deedb433c91fb69eff918a6d3dbea7fa76b69f1b56c0740779de3890feddef21bcbea4a32ec5513a8b2b904da3d61f9a7e85141e5bca4df3fe0294da3b374a5d9a6a6bf9192d8f6fc087e44fd69e0b5012c4fd2ed170174f2c135d2a2c5eac4406f1e2e5b2159ae2ac148f377f476da87059ed07f412592d382b6714774eb11c47bdabea3e99f741edaa4da75aa9f16361d3f5077c990d95ee62ecf0580cb72eff8ef7410a3f6f050d0197f4ec5b2a323cb3c0f570948fcae71d6fafb32c25fb4cef629cc7a76e31faa89214d1a0ef4c356db6d72134083db9c08ff82036c6006cdcd1b9e666ae38de02555035835742735b4faea21929d6fe27d5ff577feab0eaf4ed5b89efd063c95ae172c806e18286f91e040f2a20273637dc18221568885a2eec699fd92abc5f06db3ac6804b2c640082f238f44176df16d1fc399023456ad345641cc001eb671801fc6e9ab160d8119c2b9aef2212fe6d391539281db861c1ac09893c76c6a929c4c2a1eeab35265984f4ebe5a7fc226c77d60a103ea87ba3c64c9c575e72e2e3ec778e5ba6daa1ed2e965af4a82312141a60054e2b3ac5add3cd12eac30f33d3da0562d51e0ec938405afe126354aa6f34ef4cc9eb64050e6423e6ffd00982c62b212f1cab2ea593a61851dbafde3e5bf250c4d7a66eb519f5c24837b46f0473ab7165af4542ea692fc44c76e33f0516027e8ed8e03359b75fc8013f0287798d25b23eb653d7d0b1750fbc451f3e7242e201cb0b06cbb6127553931056c2de996ab4a71d2021682c753aaacbc3f5220277a64ba40619347879e85bd24611eafdda2160a1e2dbb68cabd0a214187c0ca92df05012be904e8d45664a508e22a389da77d4e022936e00dd03cafe43efa5e2bac3a0911068f4cbfdb3b93d203328b3b91aac2aabbc2e90c22117ea4a5d7476bd28aed8b840450ce748c4e96469abf764f0ff109e3dfec3dca53d2a39ef2291fe06630e192500ac1df37099f5106839a7b337ba725cbdf3165836402d0835eadba26fe038f3ec517ee4b1491c9d898c034cfab53b0841ab20725c56cca2d2f163037d1ddd45d1e1ab3a03bb7bf0419c0befdab80b1de719acd05d9009e9a5e93dd9df64b19fc6324d3cb72b761ae70557b3a1ba573b386dea97889c4d0f836d928aea6d1d8cfd39e55ba15903a2f87752ac29a2e67a7484271b0285a94438c0fd31a14b51ccd0a3e835bf7277e2d7ed1bf5f7319544896c9155916a77c55a80a2fc8c3d697dc25b6a7ddcf5baa3f5801c8044ebbd746976bd35a8fbb3ff49f9aff3abd06f159073f4dee219d5b27676722bc260399152e1388138e7fb63d6e40c9d181cc900ffabcd66e1b4f0e319e7549ff50f44407f84a109d81895177cdf0fb1c47562ed008340b3af94b20fec226169fe16badae01ae7d8d95a6c2eb1a3ed089b25f000b61578335c1f650076adf6c5d89c2ba77d123ca94c670f265f758c57b8c51c102c4b3c93cf2d9a8cafd00a6cf58a9357336d4b9f18660ab575d9551b8b48290c552d3032cf3d0c52822edff73a2fb007f62dfd32d2849809b8faf6e0850ad63f31d44c285b040d22d25d723be8f422227e45b3a47adfb0ea25b9efe700fdfc4b57ffc02565e72d555ec434491aac5fd1a9379614489febdca56d2668254b04f2ede25f1907ee0c9efc231b10948dac25a23b4497f3fb95e25ba366c23d81f0881e974882d1c7099eecb05be17e3bb03700dcae976425a395c6d3aaf4300678380b7c375b46f84bbecb36fabcdb7032917dc2a5579dfaf22786a94a0f42b757ffe7c863abc23dc317261693ec193a63eec392bab65e960f889274b45ad4f2c12b549a05ac424177775f0629c3112a21d90443a372d4fd36d0768a737a4d2e7d7fa8b152fde834039341782650d1c6506ab8769f8c889be0de43e6315c14187481e9a16801ed4e74daa6c3ead0999028bd58dea4a9b964eeb20b0f3751a09a93e955cc826ad0f1f997ef7c6d91a2573835b9419649c1b2f6b0c3f04f1eb737395d0b8f93376e4b41e354f81a500a0bc5797614fe619eb133445efa55bc5be65a7dc98a7004096bde6cd077995ef4d2c57af4afecd9ed498c641f8eade81fe7b872936b598a8d1fc89916e354efe0ee7ae1afc8b2e056f9f795b87a29a58d4b85c30472a1887072ac689df8d50d707c48a9e11f4a9c92bda199fc33b3ac09e23a629990f99c6a4e79286fe614a969183340b0f6a4ddc5d859f4576fb8ee397418215d44f65307860c22f2d8f4719008085e9a8f8a2c575563b5362f81c276c1c7078031a9fcaced9c568c39ac0af83fc0f194264bb569fd74d450321ba396b5a15508957174d753f19e83167c2ddc33f1c656a16b9ad1daa66f714597f8dacb648e63e9736586cd0579dea2e8894d673f2f8b08c166bc0754fade4bd9a05ae04bf74dc33d5965acd306a2d1353db17e08d8c37c2febe3ba550326c05e9a5bf11e1d79b5d551c11a9feb2953d7c7947fb962aa2980a22a78fb6e073c4b793ae4e067c30ee1bacf6397f4b9d38bbe32397128ff490994830655080c04bb128e600466402aa11c639c5c8d4a581432e8b91a3b3f48285dc20ee440fc1ada45b0e1513ebde851ead51096252a512b945e6b0596e3039c944df9ae92cc3de83728e707ef26fd3b4c6a1b6d89cbca1b9afcd9b08b9a3ae70792bb752ecb409480fdba6b148c99d38df7e075d4db79f62dceb88ea698ac0846710e246729f690c95b59b29978a89e54cfd56de8e7989569bf2b351c040275fc0166ac485f10fffca2c2e929d1f30aafb431e1fbbdc81c7231829ea4d5f16df6be545edf16d922d5d745675ea445e700dcdc52457f935100f29427d75e0ffe9604b8ca62dc78718fffcedcc4f13e61eeed6c5b5066228c5684ff5e577cc26f806b02a8f5ee0e90e6a48cb73bb3704d13ff6273257fa662b0e554dbf9162d038e65ef017b1bf8413419a12baea699d2b57c8aa8fa235009ba332ac300076fc8a8e3cda64ea054f6b9e0e42e0a08858b0d07f9624b8ba14b58b37091e90f7099ce0a0bb569bd7f77247d363b4a1c93d752560ce4e515e0eafd9930fb1b0a3076986651d5cc4394682fa2e6daecea8fff0fcc7d30173f1e6721d164b74c2903d4f6a9338ba417695a0b2b8732b64daeff22e99dbd39820b1bf73b62b47d501ca973ac2905312ed96cb327d2d7a6394765454aaff2e1f59206ff09c90bbeff10e0b9da824bc48a178c2bcb56228ac0d27485640931a805c402bff63efd67cdb2a41ef542663a9b3fc2e736cff7ab1bb91bd52d3f094ac6244c4164ac657ab7e35b31ce556599e5de40bda1037155aeeb7fc4a904db2acef3c0d5b3"}) [ 411.452953] netlink: 'syz-executor5': attribute type 14 has an invalid length. [ 411.462706] Task in /syz2 killed as a result of limit of /syz2 [ 411.469254] memory: usage 204720kB, limit 204800kB, failcnt 2490 [ 411.475560] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.487031] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7ffffffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fchmod(r0, 0x42) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="baf80c66b89ccb228766efbafc0ced0f218df00fba6b95960f01cf6682d44766b98609000066b8fa00000066ba000000000f30360f30360f229466b9800000c00f326635010000000f300f011c"}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000055) [ 411.529591] netlink: 'syz-executor5': attribute type 14 has an invalid length. [ 411.552328] Memory cgroup stats for /syz2: cache:8KB rss:4132KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4272KB inactive_file:0KB active_file:0KB unevictable:0KB [ 411.651411] Memory cgroup out of memory: Kill process 24160 (syz-executor2) score 185 or sacrifice child [ 411.668900] Killed process 24174 (syz-executor2) total-vm:70472kB, anon-rss:4264kB, file-rss:33616kB, shmem-rss:0kB [ 411.690792] oom_reaper: reaped process 24174 (syz-executor2), now anon-rss:0kB, file-rss:32848kB, shmem-rss:0kB 13:18:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x400000000000000, @empty, [0x0, 0x2000000]}, 0x6) [ 411.816079] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 411.828004] syz-executor2 cpuset=syz2 mems_allowed=0 [ 411.833210] CPU: 1 PID: 24216 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 411.840577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.849936] Call Trace: [ 411.852550] dump_stack+0x1c4/0x2b4 [ 411.856195] ? dump_stack_print_info.cold.2+0x52/0x52 [ 411.861398] ? mark_held_locks+0x130/0x130 [ 411.865644] ? mark_held_locks+0x130/0x130 [ 411.869895] dump_header+0x27b/0xf72 [ 411.873630] ? pagefault_out_of_memory+0x197/0x197 [ 411.878589] ? mark_held_locks+0x130/0x130 [ 411.882849] ? rcu_read_unlock+0x16/0x60 [ 411.886927] ? lock_downgrade+0x900/0x900 [ 411.891094] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.896645] ? css_next_child+0x1c3/0x620 [ 411.900815] ? find_lock_task_mm+0x22e/0x4d0 [ 411.905252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.910813] ? task_will_free_mem+0x239/0xb30 [ 411.915323] ? ___ratelimit+0x36f/0x655 [ 411.919312] ? lock_downgrade+0x900/0x900 [ 411.923470] ? trace_hardirqs_on+0xbd/0x310 [ 411.927792] ? kasan_check_read+0x11/0x20 [ 411.931955] ? ___ratelimit+0x36f/0x655 [ 411.935947] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 411.941414] ? trace_hardirqs_on+0x310/0x310 [ 411.945841] ? lock_downgrade+0x900/0x900 [ 411.950007] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 411.955117] ? ___ratelimit+0xaa/0x655 [ 411.959014] ? idr_get_free+0xec0/0xec0 [ 411.963002] ? kasan_check_write+0x14/0x20 [ 411.967249] ? do_raw_spin_lock+0xc1/0x200 [ 411.971494] oom_kill_process.cold.27+0x10/0x903 [ 411.976257] ? kasan_check_write+0x14/0x20 [ 411.980508] ? do_raw_spin_lock+0xc1/0x200 [ 411.984751] ? oom_evaluate_task+0x540/0x540 [ 411.989170] ? cgroup_procs_next+0x70/0x70 [ 411.993412] ? _raw_spin_unlock_irq+0x60/0x80 [ 411.997915] ? oom_badness+0xaa0/0xaa0 [ 412.001817] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 412.006579] ? mem_cgroup_iter_break+0x30/0x30 [ 412.011302] ? cgroup_file_notify+0x226/0x2f0 [ 412.016431] out_of_memory+0xa84/0x1430 [ 412.020413] ? kasan_check_read+0x11/0x20 [ 412.024567] ? oom_killer_disable+0x3a0/0x3a0 [ 412.029065] ? kasan_check_write+0x14/0x20 [ 412.033309] ? do_raw_spin_lock+0xc1/0x200 [ 412.037560] mem_cgroup_out_of_memory+0x15e/0x210 [ 412.042411] ? memcg_memory_event+0x40/0x40 [ 412.046740] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 412.051680] ? page_counter_try_charge+0x1c1/0x220 [ 412.056614] try_charge+0xc43/0x1690 [ 412.060340] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 412.066406] ? tcp_sendmsg+0x2f/0x50 [ 412.070157] ? sock_sendmsg+0xd5/0x120 [ 412.074047] ? __sys_sendto+0x3d7/0x670 [ 412.078026] ? __x64_sys_sendto+0xe1/0x1a0 [ 412.082266] ? do_syscall_64+0x1b9/0x820 [ 412.086334] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.091703] ? fs_reclaim_acquire+0x20/0x20 [ 412.096036] ? lock_downgrade+0x900/0x900 [ 412.100192] ? ___might_sleep+0x1ed/0x300 [ 412.104347] ? lock_downgrade+0x900/0x900 [ 412.108503] ? trace_hardirqs_on+0xbd/0x310 [ 412.112841] ? __kmalloc_node_track_caller+0x33/0x70 [ 412.117951] ? kasan_unpoison_shadow+0x35/0x50 [ 412.122569] ? __sk_mem_raise_allocated+0x642/0x1800 [ 412.127680] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 412.133139] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.138694] ? check_preemption_disabled+0x48/0x200 [ 412.143723] mem_cgroup_charge_skmem+0x1e4/0x390 [ 412.148500] ? mem_cgroup_sk_free+0x90/0x90 [ 412.152845] __sk_mem_raise_allocated+0x642/0x1800 [ 412.157790] ? sk_busy_loop_end+0x1c0/0x1c0 [ 412.162130] ? arch_local_save_flags+0x40/0x40 [ 412.166795] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 412.171835] ? skb_page_frag_refill+0x1eb/0x6a0 [ 412.176517] ? sock_kzfree_s+0x60/0x60 [ 412.180431] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 412.185455] ? sk_stream_alloc_skb+0x34b/0x970 [ 412.190047] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 412.195069] ? skb_entail+0x618/0x8c0 [ 412.198877] ? tcp_rate_check_app_limited+0x121/0x460 [ 412.204071] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 412.208750] __sk_mem_schedule+0x6d/0xe0 [ 412.212824] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 412.218375] tcp_sendmsg_locked+0x1c86/0x3f00 [ 412.222882] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 412.228151] ? tcp_sendpage+0x60/0x60 [ 412.232369] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.237915] ? aa_label_sk_perm+0x46d/0x8e0 [ 412.242293] ? aa_profile_af_perm+0x410/0x410 [ 412.246869] ? ksys_dup3+0x680/0x680 [ 412.250600] ? lock_acquire+0x1ed/0x520 [ 412.254584] ? tcp_sendmsg+0x21/0x50 [ 412.258309] ? trace_hardirqs_on+0xbd/0x310 [ 412.262638] ? lock_release+0x970/0x970 [ 412.266619] ? lock_sock_nested+0xe2/0x120 [ 412.270862] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 412.276319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.281868] ? check_preemption_disabled+0x48/0x200 [ 412.286896] ? lock_sock_nested+0x9a/0x120 [ 412.291140] ? lock_sock_nested+0x9a/0x120 [ 412.295386] ? __local_bh_enable_ip+0x160/0x260 [ 412.300067] tcp_sendmsg+0x2f/0x50 [ 412.303618] inet_sendmsg+0x1a1/0x690 [ 412.307427] ? ipip_gro_receive+0x100/0x100 [ 412.311760] ? apparmor_socket_sendmsg+0x29/0x30 [ 412.316525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.322078] ? security_socket_sendmsg+0x94/0xc0 [ 412.326925] ? ipip_gro_receive+0x100/0x100 [ 412.331258] sock_sendmsg+0xd5/0x120 [ 412.334992] __sys_sendto+0x3d7/0x670 [ 412.338812] ? __ia32_sys_getpeername+0xb0/0xb0 [ 412.343522] ? lock_release+0x970/0x970 [ 412.347509] ? arch_local_save_flags+0x40/0x40 [ 412.352103] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 412.358057] ? aa_af_perm+0x5a0/0x5a0 [ 412.361915] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.367464] ? put_timespec64+0x10f/0x1b0 [ 412.371621] ? nsecs_to_jiffies+0x30/0x30 [ 412.375782] ? trace_hardirqs_on+0xbd/0x310 [ 412.380118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.385668] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.391045] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 412.396770] __x64_sys_sendto+0xe1/0x1a0 [ 412.400846] do_syscall_64+0x1b9/0x820 [ 412.404746] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 412.410102] ? syscall_return_slowpath+0x5e0/0x5e0 [ 412.415016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.419937] ? trace_hardirqs_on_caller+0x310/0x310 [ 412.424938] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 412.429943] ? prepare_exit_to_usermode+0x291/0x3b0 [ 412.434948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.439784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.444963] RIP: 0033:0x457579 [ 412.448148] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.467045] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 412.474741] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 412.482009] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 412.489266] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 412.496529] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 412.503794] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 412.514293] Task in /syz2 killed as a result of limit of /syz2 [ 412.520870] memory: usage 204796kB, limit 204800kB, failcnt 2503 [ 412.527031] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 412.533831] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 412.540040] Memory cgroup stats for /syz2: cache:8KB rss:2228KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2216KB inactive_file:0KB active_file:0KB unevictable:0KB [ 412.560538] Memory cgroup out of memory: Kill process 24215 (syz-executor2) score 171 or sacrifice child [ 412.570331] Killed process 24215 (syz-executor2) total-vm:70340kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 412.582463] oom_reaper: reaped process 24215 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 13:18:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0xfffffffffffff682, 0x7}, 0x2) msgrcv(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB], 0x1, 0x0, 0x0) 13:18:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:02 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2a02, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xfffffffffffff800, 0x20002) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) clone(0x14012000, &(0x7f0000000240)="836eec3f49c3eb9531c9d5cc5d7b3a8196d15c564895c61cac6e9481d33cd78b55adcc56eb8d8c8c9e8f905adc1bbe700e763626d97702d82b767ac703bfcf7672dec8e5974bdcb6e486276d00d16686656f17aa65798cd448b2761898012bbf63998e72935cec9c65543445326738f9310597460fffd1ee362ba8389c46", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) timerfd_create(0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400100) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000180)={0x3, 0x5}) ioctl$KDSKBLED(r3, 0x4b65, 0x1f) 13:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x10000, 0x8000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000280)="0f211867a3070000002e0f01ca0f4a9988cfba4000b8940def0fc7ad0f002e0f01d7b823010f00d80fc71b0f01c8", 0x2e}], 0x1, 0x10, &(0x7f0000000300), 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r2, 0x406, r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8000, 0x0, 0x5, r3}, &(0x7f0000000180)=0x10) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="86298d1f84cf0821f6a5712f4e"], &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)="6e3c0368444f8f8eb90fd282c5506ee0037300", 0x0, &(0x7f000000a000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x1, 0x1}, &(0x7f00000000c0)=0x8) 13:18:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x100000000000000, @empty, [0x0, 0x2000000]}, 0x6) [ 412.746670] QAT: Invalid ioctl [ 412.758226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:02 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000140)=0x81) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x9) 13:18:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x6, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 412.796537] QAT: Invalid ioctl [ 412.799940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 412.820181] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 412.847938] syz-executor2 cpuset=syz2 mems_allowed=0 13:18:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 412.877471] CPU: 0 PID: 24229 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 412.884864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.894221] Call Trace: [ 412.896823] dump_stack+0x1c4/0x2b4 [ 412.900465] ? dump_stack_print_info.cold.2+0x52/0x52 [ 412.905664] ? mark_held_locks+0x130/0x130 [ 412.909908] ? mark_held_locks+0x130/0x130 [ 412.914147] dump_header+0x27b/0xf72 [ 412.917873] ? pagefault_out_of_memory+0x197/0x197 [ 412.922818] ? mark_held_locks+0x130/0x130 [ 412.927060] ? rcu_read_unlock+0x16/0x60 [ 412.931129] ? lock_downgrade+0x900/0x900 [ 412.935293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.940843] ? css_next_child+0x1c3/0x620 [ 412.945012] ? find_lock_task_mm+0x22e/0x4d0 [ 412.949520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.955065] ? task_will_free_mem+0x239/0xb30 [ 412.959582] ? ___ratelimit+0x36f/0x655 [ 412.963567] ? lock_downgrade+0x900/0x900 [ 412.967726] ? trace_hardirqs_on+0xbd/0x310 [ 412.972052] ? kasan_check_read+0x11/0x20 [ 412.976206] ? ___ratelimit+0x36f/0x655 [ 412.980194] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 412.985339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 412.985663] ? trace_hardirqs_on+0x310/0x310 [ 412.998552] ? lock_downgrade+0x900/0x900 [ 413.002712] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 413.007821] ? ___ratelimit+0xaa/0x655 [ 413.011717] ? idr_get_free+0xec0/0xec0 [ 413.015696] ? kasan_check_write+0x14/0x20 [ 413.019937] ? do_raw_spin_lock+0xc1/0x200 [ 413.024185] oom_kill_process.cold.27+0x10/0x903 [ 413.028949] ? kasan_check_write+0x14/0x20 [ 413.033203] ? do_raw_spin_lock+0xc1/0x200 [ 413.033308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.037449] ? oom_evaluate_task+0x540/0x540 [ 413.037468] ? cgroup_procs_next+0x70/0x70 [ 413.037484] ? _raw_spin_unlock_irq+0x60/0x80 [ 413.037497] ? oom_badness+0xaa0/0xaa0 [ 413.037517] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 413.067645] ? mem_cgroup_iter_break+0x30/0x30 [ 413.072244] ? cgroup_file_notify+0x226/0x2f0 13:18:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 413.076745] out_of_memory+0xa84/0x1430 [ 413.080724] ? kasan_check_read+0x11/0x20 [ 413.084877] ? oom_killer_disable+0x3a0/0x3a0 [ 413.089377] ? kasan_check_write+0x14/0x20 [ 413.093623] ? do_raw_spin_lock+0xc1/0x200 [ 413.097875] mem_cgroup_out_of_memory+0x15e/0x210 [ 413.102724] ? memcg_memory_event+0x40/0x40 [ 413.107052] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 413.112004] ? page_counter_try_charge+0x1c1/0x220 [ 413.116952] try_charge+0xc43/0x1690 [ 413.120693] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 413.126755] ? tcp_sendmsg+0x2f/0x50 [ 413.130470] ? sock_sendmsg+0xd5/0x120 [ 413.130483] ? __sys_sendto+0x3d7/0x670 [ 413.130496] ? __x64_sys_sendto+0xe1/0x1a0 [ 413.130516] ? do_syscall_64+0x1b9/0x820 [ 413.146642] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.152021] ? fs_reclaim_acquire+0x20/0x20 [ 413.156355] ? lock_downgrade+0x900/0x900 [ 413.160515] ? ___might_sleep+0x1ed/0x300 [ 413.164672] ? trace_hardirqs_on+0xbd/0x310 [ 413.169011] ? lock_downgrade+0x900/0x900 [ 413.173172] ? __kmalloc_node_track_caller+0x33/0x70 [ 413.178284] ? kasan_unpoison_shadow+0x35/0x50 [ 413.182889] ? __sk_mem_raise_allocated+0x642/0x1800 [ 413.188011] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 413.193472] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.199024] ? check_preemption_disabled+0x48/0x200 [ 413.204088] mem_cgroup_charge_skmem+0x1e4/0x390 [ 413.208857] ? mem_cgroup_sk_free+0x90/0x90 [ 413.211318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.213201] __sk_mem_raise_allocated+0x642/0x1800 [ 413.213221] ? sk_busy_loop_end+0x1c0/0x1c0 [ 413.213243] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 413.236400] ? skb_page_frag_refill+0x1eb/0x6a0 [ 413.241084] ? sock_kzfree_s+0x60/0x60 [ 413.244994] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 413.250022] ? sk_stream_alloc_skb+0x34b/0x970 [ 413.254617] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 413.259642] ? skb_entail+0x618/0x8c0 [ 413.263448] ? tcp_rate_check_app_limited+0x121/0x460 [ 413.268644] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 413.272038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 413.273329] __sk_mem_schedule+0x6d/0xe0 [ 413.273346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 413.273365] tcp_sendmsg_locked+0x1c86/0x3f00 [ 413.295830] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 413.301044] ? tcp_sendpage+0x60/0x60 [ 413.304857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.310399] ? aa_label_sk_perm+0x46d/0x8e0 [ 413.314729] ? aa_profile_af_perm+0x410/0x410 [ 413.319239] ? ksys_dup3+0x680/0x680 [ 413.322966] ? lock_acquire+0x1ed/0x520 [ 413.326958] ? tcp_sendmsg+0x21/0x50 [ 413.330690] ? trace_hardirqs_on+0xbd/0x310 [ 413.335019] ? lock_release+0x970/0x970 [ 413.339010] ? lock_sock_nested+0xe2/0x120 [ 413.343254] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 413.348712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.354260] ? check_preemption_disabled+0x48/0x200 [ 413.359283] ? lock_sock_nested+0x9a/0x120 [ 413.363533] ? lock_sock_nested+0x9a/0x120 [ 413.367785] ? __local_bh_enable_ip+0x160/0x260 [ 413.372473] tcp_sendmsg+0x2f/0x50 [ 413.376022] inet_sendmsg+0x1a1/0x690 13:18:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0xf000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 413.379832] ? ipip_gro_receive+0x100/0x100 [ 413.384159] ? apparmor_socket_sendmsg+0x29/0x30 [ 413.388930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.394479] ? security_socket_sendmsg+0x94/0xc0 [ 413.399247] ? ipip_gro_receive+0x100/0x100 [ 413.403585] sock_sendmsg+0xd5/0x120 [ 413.407317] __sys_sendto+0x3d7/0x670 [ 413.411133] ? __ia32_sys_getpeername+0xb0/0xb0 [ 413.415833] ? lock_release+0x970/0x970 [ 413.419817] ? arch_local_save_flags+0x40/0x40 [ 413.424413] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 413.429870] ? aa_af_perm+0x5a0/0x5a0 [ 413.433695] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.439240] ? put_timespec64+0x10f/0x1b0 [ 413.443395] ? nsecs_to_jiffies+0x30/0x30 [ 413.447555] ? trace_hardirqs_on+0xbd/0x310 [ 413.451887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.457437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.462816] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 413.468276] __x64_sys_sendto+0xe1/0x1a0 [ 413.472356] do_syscall_64+0x1b9/0x820 13:18:03 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x500}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 413.476248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 413.481626] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.486565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.491416] ? trace_hardirqs_on_caller+0x310/0x310 [ 413.496441] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 413.501465] ? prepare_exit_to_usermode+0x291/0x3b0 [ 413.506493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.511351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.516544] RIP: 0033:0x457579 [ 413.519753] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.538687] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.538701] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 413.538708] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 413.538716] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 413.538724] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 413.538739] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 413.689248] Task in /syz2 killed as a result of limit of /syz2 [ 413.695362] memory: usage 204800kB, limit 204800kB, failcnt 2535 [ 413.715267] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.724936] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.731917] Memory cgroup stats for /syz2: cache:8KB rss:80KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 413.752389] Memory cgroup out of memory: Kill process 24228 (syz-executor2) score 161 or sacrifice child [ 413.762574] Killed process 24228 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32832kB, shmem-rss:0kB [ 413.774202] oom_reaper: reaped process 24228 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:18:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_out(r0, 0x800454cf, &(0x7f0000000140)) r1 = memfd_create(&(0x7f0000000040)='\'&em0\x00', 0x5) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 13:18:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0xb, &(0x7f0000000040)={&(0x7f0000012000/0x1000)=nil, 0x1000, 0xe0ffffff}, &(0x7f00000000c0)=0x10) close(r3) r4 = dup3(r1, r2, 0x0) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000000)={0x1, 0x10000, 0x1eb3}) 13:18:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x300}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x6000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 13:18:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5603000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:04 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = getpid() splice(0xffffffffffffffff, &(0x7f0000000180), 0xffffffffffffffff, &(0x7f0000000240), 0x7ff, 0x500) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x200000) r2 = getuid() r3 = getgid() fstat(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) getgroups(0x9, &(0x7f0000000640)=[0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0xee01, 0xee01, 0x0, 0x0, 0xee01]) r10 = syz_open_dev$usb(&(0x7f0000001940)='/dev/bus/usb/00#/00#\x00', 0x4, 0x10101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = eventfd2(0x8, 0x800) stat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003d40)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@loopback}}, &(0x7f0000003e40)=0xe8) getresgid(&(0x7f000000f7c0), &(0x7f000000f800)=0x0, &(0x7f000000f100)) stat(&(0x7f0000003f40)='./file0\x00', &(0x7f0000003f80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004000)=0x0, &(0x7f0000004040), &(0x7f0000004080)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000040c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f00000041c0)=0xe8) r20 = getgid() r21 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000004200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r22 = accept$inet6(0xffffffffffffff9c, &(0x7f0000004240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000004280)=0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0}, &(0x7f0000003ec0)=0xc) getgroups(0x6, &(0x7f0000004340)=[0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r25 = syz_open_dev$vcsa(&(0x7f0000004380)='/dev/vcsa#\x00', 0x0, 0x10000) r26 = openat$nullb(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/nullb0\x00', 0x400, 0x0) r27 = socket$alg(0x26, 0x5, 0x0) r28 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000004400)='/dev/sequencer\x00', 0x800, 0x0) r29 = syz_open_dev$adsp(&(0x7f0000004440)='/dev/adsp#\x00', 0x2, 0x90002) r30 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000004480)='/proc/self/attr/exec\x00', 0x2, 0x0) r31 = openat$audio(0xffffffffffffff9c, &(0x7f00000044c0)='/dev/audio\x00', 0x0, 0x0) r32 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000004a80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r33 = syz_open_dev$amidi(&(0x7f0000004ac0)='/dev/amidi#\x00', 0x1, 0x420800) pipe2$9p(&(0x7f0000004b00)={0xffffffffffffffff}, 0x4800) clock_gettime(0x0, &(0x7f0000007f40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f0000004b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/13, 0xd}], 0x2, &(0x7f0000005c40)=""/35, 0x23, 0xa44e}, 0x8}, {{&(0x7f0000005c80)=@ipx, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005d00)=""/187, 0xbb}, {&(0x7f0000005dc0)=""/30, 0x1e}, {&(0x7f0000005e00)=""/156, 0x9c}, {&(0x7f0000005ec0)=""/249, 0xf9}, {&(0x7f0000005fc0)=""/221, 0xdd}], 0x5, 0x0, 0x0, 0x9}}, {{&(0x7f0000006140)=@un=@abs, 0x80, &(0x7f00000065c0)=[{&(0x7f00000061c0)}, {&(0x7f0000006200)=""/29, 0x1d}, {&(0x7f0000006240)=""/248, 0xf8}, {&(0x7f0000006340)=""/35, 0x23}, {&(0x7f0000006380)=""/156, 0x9c}, {&(0x7f0000006440)=""/164, 0xa4}, {&(0x7f0000006500)=""/170, 0xaa}], 0x7, &(0x7f0000006640)=""/92, 0x5c, 0xb32}, 0xc7c}, {{&(0x7f00000066c0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006740)=""/58, 0x3a}, {&(0x7f0000006780)=""/2, 0x2}], 0x2, &(0x7f0000006800)=""/4096, 0x1000, 0x4}, 0xfc27}, {{&(0x7f0000007800)=@un=@abs, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007880)=""/116, 0x74}, {&(0x7f0000007900)=""/45, 0x2d}, {&(0x7f0000007940)=""/9, 0x9}, {&(0x7f0000007980)=""/132, 0x84}, {&(0x7f0000007a40)=""/158, 0x9e}, {&(0x7f0000007b00)=""/52, 0x34}, {&(0x7f0000007b40)=""/29, 0x1d}, {&(0x7f0000007b80)=""/104, 0x68}, {&(0x7f0000007c00)=""/106, 0x6a}], 0x9, &(0x7f0000007d40)=""/156, 0x9c, 0x1}, 0x6}], 0x5, 0x2021, &(0x7f0000007f80)={r35, r36+10000000}) r38 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000081c0)={&(0x7f0000007fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000008100)=""/145, 0x10d, 0x91}, 0x20) r39 = socket$rds(0x15, 0x5, 0x0) r40 = syz_open_dev$dri(&(0x7f0000008200)='/dev/dri/card#\x00', 0x4, 0x8000) r41 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$inet6(0xa, 0x4, 0x2, &(0x7f0000008240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000008280)={0x0, 0x0}, &(0x7f00000082c0)=0xc) r44 = getgid() r45 = inotify_init1(0x800) r46 = socket$inet_udp(0x2, 0x2, 0x0) r47 = inotify_init() r48 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r49 = syz_open_dev$ndb(&(0x7f0000008300)='/dev/nbd#\x00', 0x0, 0x2880) r50 = socket$inet_udplite(0x2, 0x2, 0x88) r51 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000008340)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009a00)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000009b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009b40)={0x0, 0x0, 0x0}, &(0x7f0000009b80)=0xc) getresuid(&(0x7f0000009bc0), &(0x7f0000009c00)=0x0, &(0x7f0000009c40)) r55 = getegid() stat(&(0x7f0000009c80)='./file0\x00', &(0x7f0000009cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000009d40)=[0x0, 0xee01, 0xee00]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009dc0)={r0, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000009d80)='wlan0\'eth0(]\x00'}, 0x30) r59 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000009e00), 0x4) r60 = syz_open_dev$sndpcmp(&(0x7f0000009e40)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000009e80)={0xffffffffffffffff, 0xffffffffffffffff}) r62 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000009ec0)={0x0, 0x0}, &(0x7f0000009f00)=0xc) getresgid(&(0x7f0000009f40), &(0x7f0000009f80), &(0x7f0000009fc0)=0x0) r65 = geteuid() stat(&(0x7f000000a480)='./file0\x00', &(0x7f000000a4c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000a540)={{{@in, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f000000a640)=0xe8) getresgid(&(0x7f000000a680), &(0x7f000000a6c0), &(0x7f000000a700)=0x0) getresuid(&(0x7f000000a740), &(0x7f000000a780)=0x0, 0xfffffffffffffffe) r70 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000a7c0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f000000a8c0)=0xe8) getresgid(&(0x7f000000a900), &(0x7f000000a940), &(0x7f000000a980)=0x0) r73 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f000000efc0)={0xffffffffffffffff, 0x7f, 0x8}, 0xc) r74 = openat$fuse(0xffffffffffffff9c, &(0x7f000000f000)='/dev/fuse\x00', 0x2, 0x0) r75 = socket$bt_hidp(0x1f, 0x3, 0x6) r76 = openat$tun(0xffffffffffffff9c, &(0x7f000000f040)='/dev/net/tun\x00', 0x0, 0x0) r77 = socket$inet6(0xa, 0x6, 0x5) r78 = syz_open_dev$mouse(&(0x7f000000f140)='/dev/input/mouse#\x00', 0x2, 0x44000) r79 = openat$tun(0xffffffffffffff9c, &(0x7f000000f180)='/dev/net/tun\x00', 0x440000, 0x0) r80 = getuid() getgroups(0x7, &(0x7f000000f1c0)=[0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0x0]) r82 = getuid() lstat(&(0x7f000000f200)='./file0\x00', &(0x7f000000f240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f000000f2c0)='./file0\x00', &(0x7f000000f300)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f000000f380), &(0x7f000000f3c0)=0x0, &(0x7f000000f400)) r86 = openat$mixer(0xffffffffffffff9c, &(0x7f000000f440)='/dev/mixer\x00', 0x24002, 0x0) r87 = openat$dsp(0xffffffffffffff9c, &(0x7f000000f480)='/dev/dsp\x00', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f000000f580)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="ec4d9e0297561d57246b060f86b48357289a13d610e832c9d0beb4bb0f0ce3d5c4080b21d8e75c84d4a5ef8d082cd5cfb3da4313fbf114826d5aa6ac50897c9b3903c540e741c09ae78d329d", 0x4c}, {&(0x7f0000000040)="668149615892a065ca60d53f776dda4dd9a80fa484b6a5b9312b069b1429f4b65177dc7cddd609ca8164d37aae72e9e90a893c7983b3a91ca86c0a951b", 0x3d}, {&(0x7f0000000280)="9a06da022faf308cdc996b49dc748340f92a2d31b3d01e6e0660ff88f1e95f8af44e641f7a2585b7ad00dfd157dc88752a8f88430df5598a6f0d92aca692af56aabd8818f0ec465af1f6c11527bdf3868d3c2a6da3f1efbb", 0x58}], 0x3, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r0, r2, r3}, @cred={0x20, 0x1, 0x2, r0, r4, r5}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r0, r6, r7}, @cred={0x20, 0x1, 0x2, r0, r8, r9}], 0x90, 0x4}, {&(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001900)=[{&(0x7f00000007c0)="08fa343c417e9d285173", 0xa}, {&(0x7f0000000800)="4d701e607d7bcba54c154d89d350be6a45d897c74c9b0fdc1c15823127c941418bd2370a4d5ff9b8a16520f9ad629fc1a0a85a289120efc3ba0a8fa11e993f8d67fdcf6b5580d139b3729523e3ab062ff787f377da3cdbf7bcbde3578b018477f13631ee728d726ef4091cd274132f1db87015c361971ac94ba7ecc2f53609a60fa050c66dc6d529d07a5a3e4061c244df1c798f9417cc4767b786c98ed7f2efc23ddc2ce71a2cd56b42c8db67a098c25241d9a5c0cc1785de89cb41502c0af0fe3a3fee82284dfd78c16eee46a858627266143a024bcf0d513aec10d12e175f9a24e5063502f94055c2f76b3dba53115a3c920312966f0650770b7d86750b7c13a9a4dbc7aff04c4d6173ec597ff8951fa9f5f2056c08d4d222e501641663b95c5a5a0422f2485f6599b0bb34ec0928824b6d1f9780fd0ae4decca1420ebb31610573bbfed1975c9d08e437b1c31ef533212efb71f094fa2e6ac40c005f89dc39c108584b55ea4de0a5c76c93058438200dde9df907a857da4da323ad7643df4d444cae2fab748f4d8ba017ef27e9d9c47ea7b1c6f6b7be895a6fa9a25fdbe7c997ca796f656ea9cfdde21552d2e4e8484daceabe94c0be84c1ed86647f908508ad33d066d6f4d4786417076bbecffce0b951236b7ffc867243479807efb61bf5243e91eb24ca29915bb30eac86da12b62c0572c861acb3172c174fb418df49692e4cffd8e0903b2bd977376828fc76a230e7fa1af434be110973be9184618a0bea1400c619a6985bab97fa7efbe8463fbc40965a76d58f0ae489cc0caef0286361f2fe7f171cf1be39ca2dd6af3a310d6c0e6eef3b1216fac55a570e6efb6b665281ab763d96e1107cf3975cbecaceb4d18955f45a31076262d6ee35d5460f0b58172cfdf3c04abcfb4651854c38e487a86ddecf1f6e2f99dc2dbeb12fb551d694e9fc31972f6b311e7e5254a88fd36fbd0fa4b54a5c2a66b3346d17d649d51e7a3c1f773102b5c7a194619a949c49f61e709567819f3f7b65260c3e7464df9c3180bfe941a9cc00cd8288f9ca3496386eb4d2a8b86c32e1172542e59f769d4f9358ed8cf43717f5e0087ef04dda328b42d40dcbef656ec5f61ac8637319fab1e21e692267f2ac7f7ff8b967eae7d4f11f24164b9627f8d248bc6829955a826b24c3769854b62a510150c6875fc04a64f5650494ef1e6c69c9b751a2e22c4edab247d61ddf8760786eb1b3d707041a155b4587177e116803f57d57adbf7826290fd5ab483cb996a1131e0adb3ffec85b7977afacfafda529899c895f407e9aeafb636bb0677c0c387e14de82cf24e873058f5bedc5925ed5f62b7eb2dd85c89477165bf9a0973cd02e1fc8729b0f6ae3fd1736272088dd026bc442d8dd73ea8d43cda040dc11edcb1b7d1533284e295d44e247b5a1003327707624e8d5b2fe2e02e8233717613b0fc42d7715ca87bfeafc7e17814db3bcd9e2666dfe81d2e3dfbe133be3c0c4ded3ddfe8686336ffab402068ae91eee65f0c71800a91d05ddf82fb00f3b16c0b853865668ef03a711af70978bd84407ce57695104df67a92979b0f43ee5252a4a45e0001f7a9f59ce7ec1ac62cb529e986aeb2c433838910f042a5c0ba0be166d149aeffb529506b7e36aa530211dcbc47b2adf2ab9cb67612a4e77f7c7c8ebbbdff4b673389a718c06f86952a6c27d76d292d5224c7d3b8b3af4b0059983a7a2dac88d873c7cac3a9a1ecd0ab52ba8fa9fa61c559db9ab1bc2fa291429e86b45d848bc4a8f11c1fb92fb219cbfaf0baacaf8da2e45e87a24bd474013dee50c3251a5c3cacd77a821bb3da69e6e9442c7ef4432444e5fa0a639271cf54884027b5d6e4400019bcac90250537bbc83004044f9e93dfbeb130c2b35c2f0cc92ebef32725012caddb33d4cac0159c7a749a1d079c83b0866a1f7a5085d24800f5cfdae5fe74151b999346c4ebdc02e4a94f04060a8649394990ab09c2bcfc9bdff1e1862a4932d1f0d832f2940a7a2c8b6e8b5d0031890ad1872dca6e03e85d8481dc5cbf0678a7916cb5690520ce6e63555859645595664e84c3e4ece86322e23f5e58445ac29509750e6807bc883aaecaa9857203a47b5a3d54970ca15476fc2490dbeb1f7949b8107943aaad50f268d94ce75d11c8b0dabacf6f666d1033bbb4328ded65dfd69d1ed2a4ca22ed97143e2287d2475a852403d99d298a03f06d112f50e0ca4e05dc983a3515d4316d16105e622b01dde7585570ccff09457cd70cb5cc10f1d65491571500e7c7791ccc6135fa99738e77cdbe13f34d0397029e35866fdf0dd068f258cf4231fdf7133cb35e015cde6c2239d79f27f89a080f22967cd3fe62f98028e4e0db62714eeb823efe631624db132fc06b2e0387cbe62810a6e0c39f31c38bfc7e27432b8828da79f8616cfd0cf33a3907b4acf383111307b3585b6bff8af33660debb099d8d1c78de011c77ee5bb609c7b428c1c8799180145885373cf4e6d863fefa0ec3313333d74ede86ac3fcfdac550c31719efbe26c8884e90ab6fd99b1a45f490d9481b28dd6fe0123da39f40ce1da523bb281131dabb50561f2548cda5c66dd4ecce80070b81264aa5e8b798c7ecc66862c81163a4da26c3f2fa07018522e6bb04363783ac437ef5406e06dd2b891225b5c9eff17b9227364b0909d971fe6d33fcdb2f0d29c98413f3ca6365eb31119686374ae29a42515ce818ced9fca46fa452381336e60b77ce11aab0eba83cfa6f3a7daa7556236432d2a647048b3b43900230804518437484159bd3065cf4098b2c8df8a56ff6e58208969670fde390bfd83c60271dbdee9495392b9e30339ba7a57d7efdff085a5f49df33e8fc5bcea2ee43e82ced148a0e421e7c04a2c202d26c57b31f908655472e4dac7533da7181857d3506703cede3f6f9f49d8ff73e67b3bb87697121bab2b74728adb8c5da3d5e69e2bab75cbf04d16952ad64a277c25be8e320e2e690af946df920dc628a275adb915e4af1fbff84dda4c660eb9006fecffa7a1189b94edbdd7cd971f5bbffccca0802895dd981bb7f1cd3769b88713459ec4e6e1a93c219c0629d9af1055303ac579954b5542f34307e4f96ebadb5213944d8f2f6fd4e22b301d5fc9ff4738bf6ded07fef96f2ba90646b07d83eda92906606a4e75154ed17e492588ef1f0ae694146b6bcc541b4427e25a8e67da8cf0ac2dcfb0c20e814ce2e0c79a2a4da8327ac7d61053d257279af9f170fe38a9906648f1da0b3bbd1ce0afa3be5ed9b0b36d1ab810d83524a5876a439e0ce04a29884e86edb98dd7eea20557c3af0dbe4d024657a9d99a91e6d40e051d187a2a6fff9f7033c93fbf9b831b69c6eb13af39f2cba6fc17d4cdf5438ce719f89a407090269e69992a75f5e78cf1c658c794f09e8d7da01abe6f26b2e4af727197717ddfbe2bdd9a3e8b7044cb2a9e470653fb460f7df845539bad1592a7a6169781b15000c738b8947294b41f3727da6b1eb58cce11c61fc4dac29802d5f0eb5aa3d7bf85a629725e20bb479d659651c3bb5c1ad8fd0290b452f407dcfd36a257837f95bdb990809ad6a831c7aca189adfe0d231a8e872da4292d5b9d6396411df583d9d02a0d5380fdbb97e3aca5a9ff5bb194b7cd29234c947b4d467ee35711a18f3ec3192668f8bf8d0d96487da90963102bf92965d703e169a88509907e2a65963ce236dc4fce38842564d3c107465e68f2cd71b9d4ad60a75ccd488af412d92a6aebd30b518ab8a7bd96c98f3110f113c0f7296c48d899143ebf8b64acd4024d67369f994c4532e1b08d710d16477e10a98b33f7cee755209a1a16511a6cc5e12d553ee6033e997a3f2359cf498b443bc735b0e7f7b0e24ce01b2ef1274a571e5c2de7ac5a0c82b290302231afe8264458e71a84c28e1511897f071e1e6408592100baa73fb251581de18c0d8bd39248f92a090ed374dedd8c2a36677cdcc1925ab34afe5b0fcf594aba6662de7add6270e0cf237d7e2a03024761309353296112fe06423e711e13c572ce6d0261f836a4a92ee67b843de66f6725b05736fa0f3efba9ec735850c44a6f2034de275cdf5e13f389aea6f5d27e16d4d1f9b1d7c5b1e3a87df592c94157ff8ca763a4c5464423fbab40752f3f120035d56f7c3a796246e5e3fa1fc63b1a96833b726b210593bee07833dd2c07efb5ab898740b77db01abffc378e83d83c04e10265c9a5b7acd45155bbd034dc07273d526989fbd461669f49126da5c9d8d1e187b8bc3af6abdace016bc933349740a394c82165060284c5b5c34dfe59ddb31d4e2471604f689ef9fffada5f66ebc588a2a50d84e249c062c1a3450892fdc45210d39b924d606c7969c236d2685c20aa52bd81529ce8170a41829d3a71a168deb2f34eaf433a0f0096f6906526f0c2a971c585e18df35e3aaf81522c6ead1c08af5d55431e2acc82d7909c86ab61ad066251d3aa35b08820470aac628db52bbc7dd154626b7c7e0ccbca8a0d1787d5e3e3b90534040a5e4964a400023dd65b7ddfdfd28c65738cabbce6db896ec124260265d7025ee8c99a30466b62516bc377b3d0e6a9a94a22d394a99835dfa6858ed5153ff410a280dfa2df7378f173d1b66f635b9dbccc8ad2e721ab81e48964368e5bbb09a22d4a731a479eabe4c2084dbadc46310e91367c939c186e9974f40537baea538ea4a785fc3e93559e8a4495d12ee9484c17f9a85a728591e9ae2cb5795b2ab9ef7b4819d47644e962997e515a3ae4c6aa84029ccdd098aec3f1a886fd17fca8d044f4b6404847e883077dd0344457cedab8fd6c0d245f2fb899e384858b1ee79ed175cadee660f6d066c810e4dc2f351b167fab9dc534b065d5175c50d0fab6746a82c04b3ce89dd2895643e545b13cd9ae3944c5e8e1e672a4fb0bd515dae2ca611d781f1536a0d3dde2580429c2b76071db5349d73c3de0683f957064a8ab5b8df29fc92673d98cdf332cf27ada8639339e2c20170fb38bf2a9a726eb9dd50003b26dcc07e8e79c7a0ca0a9f97cc09d600ec3a6f873a59b9a6d91d4fa93c4e1285133b3211ff1aa9d55f76a0160a1ff62f5fc40cd73705cc6c796ff5b2abea9b2b743bac7184f6aba8fb36d36962164c9494a849eaa7980a23d131a7ba0eac82f49b75f1acef18c770ef6ab6e784b116f3df4b11aa7aed34890207542c93a189a1bbe0f522df22d7debf457201d6c480a4bdf8d14b8c852f1101bce662ecc1d3220c12e3a00a651cdb4c94f9f803df0846b19b6dba20e8d9532c8096b263e2f37e8e9c5171450948eadab692a58f80d97e3f409bc9be20281e444a9d7d4f767e891225df539caf30c25bd66c5c61427d99abe6953338b6162c216e5f8aedf90977d02d120194c89e6708886f97803488caf6e54a89056a8c0a10e0681fcdaa967fa3f0a125ac5115e112162baa43d0e04fce5dc4b57ff972f2c2a0caaf57043804297dcb34665e42d7d36fa5af9e68b34859e646649fcd8cff11e0e283f384faf3c639123498e3c88f0f7ef61acae7cffabdd5477896766807c45b195c106efb8f43a33456f463818dd614e5f8a16521143753195e416a05a32654f82d90ce790231f55d2fe1b61d1436a56b22cd95020ceed91c6e9c397f954b1e14c475182e53bab62fec426160a65670d613a00f62ca3f50d2547cdea781232368811f7ca8262c1da69b26c48ca91c821d90def0de7942fe891a59e9f0b68768e607b3b7eaa9ae5fb51f00614b8a6a85c9634888dcadc43ebb3078bf185f245", 0x1000}, {&(0x7f0000001800)="42646505ce838a4963348b18a538c8385c4c84ba441646503b2e51f481850a66ffca01a3c50b5025e4dfcb5c1fa5e7302ea4e1ad63afec67d1578dd5a3229730f9ea3da152a54c4de576e56f9b188be9dd985d72e35b04c8e428aa1ac4f283258ed7ce325fff74683305bc77e7471136c169e5b53407a6b5cc0c00afdcbc781d34c80954fe3d49e44ed1300d9f9be5a33ed630daa8beff4c7ebd9ee45de5f69cf5099ad82d0860b8753ba5efff1f599759c0bfdaecc60aac986ea62adaaad69c529b12ebb3483a18754ad66c695254f459011561efd69331045e59", 0xdb}], 0x3, &(0x7f0000001a80)=[@rights={0x20, 0x1, 0x1, [r10, r11, r12]}, @cred={0x20, 0x1, 0x2, r0, r13, r14}], 0x40, 0x40000}, {&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="c307f9", 0x3}, {&(0x7f0000003b80)="bd14ea438d9f859a0e1a696c0abfd698649a9769297579055b2b5fe77ddcfcce0a7d6a7e56d5409da9771c174121a1436f665a005d46", 0x36}, {&(0x7f0000003bc0)="c468e97bc9df1d23349571df5d9dbf70bb45f11592e8970f0dcf78b2d846ccdb04ffb065ee1f8b9d379709b183e5e45d314ef956752ea7de91846938740b166187c6848fc6de7bfe7ebc7e0a0e66f5e6a4180adb01e1fbb2aada586ff6676ec82e120290cae6775990baa158b3773686ee03bad056eb9fb4c5498a607e8a3c33104d97", 0x83}, {&(0x7f0000003c80)="9f6650b4324dc39a760e23a10190", 0xe}], 0x6, &(0x7f000000f840)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="2000000000000000010000000200000043af214ec4", @ANYRES32=r0, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20040040}, {&(0x7f0000004600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004a00)=[{&(0x7f0000004680)="c1751542b8ec374a986add7336216caf81f02b242f284aa7315fa939fecf95d76269184ac35c49ef022181afe6bea0a70184141d9b95d6790d8e73a3c83c4ce4b6abbea86fbb74c91c08c21c721de3eb3a3c1dc732528ea73180b989893b623ac691f11bc52f744d9b8e071970952737c8072ff8521759083fdbc2511648d0489c74fe5af165cfaf655fe92531548786b9d73fbf6f988c9f1fe873148745031eb866c70ecc7c32d7e29393f67066fd56b10d886b19a8e1417b4b6eda2720e277aabd8bc77a104a221a9c4a06bca69be932fdd83c8a9a9d64aa51", 0xda}, {&(0x7f0000004780)="a2e8b2117b23070a7e71f78f3409a29330aa498eab2222b1fabe5dbe94843c71f98d592e2d1d8c45242b8ba14ec94cab8e1c7f44f9e920591974fdcf2830bcee34a0282d8bfe921915cc63b20c618b35b17a6f2fd25f80b88c8a5cf193eb6726404e5a485a388c542283d934dde45e437c02966f162949e5a3cbc161e6d7d0bbd86e971d88ffb73e40752fa9c2e432", 0x8f}, {&(0x7f0000004840)="426937e9315c06ce45d158685757662e029f216c9957712ebfc537b90dd620095a246913821853819205c5c336ba159ae18b7df5886c19c2ababbe67cecc0cbfdf8f5fa57e6e3f049be0052d0a61fbf3d173f33dc73dbb4a58e1ba9abf3e332f4cf5912896119a35eb70fc26b52a440ac7fd1f0069c466b28cf180a25b17c318c2db9bad912078f4facbaf0c0b0552778e5c80bf6fd9928e8dee9ced9a", 0x9d}, {&(0x7f0000004900)="f40fb50a845f4b2686b406c8018139c0bb104ba600f855d94a071899b0700cd53cee98d70c", 0x25}, {&(0x7f0000004940)="eada6c088128afc773ba0bb67e3a179ab9f10f7948bde865caf5efbafe8691ca7b2e52e194e83e57c30b8459e1361ced632b3f5a0df22788ef8749ac2fe088e8a78e52fbe302e996ffab8281ad8da6f6d06752074f15f80d3086b43e072f2deb3c4d38db82492304bf05e312833e8c1c9d9bc8e236539d00d51ea84428dafbc1f42b6547f0092f478671807b6aade38ca02ae81f9d9f8932bcd9a2ec90df96c48a34a40bb1080f7bcbc0f3eb1afce1499a4a59", 0xb3}], 0x5, &(0x7f0000008380)=[@rights={0x38, 0x1, 0x1, [r32, r33, r34, r37, r38, r39, r40, r41, r42]}, @cred={0x20, 0x1, 0x2, r0, r43, r44}, @rights={0x30, 0x1, 0x1, [r45, r46, r47, r48, r49, r50, r51]}], 0x88, 0x20048000}, {&(0x7f0000008440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009940)=[{&(0x7f00000084c0)="6c50cb736038f0ebc6882c84b88a5ad08017a23de9d779b76f949033c15992fa184e5fc514ff8850ef351ee0563cb5a9175923d9d8b10ff200f00137c62b216944c8ddc25889275bc045df784261f82f1188ea851bf3cbba9de10c0e2ed1f9d6b828c31f164d2d4244d192edf8ecaba99be18717df0d7829377941598050b1e56a2e72bac16689d1c6b0781e7a0d64d559bb6f46be4aa89fb13f7ebdde089f81b0e052a5ae8dd8d0600925ef71b56f37ae747de4032ea5c6a483ab4b25a4acac", 0xc0}, {&(0x7f0000008580)="d81d7cfff4fa4d6d9a16e1ae360cb1f6372f63eb66555162aae4b7c5edc73c10637de9b717203db419994eb07443faa036703f6c145e4598c302db340059a120c6edb36fd7e9eb4ac7d685d4d2dc2297b6454c9aca1c55a8f71a95c8a485", 0x5e}, {&(0x7f0000008600)="2109ea330abb2bdd556d5ed22f7339cbe1ae82edf3af8f9f96e52fe0992d474d3b2f88ee3f08eb08be29205d7933324501a9d329f29a9029b014d48b29324ece46eadb2eaf3be9e1044fa71ee3257edbef559c80d5", 0x55}, {&(0x7f0000008680)="84bef3681ba2c1e308f4df01b375cb142b74488e81e24567e909abce8f8dd46c4db07f5f9cda19c6548343d7b01552932b59c57e023ca6e9576af5e31da11576e72a73212a48fac38b2162e4cee4011397b754ac8eb0e16fd730021c4166c05ae5b9a44ba606b6cc099ee733be09e1edc5f3ce0731abb67fde2fe83dd4c083ffd3c0648842818c1d1ddc31", 0x8b}, {&(0x7f0000008740)="41df761cf4305a6332cae79b71784275aba2b41edfa4f702e75a6cd72be7bf4ac5115bf9cc274643a273cba566db", 0x2e}, {&(0x7f0000008780)="c8fded7df73b05e8080727ebafcda4c33af7dbd5c888fa45de9f396b4aa5a4cbba181dea8dad45a7937df2959ab21f1f48b30ae554a2cb6f38a5bfa14bc2406eab3b964abf6c43ea93db77a68bb5f34ab9c83a680bc13f7b", 0x58}, {&(0x7f0000008800)="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", 0x1000}, {&(0x7f0000009800)="88548765d9fe349a024bd838f6541811bf82c1796a517e31fb3793925bbc1476603820e7e8a95670801f2a35d46dbe31740f889d1662df3a97cbb5c3ad6c2cb1f8f7de44f38fce467739a9ef4b80849ed8bac5ce6d812ff30404076f4fb06438108ea583b70ebc89b51401938954573963526d5d044ff760f30041488457dc542e2c69b3c4a1c2aed5", 0x89}, {&(0x7f00000098c0)="8c634aad1a9faafc84387bf17df60a1b417976a9aac20a0765f61b08148aaa934d8dd7e127da25ff61d30a33ebf352b5c53d03cc7f2b44ef761b623ab7d5e2f1cb39664980013fda88b39eeea111b4c9dea56687386dd3a657d0688ee9e1d021bf6beb8278f566aaf315b85c742133ed587252", 0x73}], 0x9, &(0x7f000000a000)=[@cred={0x20, 0x1, 0x2, r0, r52, r53}, @cred={0x20, 0x1, 0x2, r0, r54, r55}, @cred={0x20, 0x1, 0x2, r0, r56, r57}, @rights={0x18, 0x1, 0x1, [r58, r59]}, @rights={0x20, 0x1, 0x1, [r60, r61, r62]}, @cred={0x20, 0x1, 0x2, r0, r63, r64}], 0xb8, 0x40800}, {&(0x7f000000a0c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000a400)=[{&(0x7f000000a140)="2f7f568c4a33d88168964006fe52b38f019d096ec41fa08aeab5038b5fb8b58aa9dc11d8fea6a0c1eba93212da942db71fce7452542499fe04e09848d2a108f3b68086d0313d0243180982047fa2ec4ecee908d9e3932b6ebb64641ffc5fabdec9d2aa98a7d01915106690e800fe9c3aa171881d6d7f431940c2ea1d8e759322fdf7ba4eab21e0f7836a8664e42298718a3034378dee062429e55e2c4731fbc1c22d71130ecabf1f626656341b175eda37be7f03834fefcde8b1a04aff8657baaa70080135d65e92d824dfabe9fd639cd971ed6b4cbaa5", 0xd7}, {&(0x7f000000a240)="8957ba3f2f4d3a1705ba0a0b16da7d18d3de78c649d25c598a5bb78761ce95de58c943fda99f0ce6633aa1747c933da9550c65eb36f2448c83a583ab26d8c3b11a98e25380e0f8b561aa3073f417f85e4167d60dd35535a5614954ef2496cb06eaab89833f", 0x65}, {&(0x7f000000a2c0)="336a6d5d3824a9982e261fb3c9e219b6e15ada6528f596cecec0084c221792be5f233c1d4a00", 0x26}, {&(0x7f000000a300)="9e8645dfac1ea45b5e3795722acad944354e87370a0e47c85985fb6824ea6281560811ee8888a8ebd0070895012b70", 0x2f}, {&(0x7f000000a340)="f3ed89d653b079b7b3cad1436f943f09de7c2de2b7572af079ea4f6c8c3451d8a46ebf81aa0fef8d7a7d3e83155caa613854a7689d05cbfb04ec12fc682348c62ef0482776c211217652d66c314a31ca277bf7e54ff13576de95443a5d1bda7cd03d8fe70d5da84f4edb801424c967c0c68832c064c5ca1814226c9d7bd421fbf13b09c94df904b361b7c9b4ae3fa9cf37af53f224f02649d1471d9f565269d8eea35d720f2ef5a61e7d939ee4e5af459ae9a29aee0c", 0xb6}], 0x5, &(0x7f000000a9c0)=[@cred={0x20, 0x1, 0x2, r0, r65, r66}, @cred={0x20, 0x1, 0x2, r0, r67, r68}, @cred={0x20, 0x1, 0x2, r0, r69, r70}, @cred={0x20, 0x1, 0x2, r0, r71, r72}], 0x80, 0x4000010}, {&(0x7f000000aa40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ef00)=[{&(0x7f000000aac0)="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", 0x1000}, {&(0x7f000000bac0)="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", 0x1000}, {&(0x7f000000cac0)="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", 0x1000}, {&(0x7f000000dac0)="2764bd1172668d0e7d7f1751993d31915f36f90a5a332a7a289e0fbfebf3e8568bba6e3160997f7d382cd536293157a27b660db336985dd7f763b9740272b61762e13fc086b5e0fcbc66e0969b4499e73ab5a28eb7d1b0277d3ced7228709645011fd089fb9c6a28aee5d423b7074769eb794f2f5f4ac2e9a89b44438c19f7a32e", 0x81}, {&(0x7f000000db80)="d71a243f0099a9c940a75aea5c93180ff782d98699efb597363b2e3081bb4cae6b0a6361d427ab8b926f82e7cad4d436df793216538294654a7fbea239b1bf2c5f007f5a6c0ee642e82baf91f147c5f4df3260dbd64ccd276b1bebcaa3891ca0baa0f8ba27f921c56745451ea53379d7139e88b84244f51c8977874706a0791ba6de902e7fe8cfc94b0d087a8e4da73bfb0cd752ec370650297439a1d1071f73250ca4f14e148619eea906e3bd7ceacfccc9cf0d358fea238d896d", 0xbb}, {&(0x7f000000dc40)="e70a38013c3450a33e62ee01c1ce1cb74f35f93871d03eceb78a213f17dbb6a07d0a8784e1033a0ca977bf195d5cbf95ebd3232b737ccf2ca3c2fbecfa9e525df532160900162670d6d3cc16923aab410853ab", 0x53}, {&(0x7f000000dcc0)="a6dcde6fd9eb56e1ecca5a9ffb6d0bba8417a6fa3bb0a2e63d9fe79d29b5484faaa76c2c77e4f4b03d7cac5c71214558d428b5db669caea46e7ad919af1b18c3c1d776d076dbeefb41bf9dd5db824557a072611a79d18670335d23fd9b98916e544f582adf6ba48e1a11ddd9901207b9f2e62cbfb8314d7c606e1bb82600dc068cebaa0499d7a8dfb56530b906df392ed359547b41", 0x95}, {&(0x7f000000dd80)="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", 0x1000}, {&(0x7f000000ed80)="4ec326b353fbf71931539df37c198412c8306ea1da5a2ca56cee0a4525b012cd2e0603e89bc353ca78bb78fcff56bb2a6c00df344bade4c32a2005a19ac71e00b40bba6c8ee671e8ea6923c9dc49d062a9d3de2ca2f4de5d64495f1ed213cb0a1d13716cc6b5f433", 0x68}, {&(0x7f000000ee00)="276063cb44a7cdd29968bcd474aa9af527e89eab439bb20a12c0a136a26c9d3e5deced14c066f02cc4ba1c6088b87e5f45a29e922cd9faa2a73f72c2dd0422cc035fc0c88d9a19008daf031f031ec7f1d5fbf0c297449773f076c19ed3f05c887c7ccc1c6987eb9bcc53775a6b7f95e51b0e79c9e6636bd1a0880212dda2b6516e5d199052c42a5998fe029d498f3785c78152810a78fb00c951f0725a65a9bd34ecdd75c1713f5c3af5ace701d3140c940d938a13ec58e40001f52724bb5c88c6d9", 0xc2}], 0xa, &(0x7f000000f4c0)=[@rights={0x18, 0x1, 0x1, [r73]}, @rights={0x28, 0x1, 0x1, [r74, r75, r76, r77, r78, r79]}, @cred={0x20, 0x1, 0x2, r0, r80, r81}, @cred={0x20, 0x1, 0x2, r0, r82, r83}, @cred={0x20, 0x1, 0x2, r0, r84, r85}, @rights={0x18, 0x1, 0x1, [r86, r87]}], 0xb8, 0x40}], 0x7, 0x24040000) [ 414.174183] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 414.191602] syz-executor2 cpuset=syz2 mems_allowed=0 13:18:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xa, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 414.237821] CPU: 1 PID: 24279 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 414.245215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.254600] Call Trace: [ 414.257205] dump_stack+0x1c4/0x2b4 [ 414.260854] ? dump_stack_print_info.cold.2+0x52/0x52 [ 414.266058] ? mark_held_locks+0x130/0x130 [ 414.270296] ? mark_held_locks+0x130/0x130 [ 414.270313] dump_header+0x27b/0xf72 [ 414.270331] ? pagefault_out_of_memory+0x197/0x197 [ 414.270347] ? mark_held_locks+0x130/0x130 [ 414.270359] ? rcu_read_unlock+0x16/0x60 [ 414.270371] ? lock_downgrade+0x900/0x900 [ 414.270392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.301174] ? css_next_child+0x1c3/0x620 [ 414.305329] ? find_lock_task_mm+0x22e/0x4d0 [ 414.309757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.315305] ? task_will_free_mem+0x239/0xb30 [ 414.319824] ? ___ratelimit+0x36f/0x655 [ 414.323819] ? lock_downgrade+0x900/0x900 [ 414.328000] ? trace_hardirqs_on+0xbd/0x310 [ 414.332325] ? kasan_check_read+0x11/0x20 [ 414.332346] ? ___ratelimit+0x36f/0x655 [ 414.340465] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 414.340478] ? trace_hardirqs_on+0x310/0x310 [ 414.340492] ? lock_downgrade+0x900/0x900 [ 414.340510] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 414.340524] ? ___ratelimit+0xaa/0x655 [ 414.340542] ? idr_get_free+0xec0/0xec0 [ 414.369586] ? kasan_check_write+0x14/0x20 [ 414.373833] ? do_raw_spin_lock+0xc1/0x200 [ 414.373853] oom_kill_process.cold.27+0x10/0x903 [ 414.373870] ? kasan_check_write+0x14/0x20 [ 414.387079] ? do_raw_spin_lock+0xc1/0x200 [ 414.391330] ? oom_evaluate_task+0x540/0x540 [ 414.395751] ? cgroup_procs_next+0x70/0x70 [ 414.395771] ? _raw_spin_unlock_irq+0x60/0x80 [ 414.404495] ? oom_badness+0xaa0/0xaa0 [ 414.408391] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 414.413159] ? mem_cgroup_iter_break+0x30/0x30 [ 414.417762] ? cgroup_file_notify+0x226/0x2f0 [ 414.422278] out_of_memory+0xa84/0x1430 [ 414.426262] ? kasan_check_read+0x11/0x20 [ 414.430423] ? oom_killer_disable+0x3a0/0x3a0 [ 414.434941] ? kasan_check_write+0x14/0x20 [ 414.439202] ? do_raw_spin_lock+0xc1/0x200 [ 414.443449] mem_cgroup_out_of_memory+0x15e/0x210 [ 414.448309] ? memcg_memory_event+0x40/0x40 [ 414.452637] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 414.457573] ? page_counter_try_charge+0x1c1/0x220 [ 414.462510] try_charge+0xc43/0x1690 [ 414.466242] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 414.472311] ? tcp_sendmsg+0x2f/0x50 [ 414.476031] ? sock_sendmsg+0xd5/0x120 [ 414.479927] ? __sys_sendto+0x3d7/0x670 [ 414.483917] ? __x64_sys_sendto+0xe1/0x1a0 [ 414.488166] ? do_syscall_64+0x1b9/0x820 [ 414.492239] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.497609] ? fs_reclaim_acquire+0x20/0x20 [ 414.501945] ? lock_downgrade+0x900/0x900 [ 414.506115] ? ___might_sleep+0x1ed/0x300 [ 414.510273] ? lock_downgrade+0x900/0x900 [ 414.514434] ? trace_hardirqs_on+0xbd/0x310 [ 414.518771] ? __kmalloc_node_track_caller+0x33/0x70 [ 414.523892] ? kasan_unpoison_shadow+0x35/0x50 [ 414.523914] ? __sk_mem_raise_allocated+0x642/0x1800 [ 414.523935] ? __bpf_trace_preemptirq_template+0x30/0x30 13:18:04 executing program 3: clock_gettime(0x4, &(0x7f0000001d80)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000040), 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/165, 0xa5}, {&(0x7f0000000180)=""/124, 0x7c}], 0x2, &(0x7f0000000240)=""/210, 0xd2, 0x998f}}, {{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/108, 0x6c}], 0x1, 0x0, 0x0, 0x1}, 0xffffffff7fffffff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/168, 0xa8}], 0x2, &(0x7f0000000600)=""/227, 0xe3, 0xfffffffffffffffd}, 0x9}, {{&(0x7f0000000700)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000780)=""/135, 0x87}, {&(0x7f0000000840)=""/113, 0x71}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/4, 0x4}, {&(0x7f0000001900)=""/7, 0x7}, {&(0x7f0000001940)=""/154, 0x9a}, {&(0x7f0000001a00)=""/228, 0xe4}], 0x7, 0x0, 0x0, 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001b80)=""/153, 0x99}, {&(0x7f0000001c40)=""/226, 0xe2}, {&(0x7f0000001dc0)=""/82, 0x52}, {&(0x7f0000001e40)=""/105, 0x69}, {&(0x7f0000001ec0)=""/218, 0xda}, {&(0x7f0000001fc0)=""/100, 0x64}, {&(0x7f0000001d40)=""/55, 0x37}, {&(0x7f0000002040)=""/242, 0xf2}, {&(0x7f0000002140)=""/55, 0x37}], 0x9, &(0x7f0000002240)=""/4096, 0x1000, 0x3}, 0xff}, {{&(0x7f0000003240)=@un=@abs, 0x80, &(0x7f0000003540)=[{&(0x7f00000032c0)=""/182, 0xb6}, {&(0x7f0000003380)=""/214, 0xd6}, {&(0x7f0000003480)=""/137, 0x89}], 0x3, 0x0, 0x0, 0x3}, 0xfd}, {{&(0x7f0000003580)=@l2, 0x80, &(0x7f0000003740)=[{&(0x7f0000003600)=""/130, 0x82}, {&(0x7f00000036c0)=""/118, 0x76}], 0x2, &(0x7f0000003780)=""/246, 0xf6, 0x5}, 0x3b}], 0x7, 0x2, &(0x7f0000003a40)={0x77359400}) 13:18:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xff00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:04 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) r1 = getpid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2040, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x86, 0x3, 0x2e8f, 0x81}) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0xc, &(0x7f0000000000), 0x1) socket$alg(0x26, 0x5, 0x0) 13:18:04 executing program 3: r0 = socket$kcm(0x10, 0x5, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1, &(0x7f00000013c0)}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7f, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0xff) [ 414.533613] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.533632] ? check_preemption_disabled+0x48/0x200 [ 414.533653] mem_cgroup_charge_skmem+0x1e4/0x390 [ 414.554377] ? mem_cgroup_sk_free+0x90/0x90 [ 414.558720] __sk_mem_raise_allocated+0x642/0x1800 [ 414.563664] ? sk_busy_loop_end+0x1c0/0x1c0 [ 414.568005] ? arch_local_save_flags+0x40/0x40 [ 414.572603] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 414.577626] ? skb_page_frag_refill+0x1eb/0x6a0 [ 414.582282] ? sock_kzfree_s+0x60/0x60 [ 414.586164] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 414.591184] ? sk_stream_alloc_skb+0x34b/0x970 [ 414.595782] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 414.600826] ? skb_entail+0x618/0x8c0 [ 414.604646] ? tcp_rate_check_app_limited+0x121/0x460 [ 414.609848] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 414.614531] __sk_mem_schedule+0x6d/0xe0 [ 414.618601] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 414.624155] tcp_sendmsg_locked+0x1c86/0x3f00 [ 414.628662] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 414.633895] ? tcp_sendpage+0x60/0x60 [ 414.637705] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.643243] ? aa_label_sk_perm+0x46d/0x8e0 [ 414.647572] ? aa_profile_af_perm+0x410/0x410 [ 414.647590] ? ksys_dup3+0x680/0x680 [ 414.647609] ? lock_acquire+0x1ed/0x520 [ 414.647623] ? tcp_sendmsg+0x21/0x50 [ 414.647640] ? trace_hardirqs_on+0xbd/0x310 [ 414.647652] ? lock_release+0x970/0x970 [ 414.647668] ? lock_sock_nested+0xe2/0x120 [ 414.647682] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 414.647696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.647713] ? check_preemption_disabled+0x48/0x200 [ 414.647728] ? lock_sock_nested+0x9a/0x120 [ 414.647743] ? lock_sock_nested+0x9a/0x120 [ 414.647764] ? __local_bh_enable_ip+0x160/0x260 [ 414.655999] tcp_sendmsg+0x2f/0x50 [ 414.656020] inet_sendmsg+0x1a1/0x690 [ 414.712548] ? ipip_gro_receive+0x100/0x100 [ 414.716860] ? apparmor_socket_sendmsg+0x29/0x30 [ 414.721604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.727148] ? security_socket_sendmsg+0x94/0xc0 [ 414.731892] ? ipip_gro_receive+0x100/0x100 [ 414.736201] sock_sendmsg+0xd5/0x120 [ 414.739905] __sys_sendto+0x3d7/0x670 [ 414.743689] ? __ia32_sys_getpeername+0xb0/0xb0 [ 414.748347] ? lock_release+0x970/0x970 [ 414.752306] ? arch_local_save_flags+0x40/0x40 [ 414.756878] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 414.762314] ? aa_af_perm+0x5a0/0x5a0 [ 414.766112] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.771636] ? put_timespec64+0x10f/0x1b0 [ 414.775785] ? nsecs_to_jiffies+0x30/0x30 [ 414.779934] ? trace_hardirqs_on+0xbd/0x310 [ 414.784239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.789764] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.795121] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 414.800613] __x64_sys_sendto+0xe1/0x1a0 [ 414.804708] do_syscall_64+0x1b9/0x820 [ 414.808586] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 414.813940] ? syscall_return_slowpath+0x5e0/0x5e0 [ 414.818857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.823686] ? trace_hardirqs_on_caller+0x310/0x310 [ 414.828694] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 414.833699] ? prepare_exit_to_usermode+0x291/0x3b0 [ 414.838702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.843532] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.848704] RIP: 0033:0x457579 [ 414.851880] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.870767] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 414.878460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 414.885710] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 414.892962] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 414.900220] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 414.907473] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 414.919516] Task in /syz2 killed as a result of limit of /syz2 [ 414.926261] memory: usage 204788kB, limit 204800kB, failcnt 2550 [ 414.932547] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:04 executing program 5: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0xffffffffffffffa5, 0xfffffffffffffffe) 13:18:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x500, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x24, &(0x7f00000000c0), 0xc) 13:18:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}], 0x1, 0x0) [ 414.939427] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 414.946294] Memory cgroup stats for /syz2: cache:8KB rss:4228KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 414.985931] Memory cgroup out of memory: Kill process 24278 (syz-executor2) score 181 or sacrifice child [ 415.006243] Killed process 24278 (syz-executor2) total-vm:70472kB, anon-rss:4212kB, file-rss:32768kB, shmem-rss:0kB [ 415.018996] oom_reaper: reaped process 24278 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 13:18:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x7fffefb0}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x38d7a236802cf5) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 13:18:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xfeffffff00000000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1300000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:04 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000040)={0x0, 0x5517}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x4, &(0x7f0000000080)=0x2) 13:18:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x68000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:05 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x40000}, 0x1c) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000001c0), 0x4) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000140)="3babe72119b311b29007fc44c0a97d2c1dfcaa162040ecaa72fb97b1da7eff508adb47a9df4915850bd658faf12c74053d8fb72f5f7f6dba1442801e57974b6c79eb6a053d1457") sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000340)='yam0\x00') getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000280), 0x1f) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000200)={0x0, 0x9a1b}, 0x2) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240)) [ 415.184427] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 13:18:05 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x0) ioctl$BLKTRACESTART(r1, 0x1267, 0x70d000) 13:18:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xf00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 415.231790] syz-executor2 cpuset=syz2 mems_allowed=0 [ 415.261134] CPU: 0 PID: 24367 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 415.268523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.277880] Call Trace: [ 415.280496] dump_stack+0x1c4/0x2b4 [ 415.284140] ? dump_stack_print_info.cold.2+0x52/0x52 [ 415.289350] ? mark_held_locks+0x130/0x130 [ 415.293598] ? mark_held_locks+0x130/0x130 [ 415.297844] dump_header+0x27b/0xf72 [ 415.301577] ? pagefault_out_of_memory+0x197/0x197 [ 415.306536] ? mark_held_locks+0x130/0x130 [ 415.310778] ? rcu_read_unlock+0x16/0x60 [ 415.314847] ? lock_downgrade+0x900/0x900 [ 415.319008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.319023] ? css_next_child+0x1c3/0x620 [ 415.319037] ? find_lock_task_mm+0x22e/0x4d0 [ 415.319056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.338738] ? task_will_free_mem+0x239/0xb30 [ 415.343251] ? ___ratelimit+0x36f/0x655 [ 415.347236] ? lock_downgrade+0x900/0x900 [ 415.351396] ? trace_hardirqs_on+0xbd/0x310 [ 415.355724] ? kasan_check_read+0x11/0x20 [ 415.359876] ? ___ratelimit+0x36f/0x655 [ 415.363861] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 415.369332] ? trace_hardirqs_on+0x310/0x310 [ 415.373758] ? lock_downgrade+0x900/0x900 [ 415.377922] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 415.383028] ? ___ratelimit+0xaa/0x655 [ 415.386921] ? idr_get_free+0xec0/0xec0 [ 415.390902] ? kasan_check_write+0x14/0x20 [ 415.395148] ? do_raw_spin_lock+0xc1/0x200 [ 415.399391] oom_kill_process.cold.27+0x10/0x903 [ 415.399407] ? kasan_check_write+0x14/0x20 [ 415.399426] ? do_raw_spin_lock+0xc1/0x200 [ 415.412641] ? oom_evaluate_task+0x540/0x540 [ 415.417056] ? cgroup_procs_next+0x70/0x70 [ 415.421301] ? _raw_spin_unlock_irq+0x60/0x80 [ 415.425801] ? oom_badness+0xaa0/0xaa0 [ 415.429712] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 415.434466] ? mem_cgroup_iter_break+0x30/0x30 [ 415.439056] ? cgroup_file_notify+0x226/0x2f0 [ 415.443550] out_of_memory+0xa84/0x1430 [ 415.447522] ? kasan_check_read+0x11/0x20 [ 415.451666] ? oom_killer_disable+0x3a0/0x3a0 [ 415.456156] ? kasan_check_write+0x14/0x20 [ 415.460410] ? do_raw_spin_lock+0xc1/0x200 [ 415.464650] mem_cgroup_out_of_memory+0x15e/0x210 [ 415.469495] ? memcg_memory_event+0x40/0x40 [ 415.473814] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 415.478743] ? page_counter_try_charge+0x1c1/0x220 [ 415.483675] try_charge+0xc43/0x1690 [ 415.487397] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 415.493462] ? tcp_sendmsg+0x2f/0x50 [ 415.497173] ? sock_sendmsg+0xd5/0x120 [ 415.501061] ? __sys_sendto+0x3d7/0x670 [ 415.505035] ? __x64_sys_sendto+0xe1/0x1a0 [ 415.509270] ? do_syscall_64+0x1b9/0x820 [ 415.513333] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.518701] ? fs_reclaim_acquire+0x20/0x20 [ 415.523021] ? lock_downgrade+0x900/0x900 [ 415.527169] ? ___might_sleep+0x1ed/0x300 [ 415.531324] ? trace_hardirqs_on+0xbd/0x310 [ 415.535665] ? lock_downgrade+0x900/0x900 [ 415.539813] ? __kmalloc_node_track_caller+0x33/0x70 [ 415.544918] ? kasan_unpoison_shadow+0x35/0x50 [ 415.549506] ? __sk_mem_raise_allocated+0x642/0x1800 [ 415.554613] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 415.560154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 415.565693] ? check_preemption_disabled+0x48/0x200 [ 415.570711] mem_cgroup_charge_skmem+0x1e4/0x390 [ 415.575465] ? mem_cgroup_sk_free+0x90/0x90 [ 415.579792] __sk_mem_raise_allocated+0x642/0x1800 [ 415.584725] ? sk_busy_loop_end+0x1c0/0x1c0 [ 415.589054] ? arch_local_save_flags+0x40/0x40 [ 415.593643] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 415.598659] ? skb_page_frag_refill+0x1eb/0x6a0 [ 415.603344] ? sock_kzfree_s+0x60/0x60 [ 415.607233] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 415.612248] ? sk_stream_alloc_skb+0x34b/0x970 [ 415.616835] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 415.621847] ? skb_entail+0x618/0x8c0 [ 415.625648] ? tcp_rate_check_app_limited+0x121/0x460 [ 415.630846] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 415.635532] __sk_mem_schedule+0x6d/0xe0 [ 415.639593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.645130] tcp_sendmsg_locked+0x1c86/0x3f00 [ 415.649623] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 415.654827] ? tcp_sendpage+0x60/0x60 [ 415.658631] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 415.664166] ? aa_label_sk_perm+0x46d/0x8e0 [ 415.668489] ? aa_profile_af_perm+0x410/0x410 [ 415.672990] ? ksys_dup3+0x680/0x680 [ 415.676705] ? lock_acquire+0x1ed/0x520 [ 415.680679] ? tcp_sendmsg+0x21/0x50 [ 415.684390] ? trace_hardirqs_on+0xbd/0x310 [ 415.688711] ? lock_release+0x970/0x970 [ 415.692683] ? lock_sock_nested+0xe2/0x120 [ 415.696918] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 415.702370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.707906] ? check_preemption_disabled+0x48/0x200 [ 415.712924] ? lock_sock_nested+0x9a/0x120 [ 415.717156] ? lock_sock_nested+0x9a/0x120 [ 415.721391] ? __local_bh_enable_ip+0x160/0x260 [ 415.726157] tcp_sendmsg+0x2f/0x50 [ 415.729700] inet_sendmsg+0x1a1/0x690 [ 415.733498] ? ipip_gro_receive+0x100/0x100 [ 415.737817] ? apparmor_socket_sendmsg+0x29/0x30 [ 415.742572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.748108] ? security_socket_sendmsg+0x94/0xc0 [ 415.752859] ? ipip_gro_receive+0x100/0x100 [ 415.757178] sock_sendmsg+0xd5/0x120 [ 415.760895] __sys_sendto+0x3d7/0x670 [ 415.764706] ? __ia32_sys_getpeername+0xb0/0xb0 [ 415.769380] ? lock_release+0x970/0x970 [ 415.773359] ? arch_local_save_flags+0x40/0x40 [ 415.777941] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 415.783388] ? aa_af_perm+0x5a0/0x5a0 [ 415.787200] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 415.792735] ? put_timespec64+0x10f/0x1b0 [ 415.796880] ? nsecs_to_jiffies+0x30/0x30 [ 415.801034] ? trace_hardirqs_on+0xbd/0x310 [ 415.805357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.810899] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.816263] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 415.821717] __x64_sys_sendto+0xe1/0x1a0 [ 415.825779] do_syscall_64+0x1b9/0x820 [ 415.829667] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 415.835038] ? syscall_return_slowpath+0x5e0/0x5e0 [ 415.839974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.844827] ? trace_hardirqs_on_caller+0x310/0x310 [ 415.849842] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 415.854863] ? prepare_exit_to_usermode+0x291/0x3b0 [ 415.859885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.864733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.869945] RIP: 0033:0x457579 [ 415.873155] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.892073] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 415.899784] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 13:18:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x81) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600)) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getegid() lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='/dev/loop#\x00', &(0x7f0000000240)='/dev/loop#\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='-bdevproc\x00']) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) getgroups(0x5, &(0x7f00000009c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) r1 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x17, 0xffffffffffffffff, "10dec303415fe113b503cf1ae125cffac7e0f30f657e036d8beab09fd20f016238cbff4c48bedba30ba1508f70d88ebe0a077b1bb29ee38b71b351d15ce4ec82", "c3174cfe994a2869e5662e1e2a72e0fb4aee287df2df380b95e5b25a31c8f999938bfe8bf214ff8e583ea7b0e03ff510bcddd4757451a798594da244e721450c", "a2b98fba2b259731fba7132ce30a6db82958009e4ff06da85422d63bc7d0db26"}) close(r0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="0a5cc8") ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) 13:18:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xe00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x10000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x38000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xff}, 0x8) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000140)={0xff, 0x22, 0x1, r4}) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000180)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001300), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000500)="00a65418709f8000013749aeb96daa3d", 0x10}]) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) 13:18:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xa8aaaafffeaaaa18, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6800000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 415.907053] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 415.914328] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 415.921602] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 415.928879] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 415.984026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 415.998495] Task in /syz2 killed as a result of limit of /syz2 [ 416.004734] memory: usage 204800kB, limit 204800kB, failcnt 2585 [ 416.014170] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 416.021603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 416.030367] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 416.043193] Memory cgroup stats for /syz2: cache:8KB rss:2212KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2216KB inactive_file:0KB active_file:0KB unevictable:0KB [ 416.047497] loop_reread_partitions: partition scan of loop0 (ÞÃA_áµÏá%ÏúÇàóe~m‹ê°ŸÒb8ËÿLH¾Û£ ¡PpØŽ¾ [ 416.047497] {²žã‹q³QÑ\äì) failed (rc=-13) [ 416.068127] Memory cgroup out of memory: Kill process 24366 (syz-executor2) score 171 or sacrifice child 13:18:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x700000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x2000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) r1 = socket(0x0, 0x801, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000001c0)) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000300)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x2, 0x3, 0xffffffffffff09b9}, 0x13fee36e, 0x0, 0x80}) r3 = getpid() r4 = fcntl$getown(0xffffffffffffffff, 0x9) kcmp(r3, r4, 0x7, 0xffffffffffffffff, r0) getpid() fcntl$setpipe(r0, 0x407, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x100) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f00000006c0)=ANY=[]) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={"7465616d300000ffffffc000", 0x4bfd}) fchmod(r2, 0x80) [ 416.108028] Killed process 24366 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 416.119529] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) 13:18:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000000000950000fe00000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000003c0)={r0, r1}) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="50300d4f2f6cc13c18e7c4cf52be201690c1a9fe476f2b692dc554c84af4a59078e31fa26c0dd780093c10d78b33ecd5dc38e137326ceb8ea234d3", @ANYPTR, @ANYPTR, @ANYRESHEX=r3, @ANYRES16=r1, @ANYBLOB="baa37ee3c1a92a6a"], @ANYRESDEC, @ANYPTR64], @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRES16=r3, @ANYRESOCT=r2, @ANYBLOB="a006905468c8ad393440cd402a0690b11013021749c3e544fb5ae88b624204a7d07c2172826d8fa2b7679839125efe0503d9115f164b9643d005ce6735d81286ec63ef2b62b2ac51b36b4562f01e03f534e4e983acc2ce3c11d4b853bd4e3b01638646e27d300d40ad08505c4072c37ff1a76f9b21e5085d8b30e7871f7a967745fe99b7e108e7f74ff941214ea035add32091b7ea9806c2400c7214099c311d4e2081589d5d0b7ff9797baf", @ANYRES32=0x0, @ANYRES64=0x0], @ANYBLOB="a3eb48184b330355c280a11ca377f00a646e0005e6423c7935e4668816a1b99194141229d9275d0c063aec016b9c2eef3a57ead49d4970e5fa93e4f250e67465d68570abdf26810ce391bf144ea8f585b8a88ee3e15bf0811a13344de32335a8d3840f7b85c1196297b5ff4b961b106780d7f6381158272608", @ANYRES16=r2, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYPTR64, @ANYRES64=r2, @ANYPTR64, @ANYBLOB="e7420ebd70ac78464871bdcff0a7bc5ff4fc65536793525d80d071df4a3d5f4f465c3eaf44db6cc82be65b6bff38727a45d4e14100d1c844909125e429c707de722eeeb9e39345716e81033b4b38dbdc9e91a9a0be81671508d31990893a7a535c134545834d625f481b9e80ce801ca4fdb3e2bfcbcb8e38cc9d8e397342dabfa9463a9f686dc9f36a6bb5bc3245eb6f43b07bd820143b8a9093b03715ba77248c7bba6e7fa73fbde5e4bf99c80b0b2f38f87e6a3f6a6439030a0aadfee257b3450e078b", @ANYRES16=r0, @ANYRES32=r0], @ANYRES16=r3], @ANYRES16=r2, @ANYBLOB="3150ef33718b57230cd917100a850c6646aef1ada705cb88bd2fa2828344e62e9b5710093a951182aab36adc142bd163c86384a5c18d89972ee198dc4227d6b9bf9b34ffa8999c48c3f048652d00a1c7922bc0fa7770fb4d72515ea5019489d7c6b1b7499e6fa709ee9bb8574ed1a38830ddcaa483e32ecbe0efd2453a4f27644b3fd6b7db4dd1253ecbcaf45c4d1034d25a6bc338937f6f5e3ddfc00813c05f37189bd8ecbbcfe3a3ebe03013cd0c78978829de00fcf233822e456720a8c5f8f9daf18b2f53a98b", @ANYRESOCT], 0xffffffffffffffbe}}, 0x0) close(r3) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") close(r2) r5 = semget(0x0, 0x0, 0x401) semctl$SEM_INFO(r5, 0x1, 0x13, &(0x7f00000018c0)=""/222) [ 416.177394] loop_reread_partitions: partition scan of loop0 (ÞÃA_áµÏá%ÏúÇàóe~m‹ê°ŸÒb8ËÿLH¾Û£ ¡PpØŽ¾ [ 416.177394] {²žã‹q³QÑ\äì) failed (rc=-13) [ 416.200682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:06 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3f000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 416.235766] device team0 entered promiscuous mode [ 416.244754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 416.249323] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 416.264497] device team_slave_0 entered promiscuous mode [ 416.269806] syz-executor2 cpuset=syz2 mems_allowed=0 [ 416.272556] device team_slave_1 entered promiscuous mode [ 416.275319] CPU: 1 PID: 24427 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 416.288011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.297366] Call Trace: [ 416.299974] dump_stack+0x1c4/0x2b4 [ 416.303629] ? dump_stack_print_info.cold.2+0x52/0x52 [ 416.308840] ? mark_held_locks+0x130/0x130 [ 416.313089] ? mark_held_locks+0x130/0x130 [ 416.317371] dump_header+0x27b/0xf72 [ 416.321097] ? pagefault_out_of_memory+0x197/0x197 [ 416.326036] ? mark_held_locks+0x130/0x130 [ 416.330279] ? rcu_read_unlock+0x16/0x60 [ 416.334349] ? lock_downgrade+0x900/0x900 [ 416.338502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.344033] ? css_next_child+0x1c3/0x620 [ 416.348170] ? find_lock_task_mm+0x22e/0x4d0 [ 416.352586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.358118] ? task_will_free_mem+0x239/0xb30 [ 416.362607] ? ___ratelimit+0x36f/0x655 [ 416.366566] ? lock_downgrade+0x900/0x900 [ 416.370703] ? trace_hardirqs_on+0xbd/0x310 [ 416.375177] ? kasan_check_read+0x11/0x20 [ 416.379316] ? ___ratelimit+0x36f/0x655 [ 416.383281] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 416.388720] ? trace_hardirqs_on+0x310/0x310 [ 416.393116] ? lock_downgrade+0x900/0x900 [ 416.397265] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 416.402391] ? ___ratelimit+0xaa/0x655 [ 416.406282] ? idr_get_free+0xec0/0xec0 [ 416.410251] ? kasan_check_write+0x14/0x20 [ 416.414483] ? do_raw_spin_lock+0xc1/0x200 [ 416.418708] oom_kill_process.cold.27+0x10/0x903 [ 416.423447] ? kasan_check_write+0x14/0x20 [ 416.427665] ? do_raw_spin_lock+0xc1/0x200 [ 416.431887] ? oom_evaluate_task+0x540/0x540 [ 416.436282] ? cgroup_procs_next+0x70/0x70 [ 416.440505] ? _raw_spin_unlock_irq+0x60/0x80 [ 416.444993] ? oom_badness+0xaa0/0xaa0 [ 416.448870] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 416.453620] ? mem_cgroup_iter_break+0x30/0x30 [ 416.458206] ? cgroup_file_notify+0x226/0x2f0 [ 416.462716] out_of_memory+0xa84/0x1430 [ 416.466686] ? kasan_check_read+0x11/0x20 [ 416.470827] ? oom_killer_disable+0x3a0/0x3a0 [ 416.475313] ? kasan_check_write+0x14/0x20 [ 416.479535] ? do_raw_spin_lock+0xc1/0x200 [ 416.483763] mem_cgroup_out_of_memory+0x15e/0x210 [ 416.488602] ? memcg_memory_event+0x40/0x40 [ 416.492915] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 416.497858] ? page_counter_try_charge+0x1c1/0x220 [ 416.502773] try_charge+0xc43/0x1690 [ 416.506482] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 416.512532] ? tcp_sendmsg+0x2f/0x50 [ 416.516245] ? sock_sendmsg+0xd5/0x120 [ 416.520129] ? __sys_sendto+0x3d7/0x670 [ 416.524101] ? __x64_sys_sendto+0xe1/0x1a0 [ 416.528359] ? do_syscall_64+0x1b9/0x820 [ 416.532409] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.537760] ? fs_reclaim_acquire+0x20/0x20 [ 416.542074] ? lock_downgrade+0x900/0x900 [ 416.546220] ? ___might_sleep+0x1ed/0x300 [ 416.550360] ? trace_hardirqs_on+0xbd/0x310 [ 416.554671] ? lock_downgrade+0x900/0x900 [ 416.558839] ? __kmalloc_node_track_caller+0x33/0x70 [ 416.563934] ? kasan_unpoison_shadow+0x35/0x50 [ 416.568506] ? __sk_mem_raise_allocated+0x642/0x1800 [ 416.573605] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 416.579059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 416.584613] ? check_preemption_disabled+0x48/0x200 [ 416.589657] mem_cgroup_charge_skmem+0x1e4/0x390 [ 416.594417] ? mem_cgroup_sk_free+0x90/0x90 [ 416.598729] __sk_mem_raise_allocated+0x642/0x1800 [ 416.603655] ? sk_busy_loop_end+0x1c0/0x1c0 [ 416.607998] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 416.613025] ? skb_page_frag_refill+0x1eb/0x6a0 [ 416.617684] ? sock_kzfree_s+0x60/0x60 [ 416.621557] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 416.626582] ? sk_stream_alloc_skb+0x34b/0x970 [ 416.631150] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 416.636149] ? skb_entail+0x618/0x8c0 [ 416.639941] ? tcp_rate_check_app_limited+0x121/0x460 [ 416.645117] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 416.649776] __sk_mem_schedule+0x6d/0xe0 [ 416.653830] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 416.659365] tcp_sendmsg_locked+0x1c86/0x3f00 [ 416.663881] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 416.669079] ? tcp_sendpage+0x60/0x60 [ 416.672864] ? call_rcu+0x12/0x20 [ 416.676303] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 416.681833] ? aa_label_sk_perm+0x46d/0x8e0 [ 416.686144] ? aa_profile_af_perm+0x410/0x410 [ 416.690662] ? ksys_dup3+0x680/0x680 [ 416.694363] ? lock_acquire+0x1ed/0x520 [ 416.698327] ? tcp_sendmsg+0x21/0x50 [ 416.702044] ? trace_hardirqs_on+0xbd/0x310 [ 416.706372] ? lock_release+0x970/0x970 [ 416.710335] ? lock_sock_nested+0xe2/0x120 [ 416.714555] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 416.719997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.725522] ? check_preemption_disabled+0x48/0x200 [ 416.730524] ? lock_sock_nested+0x9a/0x120 [ 416.734743] ? lock_sock_nested+0x9a/0x120 [ 416.738965] ? __local_bh_enable_ip+0x160/0x260 [ 416.743634] tcp_sendmsg+0x2f/0x50 [ 416.747161] inet_sendmsg+0x1a1/0x690 [ 416.750946] ? ipip_gro_receive+0x100/0x100 [ 416.755266] ? apparmor_socket_sendmsg+0x29/0x30 [ 416.760020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.765542] ? security_socket_sendmsg+0x94/0xc0 [ 416.770282] ? ipip_gro_receive+0x100/0x100 [ 416.774592] sock_sendmsg+0xd5/0x120 [ 416.778296] __sys_sendto+0x3d7/0x670 [ 416.782087] ? __ia32_sys_getpeername+0xb0/0xb0 [ 416.786760] ? lock_release+0x970/0x970 [ 416.790721] ? arch_local_save_flags+0x40/0x40 [ 416.795287] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 416.800722] ? aa_af_perm+0x5a0/0x5a0 [ 416.804515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 416.810037] ? put_timespec64+0x10f/0x1b0 [ 416.814298] ? nsecs_to_jiffies+0x30/0x30 [ 416.818471] ? trace_hardirqs_on+0xbd/0x310 [ 416.822782] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.828308] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.833658] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 416.839098] __x64_sys_sendto+0xe1/0x1a0 [ 416.843148] do_syscall_64+0x1b9/0x820 [ 416.847028] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 416.852379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 416.857301] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.862142] ? trace_hardirqs_on_caller+0x310/0x310 [ 416.867145] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 416.872149] ? prepare_exit_to_usermode+0x291/0x3b0 [ 416.877170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.882020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.887197] RIP: 0033:0x457579 [ 416.890390] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.909281] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 416.916991] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 416.924250] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 416.931509] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 13:18:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 416.938768] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 416.946025] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 416.957997] Task in /syz2 killed as a result of limit of /syz2 [ 416.964240] memory: usage 204792kB, limit 204800kB, failcnt 2661 [ 416.964438] loop_reread_partitions: partition scan of loop0 () failed (rc=-13) [ 416.972337] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:06 executing program 3: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x2000000008}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e24, 0x40, @remote, 0xffffffff}}, 0x10001, 0xffffffff, 0x200000000000, 0x5a98}, 0x98) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000200)) 13:18:06 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000e0f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$BLKROGET(r1, 0x1263, &(0x7f0000000000)) [ 416.988856] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 417.014113] Memory cgroup stats for /syz2: cache:8KB rss:84KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:172KB inactive_file:0KB active_file:0KB unevictable:0KB 13:18:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = accept$packet(r0, 0x0, &(0x7f0000000140)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x7, 0x3}, 0x4) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r2}) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000200)='gre0\x00') ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000280)=""/45) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x20000, 0x0) r4 = semget(0x1, 0x6, 0x783) semctl$SEM_STAT(r4, 0x5, 0x12, &(0x7f0000000300)=""/132) 13:18:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x300000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x4000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 417.077700] Memory cgroup out of memory: Kill process 24425 (syz-executor2) score 161 or sacrifice child [ 417.146118] Killed process 24425 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32832kB, shmem-rss:0kB [ 417.148369] bond0: mtu greater than device maximum 13:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x7000000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/28, 0xfffffd56) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfffffe1d) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)) timer_settime(r4, 0x0, &(0x7f000006b000)={{r5, r6+30000000}, {0x0, 0x9}}, &(0x7f0000040000)) dup3(r2, r0, 0x0) tkill(r3, 0x1000000000016) 13:18:07 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) r2 = socket(0x10, 0x3, 0x47) fcntl$lock(r1, 0x26, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendfile(r2, r3, &(0x7f0000000100), 0x80000001) [ 417.200801] oom_reaper: reaped process 24425 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:18:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:07 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xfffffffffffffffc, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000100)=""/56, &(0x7f0000000000)=0x38) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000001c0)={0xcd, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @rand_addr=0x7fff}, {0x2, 0x4e23, @local}, 0x110, 0x7ff, 0x20, 0x100, 0x400, &(0x7f0000000180)='team_slave_0\x00', 0xfffffffffffffffe, 0x2, 0x9}) 13:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1000000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:07 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000280)=0xc) r2 = getpid() fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0xdd, 0x6, 0x7000000000000000, "69f30d35876415c36820f3b223fd8fb5", "6eacbcfda5a7830a31193b301d5bf0a06eb5a3cb4a0e76f2ceb6ba7c8e04e480898b1e7407d8252d492977cc2131e495510928ad0d08c803d1a6b11cfe4bb3ee36677bdd2cd6682e85297bb29b5104272c6c08e6426a8ce715ebaafa89e9a0d8a12f68ce79bddce78a57de935060a604f7307c43ec7c2008cb32ca494cf01740301ae558b3d759564b093b7b276dc82f8a314224c47e24cc166cb56901284c5e551b242da5c6bfed2005ecd8c8d1283f68bfd6f075f4e6252d49e297b3c54ac80a709240cecb3239"}, 0xdd, 0x0) tgkill(r1, r2, 0x15) r3 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000080)=""/16) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x7feff}) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) [ 417.317389] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 417.329017] syz-executor2 cpuset=syz2 mems_allowed=0 [ 417.342347] CPU: 0 PID: 24489 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 417.349723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.349728] Call Trace: [ 417.349751] dump_stack+0x1c4/0x2b4 [ 417.349769] ? dump_stack_print_info.cold.2+0x52/0x52 [ 417.349784] ? percpu_ref_put_many+0x13e/0x260 [ 417.349801] dump_header+0x27b/0xf72 [ 417.349820] ? mark_held_locks+0x130/0x130 [ 417.349834] ? pagefault_out_of_memory+0x197/0x197 [ 417.349853] ? mark_held_locks+0x130/0x130 [ 417.349863] ? rcu_read_unlock+0x16/0x60 [ 417.349877] ? lock_downgrade+0x900/0x900 [ 417.349896] ? shrink_active_list+0x1c20/0x1c20 [ 417.400453] ? mark_held_locks+0x130/0x130 [ 417.400470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.400489] ? css_next_child+0x1c3/0x620 [ 417.419040] ? find_lock_task_mm+0x22e/0x4d0 [ 417.419060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.419077] ? task_will_free_mem+0x239/0xb30 [ 417.429022] ? ___ratelimit+0x36f/0x655 [ 417.429038] ? lock_downgrade+0x900/0x900 [ 417.429057] ? trace_hardirqs_on+0xbd/0x310 [ 417.437504] ? kasan_check_read+0x11/0x20 [ 417.437518] ? ___ratelimit+0x36f/0x655 [ 417.437533] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 417.437551] ? trace_hardirqs_on+0x310/0x310 [ 417.463941] ? lock_downgrade+0x900/0x900 [ 417.468100] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 417.473214] ? ___ratelimit+0xaa/0x655 [ 417.477110] ? idr_get_free+0xec0/0xec0 [ 417.481095] ? kasan_check_write+0x14/0x20 [ 417.485342] ? do_raw_spin_lock+0xc1/0x200 [ 417.489592] oom_kill_process.cold.27+0x10/0x903 [ 417.494364] ? kasan_check_write+0x14/0x20 [ 417.498610] ? do_raw_spin_lock+0xc1/0x200 [ 417.502854] ? oom_evaluate_task+0x540/0x540 [ 417.507273] ? cgroup_procs_next+0x70/0x70 [ 417.511523] ? _raw_spin_unlock_irq+0x60/0x80 [ 417.516025] ? oom_badness+0xaa0/0xaa0 [ 417.519917] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 417.519939] ? mem_cgroup_iter_break+0x30/0x30 [ 417.529276] ? cgroup_file_notify+0x226/0x2f0 [ 417.529291] out_of_memory+0xa84/0x1430 [ 417.529305] ? kasan_check_read+0x11/0x20 [ 417.529326] ? oom_killer_disable+0x3a0/0x3a0 [ 417.546461] ? kasan_check_write+0x14/0x20 [ 417.550705] ? do_raw_spin_lock+0xc1/0x200 [ 417.555129] mem_cgroup_out_of_memory+0x15e/0x210 [ 417.560006] ? memcg_memory_event+0x40/0x40 [ 417.564341] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 417.564359] ? page_counter_try_charge+0x1c1/0x220 [ 417.564379] try_charge+0xc43/0x1690 [ 417.577762] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 417.582884] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 417.588954] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 417.588972] ? lock_downgrade+0x900/0x900 [ 417.588999] ? lock_release+0x970/0x970 [ 417.601966] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 417.607792] ? get_mem_cgroup_from_mm+0x206/0x440 [ 417.612645] ? mem_cgroup_can_attach+0x580/0x580 [ 417.617410] ? memcg_kmem_charge+0x1c2/0x300 [ 417.621828] ? __might_sleep+0x95/0x190 [ 417.621846] mem_cgroup_try_charge+0x5ea/0xe10 [ 417.621865] ? mem_cgroup_protected+0xa60/0xa60 [ 417.630423] ? __pte_alloc+0x1c7/0x350 [ 417.630439] ? kasan_check_read+0x11/0x20 [ 417.630455] ? do_raw_spin_unlock+0xa7/0x2f0 [ 417.630474] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 417.652137] ? kasan_check_write+0x14/0x20 [ 417.656385] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 417.661945] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 417.666897] __handle_mm_fault+0x273a/0x53e0 [ 417.671332] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 417.676187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 417.676202] ? should_fail+0x22d/0xd01 [ 417.676217] ? shrink_node+0x16b0/0x16b0 [ 417.676236] ? lock_acquire+0x1ed/0x520 [ 417.693660] ? handle_mm_fault+0x42a/0xc70 [ 417.693678] ? lock_downgrade+0x900/0x900 [ 417.693699] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 417.707869] ? __do_page_fault+0x67d/0xed0 [ 417.712114] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 417.717583] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 417.723134] ? check_preemption_disabled+0x48/0x200 [ 417.728165] handle_mm_fault+0x54f/0xc70 [ 417.732233] ? __handle_mm_fault+0x53e0/0x53e0 [ 417.736825] ? find_vma+0x34/0x190 [ 417.740387] __do_page_fault+0x67d/0xed0 [ 417.744458] ? mm_fault_error+0x380/0x380 [ 417.748607] ? trace_hardirqs_off+0xb8/0x310 [ 417.753035] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.758411] ? trace_hardirqs_on+0x310/0x310 [ 417.762833] do_page_fault+0xf2/0x7e0 13:18:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:07 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f000055c000/0x1000)=nil, &(0x7f000068b000/0x1000)=nil, 0x1000, 0x1}) select(0x40, &(0x7f0000000100)={0x40000, 0xbf4, 0x4, 0x182, 0x81, 0x8, 0x0, 0x8001}, &(0x7f0000000140)={0x22790c5a, 0x0, 0x800, 0x446, 0x2, 0x3bb9, 0x8b59, 0x3e8}, &(0x7f0000000180)={0x101, 0x4, 0x4, 0x7, 0x2, 0x7f, 0x101, 0x3}, &(0x7f00000001c0)={0x77359400}) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 13:18:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x10000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 417.766645] ? vmalloc_sync_all+0x30/0x30 [ 417.770810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.776349] ? error_entry+0x70/0xd0 [ 417.780065] ? trace_hardirqs_off_caller+0xbb/0x310 [ 417.785092] ? trace_hardirqs_on_caller+0xc0/0x310 [ 417.790033] ? syscall_return_slowpath+0x5e0/0x5e0 [ 417.794972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.799853] ? trace_hardirqs_on_caller+0x310/0x310 [ 417.804875] ? trace_hardirqs_off+0x310/0x310 [ 417.809378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.815030] ? prepare_exit_to_usermode+0x291/0x3b0 [ 417.820056] ? page_fault+0x8/0x30 [ 417.823618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.828472] ? page_fault+0x8/0x30 [ 417.832025] page_fault+0x1e/0x30 [ 417.835482] RIP: 0033:0x4004d1 [ 417.838681] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 417.857644] RSP: 002b:0000000000a3fbc0 EFLAGS: 00010246 [ 417.863005] RAX: 0000000020e68000 RBX: 000000000072c900 RCX: 0000000000000000 [ 417.870261] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000020f0848 [ 417.877518] RBP: fffffffffffffffe R08: 0000000000000000 R09: 0000000000000000 [ 417.884776] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf0c [ 417.892048] R13: 00000000000003e8 R14: 0000000000065e42 R15: 0000000000065e15 [ 417.901895] Task in /syz2 killed as a result of limit of /syz2 [ 417.908196] memory: usage 204800kB, limit 204800kB, failcnt 2696 [ 417.914413] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 417.922012] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 417.928561] Memory cgroup stats for /syz2: cache:8KB rss:84KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 417.948487] Memory cgroup out of memory: Kill process 24489 (syz-executor2) score 161 or sacrifice child [ 417.958202] Killed process 24489 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB 13:18:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xa000000, @empty, [0x0, 0x2000000]}, 0x6) [ 417.969429] oom_reaper: reaped process 24489 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 418.002101] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 418.015012] syz-executor2 cpuset=syz2 mems_allowed=0 [ 418.020173] CPU: 0 PID: 24524 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 418.027542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.036888] Call Trace: [ 418.039468] dump_stack+0x1c4/0x2b4 [ 418.043080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 418.048259] ? percpu_ref_put_many+0x13e/0x260 [ 418.052829] dump_header+0x27b/0xf72 [ 418.056536] ? mark_held_locks+0x130/0x130 [ 418.060760] ? pagefault_out_of_memory+0x197/0x197 [ 418.065700] ? mark_held_locks+0x130/0x130 [ 418.069961] ? rcu_read_unlock+0x16/0x60 [ 418.074027] ? lock_downgrade+0x900/0x900 [ 418.078180] ? shrink_active_list+0x1c20/0x1c20 [ 418.082839] ? mark_held_locks+0x130/0x130 [ 418.087062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.092586] ? css_next_child+0x1c3/0x620 [ 418.096730] ? find_lock_task_mm+0x22e/0x4d0 [ 418.101144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.106694] ? task_will_free_mem+0x239/0xb30 [ 418.111198] ? ___ratelimit+0x36f/0x655 [ 418.115161] ? lock_downgrade+0x900/0x900 [ 418.119299] ? trace_hardirqs_on+0xbd/0x310 [ 418.123608] ? kasan_check_read+0x11/0x20 [ 418.127765] ? ___ratelimit+0x36f/0x655 [ 418.131738] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 418.137176] ? trace_hardirqs_on+0x310/0x310 [ 418.141601] ? lock_downgrade+0x900/0x900 [ 418.145746] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 418.150846] ? ___ratelimit+0xaa/0x655 [ 418.154720] ? idr_get_free+0xec0/0xec0 [ 418.158682] ? kasan_check_write+0x14/0x20 [ 418.162903] ? do_raw_spin_lock+0xc1/0x200 [ 418.167126] oom_kill_process.cold.27+0x10/0x903 [ 418.171868] ? kasan_check_write+0x14/0x20 [ 418.176091] ? do_raw_spin_lock+0xc1/0x200 [ 418.180343] ? oom_evaluate_task+0x540/0x540 [ 418.184742] ? cgroup_procs_next+0x70/0x70 [ 418.188964] ? _raw_spin_unlock_irq+0x60/0x80 [ 418.193453] ? oom_badness+0xaa0/0xaa0 [ 418.197339] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 418.202084] ? mem_cgroup_iter_break+0x30/0x30 [ 418.206671] ? cgroup_file_notify+0x226/0x2f0 [ 418.211166] out_of_memory+0xa84/0x1430 [ 418.215153] ? kasan_check_read+0x11/0x20 [ 418.219291] ? oom_killer_disable+0x3a0/0x3a0 [ 418.223774] ? kasan_check_write+0x14/0x20 [ 418.228021] ? do_raw_spin_lock+0xc1/0x200 [ 418.232258] mem_cgroup_out_of_memory+0x15e/0x210 [ 418.237093] ? memcg_memory_event+0x40/0x40 [ 418.241430] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 418.246266] ? page_counter_try_charge+0x1c1/0x220 [ 418.251185] try_charge+0xc43/0x1690 [ 418.254886] ? lock_downgrade+0x900/0x900 [ 418.259025] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 418.265069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 418.270591] ? should_fail+0x22d/0xd01 [ 418.274463] ? percpu_ref_tryget_live+0x168/0x460 [ 418.279290] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 418.284122] ? lock_downgrade+0x900/0x900 [ 418.288254] ? lock_release+0x970/0x970 [ 418.292215] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 418.298005] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 418.303533] ? split_huge_pages_set+0xa90/0xa90 [ 418.308189] ? get_mem_cgroup_from_mm+0x206/0x440 [ 418.313014] ? fs_reclaim_acquire+0x20/0x20 [ 418.317333] memcg_kmem_charge_memcg+0x7c/0x120 [ 418.321999] ? memcg_kmem_put_cache+0xb0/0xb0 [ 418.326480] ? __put_compound_page+0xe0/0xe0 [ 418.331000] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 418.336524] memcg_kmem_charge+0x135/0x300 [ 418.340836] __alloc_pages_nodemask+0x72e/0xde0 [ 418.345494] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 418.351020] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 418.356025] ? do_huge_pmd_anonymous_page+0x45e/0x17e0 [ 418.361567] ? unlock_page+0x2c2/0x4c0 [ 418.365444] ? __thp_get_unmapped_area+0x180/0x180 [ 418.370365] ? mark_held_locks+0x130/0x130 [ 418.374591] ? vm_mmap+0xc0/0xc0 [ 418.377956] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 418.383489] alloc_pages_current+0x10c/0x210 [ 418.387896] pte_alloc_one+0x1b/0x1a0 [ 418.391709] __pte_alloc+0x2a/0x350 [ 418.395510] __handle_mm_fault+0x41f5/0x53e0 [ 418.399917] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 418.404750] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 418.410270] ? should_fail+0x22d/0xd01 [ 418.414146] ? shrink_node+0x16b0/0x16b0 [ 418.418196] ? lock_acquire+0x1ed/0x520 [ 418.422156] ? handle_mm_fault+0x42a/0xc70 [ 418.426392] ? lock_downgrade+0x900/0x900 [ 418.430535] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 418.436405] ? __do_page_fault+0x67d/0xed0 [ 418.440627] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 418.446062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 418.451624] ? check_preemption_disabled+0x48/0x200 [ 418.456628] handle_mm_fault+0x54f/0xc70 [ 418.460678] ? __handle_mm_fault+0x53e0/0x53e0 [ 418.465242] ? find_vma+0x34/0x190 [ 418.468769] __do_page_fault+0x67d/0xed0 [ 418.472821] ? mm_fault_error+0x380/0x380 [ 418.476954] ? trace_hardirqs_off+0xb8/0x310 [ 418.481379] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.486736] ? trace_hardirqs_on+0x310/0x310 [ 418.491146] do_page_fault+0xf2/0x7e0 [ 418.494944] ? vmalloc_sync_all+0x30/0x30 [ 418.499075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.504595] ? error_entry+0x70/0xd0 [ 418.508296] ? trace_hardirqs_off_caller+0xbb/0x310 [ 418.513393] ? trace_hardirqs_on_caller+0xc0/0x310 [ 418.518334] ? syscall_return_slowpath+0x5e0/0x5e0 [ 418.523247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.528074] ? trace_hardirqs_on_caller+0x310/0x310 [ 418.533074] ? trace_hardirqs_off+0x310/0x310 [ 418.537555] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.543077] ? prepare_exit_to_usermode+0x291/0x3b0 [ 418.548079] ? page_fault+0x8/0x30 [ 418.551603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.556429] ? page_fault+0x8/0x30 [ 418.559959] page_fault+0x1e/0x30 [ 418.563446] RIP: 0033:0x4004d1 [ 418.566649] Code: d3 e6 0f b6 c2 f7 d6 40 22 37 d3 e0 09 f0 88 07 e9 5a 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 11 48 8b 44 24 08 8b 54 24 20 <66> 89 10 e9 3d 01 00 00 8a 4c 24 28 b8 01 00 00 00 8b 54 24 20 48 [ 418.585559] RSP: 002b:0000000000a3fbc0 EFLAGS: 00010246 [ 418.590922] RAX: 0000000020e68000 RBX: 000000000072c900 RCX: 0000000000000000 [ 418.598173] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000020f0848 [ 418.605452] RBP: fffffffffffffffe R08: 0000000000000000 R09: 0000000000000000 [ 418.612726] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 000000000072bf0c [ 418.619995] R13: 00000000000003e8 R14: 00000000000660ee R15: 00000000000660c1 [ 418.629096] Task in /syz2 killed as a result of limit of /syz2 [ 418.635104] memory: usage 204796kB, limit 204800kB, failcnt 2715 [ 418.641367] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 418.648161] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 418.654300] Memory cgroup stats for /syz2: cache:8KB rss:216KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 418.674295] Memory cgroup out of memory: Kill process 24524 (syz-executor2) score 161 or sacrifice child [ 418.684048] Killed process 24524 (syz-executor2) total-vm:70340kB, anon-rss:116kB, file-rss:32768kB, shmem-rss:0kB [ 418.695405] oom_reaper: reaped process 24524 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x700000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:10 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r1, 0x4}}, 0x10) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x2000000000000000, 0x0, 0x0, 0xd6a, 0x0, 0x10000003, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 13:18:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x800) setsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000000240)={@empty, r1}, 0x14) syz_emit_ethernet(0x13e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa41, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000002c0)={r3, &(0x7f0000000280)=""/48}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000180)={0x9, 0x8, 0x1}) 13:18:10 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}, 0x14) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x210200, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0xd6c1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000280), &(0x7f00000002c0)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000007980)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000007a80)=0xe8) bind$xdp(r3, &(0x7f0000007ac0)={0x2c, 0x1, r6, 0x0, r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r5, 0x401104000000016) 13:18:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xffe0, @empty, [0x0, 0x2000000]}, 0x6) [ 420.304154] nla_parse: 12 callbacks suppressed [ 420.304164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x3f000000}, 0x8) close(r2) close(r1) 13:18:10 executing program 5: r0 = socket$inet6(0xa, 0xffefffffffff, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="153f62354801005d766070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x2288, 0x70e000) [ 420.354283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.377518] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfc000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 420.418263] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 420.453299] syz-executor2 cpuset=syz2 mems_allowed=0 [ 420.468969] CPU: 0 PID: 24548 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 420.476456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.485812] Call Trace: [ 420.488411] dump_stack+0x1c4/0x2b4 [ 420.492048] ? dump_stack_print_info.cold.2+0x52/0x52 [ 420.497250] ? mark_held_locks+0x130/0x130 [ 420.501494] ? mark_held_locks+0x130/0x130 [ 420.503616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.505739] dump_header+0x27b/0xf72 [ 420.505761] ? pagefault_out_of_memory+0x197/0x197 [ 420.505781] ? mark_held_locks+0x130/0x130 [ 420.527114] ? rcu_read_unlock+0x16/0x60 [ 420.531188] ? lock_downgrade+0x900/0x900 [ 420.535356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.536172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.540903] ? css_next_child+0x1c3/0x620 [ 420.540918] ? find_lock_task_mm+0x22e/0x4d0 [ 420.540935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.540947] ? task_will_free_mem+0x239/0xb30 [ 420.540973] ? ___ratelimit+0x36f/0x655 [ 420.571897] ? lock_downgrade+0x900/0x900 [ 420.576054] ? trace_hardirqs_on+0xbd/0x310 [ 420.580381] ? kasan_check_read+0x11/0x20 [ 420.584541] ? ___ratelimit+0x36f/0x655 [ 420.588520] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.593993] ? trace_hardirqs_on+0x310/0x310 [ 420.598429] ? lock_downgrade+0x900/0x900 [ 420.602596] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 420.607797] ? ___ratelimit+0xaa/0x655 [ 420.611698] ? idr_get_free+0xec0/0xec0 [ 420.615673] ? kasan_check_write+0x14/0x20 [ 420.619912] ? do_raw_spin_lock+0xc1/0x200 [ 420.624158] oom_kill_process.cold.27+0x10/0x903 [ 420.628917] ? kasan_check_write+0x14/0x20 [ 420.633157] ? do_raw_spin_lock+0xc1/0x200 [ 420.637404] ? oom_evaluate_task+0x540/0x540 [ 420.641821] ? cgroup_procs_next+0x70/0x70 [ 420.646068] ? _raw_spin_unlock_irq+0x60/0x80 [ 420.650569] ? oom_badness+0xaa0/0xaa0 [ 420.654467] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 420.659234] ? mem_cgroup_iter_break+0x30/0x30 [ 420.663832] ? cgroup_file_notify+0x226/0x2f0 [ 420.668349] out_of_memory+0xa84/0x1430 [ 420.670693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.672338] ? kasan_check_read+0x11/0x20 [ 420.672355] ? oom_killer_disable+0x3a0/0x3a0 [ 420.672376] ? kasan_check_write+0x14/0x20 [ 420.693760] ? do_raw_spin_lock+0xc1/0x200 [ 420.698022] mem_cgroup_out_of_memory+0x15e/0x210 [ 420.702852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.711268] ? memcg_memory_event+0x40/0x40 [ 420.715600] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 420.720551] ? page_counter_try_charge+0x1c1/0x220 [ 420.725487] try_charge+0xc43/0x1690 [ 420.729212] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 420.735287] ? tcp_sendmsg+0x2f/0x50 [ 420.739036] ? sock_sendmsg+0xd5/0x120 [ 420.742930] ? __sys_sendto+0x3d7/0x670 [ 420.742943] ? __x64_sys_sendto+0xe1/0x1a0 [ 420.742960] ? do_syscall_64+0x1b9/0x820 [ 420.742982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.751197] ? fs_reclaim_acquire+0x20/0x20 [ 420.751212] ? lock_downgrade+0x900/0x900 [ 420.751230] ? ___might_sleep+0x1ed/0x300 [ 420.751247] ? lock_downgrade+0x900/0x900 [ 420.777384] ? trace_hardirqs_on+0xbd/0x310 [ 420.781725] ? __kmalloc_node_track_caller+0x33/0x70 [ 420.786838] ? kasan_unpoison_shadow+0x35/0x50 [ 420.791440] ? __sk_mem_raise_allocated+0x642/0x1800 [ 420.796556] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.799468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.802025] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.802045] ? check_preemption_disabled+0x48/0x200 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x8, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x600000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x400000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x9000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x700}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 420.802073] mem_cgroup_charge_skmem+0x1e4/0x390 [ 420.820334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 420.821038] ? mem_cgroup_sk_free+0x90/0x90 [ 420.821063] __sk_mem_raise_allocated+0x642/0x1800 [ 420.843438] ? sk_busy_loop_end+0x1c0/0x1c0 [ 420.847765] ? arch_local_save_flags+0x40/0x40 [ 420.847785] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.847809] ? skb_page_frag_refill+0x1eb/0x6a0 [ 420.847824] ? sock_kzfree_s+0x60/0x60 [ 420.847837] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.847853] ? sk_stream_alloc_skb+0x34b/0x970 [ 420.847872] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 420.857463] ? skb_entail+0x618/0x8c0 [ 420.857479] ? tcp_rate_check_app_limited+0x121/0x460 [ 420.857497] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 420.894241] __sk_mem_schedule+0x6d/0xe0 [ 420.898312] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.898340] tcp_sendmsg_locked+0x1c86/0x3f00 [ 420.898355] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 420.898379] ? tcp_sendpage+0x60/0x60 [ 420.908400] ? lock_acquire+0x1ed/0x520 [ 420.908415] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.908427] ? aa_label_sk_perm+0x46d/0x8e0 [ 420.908447] ? aa_profile_af_perm+0x410/0x410 [ 420.917418] ? ksys_dup3+0x680/0x680 [ 420.917437] ? lock_acquire+0x1ed/0x520 [ 420.917463] ? tcp_sendmsg+0x21/0x50 [ 420.917481] ? trace_hardirqs_on+0xbd/0x310 [ 420.917499] ? lock_release+0x970/0x970 [ 420.927006] ? lock_sock_nested+0xe2/0x120 [ 420.927024] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.927040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.927065] ? check_preemption_disabled+0x48/0x200 [ 420.975703] ? lock_sock_nested+0x9a/0x120 [ 420.980045] ? lock_sock_nested+0x9a/0x120 [ 420.984281] ? __local_bh_enable_ip+0x160/0x260 [ 420.988948] tcp_sendmsg+0x2f/0x50 [ 420.992499] inet_sendmsg+0x1a1/0x690 [ 420.996290] ? ipip_gro_receive+0x100/0x100 [ 421.000602] ? apparmor_socket_sendmsg+0x29/0x30 [ 421.005349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.010877] ? security_socket_sendmsg+0x94/0xc0 [ 421.015639] ? ipip_gro_receive+0x100/0x100 [ 421.019958] sock_sendmsg+0xd5/0x120 [ 421.023683] __sys_sendto+0x3d7/0x670 [ 421.027475] ? __ia32_sys_getpeername+0xb0/0xb0 [ 421.032137] ? lock_release+0x970/0x970 [ 421.036126] ? arch_local_save_flags+0x40/0x40 [ 421.040701] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.046169] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.051703] ? put_timespec64+0x10f/0x1b0 [ 421.055845] ? nsecs_to_jiffies+0x30/0x30 [ 421.060010] ? trace_hardirqs_on+0xbd/0x310 [ 421.064367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.069920] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.075289] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.080739] __x64_sys_sendto+0xe1/0x1a0 [ 421.084789] do_syscall_64+0x1b9/0x820 [ 421.088661] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 421.094021] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.098945] ? trace_hardirqs_on_caller+0x310/0x310 [ 421.103949] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.108953] ? recalc_sigpending_tsk+0x180/0x180 [ 421.113695] ? kasan_check_write+0x14/0x20 [ 421.117916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.122745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.127915] RIP: 0033:0x457579 [ 421.131092] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.149979] RSP: 002b:00007f6bef265c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 421.157690] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 421.164959] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000006 [ 421.172253] RBP: 000000000072bfa0 R08: 00000000200000c0 R09: 0000000000000006 [ 421.179506] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2666d4 [ 421.186758] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 421.207310] Task in /syz2 killed as a result of limit of /syz2 [ 421.213475] memory: usage 204728kB, limit 204800kB, failcnt 2728 [ 421.219873] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 421.226910] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 421.233112] Memory cgroup stats for /syz2: cache:8KB rss:4376KB rss_huge:4096KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:4272KB inactive_file:0KB active_file:0KB unevictable:0KB [ 421.254297] Memory cgroup out of memory: Kill process 24528 (syz-executor2) score 181 or sacrifice child 13:18:11 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000380)) socket(0xa, 0x0, 0x0) listen(r1, 0x7) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x8000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000004c0)={0x40, 0x1c, [0xff, 0x6, 0x2, 0xfff, 0x3f, 0x2324, 0x1ff]}) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x0) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0)=0x400, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x7, 0x8202) r5 = dup3(r0, r4, 0x80000) r6 = gettid() setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x1000, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0xa, 0x0, 0x1, 0x1, '\x00', 0x1}, 0x2, 0x100, 0x0, r6, 0x1, 0x3, 'syz0\x00', &(0x7f0000000000)=['pkeyring#.\x00'], 0xb, [], [0x3, 0x2, 0x8000, 0x6]}) 13:18:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x2, @empty, [0x0, 0x2000000]}, 0x6) 13:18:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xaa00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 421.271479] Killed process 24548 (syz-executor2) total-vm:70472kB, anon-rss:4264kB, file-rss:33608kB, shmem-rss:0kB [ 421.288779] oom_reaper: reaped process 24548 (syz-executor2), now anon-rss:0kB, file-rss:32840kB, shmem-rss:0kB 13:18:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x10000000000062) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYBLOB="0d0000002df7b54753d9204a220c205a87dd9a"], &(0x7f0000000340)=0x15) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xfff) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000440)={0x3, 0x99, &(0x7f0000000380)="112b4507bd08ac3d16e0c3f673e2d93c84daa6a98111ccff8acfef9e5222da95c8b7b201cf596fe71d338c2e2dd219e163d6e9024159418ab3bd28c42d67630ced40fa3b16767e1de3ec77b4e83848f036070fbc07a01f030fb1986d3c258e0218579e0ec638045c4f0a6313558ed065573670f765e7e25b4288bd99605f5befabcba27386425a596b331428061b0fae90f201fe5071e4a17f"}) r5 = syz_open_pts(r1, 0x0) dup3(r0, r1, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10001}) 13:18:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:11 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000580)='./file0\x00', 0x8) timerfd_settime(r2, 0x1, &(0x7f00000005c0)={{0x0, 0x989680}}, &(0x7f0000000600)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r3}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x78, r5, 0xbd80b5f35de8c174, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1c}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) getpeername$unix(r1, &(0x7f0000000480)=@abs, &(0x7f0000000540)=0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000000c0)=r6, 0x4) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @remote}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000007c0)}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0xffd0, &(0x7f0000000240), 0x262, &(0x7f0000000280)=""/227, 0xe3}, 0x12021) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000640)=0x7af, 0x4) [ 421.339015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xf, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000400000) r1 = dup2(r0, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000300)={0x1, 0xfffffffffffffe41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400090100000000000000000a0000001524fe4144f819a2b5e6b48dc63202409b", @ANYRES32=r5, @ANYBLOB="14000100fe8000000000000000000000000000aa"], 0x2c}}, 0x0) 13:18:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xbc7993fffee7bfd9, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 421.581698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 421.614948] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 421.626452] syz-executor2 cpuset=syz2 mems_allowed=0 13:18:11 executing program 5: r0 = socket(0xf, 0x6, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffff9, 0x6100) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x2b9) [ 421.632451] CPU: 0 PID: 24611 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 421.639818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.649173] Call Trace: [ 421.651793] dump_stack+0x1c4/0x2b4 [ 421.655438] ? dump_stack_print_info.cold.2+0x52/0x52 [ 421.660641] ? mark_held_locks+0x130/0x130 [ 421.660655] ? mark_held_locks+0x130/0x130 [ 421.660674] dump_header+0x27b/0xf72 [ 421.669147] ? pagefault_out_of_memory+0x197/0x197 [ 421.669166] ? mark_held_locks+0x130/0x130 13:18:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 421.669177] ? rcu_read_unlock+0x16/0x60 [ 421.669190] ? lock_downgrade+0x900/0x900 [ 421.669211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.695779] ? css_next_child+0x1c3/0x620 [ 421.699938] ? find_lock_task_mm+0x22e/0x4d0 [ 421.704359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.709912] ? task_will_free_mem+0x239/0xb30 [ 421.714425] ? ___ratelimit+0x36f/0x655 [ 421.718421] ? lock_downgrade+0x900/0x900 [ 421.722583] ? trace_hardirqs_on+0xbd/0x310 [ 421.726909] ? kasan_check_read+0x11/0x20 13:18:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x205, 0x84) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x40) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000540)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) clone(0x802122101ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = request_key(&(0x7f00000005c0)='cifs.spnego\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)='*\x00', 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000680)="f8f18e3c308d8552bc958d3f953b1b5cd7512e3ca390f332daea5921b8a730a840aa264671ee95026709d267e94b52b633e2df16216db85ced6a4858a560f50dc99f97e46f72cf5e3437b34b0ce04baacdaa7d22fa185686c5407f4c9ed0f7b3edaf8abec4c49c0b86112df7882a3baafda50c60e3fc817a2ef65b56ed6916faed8a2bbbed8b21c407bdba4038815bc19168cafbb14a86052ec94264bf45", 0x9e, r5) accept4$alg(r3, 0x0, 0x0, 0x80800) keyctl$assume_authority(0x10, r6) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000880)={0xbbe5, 0x7}) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x8) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='EPL\x00'}, 0x48) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x7, 0x0, 0xffffffff7fffffff}) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xdc81}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0xe2d80a77e912c23f) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000004c0)=0x9) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080), 0x8) socket$unix(0x1, 0x2, 0x0) exit(0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f00000003c0)=""/168, &(0x7f0000000480)=0xa8) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x1, 0x1}, {0x23a1, 0x7fff}]}, 0x14, 0x3) r7 = gettid() setpriority(0x2, r7, 0x140) fchdir(r4) [ 421.726926] ? ___ratelimit+0x36f/0x655 [ 421.726946] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.740528] ? trace_hardirqs_on+0x310/0x310 [ 421.744961] ? lock_downgrade+0x900/0x900 [ 421.749136] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 421.754256] ? ___ratelimit+0xaa/0x655 [ 421.758248] ? idr_get_free+0xec0/0xec0 [ 421.762233] ? kasan_check_write+0x14/0x20 [ 421.766485] ? do_raw_spin_lock+0xc1/0x200 [ 421.770732] oom_kill_process.cold.27+0x10/0x903 [ 421.770747] ? kasan_check_write+0x14/0x20 [ 421.770761] ? do_raw_spin_lock+0xc1/0x200 [ 421.770777] ? oom_evaluate_task+0x540/0x540 [ 421.770794] ? cgroup_procs_next+0x70/0x70 [ 421.770810] ? _raw_spin_unlock_irq+0x60/0x80 [ 421.770822] ? oom_badness+0xaa0/0xaa0 [ 421.770836] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 421.770849] ? mem_cgroup_iter_break+0x30/0x30 [ 421.770868] ? cgroup_file_notify+0x226/0x2f0 [ 421.770881] out_of_memory+0xa84/0x1430 [ 421.770894] ? kasan_check_read+0x11/0x20 [ 421.770907] ? oom_killer_disable+0x3a0/0x3a0 [ 421.770918] ? kasan_check_write+0x14/0x20 [ 421.770931] ? do_raw_spin_lock+0xc1/0x200 [ 421.770951] mem_cgroup_out_of_memory+0x15e/0x210 [ 421.770963] ? memcg_memory_event+0x40/0x40 [ 421.770977] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 421.771004] ? page_counter_try_charge+0x1c1/0x220 [ 421.771019] try_charge+0xc43/0x1690 [ 421.771040] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 421.771055] ? tcp_sendmsg+0x2f/0x50 [ 421.771074] ? sock_sendmsg+0xd5/0x120 [ 421.810583] ? __sys_sendto+0x3d7/0x670 [ 421.810597] ? __x64_sys_sendto+0xe1/0x1a0 [ 421.810618] ? do_syscall_64+0x1b9/0x820 [ 421.819075] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.819093] ? fs_reclaim_acquire+0x20/0x20 [ 421.819108] ? lock_downgrade+0x900/0x900 [ 421.819126] ? ___might_sleep+0x1ed/0x300 [ 421.819141] ? trace_hardirqs_on+0xbd/0x310 [ 421.819155] ? lock_downgrade+0x900/0x900 [ 421.819171] ? __kmalloc_node_track_caller+0x33/0x70 [ 421.819189] ? kasan_unpoison_shadow+0x35/0x50 [ 421.868741] ? __sk_mem_raise_allocated+0x642/0x1800 [ 421.868758] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.868773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 421.868791] ? check_preemption_disabled+0x48/0x200 [ 421.868812] mem_cgroup_charge_skmem+0x1e4/0x390 [ 421.890291] ? mem_cgroup_sk_free+0x90/0x90 [ 421.890327] __sk_mem_raise_allocated+0x642/0x1800 [ 421.911363] ? sk_busy_loop_end+0x1c0/0x1c0 [ 421.911385] ? arch_local_save_flags+0x40/0x40 [ 421.931605] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.931625] ? skb_page_frag_refill+0x1eb/0x6a0 [ 421.931645] ? sock_kzfree_s+0x60/0x60 [ 421.978614] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.983637] ? sk_stream_alloc_skb+0x34b/0x970 [ 421.988232] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.993256] ? skb_entail+0x618/0x8c0 [ 421.997065] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 422.001752] __sk_mem_schedule+0x6d/0xe0 [ 422.005835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.011363] tcp_sendmsg_locked+0x1c86/0x3f00 [ 422.015871] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 422.021056] ? tcp_sendpage+0x60/0x60 [ 422.024843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.030367] ? aa_label_sk_perm+0x46d/0x8e0 [ 422.034672] ? aa_profile_af_perm+0x410/0x410 [ 422.039154] ? ksys_dup3+0x680/0x680 [ 422.042856] ? lock_acquire+0x1ed/0x520 [ 422.046832] ? tcp_sendmsg+0x21/0x50 [ 422.050535] ? trace_hardirqs_on+0xbd/0x310 [ 422.054864] ? lock_release+0x970/0x970 [ 422.058833] ? lock_sock_nested+0xe2/0x120 [ 422.063070] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.068510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.074122] ? check_preemption_disabled+0x48/0x200 [ 422.079142] ? lock_sock_nested+0x9a/0x120 [ 422.083381] ? lock_sock_nested+0x9a/0x120 [ 422.087610] ? __local_bh_enable_ip+0x160/0x260 [ 422.092273] tcp_sendmsg+0x2f/0x50 [ 422.095805] inet_sendmsg+0x1a1/0x690 [ 422.099600] ? ipip_gro_receive+0x100/0x100 [ 422.103911] ? apparmor_socket_sendmsg+0x29/0x30 [ 422.108654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.114186] ? security_socket_sendmsg+0x94/0xc0 [ 422.118950] ? ipip_gro_receive+0x100/0x100 [ 422.123262] sock_sendmsg+0xd5/0x120 [ 422.126964] __sys_sendto+0x3d7/0x670 [ 422.130763] ? __ia32_sys_getpeername+0xb0/0xb0 [ 422.135426] ? lock_release+0x970/0x970 [ 422.139387] ? arch_local_save_flags+0x40/0x40 [ 422.143954] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.149394] ? aa_af_perm+0x5a0/0x5a0 [ 422.153192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.158726] ? put_timespec64+0x10f/0x1b0 [ 422.162877] ? nsecs_to_jiffies+0x30/0x30 [ 422.167025] ? trace_hardirqs_on+0xbd/0x310 [ 422.171336] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.176863] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.182215] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.187652] __x64_sys_sendto+0xe1/0x1a0 [ 422.191720] do_syscall_64+0x1b9/0x820 [ 422.195592] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 422.200939] ? syscall_return_slowpath+0x5e0/0x5e0 [ 422.205859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.210704] ? trace_hardirqs_on_caller+0x310/0x310 [ 422.215975] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 422.221006] ? prepare_exit_to_usermode+0x291/0x3b0 [ 422.226024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 422.230871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.236041] RIP: 0033:0x457579 [ 422.239236] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.258162] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 422.265854] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 422.273121] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 13:18:12 executing program 3: unshare(0x8000400) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="5eb02db59c308650945d503485bbb66f733fef066587d7047589a0feab64b8bcad0abe11621ae58ea17e40086cb202fa1ae81ace9d188fb1e134fd5915f702df222c6641f2c7c90bdd18e16cfa61bb59e13647c7cb127d8edb305af40579c23d7c39ea09bb8a3afcfc147cb7f8b58650f4b047cda3dd2306b9531ef82ed549d865ce0df59ed5db89c05c2b349d7b8dfe6ec9d6e61cb268f83a235efd88f1f6edebb2deb72423efb8abef2b104d848879dc827a2be8e4f6e4f0227a3651"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='mqueue\x00', 0x0, &(0x7f0000000140)) mknod(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003b80)) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0/bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000004c0), &(0x7f0000000580)=0x4) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000003c0)=""/128) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff7b) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)) getpid() syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001fc0), &(0x7f0000003c00)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000003c40)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000003d40)=0x100) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000440), &(0x7f0000000480)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)) preadv(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0) [ 422.280377] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 422.287644] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 422.294897] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 422.310319] Task in /syz2 killed as a result of limit of /syz2 [ 422.317378] memory: usage 204800kB, limit 204800kB, failcnt 2750 [ 422.323534] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 422.330392] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 422.336532] Memory cgroup stats for /syz2: cache:8KB rss:2124KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2220KB inactive_file:0KB active_file:0KB unevictable:0KB [ 422.357373] Memory cgroup out of memory: Kill process 24606 (syz-executor2) score 171 or sacrifice child [ 422.367038] Killed process 24606 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB 13:18:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xa, @empty, [0x0, 0x2000000]}, 0x6) 13:18:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xfcb7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'bridge_slave_0\x00', 0xd000}) semget$private(0x0, 0x7, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)={{0x1cf, 0x200, 0x8, 0x2d9, 0x21b, 0x6, 0x1dd, 0x1}, "79c9d6ae5d5ec42e5411c45c26e2aca7060b054f7ade0717f4a549ca4335c519a5f037106aa43e1f9a8e229093d14606cc4f5869cde3fde7c9f58db39084166debaecf7e1b58ebab8f7ceaaf8ed20dc51614da7b831dbcfa89cafae583ae58a7098a9793dec138e6", [[], [], [], [], [], [], [], [], []]}, 0x988) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)) getpid() r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, r2}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x7) recvmsg(r4, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r3, r4) tkill(r2, 0x15) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) 13:18:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6c00}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xf4c9b1fffeb97137, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 422.383965] oom_reaper: reaped process 24606 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 13:18:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x8, 0xfffffffffffff485, 0x3f, 0x9}, 0x14) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d7da122b891bfcb27900000000009ded", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x361, 0x0) read(r1, &(0x7f0000000880)=""/4096, 0x1000) 13:18:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x100000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 422.493352] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=3, oom_score_adj=0 [ 422.516371] syz-executor2 cpuset=syz2 mems_allowed=0 [ 422.524013] CPU: 0 PID: 24660 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 422.531383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.540737] Call Trace: 13:18:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x11, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:12 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 422.543343] dump_stack+0x1c4/0x2b4 [ 422.546983] ? dump_stack_print_info.cold.2+0x52/0x52 [ 422.552369] ? mark_held_locks+0x130/0x130 [ 422.556611] ? mark_held_locks+0x130/0x130 [ 422.560873] dump_header+0x27b/0xf72 [ 422.566009] ? pagefault_out_of_memory+0x197/0x197 [ 422.571139] ? mark_held_locks+0x130/0x130 [ 422.575379] ? rcu_read_unlock+0x16/0x60 [ 422.579447] ? lock_downgrade+0x900/0x900 [ 422.583608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.590820] ? css_next_child+0x1c3/0x620 [ 422.594974] ? find_lock_task_mm+0x22e/0x4d0 [ 422.599407] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.604956] ? task_will_free_mem+0x239/0xb30 [ 422.609489] ? ___ratelimit+0x36f/0x655 [ 422.613476] ? lock_downgrade+0x900/0x900 [ 422.617642] ? trace_hardirqs_on+0xbd/0x310 [ 422.621963] ? kasan_check_read+0x11/0x20 [ 422.626131] ? ___ratelimit+0x36f/0x655 [ 422.630119] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.635589] ? trace_hardirqs_on+0x310/0x310 [ 422.640012] ? lock_downgrade+0x900/0x900 13:18:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 422.640029] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 422.640041] ? ___ratelimit+0xaa/0x655 [ 422.640055] ? idr_get_free+0xec0/0xec0 [ 422.640067] ? kasan_check_write+0x14/0x20 [ 422.640081] ? do_raw_spin_lock+0xc1/0x200 [ 422.640101] oom_kill_process.cold.27+0x10/0x903 [ 422.661403] ? kasan_check_write+0x14/0x20 [ 422.661421] ? do_raw_spin_lock+0xc1/0x200 [ 422.661440] ? oom_evaluate_task+0x540/0x540 [ 422.661460] ? cgroup_procs_next+0x70/0x70 [ 422.670437] ? _raw_spin_unlock_irq+0x60/0x80 [ 422.670451] ? oom_badness+0xaa0/0xaa0 [ 422.670468] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 422.670485] ? mem_cgroup_iter_break+0x30/0x30 [ 422.670506] ? cgroup_file_notify+0x226/0x2f0 [ 422.670524] out_of_memory+0xa84/0x1430 [ 422.713702] ? kasan_check_read+0x11/0x20 [ 422.717863] ? oom_killer_disable+0x3a0/0x3a0 [ 422.722368] ? kasan_check_write+0x14/0x20 [ 422.726617] ? do_raw_spin_lock+0xc1/0x200 [ 422.730876] mem_cgroup_out_of_memory+0x15e/0x210 [ 422.735724] ? memcg_memory_event+0x40/0x40 [ 422.740047] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 422.744996] ? page_counter_try_charge+0x1c1/0x220 [ 422.749936] try_charge+0xc43/0x1690 [ 422.753665] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 422.760005] ? tcp_sendmsg+0x2f/0x50 [ 422.763726] ? sock_sendmsg+0xd5/0x120 [ 422.767613] ? __sys_sendto+0x3d7/0x670 [ 422.767625] ? __x64_sys_sendto+0xe1/0x1a0 [ 422.767639] ? do_syscall_64+0x1b9/0x820 [ 422.767653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.767669] ? fs_reclaim_acquire+0x20/0x20 [ 422.767688] ? lock_downgrade+0x900/0x900 [ 422.793781] ? ___might_sleep+0x1ed/0x300 [ 422.797942] ? trace_hardirqs_on+0xbd/0x310 [ 422.802282] ? lock_downgrade+0x900/0x900 [ 422.807755] ? __kmalloc_node_track_caller+0x33/0x70 [ 422.813126] ? kasan_unpoison_shadow+0x35/0x50 [ 422.817995] ? __sk_mem_raise_allocated+0x642/0x1800 [ 422.823115] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.828580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.834117] ? check_preemption_disabled+0x48/0x200 [ 422.839151] mem_cgroup_charge_skmem+0x1e4/0x390 [ 422.843910] ? mem_cgroup_sk_free+0x90/0x90 [ 422.848234] __sk_mem_raise_allocated+0x642/0x1800 [ 422.853157] ? sk_busy_loop_end+0x1c0/0x1c0 [ 422.857468] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.862563] ? skb_page_frag_refill+0x1eb/0x6a0 [ 422.867229] ? sock_kzfree_s+0x60/0x60 [ 422.871116] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.876128] ? sk_stream_alloc_skb+0x34b/0x970 [ 422.880729] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 422.885740] ? skb_entail+0x618/0x8c0 [ 422.889528] ? tcp_rate_check_app_limited+0x121/0x460 [ 422.894763] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 422.899423] __sk_mem_schedule+0x6d/0xe0 [ 422.903478] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.909027] tcp_sendmsg_locked+0x1c86/0x3f00 [ 422.914920] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 422.920122] ? tcp_sendpage+0x60/0x60 [ 422.923915] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 422.929434] ? aa_label_sk_perm+0x46d/0x8e0 [ 422.933740] ? aa_profile_af_perm+0x410/0x410 [ 422.938225] ? ksys_dup3+0x680/0x680 [ 422.941928] ? lock_acquire+0x1ed/0x520 [ 422.945886] ? tcp_sendmsg+0x21/0x50 [ 422.950385] ? trace_hardirqs_on+0xbd/0x310 [ 422.954962] ? lock_release+0x970/0x970 [ 422.958942] ? lock_sock_nested+0xe2/0x120 [ 422.963162] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 422.968616] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.974665] ? check_preemption_disabled+0x48/0x200 [ 422.979666] ? lock_sock_nested+0x9a/0x120 [ 422.983889] ? lock_sock_nested+0x9a/0x120 [ 422.988111] ? __local_bh_enable_ip+0x160/0x260 [ 422.992774] tcp_sendmsg+0x2f/0x50 [ 422.996302] inet_sendmsg+0x1a1/0x690 [ 423.000091] ? ipip_gro_receive+0x100/0x100 [ 423.004400] ? apparmor_socket_sendmsg+0x29/0x30 [ 423.009141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.014664] ? security_socket_sendmsg+0x94/0xc0 [ 423.019688] ? ipip_gro_receive+0x100/0x100 [ 423.024275] sock_sendmsg+0xd5/0x120 [ 423.027975] __sys_sendto+0x3d7/0x670 [ 423.031773] ? __ia32_sys_getpeername+0xb0/0xb0 [ 423.036439] ? lock_release+0x970/0x970 [ 423.040409] ? arch_local_save_flags+0x40/0x40 [ 423.044978] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.050422] ? aa_af_perm+0x5a0/0x5a0 [ 423.054216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.059756] ? put_timespec64+0x10f/0x1b0 [ 423.064331] ? nsecs_to_jiffies+0x30/0x30 [ 423.068726] ? trace_hardirqs_on+0xbd/0x310 [ 423.073030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.078553] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.083904] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.089349] __x64_sys_sendto+0xe1/0x1a0 [ 423.093395] do_syscall_64+0x1b9/0x820 [ 423.097278] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 423.102650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.107571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.112399] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.117401] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 423.122400] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.127417] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.132257] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.137430] RIP: 0033:0x457579 [ 423.140609] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.159768] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.167460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 423.174713] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 423.181965] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 423.189223] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 13:18:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpu.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) unshare(0x800) r2 = epoll_create1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r3, r1}}, 0x18) fcntl$lock(r2, 0x26, &(0x7f0000000200)) getresgid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffffffffff8, @ipv4={[], [], @local}, 0xd7d}, r3}}, 0x30) setgid(r4) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000640)={0x1000, &(0x7f0000000900)="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"}) sendfile(r6, r5, &(0x7f0000000180), 0x10013c93a) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000006c0)) clock_getres(0x7, &(0x7f0000000280)) write$evdev(r1, &(0x7f0000000440)=[{{}, 0x15, 0x8, 0x80}], 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13:18:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfe80, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 423.196734] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 423.205020] Task in /syz2 killed as a result of limit of /syz2 [ 423.211441] memory: usage 204796kB, limit 204800kB, failcnt 2825 [ 423.218093] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.226061] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.232347] Memory cgroup stats for /syz2: cache:8KB rss:80KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 423.258875] Memory cgroup out of memory: Kill process 24659 (syz-executor2) score 161 or sacrifice child [ 423.298575] Killed process 24659 (syz-executor2) total-vm:70472kB, anon-rss:116kB, file-rss:32832kB, shmem-rss:0kB [ 423.330787] oom_reaper: reaped process 24659 (syz-executor2), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB [ 423.348300] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 423.359597] syz-executor2 cpuset=syz2 mems_allowed=0 [ 423.364729] CPU: 0 PID: 24659 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 423.372087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.381440] Call Trace: [ 423.384040] dump_stack+0x1c4/0x2b4 [ 423.387674] ? dump_stack_print_info.cold.2+0x52/0x52 [ 423.392916] dump_header+0x27b/0xf72 [ 423.396639] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 423.402442] ? pagefault_out_of_memory+0x197/0x197 [ 423.407812] ? rcu_read_unlock+0x33/0x60 [ 423.413015] ? mem_cgroup_iter+0x514/0x1160 [ 423.418400] ? oom_unkillable_task+0x422/0x580 [ 423.422999] ? lock_downgrade+0x900/0x900 [ 423.427159] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 423.431922] ? css_task_iter_end+0x222/0x490 [ 423.436344] ? lock_downgrade+0x900/0x900 [ 423.440506] ? trace_hardirqs_on+0xbd/0x310 [ 423.444828] ? kasan_check_read+0x11/0x20 [ 423.448983] ? css_task_iter_end+0x222/0x490 [ 423.453411] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.458884] ? kasan_check_write+0x14/0x20 [ 423.463126] ? do_raw_spin_lock+0xc1/0x200 [ 423.467366] ? _raw_spin_unlock_irq+0x60/0x80 [ 423.471871] ? css_task_iter_end+0x2ce/0x490 [ 423.476285] ? cgroup_procs_next+0x70/0x70 [ 423.480528] ? _raw_spin_unlock_irq+0x60/0x80 [ 423.480541] ? oom_badness+0xaa0/0xaa0 [ 423.480556] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 423.480570] ? mem_cgroup_iter_break+0x30/0x30 [ 423.480590] ? cgroup_file_notify+0x226/0x2f0 [ 423.480607] out_of_memory.cold.30+0xf/0x184 [ 423.507360] ? kasan_check_read+0x11/0x20 [ 423.511511] ? oom_killer_disable+0x3a0/0x3a0 [ 423.515998] ? kasan_check_write+0x14/0x20 [ 423.520241] ? do_raw_spin_lock+0xc1/0x200 [ 423.524466] mem_cgroup_out_of_memory+0x15e/0x210 [ 423.529294] ? memcg_memory_event+0x40/0x40 [ 423.533603] ? mem_cgroup_try_charge+0x5ea/0xe10 [ 423.539342] ? page_counter_try_charge+0x1c1/0x220 [ 423.544308] try_charge+0xc43/0x1690 [ 423.548021] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 423.553112] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 423.559152] ? get_mem_cgroup_from_mm+0x1e9/0x440 [ 423.563980] ? lock_downgrade+0x900/0x900 [ 423.568119] ? lock_release+0x970/0x970 [ 423.572080] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 423.577863] ? lock_downgrade+0x900/0x900 [ 423.582010] ? get_mem_cgroup_from_mm+0x206/0x440 [ 423.586854] ? mem_cgroup_can_attach+0x580/0x580 [ 423.591603] ? kasan_check_write+0x14/0x20 [ 423.595836] ? __might_sleep+0x95/0x190 [ 423.599795] mem_cgroup_try_charge+0x5ea/0xe10 [ 423.604364] ? mem_cgroup_protected+0xa60/0xa60 [ 423.609024] ? validate_mm+0x386/0x630 [ 423.612902] ? lock_downgrade+0x900/0x900 [ 423.617036] ? pmd_val+0x88/0x100 [ 423.620474] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 423.626007] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 423.630926] __handle_mm_fault+0x273a/0x53e0 [ 423.635323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.640847] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 423.645674] ? perf_event_fork+0x30/0x30 [ 423.649720] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.655252] ? vma_wants_writenotify+0x22c/0x510 [ 423.660002] ? __ia32_sys_mmap_pgoff+0x1a0/0x1a0 [ 423.664748] ? lock_acquire+0x1ed/0x520 [ 423.668709] ? handle_mm_fault+0x42a/0xc70 [ 423.672939] ? lock_downgrade+0x900/0x900 [ 423.677508] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 423.683289] ? __do_page_fault+0x67d/0xed0 [ 423.687515] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 423.692957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 423.698481] ? check_preemption_disabled+0x48/0x200 [ 423.703496] handle_mm_fault+0x54f/0xc70 [ 423.707806] ? __handle_mm_fault+0x53e0/0x53e0 [ 423.712637] ? find_vma+0x34/0x190 [ 423.716177] __do_page_fault+0x67d/0xed0 [ 423.720222] ? do_mprotect_pkey+0x8dd/0xa60 [ 423.724529] ? mm_fault_error+0x380/0x380 [ 423.728924] ? trace_hardirqs_off+0xb8/0x310 [ 423.733344] ? trace_hardirqs_on+0x310/0x310 [ 423.737746] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.743539] ? trace_hardirqs_on+0x310/0x310 [ 423.747934] do_page_fault+0xf2/0x7e0 [ 423.751753] ? vmalloc_sync_all+0x30/0x30 [ 423.755884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.761431] ? error_entry+0x70/0xd0 [ 423.765129] ? trace_hardirqs_off_caller+0xbb/0x310 [ 423.770126] ? trace_hardirqs_on_caller+0xc0/0x310 [ 423.775040] ? syscall_return_slowpath+0x5e0/0x5e0 [ 423.779968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.784818] ? trace_hardirqs_on_caller+0x310/0x310 [ 423.789838] ? trace_hardirqs_off+0x310/0x310 [ 423.794322] ? prepare_exit_to_usermode+0x291/0x3b0 [ 423.799327] ? page_fault+0x8/0x30 [ 423.802852] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 423.807707] ? page_fault+0x8/0x30 [ 423.811231] page_fault+0x1e/0x30 [ 423.814666] RIP: 0033:0x459f2d [ 423.818365] Code: Bad RIP value. [ 423.821729] RSP: 002b:0000000000a3fac8 EFLAGS: 00010202 [ 423.827076] RAX: ffffffffffffffea RBX: 00007f6bef266700 RCX: 00007f6bef266700 [ 423.834330] RDX: 00000000003d0f00 RSI: 00007f6bef265db0 RDI: 000000000040e0a0 [ 423.841580] RBP: 0000000000a3fcd0 R08: 00007f6bef2669d0 R09: 00007f6bef266700 [ 423.848836] R10: 00007f6bef265dc0 R11: 0000000000000246 R12: 0000000000000000 [ 423.856873] R13: 0000000000a3fb7f R14: 00007f6bef2669c0 R15: 0000000000000001 [ 423.866004] Memory limit reached of cgroup /syz2 [ 423.871063] memory: usage 205016kB, limit 204800kB, failcnt 2873 [ 423.877210] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.884027] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:13 executing program 3: accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000d1c000), 0x4) [ 423.890383] Memory cgroup stats for /syz2: cache:8KB rss:80KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:72KB inactive_file:0KB active_file:0KB unevictable:0KB [ 423.911067] Out of memory and no killable processes... 13:18:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xfcb7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'bridge_slave_0\x00', 0xd000}) semget$private(0x0, 0x7, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)={{0x1cf, 0x200, 0x8, 0x2d9, 0x21b, 0x6, 0x1dd, 0x1}, "79c9d6ae5d5ec42e5411c45c26e2aca7060b054f7ade0717f4a549ca4335c519a5f037106aa43e1f9a8e229093d14606cc4f5869cde3fde7c9f58db39084166debaecf7e1b58ebab8f7ceaaf8ed20dc51614da7b831dbcfa89cafae583ae58a7098a9793dec138e6", [[], [], [], [], [], [], [], [], []]}, 0x988) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)) getpid() r2 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r3, 0xf, &(0x7f00000001c0)={0x0, r2}) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x7) recvmsg(r4, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup2(r3, r4) tkill(r2, 0x15) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) 13:18:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x9cefff7f}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xff00, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x3f00000000000000, @empty, [0x0, 0x2000000]}, 0x6) 13:18:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x81, 0x2, 0x0, 0xef4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind(0xffffffffffffffff, &(0x7f0000000680)=@ax25={0x3, {"4a158a9cc76254"}, 0x8}, 0x80) clone(0x0, &(0x7f0000000580), &(0x7f00000001c0), &(0x7f0000000380), &(0x7f0000000400)) r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) fcntl$addseals(r0, 0x409, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, 0x129}, &(0x7f00000004c0)=0x14) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0xa0000}, 0xc, &(0x7f0000000940)=[{&(0x7f0000004480)={0x10, 0x3f, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}], 0x1, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000740)=0x4) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x3f8) 13:18:15 executing program 3: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'.yz'}, &(0x7f0000000100)='X', 0x1, 0xfffffffffffffffc) sysfs$1(0x1, &(0x7f0000000000)='user\x00') [ 425.708551] nla_parse: 8 callbacks suppressed [ 425.708560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:15 executing program 3: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000ea3000)) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x1, 0x402080) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) 13:18:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x15aaaafeffaaaaa8, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 425.800721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xfeffffff, @empty, [0x0, 0x2000000]}, 0x6) 13:18:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x202000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) flock(r1, 0xd) 13:18:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1600000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:15 executing program 5: clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x44000) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000001c0)={r5, 0x0, 0x68d}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000280)={0x0}) r7 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x2, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={r6, 0x80000, r7}) sendto$inet6(r3, &(0x7f0000000100)='C', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffffffffffc, @loopback}, 0x1c) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x80000001, &(0x7f0000000240)=0x0) io_pgetevents(r8, 0x1, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x0, 0x989680}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) setitimer(0x1, &(0x7f0000000080)={{r0, r1/1000+30000}, {0x0, 0x7530}}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) [ 425.951811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xd) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000002c0)="66b99408000066b81e111ee366ba25b5a6000f303681950d00918e66b80b0000000f23c80f21f86635080060000f23f83e0f009125000f381ee594360f320f019dfc32f20f01c98395008800", 0x4c}], 0x1, 0x57, &(0x7f0000000100), 0x0) fcntl$notify(r2, 0x402, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 426.004215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc00e}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1aaaaafeffaaaaa8, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000140)={0x2, 0xffffffffffffff99, 0xfa00, {0x0, {}, r2}}, 0x30) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x0, {0x6, 0x20, "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", 0x4000094, 0x2, 0x1ff, 0x667f, 0x5, 0x5, 0x80000000}, r2}}, 0x128) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) 13:18:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x5103, @empty, [0x0, 0x2000000]}, 0x6) 13:18:16 executing program 1: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000480)="2206297b6895b66147b3c7218a9169a85ea0bdc9e1587a57d422b5ae5c135342e33089754c8107c3cd3923dd4a71c2ff0f6e7b6b4816122d2550689eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000000000000000b4ec24c53d3d661ff5ff70e4880617bac218cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe273f4772539844a12876dc0217de9b895c949bc32336eb852064e0791b63d541f79", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc7cea45975a82f14642bb7adf6d858163a11c006531461ee4819426868ff8a5073f5199a4db6c8a112295c386fe56e52bfffae4c3b54b2b08fa1c7a695d45f752c9f64400bc166f90abf67c7e2ad02cda5cbe402b711f9803889bf4132bb13287af782b5d95b5ff", 0x68, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000440)={r0, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000140)={&(0x7f0000000100)={'crc32\x00'}, &(0x7f0000000540)}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="d34f", 0x2, 0xfffffffffffffffa) syz_execute_func(&(0x7f0000000300)="0f38cd86e98dcf92c401af7c0fc422e1936cdb8d66450f3806b332e5662066470f3a0d1201c4c2b1376600676766430f68cec422ddaaf7f0460fc12dd100000045d0878c000000") 13:18:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x388342fffee7ec07, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 426.158070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 426.187781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x4001, 0x4) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x1002, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x40000000000000, 0x4) sendto$inet(r1, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0x1000, "e41460ccc74f12e1b9f2ed51118e2690f6875bfc6bec07db159ba1d81547d6c906ad7692183235b455e3e9e5fa55c2376c523459c9bcd3b9f2281cacdb06197b7383088a8d4ee321278f1f70e0c33fc8b705c37c22202708c2e55b04676d913023956300960e297f53502806b25daa3f1bf6b9d57d39a3c875ec9fdf4bc1727c45505b16f584778821ec2efeb9c1e3f1492cbea8d279039202ea8d6793ccf57f649cc1f25b577d4ed20c87f22bd84281fb5867eba8db8a454206bebb3f09290ff539379ced26ba91538d1600c8633dd5127932599c7c33c7985cf79d078f03d7a92b76ad8212778c22eda554c12f30c262b4800cb0612445c8208ac4c19acb431523bf2ad7712bbc98bf736980f63e2b7d1aa28bbaf705c2b4e4a9781793c695b97fbacf6b976fff24f288e8fcd369aac0c48c66811588f8cd3524f1a7f6dc44defd6dc04c2637a7d7b4c0dc68376ea75a278f8ebddedae67e618359b97c6156b2cbc47002e2dc435611b41c927d5e692b742dafde4cf4d1d82f7da065102dc9a3e365d62c2d1c705317c4d98d4b1b2146fb3d4aab57a298bedd8ea35b1d20e078b2cf11baf175f231eec5a91e7402a9523587a886e3ea868d1adf568673ddcb18930fd89182c72e5c548724d806918f5b9afa04343253cf56d1fb5a532da4819a8c63f6355ba5bfc6233fe8d2b99d76ef8537252b4d27eb417de5f6c6a347580a9c34b7bf8270cda520eb2c81b2c08d857f9bc6c6421c2518067fc2972f0b5b9768c0cd199eb6e6c1575c8a055f52dc49d4e996896783540cb3c0ca01c57f276df6245a0c4f6ad3c6c6281332f9fe617bf37a9fa937eb38ca6ca6675f14ff52bbbbf456ded0c094d96cb395e8df0c58dd0ec8305c0abdf1dff7e9ca6468466416a20746e113004ab4c11478f52848991bd83c2f9200e60e9970c39fdfa7c68ea44f86cb988e79ca27de4d6e679be5d7e63c2ef132e1fa38d88cf22d16b0a4263eb5351db6af633dd6b52091b431b3f8c1d2698d11354a3d1bfc33d3e64a83d7dfb7b1f089acbb74bb85d0b51c361fedae5935367038eea7a9548ad2b5c7380113b078937da89bfaf8c96f10cf082542b17188dc9349c8b3d364dc2a35abc1b5c6bd1c89ed81d46fb22e074725d5051ed5c9c15d4a4c654f42b8f5641a0936fb08bf816ca800f3a642b20781fa3287e1dced03d4bc309533f3508be9aefd3c14843a1e5210d4f484f83ed6275e9e3f7c6d5d46ae4de392757883e4ca29ae75c5d798de33c8cc09e1e367e0e69ecd130729a309885b690cce7fd9b3bc6ed26c269688988855c9a8bec3594d2cd64e4e21b633de43a97375f82cab3806eac9f198a3abad31d30e2550498da985ab751ad09a6c651369ab813b6d545586a2e1fa57dc27a895bb2da59e54dfd5c11e016bcad31d015c482c457a5149292cd23c1797a07d6aef28e62b1f966ffda946b8718b379a59fe77672e2814d81ff684add43dd6c14a195f5b7825075b89b431c73a1d50c1c151bb40502b41ad895b75ca57a0aa38c0f6b9ef0c2c7282a1c81db780268040e4acb9cfeb352328a8ce25418b917e10a5c2572dfd3b54de7c0c9b6e8ac2942001e4942df90c8b77016e5769f9d6e42e2b604d04ca53ccd50dea2a7b8bbe99c12e679b4b201694a332e2ab1df580fe4dfe15d8c63dd294a7ede5b56d33e71a112842bf4102732b69c1ad40d6a10adcaa89bc136a084f64df4020e6f621cfa66bdb0a3c91ff044833570dedf2da3173a2b246276af536fc81cc4baeea7b152f18573a96a13c3e0f187fb568e58f101959e89aebc1f66c599fb890c7b814fdd4cf6e9cd0221e03ac899d1459ebdeaf406cb810aedaa505de356ad42737a696103f4f5b4ea99893213b2e6fffb59e19d401b14bfd77b50bb01163a59194b705f9df6f302fa797b680fd55569056b993d7f9d3625555c9e4fe933878d74a843d0306ed380c20e0d19f3009b2b75d24517fb0a9ee65699cac3b92be26435d87cfa0a58b75adb2530c0bc23927f36176947d1b2dd7678ef263c89c252c1433ffd16e0222bb456efa312320919be3f282b82238643916b4c5fab201911f4b7f520e682359d7a0a6df81d248aa69cf5bbcf968849fa3d64572e36c281af5db01f903d47c2a0eb03338740fb03d3b1e1b10129ec8a1ad043e60ff985c445603b7064543f79d920e60b9231791a6a259b950b7a9810142abf6736890560e488a74bc791ba58021bb2f15125a33bb0cb6218e82bdb8d40a89f448ed72f6fc4d706b7f7136d65efa7742f10755d93d35e2a92c588264cf98165ac72d257ea69b0e01e1f02d30f84bca847edebd1e8abc25ab885afe4d204d938445e82c28e53a79f27a75124101652fb594de59c4ed34f19afd3207609b4464b9dfc68ead8a57df7487f7d462c7e7a653c3158b716a4a6e9fc57ee213c479e843a94e10a02c2d0a6db517d8241cf86610c05172b36fe8894556363c9383a6db6af9ac56e033d5e55a1956bb97ec3aeff75c07879e0ac613d081f850d39203d4ee05cd1cfd95f3a951022a24c60a61ee07b18b695909842ca4c1e3f0cdb4b1fc16b01d0358b18c997b89f623848b3dd4abfbbb9ce864fc3b64a52f1bceeca88cb0651294277f69f63137be9b15f36bacc6335705f2ab6533007b99ca1f7049bb6eaf4aa60d6905edf7a70027f101a0bb355e74b7c2920087edb1225de640a625708a5d1327f2b1f3cb4198994ea96ff72c1767235b98e5ef180c4e76c48cffdce4c144f0bd6a7fc8a9a0f6117790cbebfc6f5fc3e3031aad99075ff0a8c41d3d7038c2a9c4e94195f2dcc884cf4bd199c914497f1952e48a2fbf34c78112826203bcfbe330d9b3451014f6dcc70830592f76056e900827365bee9771e86e53c9e15a25a3accb1ff912a2effa728ed771cf1f29edae9978e52c0a256288ff2115b402638dfa7955047eb3290649a45457db978266aec280e85675f17bc2286183468e67e4b6dd3ffd356779ac46dc9ddbc42575c3d1629d840744d5863cc2f8a90cc6cbb34948ae1c3946bf9068b17faa7591c7db4db0c3be3dae50812834ac962e9eeecac50b1d744366cdc8de07fcd63b83e490ce33a9d3824dff506e5932633f198a5d20a908506f894325d4be0441cdeb161e2ef24c28f501225ae110a725b32a95dd6a7f121c8e8a3590e8f38fa1bc4ef5e033800fed1d4cdb16a51cdf55dfb141726554ccd605a4d175c9e64137f6e116c0d164cb4e43431c56780b6dea38f505b2f8e7e79bbe53c3f939d015a68df7e6960ef639bfbf918402bfec771a1a1d2fc91adba4e69b43e2497f806632d6057416fce3039b5ab5efbc89f07fbe5087ee639983a8db02ac308967fd1758df4e1506ee7cf1107e2db74d3e49b18be192417358c50cef8732689c919eb1ff5b972f25bdcd7453dd1d368c4519ae965a9295208dda493e4734d2d50c66085791e93ad72ec146811973829bb48694ac3c4e170b10382adb0b40e91544d905f996961e7c0985dc09cc085462951d7a72f11892248833e043cff529135b81cbdc8328e158706b07ffcdb1e71bd08f19ff2b19611cd3e574da2fb5e52abf14130b6d46d49d0a4a43e4e2541b9602c8c325f83bd1d32a512d74ee395494e743f76a5998b9e9b5139481a31d436bbe570d86de4fa0aa80508b2b9b8815544e9085402f639d491bfe66d3a5cf0b645c01e269efd1e9a5f0b02913af5191b7c5ba49af3555f57e6bc1ba03ca991e19f8bbc6f9b204f2c1d10e7603b26e282adb16ba80ab0a7ff00cd1ab39f9ad95f09cb3b46602be242a9f13d2f30607237f309970892eddf843e20ec39fb439b095fd6de94fe5f8cef1b46ebe7be89320c878526258d1b211e96eaebd321fe1c726d73c8211bf624a67c4b8a2154f8b99bc1415c7ef04b8f4dfd44bf21ef2207752480817fa7b72f2a6638de04b669a79c623cd6655820faa30507cb8f7282e065483f2775325f7a4f546139bb26e2579ef55060a91110f5900c6777a2275109435a48e69ab94ef762469c82f230bd9ad2c5f4df8c9d4d32fd32b8f3da978779ebb712de665f170d5029de8d56b787745d54b9e39d94a0692bb0abbfe6c56cca809c333a482a43b07ee65535d78578d9258e90d6254f0999b00b80bcd35953770e8165330d59edbd399cbb0b8467ddcf7147102e58a6c76d5210ea2ae2da8f6c4ad70b058c0111c4092c68ae9c54ce4c2189215c6c89dfbffbc6ea57f3da9a0e15e1129de43ea13256aae7a9d4564877d58c4893cdea9ef870835390b80338518ded5c2ab228199d881ba1e8a3953c5f583b8505fa9e3b5492168aa0ffabee8352e4cb779a2a3991aba687a57c43711434b2d88eb0ee94373ad7a221c67bbc2880f0dcf78fca9a333e234a6bb4a189f24f0b76f6becd37547e78f71c7fcd4f3f47ebb794d24e236f003b8a06a6c5e5da25ecf843953abc60ddf4de0cdb8c0940e489d0ec431141cd9bc0c3730eca6ab608f4cbb9dfe1b5e25bd02fad400969af850aff79340a390431b51443669bdab8bbe799c9360383c24ef9832845d1688405316546cd45b561bc6d138b55d7e39ad8968b95f8e16069bab54808eb35e6afdbad3580e79cd8fbdd0cbe5a931abd2cabd74ccaa894d6a03313b59b497f2f9781a0b78ef3e9cce19261b072c128756054978464bdaff7adcbb907dbd3e72035af2f1a1a045a1b1a7fe902726f78edeb0ae80ae104a55b583886826ad77a5fe371b87b09aab7034ab38661d386bf3547f9c24d5be7cb49d83082e26c4ae6a8ff16df8ce69e65fc61cab7570bc2d974eba184b21cecf348c66407f7197929b65b1255047d85e4b4fbb54f3e9933bde3984634ea89fd5416e1da034875aa5fc3be1051db56632ed91828e85311ee0d943c7589ea7c16814d3636fab8eedaee05c66fcec5f0184d00e3fc1d76d9efdd55b5d8bf14f2db6dbee112682d0a50c2a274270bd0d3c04c91df501feb1f9e541f0c2e7c835acfe12689076db981a3e681cbae010a5a149652103cfe2f3a03173e90ee91cf1035cb572f028c8c934d4084b0475f9d0075cf63f0da34679420a23351cec07b86a3d40a16e15a40f64d0976f3dc2d85ff2fb5e7a1f3103066b11ff2257fca5c48e439af73de171719d6bf10b33545ed0f740158d1e3d26b85f17735f13aabd57774d9ca9e88456846a7a15cd7c06d0c4c472694f47cfbbd735cea3dfb0dfae3c56c2a2bffd36760f514ffe66489132c7a4487875505146efd17245212b987589a23aa7357912ff4c2ef2d3cec282d1ebcca39e05d61c0f15fb4c0c82ba358125b3ac4adeee8ca2a5265e91e3a3fb99b68142d3b4aa1e5db2bc4bb88ab68f2b5b0c5863eedaf7fbd2b18f803a4171de5c76508e5684e1ba1201d8e9f4db337ca305da8589109b016751b6b9b33d243e88c65fb2d139c2607e27b30eb5d56c2f595f1d6392ea6123d52da07420f0ef45163137cdfe713afb4e4110a2612cb28e82e9406561ac5b8bb79d5e0b773c627595022b12b31e58e89e8424c1f655ab9baaaaf6bbf248aebae4f7d21bcd52054c5e9c19ff43a878ac7c7bf859c67bfdb5e00f1927ecd7b0f5684edacddbfb388f48e7c6f64df76353ae7b44a37d036d67f14459e5fb7d7e770b9e3c02368e2367df6f0201c3e0ee82bb7ac6408de70da4a0bb00300545568ea7a796b1bea80b7d5984fefc0532e17636e104971546f2a4388bc2b1f055dfa5b858b9879a90d444928dfaeae67d602919b28bd24792df199fc48b24f2c52f70a8c1e23550f0"}, &(0x7f0000000240)=0x1008) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@nl=@unspec, 0xfffffffffffffcc1, &(0x7f0000000080), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) 13:18:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6800}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:16 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x40, 0x8}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0x401, 0x10}, 0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000480)={'ipvs\x00'}, &(0x7f00000004c0)=0x1e) socket$pppoe(0x18, 0x1, 0x0) [ 426.284035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 426.315688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1e, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:16 executing program 5: clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r2, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0x44000) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000001c0)={r5, 0x0, 0x68d}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000280)={0x0}) r7 = syz_open_dev$amidi(&(0x7f0000000380)='/dev/amidi#\x00', 0x2, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={r6, 0x80000, r7}) sendto$inet6(r3, &(0x7f0000000100)='C', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffffffffffc, @loopback}, 0x1c) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x80000001, &(0x7f0000000240)=0x0) io_pgetevents(r8, 0x1, 0x7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000580)={0x0, 0x989680}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) setitimer(0x1, &(0x7f0000000080)={{r0, r1/1000+30000}, {0x0, 0x7530}}, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) 13:18:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xe00, @empty, [0x0, 0x2000000]}, 0x6) 13:18:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7a00000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:16 executing program 3: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4002, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000000)={&(0x7f0000000240)}) 13:18:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0xfffffffffffffc7c, &(0x7f0000000040)}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x3}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000001c0)={0x7, {{0xa, 0x4e21, 0x8047, @local, 0x5}}, 0x0, 0x7, [{{0xa, 0x4e21, 0x400, @mcast1, 0x7fff}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0x7}}, {{0xa, 0x4e24, 0x2, @mcast1, 0x2}}, {{0xa, 0x4e22, 0xcc7c, @empty, 0xfffffffffffffff8}}, {{0xa, 0x4e23, 0x8, @remote, 0x3}}, {{0xa, 0x4e23, 0x4, @empty, 0xfffffffffffffffd}}, {{0xa, 0x4e20, 0x2, @empty, 0xb01}}]}, 0x410) 13:18:16 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x22000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="035db86376863a68fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7", 0x28}], 0x1}, 0x0) [ 426.944593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:16 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r2 = open$dir(&(0x7f0000000180)='./file0/bus\x00', 0x0, 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) r3 = dup(r2) link(&(0x7f00000001c0)='./file0/bus/file0\x00', &(0x7f0000000200)='./file0/bus\x00') ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r3, 0x0) getuid() inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x80000000) sendto$inet(r0, &(0x7f0000000140)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @rand_addr=0x3ff}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 13:18:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1b, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 426.985851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") msgrcv(0x0, &(0x7f0000000200)={0x0, ""/31}, 0x27, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000280)={0x1}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/214}, 0xde, 0x0, 0x0) prctl$setname(0xf, &(0x7f0000000100)='/dev/autofs\x00') write$P9_ROPEN(r1, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x22, 0x0, 0x8}, 0xfffffffffffffff7}}, 0x18) msgsnd(0x0, &(0x7f0000000180)={0x3}, 0x8, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 13:18:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xfffffffd, @empty, [0x0, 0x2000000]}, 0x6) 13:18:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x101000) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x80045505, 0xfffffffffffffffd) 13:18:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x300000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r1, &(0x7f0000002ec0)={'!! ', './file0'}, 0xfdef) r2 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000240)=""/193) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00&\x00', @ANYRES32=0x0, @ANYBLOB="0b0005000f00000000000000"], 0x24}}, 0x4000000) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80800, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) set_thread_area(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000140)={0x7}, 0x7) 13:18:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x351, @empty, [0x0, 0x2000000]}, 0x6) 13:18:17 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000002e80), 0xffffffffffffffff) r0 = getpid() r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0x1, 0x7, 0x80000000}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5ab, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x2, 0x3, 0x7}) sched_setscheduler(r0, 0x5, &(0x7f0000000040)) ioctl$RTC_UIE_ON(r1, 0x8010550e) 13:18:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfc00, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000640)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, r1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000a40)=ANY=[@ANYBLOB="00000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000600000000000000060000000000000000000000020000000000000004000000000000000000000000000000000000000000000000000000000000004000000000000000060000000000000007ffffffffffffffcb09000000000000010400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000040000000000000000000000000000e4bcbc250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b9be511a72307af405c05b5f75f817f3b63de1e77d54de442adf5ac965206a7658b24ce13a5b944df4a0800e50e4be33523971d43c56d03f6b176cb12c68e9eee2b072de12c8b05f98282e00aed8d216ce4219e8f05990ae45889b9fbf94f3e091a2ebe2711b61839c66fda3e5e9d69c082a05fc945b92564b6436b99fc45059895970300000000000000f62482a2d0f8fd12003cbc6f96d5270900cd6abd14f9e064f0047c4a3e813c0ef6477adee6dfbb58cc423360c118a55bc7d29cd78c53b5d22ca5068042b82076f634b83e33dd72cc86ff27db5c2d5df5c33d7dd37803f207eafbc182851515751fcd0d4c2b2a6a42655246105c37c9f4c7be801a432a3bdde24947917ddec96505dcd8815a72966ac35e58230e1afce1592658e27f5897a38d4da6ec52681b6551390d58f8a50a2f93dca6ef0b1f887f6b413a5fe242e5fec972adf9701d0340b71d59e4b9a6b12521dfea64e402c7f2e93f01ebecedb0e273e9a16ac6d7489be62f462a8a0856582b64a13c31723e"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000380)={[0x2001, 0x2000, 0xf000, 0x4], 0x2, 0x20, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @remote}}, [0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x1f, 0x101, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x4]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x53a2, 0x0, 0x203, 0x2, 0x6, 0x0, 0xf9}, 0x20) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @broadcast, 0x0, 0x0, 'lc\x00'}, 0x2c) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000440)) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x1f, 0x24040) 13:18:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:17 executing program 3: r0 = open(&(0x7f0000000200)='\x00', 0x0, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440)={0x0, 0x0, 0x1}, 0x14) accept4$inet(r0, 0x0, &(0x7f0000000280), 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000100), &(0x7f00000001c0)=0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe0000000000ff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) sched_setscheduler(r3, 0x7, &(0x7f00000002c0)) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, @remote}, 0xffffff46) 13:18:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1500000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:17 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc05c5340, &(0x7f0000000100)={{}, 0x0, 0x6, 0x0, {}, 0x0, 0x10}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82080000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x306, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x54c0f5b1c0466436}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 428.046877] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 13:18:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x101, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b1f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bd1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c1809726554877c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343070e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec0949151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887881cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5e892253ed2c5fff9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163521d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e8", 0xcc4}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920f7f"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000176) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x80003, 0x80) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) lseek(r1, 0x0, 0x2) 13:18:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0xe803, @empty, [0x0, 0x2000000]}, 0x6) 13:18:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xbd24dffeff1bb360, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7a}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 428.248115] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=2, oom_score_adj=0 [ 428.269318] syz-executor2 cpuset=syz2 mems_allowed=0 [ 428.286908] CPU: 0 PID: 24922 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 428.294302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.304343] Call Trace: [ 428.307493] dump_stack+0x1c4/0x2b4 [ 428.307517] ? dump_stack_print_info.cold.2+0x52/0x52 [ 428.307534] ? mark_held_locks+0x130/0x130 [ 428.307552] ? mark_held_locks+0x130/0x130 [ 428.324821] dump_header+0x27b/0xf72 [ 428.328550] ? pagefault_out_of_memory+0x197/0x197 [ 428.333500] ? mark_held_locks+0x130/0x130 [ 428.337741] ? rcu_read_unlock+0x16/0x60 [ 428.341807] ? lock_downgrade+0x900/0x900 [ 428.347032] ? __switch_to_asm+0x34/0x70 [ 428.351476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.357409] ? css_next_child+0x1c3/0x620 [ 428.361563] ? find_lock_task_mm+0x22e/0x4d0 [ 428.365985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.371570] ? task_will_free_mem+0x239/0xb30 [ 428.376090] ? ___ratelimit+0x36f/0x655 [ 428.380069] ? lock_downgrade+0x900/0x900 [ 428.384229] ? trace_hardirqs_on+0xbd/0x310 [ 428.390654] ? kasan_check_read+0x11/0x20 [ 428.394839] ? ___ratelimit+0x36f/0x655 [ 428.398825] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.404299] ? trace_hardirqs_on+0x310/0x310 [ 428.408723] ? lock_downgrade+0x900/0x900 [ 428.412884] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 428.418257] ? ___ratelimit+0xaa/0x655 [ 428.422149] ? idr_get_free+0xec0/0xec0 [ 428.426195] ? kasan_check_write+0x14/0x20 [ 428.430435] ? do_raw_spin_lock+0xc1/0x200 [ 428.434679] oom_kill_process.cold.27+0x10/0x903 [ 428.439447] ? kasan_check_write+0x14/0x20 [ 428.443696] ? do_raw_spin_lock+0xc1/0x200 [ 428.447946] ? oom_evaluate_task+0x540/0x540 [ 428.452371] ? cgroup_procs_next+0x70/0x70 [ 428.456618] ? _raw_spin_unlock_irq+0x60/0x80 [ 428.461128] ? oom_badness+0xaa0/0xaa0 [ 428.465295] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 428.470077] ? mem_cgroup_iter_break+0x30/0x30 [ 428.474681] ? cgroup_file_notify+0x226/0x2f0 [ 428.479188] out_of_memory+0xa84/0x1430 [ 428.483177] ? kasan_check_read+0x11/0x20 [ 428.487354] ? oom_killer_disable+0x3a0/0x3a0 [ 428.491898] ? kasan_check_write+0x14/0x20 [ 428.496158] ? do_raw_spin_lock+0xc1/0x200 [ 428.500415] mem_cgroup_out_of_memory+0x15e/0x210 [ 428.505265] ? memcg_memory_event+0x40/0x40 [ 428.509867] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 428.514812] ? page_counter_try_charge+0x1c1/0x220 [ 428.519751] try_charge+0xc43/0x1690 [ 428.523485] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 428.529555] ? tcp_sendmsg+0x2f/0x50 [ 428.533987] ? sock_sendmsg+0xd5/0x120 [ 428.537895] ? __sys_sendto+0x3d7/0x670 [ 428.541873] ? __x64_sys_sendto+0xe1/0x1a0 [ 428.546119] ? do_syscall_64+0x1b9/0x820 [ 428.550190] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.555576] ? fs_reclaim_acquire+0x20/0x20 [ 428.559909] ? lock_downgrade+0x900/0x900 [ 428.564072] ? ___might_sleep+0x1ed/0x300 [ 428.568231] ? trace_hardirqs_on+0xbd/0x310 [ 428.572559] ? lock_downgrade+0x900/0x900 [ 428.576714] ? __kmalloc_node_track_caller+0x33/0x70 [ 428.581824] ? kasan_unpoison_shadow+0x35/0x50 [ 428.586418] ? __sk_mem_raise_allocated+0x642/0x1800 [ 428.591527] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.597502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.603046] ? check_preemption_disabled+0x48/0x200 [ 428.608074] mem_cgroup_charge_skmem+0x1e4/0x390 [ 428.612839] ? mem_cgroup_sk_free+0x90/0x90 [ 428.617176] __sk_mem_raise_allocated+0x642/0x1800 [ 428.622292] ? sk_busy_loop_end+0x1c0/0x1c0 [ 428.626629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.632175] ? alloc_pages_current+0x114/0x210 [ 428.636767] ? skb_page_frag_refill+0x1eb/0x6a0 [ 428.641473] ? sock_kzfree_s+0x60/0x60 [ 428.645366] ? _copy_from_iter_full+0x2b3/0xd20 [ 428.650043] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 428.655067] ? tcp_rate_check_app_limited+0x121/0x460 [ 428.660260] ? iov_iter_advance+0x1460/0x1460 [ 428.664761] __sk_mem_schedule+0x6d/0xe0 [ 428.669006] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.674553] tcp_sendmsg_locked+0x1c86/0x3f00 [ 428.679048] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 428.684262] ? tcp_sendpage+0x60/0x60 [ 428.689366] ? call_rcu+0x12/0x20 [ 428.693089] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.699346] ? aa_label_sk_perm+0x46d/0x8e0 [ 428.704823] ? aa_profile_af_perm+0x410/0x410 [ 428.709335] ? ksys_dup3+0x680/0x680 [ 428.713056] ? lock_acquire+0x1ed/0x520 [ 428.717035] ? tcp_sendmsg+0x21/0x50 [ 428.720758] ? trace_hardirqs_on+0xbd/0x310 [ 428.725083] ? lock_release+0x970/0x970 [ 428.729061] ? lock_sock_nested+0xe2/0x120 [ 428.733298] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.738762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.744305] ? check_preemption_disabled+0x48/0x200 [ 428.749342] ? lock_sock_nested+0x9a/0x120 [ 428.753582] ? lock_sock_nested+0x9a/0x120 [ 428.758360] ? __local_bh_enable_ip+0x160/0x260 [ 428.763041] tcp_sendmsg+0x2f/0x50 [ 428.766588] inet_sendmsg+0x1a1/0x690 [ 428.770396] ? ipip_gro_receive+0x100/0x100 [ 428.774728] ? apparmor_socket_sendmsg+0x29/0x30 [ 428.780030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.786034] ? security_socket_sendmsg+0x94/0xc0 [ 428.790793] ? ipip_gro_receive+0x100/0x100 [ 428.795121] sock_sendmsg+0xd5/0x120 [ 428.798842] __sys_sendto+0x3d7/0x670 [ 428.802652] ? __ia32_sys_getpeername+0xb0/0xb0 [ 428.807332] ? lock_release+0x970/0x970 [ 428.811308] ? arch_local_save_flags+0x40/0x40 [ 428.815904] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.821357] ? aa_af_perm+0x5a0/0x5a0 [ 428.825474] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.831272] ? put_timespec64+0x10f/0x1b0 [ 428.835426] ? nsecs_to_jiffies+0x30/0x30 [ 428.839638] ? trace_hardirqs_on+0xbd/0x310 [ 428.843962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.849693] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.855062] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 428.860522] __x64_sys_sendto+0xe1/0x1a0 [ 428.864596] do_syscall_64+0x1b9/0x820 [ 428.868490] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 428.873872] ? syscall_return_slowpath+0x5e0/0x5e0 [ 428.878804] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.884530] ? trace_hardirqs_on_caller+0x310/0x310 [ 428.889819] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 428.894839] ? prepare_exit_to_usermode+0x291/0x3b0 [ 428.899863] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.904719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.909910] RIP: 0033:0x457579 [ 428.913629] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.932535] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.940511] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 13:18:18 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x22002, 0x80) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x6c0b40ac}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x3, 0x6d3, 0x8}, &(0x7f0000000100)=0x10) clock_gettime(0x4, &(0x7f0000001d80)) 13:18:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, &(0x7f0000000100)) getgroups(0x8, &(0x7f0000000000)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00]) setgid(r1) 13:18:18 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 428.947780] RDX: fffffffffffffe4e RSI: 0000000020000000 RDI: 0000000000000004 [ 428.955057] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 0000000000000006 [ 428.962341] R10: 00000000000000c0 R11: 0000000000000246 R12: 00007f6bef2876d4 [ 428.970318] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff 13:18:18 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0xffffff92}, {0xffffffc0}, 0x0, 0xfffffffffffffffe}) [ 429.061569] Task in /syz2 killed as a result of limit of /syz2 [ 429.067885] memory: usage 204800kB, limit 204800kB, failcnt 3139 [ 429.074218] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.081424] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3dbbeafeff51d378, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff7f0000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x40000100, 0x0, 0x400c0010007]}) [ 429.096208] Memory cgroup stats for /syz2: cache:8KB rss:2264KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2216KB inactive_file:0KB active_file:0KB unevictable:0KB [ 429.124581] Memory cgroup out of memory: Kill process 24921 (syz-executor2) score 171 or sacrifice child [ 429.152462] Killed process 24921 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 429.188446] kvm [24952]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 13:18:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x63b2adfeffdef3f4, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 429.201902] oom_reaper: reaped process 24921 (syz-executor2), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 13:18:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288a911993f0265df5cf1cdd8b55", 0xa) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1}}], 0x1, 0x0, &(0x7f0000008bc0)) 13:18:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x9, [0x0, 0x2000000]}, 0x6) 13:18:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfec0000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x181100, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = getuid() sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x450040}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c010000260001002bbd7000ffdbdf250100000068cf0d2d72fa364a", @ANYRES32=r2, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r1, r3, &(0x7f0000000100), 0x80000001) 13:18:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x8000000000000004}], 0x10, 0x40004}, 0xfffffffffffffffc}], 0x1, 0x1) 13:18:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 429.355741] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 429.387672] syz-executor2 cpuset=syz2 mems_allowed=0 13:18:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xfe80000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 429.443423] CPU: 0 PID: 24974 Comm: syz-executor2 Not tainted 4.19.0-rc6+ #268 [ 429.451101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.460727] Call Trace: [ 429.463342] dump_stack+0x1c4/0x2b4 [ 429.467018] ? dump_stack_print_info.cold.2+0x52/0x52 [ 429.472928] ? percpu_ref_put_many+0x13e/0x260 [ 429.477520] dump_header+0x27b/0xf72 [ 429.481252] ? mark_held_locks+0x130/0x130 [ 429.485510] ? pagefault_out_of_memory+0x197/0x197 [ 429.490463] ? mark_held_locks+0x130/0x130 [ 429.494713] ? rcu_read_unlock+0x16/0x60 [ 429.498786] ? lock_downgrade+0x900/0x900 [ 429.502941] ? shrink_active_list+0x1c20/0x1c20 [ 429.507625] ? mark_held_locks+0x130/0x130 [ 429.511865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.517596] ? css_next_child+0x1c3/0x620 [ 429.521752] ? find_lock_task_mm+0x22e/0x4d0 [ 429.526175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.531715] ? task_will_free_mem+0x239/0xb30 [ 429.536220] ? ___ratelimit+0x36f/0x655 [ 429.540203] ? lock_downgrade+0x900/0x900 [ 429.544364] ? trace_hardirqs_on+0xbd/0x310 [ 429.548698] ? kasan_check_read+0x11/0x20 [ 429.552858] ? ___ratelimit+0x36f/0x655 [ 429.556843] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.562301] ? trace_hardirqs_on+0x310/0x310 [ 429.566736] ? lock_downgrade+0x900/0x900 [ 429.570903] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 429.576026] ? ___ratelimit+0xaa/0x655 [ 429.579932] ? idr_get_free+0xec0/0xec0 [ 429.583917] ? kasan_check_write+0x14/0x20 [ 429.588161] ? do_raw_spin_lock+0xc1/0x200 [ 429.592412] oom_kill_process.cold.27+0x10/0x903 [ 429.597957] ? kasan_check_write+0x14/0x20 [ 429.602217] ? do_raw_spin_lock+0xc1/0x200 [ 429.606844] ? oom_evaluate_task+0x540/0x540 [ 429.611269] ? cgroup_procs_next+0x70/0x70 [ 429.615519] ? _raw_spin_unlock_irq+0x60/0x80 [ 429.620037] ? oom_badness+0xaa0/0xaa0 [ 429.623935] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 429.628703] ? mem_cgroup_iter_break+0x30/0x30 [ 429.628726] ? cgroup_file_notify+0x226/0x2f0 [ 429.628745] out_of_memory+0xa84/0x1430 [ 429.637980] ? kasan_check_read+0x11/0x20 [ 429.638007] ? oom_killer_disable+0x3a0/0x3a0 [ 429.638021] ? kasan_check_write+0x14/0x20 [ 429.638041] ? do_raw_spin_lock+0xc1/0x200 [ 429.659124] mem_cgroup_out_of_memory+0x15e/0x210 [ 429.663980] ? memcg_memory_event+0x40/0x40 [ 429.668586] ? mem_cgroup_charge_skmem+0x1e4/0x390 [ 429.673535] ? page_counter_try_charge+0x1c1/0x220 [ 429.678743] try_charge+0xc43/0x1690 [ 429.682729] ? ___might_sleep+0x1ed/0x300 [ 429.686892] ? mem_cgroup_count_precharge_pte_range+0x760/0x760 [ 429.692960] ? kasan_kmalloc+0xc7/0xe0 [ 429.695387] netlink: 'syz-executor5': attribute type 39 has an invalid length. [ 429.696873] ? kmem_cache_alloc_node_trace+0x305/0x740 [ 429.696888] ? kasan_unpoison_shadow+0x35/0x50 [ 429.696905] ? kasan_kmalloc+0xc7/0xe0 [ 429.718281] ? __kmalloc_node_track_caller+0x47/0x70 [ 429.723662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.729211] ? sk_forced_mem_schedule+0x13b/0x170 [ 429.734069] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.739528] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 13:18:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x3f00, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:19 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000480)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000280), &(0x7f0000000380)='(', 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000340)={0x0, 0x101, 0x2, 0x8}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x0, {0x21}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc0109207, &(0x7f0000000140)) 13:18:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xb6fda1feff769964, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x18, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da6b}, [@nested={0x4, 0x27}]}, 0x18}}, 0x0) 13:18:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) getsockname$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="2e0f229feaaf0000002301c74424000e000000c7442402f9ffffffc7442406000000000f01142466baf80cb84cdeae87ef66bafc0cec260f01c8c4e1d9e170f6c4e1ff128300000080b91f0b00000f3266baf80cb841056180ef66bafc0cec0f540c16", 0x63}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 429.745085] ? check_preemption_disabled+0x48/0x200 [ 429.750121] mem_cgroup_charge_skmem+0x1e4/0x390 [ 429.755519] ? mem_cgroup_sk_free+0x90/0x90 [ 429.760139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.765789] ? tcp_chrono_stop+0x25f/0x520 [ 429.770053] sk_forced_mem_schedule+0x13b/0x170 [ 429.774823] sk_stream_alloc_skb+0x1ab/0x970 [ 429.779247] ? tcp_init_transfer+0x470/0x470 [ 429.783667] ? check_preemption_disabled+0x48/0x200 [ 429.788699] ? tcp_close+0x1300/0x1300 [ 429.792596] tcp_connect+0x1283/0x4690 [ 429.796591] ? tcp_push_one+0x110/0x110 [ 429.800832] ? __sanitizer_cov_trace_cmp2+0x17/0x20 [ 429.800850] ? check_preemption_disabled+0x48/0x200 [ 429.800869] ? secure_tcp_seq+0xa4/0x180 [ 429.800884] ? lock_downgrade+0x900/0x900 [ 429.800903] ? pvclock_read_flags+0x160/0x160 [ 429.823905] ? secure_tcp_seq+0xa4/0x180 [ 429.827982] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 429.833456] ? kvm_clock_read+0x18/0x30 [ 429.837441] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 429.842722] ? ktime_get_with_offset+0x313/0x470 [ 429.847483] ? ktime_get+0x440/0x440 [ 429.851563] ? ip_route_output_key_hash+0x297/0x3b0 [ 429.856581] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.862658] ? tcp_fastopen_cookie_check+0x330/0x330 [ 429.868118] ? secure_tcp_ts_off+0xe6/0x1a0 [ 429.872442] ? secure_ipv6_port_ephemeral+0x2f0/0x2f0 [ 429.877818] ? check_preemption_disabled+0x48/0x200 [ 429.882840] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 429.888639] ? sk_setup_caps+0x209/0x690 [ 429.892966] tcp_v4_connect+0x1996/0x1dd0 [ 429.897147] ? tcp_v4_parse_md5_keys+0x340/0x340 [ 429.902279] __inet_stream_connect+0x992/0x1150 [ 429.907049] ? ___might_sleep+0x1ed/0x300 [ 429.911220] ? inet_dgram_connect+0x2e0/0x2e0 [ 429.915715] ? tcp_sendmsg_locked+0x32f9/0x3f00 [ 429.920392] ? kasan_unpoison_shadow+0x35/0x50 [ 429.924974] ? kasan_kmalloc+0xc7/0xe0 [ 429.928882] ? kmem_cache_alloc_trace+0x31f/0x750 [ 429.933739] tcp_sendmsg_locked+0x2bf2/0x3f00 [ 429.938504] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 429.943698] ? __fget+0x4aa/0x740 [ 429.947234] ? lock_downgrade+0x900/0x900 [ 429.951655] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 429.957462] ? tcp_sendpage+0x60/0x60 [ 429.961295] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.967244] ? aa_label_sk_perm+0x46d/0x8e0 [ 429.971840] ? aa_profile_af_perm+0x410/0x410 [ 429.976359] ? ksys_dup3+0x680/0x680 [ 429.980078] ? lock_acquire+0x1ed/0x520 [ 429.984329] ? tcp_sendmsg+0x21/0x50 [ 429.988054] ? trace_hardirqs_on+0xbd/0x310 [ 429.992398] ? lock_release+0x970/0x970 [ 429.996655] ? lock_sock_nested+0xe2/0x120 [ 430.001159] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.006617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.012157] ? check_preemption_disabled+0x48/0x200 [ 430.017438] ? lock_sock_nested+0x9a/0x120 [ 430.021687] ? lock_sock_nested+0x9a/0x120 [ 430.025930] ? __local_bh_enable_ip+0x160/0x260 [ 430.030607] tcp_sendmsg+0x2f/0x50 [ 430.034153] inet_sendmsg+0x1a1/0x690 [ 430.037978] ? ipip_gro_receive+0x100/0x100 [ 430.042315] ? apparmor_socket_sendmsg+0x29/0x30 [ 430.047349] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.053155] ? security_socket_sendmsg+0x94/0xc0 [ 430.057922] ? ipip_gro_receive+0x100/0x100 [ 430.062244] sock_sendmsg+0xd5/0x120 [ 430.065975] __sys_sendto+0x3d7/0x670 [ 430.069791] ? __ia32_sys_getpeername+0xb0/0xb0 [ 430.074461] ? lock_release+0x970/0x970 [ 430.078463] ? arch_local_save_flags+0x40/0x40 [ 430.083048] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.088875] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.094526] ? put_timespec64+0x10f/0x1b0 [ 430.099029] ? nsecs_to_jiffies+0x30/0x30 [ 430.103185] ? trace_hardirqs_on+0xbd/0x310 [ 430.107511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.113048] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.118683] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 430.124328] __x64_sys_sendto+0xe1/0x1a0 [ 430.128413] do_syscall_64+0x1b9/0x820 [ 430.132390] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.137761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.142881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.148002] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.153037] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.158084] ? prepare_exit_to_usermode+0x291/0x3b0 [ 430.163457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.168317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.173535] RIP: 0033:0x457579 [ 430.176737] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.196271] RSP: 002b:00007f6bef286c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.204019] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457579 [ 430.212085] RDX: 00000000000000a4 RSI: 0000000020000000 RDI: 0000000000000004 [ 430.219975] RBP: 000000000072bf00 R08: 0000000020e68000 R09: 0000000000000010 [ 430.227444] R10: 00000000200007fe R11: 0000000000000246 R12: 00007f6bef2876d4 [ 430.234983] R13: 00000000004c3929 R14: 00000000004d57c0 R15: 00000000ffffffff [ 430.268964] Task in /syz2 killed as a result of limit of /syz2 [ 430.275331] memory: usage 153120kB, limit 204800kB, failcnt 3159 [ 430.281578] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 430.289056] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 13:18:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x4000000, [0x0, 0x2000000]}, 0x6) 13:18:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xe, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:20 executing program 5: syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x800000000ff, 0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x10000, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000002c0)={0xaf, &(0x7f0000000200)=""/175}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="5ed206a7d047a6f8"]}) close(r5) close(r3) 13:18:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7ffffffff000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 430.305408] Memory cgroup stats for /syz2: cache:8KB rss:2208KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:2216KB inactive_file:0KB active_file:0KB unevictable:0KB [ 430.328594] Memory cgroup out of memory: Kill process 24970 (syz-executor2) score 171 or sacrifice child [ 430.338718] Killed process 24970 (syz-executor2) total-vm:70472kB, anon-rss:2164kB, file-rss:32768kB, shmem-rss:0kB [ 430.350697] oom_reaper: reaped process 24970 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 13:18:20 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070") set_mempolicy(0x4003, &(0x7f0000000200)=0xfffffffffffffffb, 0x200) io_setup(0x0, &(0x7f0000000040)) 13:18:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x88, 0xb, &(0x7f0000008000), &(0x7f0000000000)=0x369) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@sha1={0x1, "4f5462f4b3eee590560eba4a97e28239122728c9"}, 0x15, 0x0) 13:18:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x14, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x400001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0000084}]}) 13:18:20 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6c00000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:20 executing program 3: mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x32}, 0x2c) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000180)='./file0/\x00', &(0x7f00000001c0)="70726f63009b6a2c823f92ab1d5b2f50155c21b4ddadd9060079216becc16f47afb3aec6b4d757eac0a6344afd1ce9d561075c31c4142aa5bf61c3ae458640c0ec61baa4c00d684cd95e0be68153c4adca5e45190c3a26a50c41d793a4a983e9", 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x3, 0x2) syz_emit_ethernet(0x12a2, &(0x7f0000001400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8848000000000000008000000000000e006000000000000000f0000100806f357ae612500605fe8000000000000000000000000000aa00000000000000000000ffffe00000016f3900000000000004018907580000f56314050200018000000000000074df000000000000000200000000000001000000010000008901000000000000ffffffff000000000500000000000000050000000000000002000000000000000400000000000000073000000e610af902001000000000000000ffff00000000000006000000000000000600000000000000060000000000000005020040bf9236b5f5aa144e9f7ca9ca3db861a634981ccbef1c134dffbd696779eaca680ee73fd101a8b935111c49d500a59334793cb1b9c833ccc81b101556c602825b6e014429c6e83528ccb3087fda4f599f1156db76b00051f36bbbb132c693b61f2a8ddfc575f59dc940bd654e28f906fb28ccd46a9edacf7dbdaddf9a23338ed983aa9c9ab9c8d2b1d2e044fd3cb427ee75e171f6375cdbb61f5724da9634ea6a8fd6ef4c469595cbe836d3bb258d944c3b03829ddc73c388a4b9202de0e63a075e3d5fe2616a733e27e91a36f9b2c910000000000000000000000000000000000350bd5c160642fbff355feaa258037471f90db77f43e8169bd0ab0fc4c2355fa4f975a5e1ffed13b265384d61ad568ff47ea9bf641b4a4af2020aecb7bda4038f3ea58fb243b1841f717c2a0e50cb2fae8e01020000050200010000002b00a2f16800000033000239680000003e0202070000000000000000000000000000ffffffffffff06040002000000000000000000000000000000000000000000000000000000000000000000000001000000a9640000000000ba28660000004e244e21", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="6020005d907800030204ff0790b79101a9ee03b42767688936ea052984b901a40cb3e42d95bbaec42ce26731a5a3bc9879a78e5227b2c8b0afa6632dbfd8a514de10efb3877e804f797f0499d01a2c91f7255865e14ef4638e0fc0a864b42afd162e4930b17addc9fe6560a0d522ec2290b49fe3681a31200e729bfe00d5722f53a708dc3a89ccc3de7a965161244d0fee7e496db53d6dfad957db7d1ef39f66beb8f021d1c167c71481a13410c10438cb16a362148fcd5be11351eeaa6432c47eea7adfc0af368d39d248227bf79b9be6c374965c7c6dbafd1c219c30ac30b39718933f01985933071ecec6b963e8297d99e45837c1bbc8c8f6c8f62a1c9154718daa42ce39fb0e00136cfb3f57a529fb5379bcc3f4595ce786dcde80cbbef03f09d0641e9ba68f725021ffdbd3b91064d1a67586ef0c6c2142e9a92ca5d91b831cff92c698abd5682eea4c435aa95124a3d225132c78f6f55b7ef1ac837f64de59d3aff4d5cd9d22f32b0bf356b734e9ceeced3340b88258b0a91125f494684c9e046a1316a924f291a2cc54743dcf54a42df4e79aa10580d24b78180f9061f59054e7b169b9dda95fe7dab271f67f0f72c0a0c1e25e26f21c39f831163e6cd8f115561a4ad4d7e8f7d45510060e0bf1c07c4a767271674e8a8ed93c10a8682b8b45e53b3b45af3fb43992e02869a57af3011f7dfcf9d35561df362ce1d822562fad233228e61de7f00c7709c50e9c0adb58bdaf1bb56708fa955c9bb2719333f3d526acc04496e26082fa36b0b83be9c543960d80c28060fd565df88f6fe1fe86ac8d7a2f60de5a81381ad0f241777a7f54a4c2ec63eb853ee1ada531537a2d03f303f6cb5adea6f3f60fa93e842953e20dfb175d5e0487281cb0c4f5fbc3e8cefc81a9e205e465c0e24eb5e28d0e10dbf12c1cdbc759cb56be62a5fa891cdf4458b57268ea1b84846b1c9244a187864ef53536a5cc47ed6a084b8fdd6f0cad59a2711a9eab5c8b53bc0e1a1d39ce2077d57d704c6ae24a83f5d42b833561b3fa9db7d343354fe1e5dbf0fd8a1f97e675f9fa23a9361f071a3158867f8f285d6a14d3e1e5c30e54f796eff7311aa339f992c2b2ff83c83138dfb6dc3b8a8d8785ba196ce6a9ef39501d1053364e5756a78a31a21a7b41b303fdb2a7666450537c04452f66b3c99f2ec410c0e1b8ec7be3dfe44e36f728d4237763376247b20425c223ddbdfa63fff23921044b5b4fcda6c0b6f74f27426482d277da672fc33323462c96bdecd155a827f8837e055f958e448271b54e26274e6a0ff38efe112a106db7c4c8b03088b5a302bc4e4badbfb2696ce2ea5edf770376189f12a980e05afeea0a0442ee3a1975fba2461259db9a46d6b2d321040d3464e203af86856d25e2e89419705d74ec4f4a4868528906e1ee84517549b6222d5df3008deb15273a5daa63dc86e07feef5e4c97cfe9f9a1e0ad5b53f0bb62b8eefc706369df2944e4fad0c86d76bbf058eefbcea477b4e04cf318bdd4ef879c82a5a21fc9e79e39b8dc66de7cabbf5ec96dddb110cde43559c82412939082b7e64f0f199030f1c2906110c3553de18e19a802845fe518e5de2723e9325035e944ed4d376de8f43a2cc6c773be60aa3e67d082792a2188976ba54ac593d4dceab062087f26004e6421bbfb2d193a9a75f693a01340578907fb430a428b4366e6963483310c978b1b3b560383dc804d26d122057233bfc62ed5515476908ca1757c93af09e0afa27d71cefb8b7b786c5ef831ac491bd96605e51ffc45c733cb4334ff444d28531cd5f9760ec3c91cd3b8e49ef38a11472641d6f93503024744a873a84c13989acf83d8f2574619b9709e89d0ae53f05bd6a69cbc0f9776921eeb4d9b972f24cfa76ebbba375c12d2fdd54b827e4419484eedc96b06fa306d1d627441c5c6a396a4958287d6705388e00c26e5c210b3c3c08aeebb91090fd8417f79876bbb2d286d649764e58e8825e547ca4a20a21cd3536cdd46e87f27d990da099256f8be3f6948dbbeaba5f23dd7b92bbc70140dfdce7c5276af5a9f968cc1fc2a09d48e70a9d52a292ee9f8bb328a78a67938f5f971e716aadb05f802c87a4e4ec8786e76f20a919ecd3343b5d723e4f4db9f6fe9f896c5a8da507deded42ffe76a8c2a2e7a6ce1616c7748cfbf157350c43907f45e437cb794b4b1b09d1b2a6e802e122f5cc62087a97921f5f8dc083ddcad49264463f1341f89566a8cb6ecaa1b96bc472e24d5260da6ad4dd0e3efe2222c47b52dc646f0d19be784f5c3b48b9b5cf56bbbf4c87fa8df68385c0cb0c0e985b09d488542ddebd73bc631cf08a7493befed18b575bf840e7fbbc8aa5e65561022e208aa67a022ca6e1fc267ed6c69fa99bb0d1c493425551ae7385a37d75367b6a264b3010fd13f4684f5be082ac60054ffb05eed633a04888124a679febe59b9a75687fc5e12513a2ea47777c5edd721ea23aebdee1e8966a231305ad0c7f2a9e70e5dafdc54511820908795fd7401afae4e1a42b0c5f39b0863e3e6a00abae3a32665affba3e7cabfa64549f681c0c0931f8999703b71450ee76e3d2fd0c3dde84e2217750e3a05c36b657fb747bd4ceba3c632ecbf9af1c2b984e888e32770125d1344c16bc4da688115d3343f4a7f649b273c55c49aa8cb3dda52a815ac941bad92ee0d72bb26ace0dfb4fcd47210801111879a23f590ac54bbafa6fb3987b693a5617556fa909ea71635e5947adfda40b464aefc45ad6be51dfa6ba07332e8a8d687502e55c22849bcac0dadf6fe5b37e74ae78024b826811c93da4b89c4257aaf0a7e7c49dcd9f09e2dd5a9eb82271bedece1dc9a872f667ec1a8780aba7556f0e5965d4663077c4ad2a1c98632133fea1c4b82568eefd9cc340601720f6e2a9080f20b659a27da501de074992b8d88509eded59ca2fd4a2efbc33f87ba428a3624747633740d8935bd05a84f3adfe2dfc0d4b841ffdcf7505a5b56b7a74572696f0d4d2d78ef05a96c53151d45ea7f4e74a148a494898df466976d374ecdb807ded11a764b35d66848e2c627dbe0d1de1a9776a4a11f88f91d91aa1da864f40245a7138a602d634155bb4da770a5eb68db7f1bf448717287085811ec300d9097b5363ae3caa32f99a985b8a5eefedd6146202f869e2e34fa7d95935e9436d07ac536bebbeae9f589b3dd062b76ecdaf05e8e7cfbf5a5744f0383e5dccd9ac1839e1fac4aaa599753eb2b9301b5c79190350afb782d9b61b4122609702896d640f9ed8ac8db74ade1f70a065671bfbd0803caf693e6bece444ecc4a3e30821574aea1200fcb5774c1e4d9aa6161ede1381432fdecd5a54dd40685084236492d92bc2535c07280648d4dde5cf665e56fc51a3500d835dcd2fc59770df8b07c502f3a288903643acec7faf8583dca5e5751881a425f8532a4138829a6a4101a12f95318d18c680c74f8a0654ef7094c2b26fef532154d19a25bda48d2bdb9ddc9203a3733f65cc98745bb37a28150cb24dced79c0e3af087d8241bf325cb19c81cb6ec8db46337f0de9f75217b3deb5486804f92c5f684fa5a530bf169de21a824c75b5891d8aaccbba3497feb5a71e4f26229a5559a69f6781bf9baed5ea5e9e18e05360bd9067480db1b02d07cb608e11388a0232ff5c9141cc3293da7bfc6ec7767014d36dd75cfc29e8a7dc555c7002568b4bb73f21c6366a5cd454e6c8dec6ce718960e451f02085c00b3a65663339ee3e7bc4a04c5c98934f405c548085f0b715aa9af0102ce0dcce00398648cceefe1fb53bf0be69ca9b2a70127044847bc60e5dc66d0e6861292068e173f2f9d3de0b6ac1596f5cdf44071cf63c7ba59a343c22baf452b31eaeff5628a8392c3dd172ebd87feacdeded287ee15f08d2f3adf7f01c298570c66517e70e4d936aac52e56d8c65bc681b7ba17fb018d2b78e0f28739c7ccb910b508e569733dd736dbb91a9c19f0d23c40246842ec337a6045c6d8e2ffcd639010768318dc4b7bfe4491fe9fedbc561b5a3451ec13eabeb5347e735fd2cf4e6552ed26e1ab756eccd45f36c0a78e22650701fb5756726e01e1202c5f600c685a1620d6e9a1c786903d1b9e9b6fc461602568f4033d13bb73d2768f747395e3e43a299a5c21c118889bbadb99159ce647bad26fc40bb9bbd7b902e2f808365704e94358be1f0518ca8bec3eb236baae27ee62172af3aa195a5f903cbdd51bdfc9abda0fd72db9c40cfdf35146897d74f1c85bce81695086856566a7640034eb2b8d64556493fb65a6b1df057754ecd98f8f01bcbf718509cbdc52461d588dab51870ca9878fc43f9b683413db0a61f177b54333c10650d0dad94ff88068b2652ef0ba4d7d4f9e804937e2d412d387a688ac049b4f32a56732ead24662d6de9bf6907baf8fd768703f04c74369e3cc29a17043560502549936272df10f6a7449c5af86ed56c83b64d02a8775c7c856848354d10d348e8ba81596742778a1e4453d7c273871ba46f5cefb7299bf6a3ca9ffa86467421be7ad90ef9d0711768a6ba8e6454f3519d3b9e1406dbd55eb249abdaab789a62aadf284b2a4824df855bdb684ef16bd8056deb73d464c87c29ae568fe9fe0d51f3518cf7d579d01478c4b82bda95e67e6f61f766761b9666fe7d094de35657d69dc43210696bb6b483a73eb21968fd4ffa12246ab93fe5bb34e5ba091f9db0d4f4a1de3df2a5fc3203693dc66aba5be459913adf2070c807e1590430177a9636dddcebb28b6e396aa2a930dd92a747f28684f2d6041aa0cbd9d5f52b0a876b11c03e150318b000b369ddddfa955acca43d98a74ef41c90aff3db08aea17c9d989429baa97036a74952ce795fad7e9ea800a89eda695131535f8ff9f72ce144c5b78fb2a4d6fd26c8fb8a2fbedcf4512b88ab382f0265dafa099f073a9e29ca6a787d49b026dcc1e61537fb0de80a02b6eb03e30a0503ff11259b6e21f78f354d13ccab02dcdbbc01ca67f209299fc029738beb48a58f0b39d2dd306542d6d6a20a1cdd8784959c19dc7ebbad837f3858281a7cf0d4549f226f762614e39c0827f18fb82d7e850d3779218067aa1d109c613561bd63171e84095275c38352d0e0fcb1e7913996c0db469411ea756db3d5ed2837f9a2d2e388384ba220e96eae60532342c7fa65e029a68efe75e592f06755c9e498544670b6d28149222dd17b31a13b463c4e8c232bc646ca045379519770a8cd38d6b153efb3bb4949996261c8fe83d74bfecf7eaf3d0ee901b225debb4cbb700f291d9b539b85a123e43d5476751c0daafe136c823ea5fa0fa963865e10c58ff2278349575e6d7d382ebb42fb617c5d4a4c7c9e1d55796330a58e9ad9ac60ac523c68d25fdc5a62884f9dc17e944c9ad51916a673d09d6b94ba462863dda830d46369e44e63784957161de1d32750559738f934148e3aee65165f640d95dcf39c9246f136e5dfa16a65b77f03edfe2d4737432b8758b17e405979c13042e4186dbcc00dcf484fe1f530dd44419a1f4891556997772f670dbb89d6aea872878e0bf7e021150f60981e03a667e50933f7d74e507874100057a3dc79c5d4c2dc0a66bd06841474da86d18ee9b02f645c5b48a7002c0688f488ebf0d164f84df159db569f9b58852229e3892d37aee951ce98cf39c0f5316970468eb0d1821f1c6b01c78eb3606d47449b8c370c1a87db7ef028decc9c15d7bd1ab6bd6343a40046c6ab7ddfed9d5f708011ea4452696f15834f5331cde9fc193f7c90c94a19dc7b9d4af410b012e7c809be84a"], 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000080)=""/162, &(0x7f0000000140)=0xa2) mkdir(&(0x7f00000002c0)='./file0/\x00', 0x0) 13:18:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x102) connect$l2tp(r2, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x4, 0x2}}, 0x26) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}], 0x2, 0xa) unshare(0x40000000) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000500)={0x2, &(0x7f0000000280)=[{}, {}]}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcd, &(0x7f0000000640)="6ef4efb57ffb378bb94f117409e8786c90054eb201f80e55bfc832f31a4fede1e68b4d8a6f4b8d67335680ec7da64c31ba194fcd8572f66c1de6a7e4a70643c5859d967a5f8316f8fdbf59760824dd981c2d000000000000000000000000", 0x5e) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000007a0a00d7266a45bf52b1e82408d0c29e58f09a01990dbd176d1d47bd98abeb9e7e881ce0ad6f5f33b5b6b191533a65307ac5515c9b53e00000000000000000000000000000"]) sendto$inet6(r1, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) read(r0, &(0x7f0000000600), 0x0) r4 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_int(r5, 0x10d, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x346) lseek(r1, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2}, 0x2000) 13:18:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x80040200, [0x0, 0x2000000]}, 0x6) 13:18:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x900000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 430.662730] QAT: Invalid ioctl [ 430.757405] IPVS: ftp: loaded support on port[0] = 21 [ 430.890254] QAT: Invalid ioctl [ 430.901156] IPVS: ftp: loaded support on port[0] = 21 [ 431.193809] FAULT_FLAG_ALLOW_RETRY missing 30 [ 431.199171] CPU: 0 PID: 25034 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #268 [ 431.206540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.215901] Call Trace: [ 431.218503] dump_stack+0x1c4/0x2b4 [ 431.222901] ? dump_stack_print_info.cold.2+0x52/0x52 [ 431.228078] ? kasan_check_write+0x14/0x20 [ 431.232306] ? do_raw_spin_lock+0xc1/0x200 [ 431.236545] handle_userfault.cold.33+0x47/0x62 [ 431.241212] ? userfaultfd_ioctl+0x54a0/0x54a0 [ 431.245800] ? mark_held_locks+0x130/0x130 [ 431.250028] ? __account_cfs_rq_runtime+0x790/0x790 [ 431.255032] ? attach_entity_load_avg+0x860/0x860 [ 431.259864] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 431.265649] ? userfaultfd_ctx_put+0x830/0x830 [ 431.270215] ? __sanitizer_cov_trace_cmp2+0x11/0x20 [ 431.275226] ? cgroup_base_stat_cputime_account_end.isra.5+0x3f/0x50 [ 431.281713] ? reweight_entity+0x7d5/0x10f0 [ 431.286027] ? __account_cfs_rq_runtime+0x790/0x790 [ 431.291032] ? mark_held_locks+0x130/0x130 [ 431.295254] ? reweight_entity+0x10f0/0x10f0 [ 431.299651] ? lock_downgrade+0x900/0x900 [ 431.303797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.309320] ? check_preemption_disabled+0x48/0x200 [ 431.314338] ? __handle_mm_fault+0x45dc/0x53e0 [ 431.318921] ? lock_downgrade+0x900/0x900 [ 431.323056] ? kasan_check_read+0x11/0x20 [ 431.327196] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.331592] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.336183] ? kasan_check_write+0x14/0x20 [ 431.340845] ? do_raw_spin_lock+0xc1/0x200 [ 431.345152] __handle_mm_fault+0x45ed/0x53e0 [ 431.349548] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 431.354373] ? update_curr+0x4ec/0xbe0 [ 431.358250] ? finish_task_switch+0x1f5/0x900 [ 431.362732] ? lock_downgrade+0x900/0x900 [ 431.366865] ? finish_task_switch+0x1b5/0x900 [ 431.371362] ? handle_mm_fault+0x42a/0xc70 [ 431.375580] ? lock_downgrade+0x900/0x900 [ 431.379712] ? lock_release+0x970/0x970 [ 431.383697] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 431.390019] ? __do_page_fault+0x67d/0xed0 [ 431.394442] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.399886] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.405420] ? check_preemption_disabled+0x48/0x200 [ 431.411014] handle_mm_fault+0x54f/0xc70 [ 431.415079] ? __handle_mm_fault+0x53e0/0x53e0 [ 431.419646] ? find_vma+0x34/0x190 [ 431.423173] __do_page_fault+0x67d/0xed0 [ 431.427225] ? mm_fault_error+0x380/0x380 [ 431.431401] do_page_fault+0xf2/0x7e0 [ 431.435188] ? vmalloc_sync_all+0x30/0x30 [ 431.439320] ? error_entry+0x76/0xd0 [ 431.443034] ? trace_hardirqs_off_caller+0xbb/0x310 [ 431.448039] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.452866] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.457880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.462708] page_fault+0x1e/0x30 [ 431.466148] RIP: 0010:__get_user_4+0x21/0x30 [ 431.470549] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 431.489441] RSP: 0018:ffff88017c7d7538 EFLAGS: 00010202 [ 431.494795] RAX: 0000000020013e98 RBX: 1ffff1002f8faeae RCX: ffffc9000bee6000 [ 431.502058] RDX: ffffffffffffffff RSI: ffffffff81b162e3 RDI: 0000000000000286 [ 431.509312] RBP: ffff88017c7d7cb8 R08: 0000000000000000 R09: 0000000000000000 [ 431.516568] R10: ffffed00308b9459 R11: 0000000000000000 R12: ffff8801845ca240 [ 431.523823] R13: 0000000000000084 R14: dffffc0000000000 R15: 0000000000000004 [ 431.531099] ? __might_fault+0x1a3/0x1e0 [ 431.535147] ? sctp_setsockopt+0x1cfc/0x6da0 [ 431.539573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.545112] ? get_futex_value_locked+0xcb/0xf0 [ 431.550810] ? sctp_setsockopt_paddr_thresholds+0x560/0x560 [ 431.556774] ? mark_held_locks+0x130/0x130 [ 431.561804] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.566993] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 431.572961] ? futex_wait+0x5ec/0xa50 [ 431.577284] ? futex_wait_setup+0x3e0/0x3e0 [ 431.581593] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.587117] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 431.592202] ? futex_wake+0x304/0x760 [ 431.596002] ? mark_held_locks+0x130/0x130 [ 431.600226] ? __fget+0x4aa/0x740 [ 431.603924] ? lock_downgrade+0x900/0x900 [ 431.609575] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 431.616057] ? exit_robust_list+0x280/0x280 [ 431.620374] ? __ia32_sys_membarrier+0x150/0x150 [ 431.625203] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.630739] ? aa_label_sk_perm+0x46d/0x8e0 [ 431.635050] ? aa_profile_af_perm+0x410/0x410 [ 431.639545] ? ksys_dup3+0x680/0x680 [ 431.643247] ? lock_release+0x970/0x970 [ 431.647209] ? aa_sk_perm+0x218/0x8b0 [ 431.651023] ? fget_raw+0x20/0x20 [ 431.654463] ? arch_local_save_flags+0x40/0x40 [ 431.659026] ? aa_af_perm+0x5a0/0x5a0 [ 431.662817] ? aa_sock_opt_perm.isra.11+0xa1/0x130 [ 431.667737] sock_common_setsockopt+0x9a/0xe0 [ 431.672219] __sys_setsockopt+0x1ba/0x3c0 [ 431.676350] ? kernel_accept+0x310/0x310 [ 431.680398] ? trace_hardirqs_on+0xbd/0x310 [ 431.684702] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.690061] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 431.695597] __x64_sys_setsockopt+0xbe/0x150 [ 431.700009] do_syscall_64+0x1b9/0x820 [ 431.703885] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.709250] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.714434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.719276] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.724973] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.731199] ? prepare_exit_to_usermode+0x291/0x3b0 [ 431.736216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.741080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.746262] RIP: 0033:0x457579 [ 431.749450] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.768346] RSP: 002b:00007f56ad326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.776142] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457579 [ 431.783415] RDX: 0000000000000008 RSI: 0000000000000084 RDI: 000000000000000b 13:18:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x4000000, [0x0, 0x2000000]}, 0x6) 13:18:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xffe0, [0x0, 0x2000000]}, 0x6) 13:18:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000100001000000000000000000e00000010000000000000000000000000000000000000000000000000000001465000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000"], 0xf0}}, 0x0) 13:18:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x40000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000005c0)='./file0\x00', 0x102) connect$l2tp(r2, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x4, 0x0, 0x4, 0x2}}, 0x26) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0), 0x0) flistxattr(r3, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(r3, &(0x7f0000000180)=[{}, {}], 0x2, 0xa) unshare(0x40000000) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000500)={0x2, &(0x7f0000000280)=[{}, {}]}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xcd, &(0x7f0000000640)="6ef4efb57ffb378bb94f117409e8786c90054eb201f80e55bfc832f31a4fede1e68b4d8a6f4b8d67335680ec7da64c31ba194fcd8572f66c1de6a7e4a70643c5859d967a5f8316f8fdbf59760824dd981c2d000000000000000000000000", 0x5e) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000007a0a00d7266a45bf52b1e82408d0c29e58f09a01990dbd176d1d47bd98abeb9e7e881ce0ad6f5f33b5b6b191533a65307ac5515c9b53e00000000000000000000000000000"]) sendto$inet6(r1, &(0x7f00000000c0)='E', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) read(r0, &(0x7f0000000600), 0x0) r4 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_int(r5, 0x10d, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0x346) lseek(r1, 0x0, 0x0) recvmsg(r5, &(0x7f0000000240)={&(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2}, 0x2000) [ 431.790668] RBP: 000000000072bf00 R08: 0000000000000004 R09: 0000000000000000 [ 431.797916] R10: 0000000020013e95 R11: 0000000000000246 R12: 00007f56ad3276d4 [ 431.805193] R13: 00000000004ca358 R14: 00000000004d65b8 R15: 00000000ffffffff [ 431.862804] nla_parse: 24 callbacks suppressed [ 431.862814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 431.898448] QAT: Invalid ioctl 13:18:21 executing program 5: exit(0x0) syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00') [ 431.911344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xf000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:21 executing program 3: rt_sigaction(0xa, &(0x7f0000000080)={&(0x7f0000000000)="3e40dd8300000100c4a199ebf6f247a5c4c27997e047dde1c48251adc40f380bea8f696896656bf30f38f63f400f3a0f041979", {0x1ff}, 0x8000000, &(0x7f0000000040)="36f26665f341d220c4019df18fb5dd0e208fc978d3d3c461a65e23450f01dcc481f96e3cc90f1b86d636fffff046204d008f4830a298322333334cc4e2518c12"}, &(0x7f0000000180)={&(0x7f00000000c0)="36360f4f50fd440f38019115000000c462753edd26660f7e0f3946ff0f01c28f4a78100b0b00000036440f18fd81c603000000c42189d39bd56122e5", {}, 0x0, &(0x7f0000000100)="420f73d1d6c4c3417c5ada1b65f0872247d8ad00100002c4a22d9184aa0000010040ad26f33da9000000f30faed1f30f2c18429d"}, 0x8, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x76) 13:18:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x1f00, [0x0, 0x2000000]}, 0x6) 13:18:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = getgid() setfsgid(r1) mount(&(0x7f0000cec000), &(0x7f000001c000)='./file0\x00', &(0x7f0000000000)='mqueue\x00', 0x3, &(0x7f0000b65000)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 432.060047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 432.080146] IPVS: ftp: loaded support on port[0] = 21 [ 432.102583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) listen(r1, 0x0) 13:18:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xa00, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x74}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:22 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x34, 0x3, 0x0, {0x1, 0x13, 0x0, 'trusted^mime_type!&'}}, 0x34) 13:18:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x80fe, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 432.287557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 432.330482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:22 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000012c0)=""/196, 0xc4}], 0x1) 13:18:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x203, &(0x7f00000000c0)="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"}, 0x30) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x7, 0x9, 0x5, 0x40, 0x1}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x80000000}, &(0x7f0000000400)=0x18) perf_event_open(&(0x7f0000000000)={0xaa05be8ff5c58a37, 0x70, 0x3, 0x8ad, 0x4, 0x2, 0x0, 0x1, 0x0, 0x4, 0x6, 0x2, 0xffffffffffff7fff, 0xfffffffffffffbff, 0x80000000, 0x54f549e3, 0x4, 0x4, 0x5, 0x8, 0xffffffffffffffff, 0x6, 0x6, 0x6, 0x6, 0x2e9, 0x2, 0x3, 0x6, 0x2, 0x35c, 0x40, 0x8, 0x1, 0x7, 0x6, 0x9, 0x3ff, 0x0, 0x1, 0x3, @perf_config_ext={0x9d62, 0x4}, 0x1220, 0x7ff, 0x85, 0x6, 0x1f, 0x1, 0xffffffffffffff1b}, r1, 0xd, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000540)="2f657865000000ddff5ad9b510d9cdc71bbe10eebf000ee9a90f798058439ed554fa07424ada75af1f02a4c7edbcd7a071fb35331c5a000000007fbefd973e1d0d012ad6a4a5995f4ff60001000000000042705c1fc72f1fbe4e02060000007d67c9a98233d2256d904a088bf5b680120300c2bf0309f0df65ef67bf82f22939370ca351d95927abbd2925db966c162f47d3c47a00307c99c32e3042003d23d6cf5d549fba81b2734fbf498c6072cb6d254223a250d8b8648b6ad1992a8427250c5cbafe8eeb32fae50e9210726e801b93692b9df29d77ba4122e365d8e699b9479b12e734e1168d00c373179407d7b6b7917adadb9e8ec3a431dd67ea985371213c61064d948c5d07a7ee893fcc8e9f287c622f00fae4a0439db7fccdd8ed6cb7a481c37c5188095cf572210d545bcfc28b3e7527951fd5317be219d7c5ee776f66433d74bce11ddfcd44b498fe158c4299f9330a8c75d1973872b8d2b5f54f0799cf9514c453c31c13407fe9afbd2dadad8f56365e4d90f0a5a5cc7fdde382e7df3585009adfcd42c153151cf0f095093b3f7d326e726acc233194bb17042318d85ef359a6804f8962351bdcc432f473e65f95d61eba79b3d26816cd2d6b942005b545ed069a8702bfb01a47c87d30147e53b565c1c064a8eef70dab6f353ca7e41b15edea3c1b9f37e7c339cc9780fc9806e48112add5ba5af385e933f8ee2f2832") ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 13:18:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x352, [0x0, 0x2000000]}, 0x6) 13:18:22 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x4008af10, &(0x7f0000000200)={0x0, 0x4000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) connect$packet(r1, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @dev={[], 0x16}}, 0x14) 13:18:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x6485dcfffedd37cf, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1d, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@mcast2, 0x71, r3}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) tkill(r4, 0x21) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000001800000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000008cde4f5e000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f746f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e000000064657667726f75700000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000415544495400000000000000000000000000000000000000000000000000000008000000000000000400000000000000ba94df0f13e7c4f02467c1ef0b77d77ac20705366eac2f28dcb7aff668a703e483"]}, 0x209) [ 432.819147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 432.858796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x10aaaafeffaaaaa8, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:22 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x1fffffffe) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x9a, 0x3, 0x7, "ff0077426e9710b38c23a54bf5bc0008", "9f471af68ed2c0a82e7fa915eb535e1ae67b397160c86b67013c2f8fc73fb38e3da203ec6ebbe6da0f462d50a80e80f4787d70b4504d08a2788f84a9ad5f1dc9c4855537246667ed2fadab2b9edea9963c8326483d4349064051639080ee4e0dda1ddd15450f95a3e5a1a28f6e20f2e427edff169aa5261ecf345c4f8f570aa0ce00ff7408"}, 0x9a, 0x1) close(r0) 13:18:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:22 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000540)) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x40000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xffffffffffffffcc}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x200}}], [{@smackfsroot={'smackfsroot'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@measure='measure'}, {@measure='measure'}, {@obj_user={'obj_user', 0x3d, '-!\\wlan0@'}}]}}) r3 = socket$inet6(0xa, 0x1200000000000002, 0x0) r4 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg(r3, &(0x7f0000000500)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="13000000000000001100000067000000bbe7"], 0x12}, 0xfe80) [ 432.886626] kernel msg: ebtables bug: please report to author: Wrong len argument [ 432.950054] kernel msg: ebtables bug: please report to author: Wrong len argument [ 432.970710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:22 executing program 1: getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140), 0x10) r0 = shmget$private(0x0, 0x3000, 0x78000082, &(0x7f000091c000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmdt(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x3c00, 0x4004400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 13:18:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x8, [0x0, 0x2000000]}, 0x6) 13:18:22 executing program 3: r0 = socket$inet_sctp(0x2, 0x2, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x100000, @dev={0xac, 0x14, 0x14, 0x16}}, 0x1000000bc) [ 433.001511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 13:18:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:23 executing program 5: getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f000077ff7d), 0x100000084}], 0x1, &(0x7f0000000080)}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 13:18:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x9ad7bcfeff3fda98, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7829, 0x204000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34003}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x28, 0x829, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) chroot(&(0x7f0000000000)='./file0\x00') 13:18:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1b00000000000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:23 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400900, 0x0) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x3, 0x9, 0x0, r1}) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000340)) r3 = semget$private(0x0, 0x3, 0x20) semctl$SEM_STAT(r3, 0x6, 0x12, &(0x7f0000000480)=""/198) r4 = dup3(r2, r2, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r5}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 13:18:23 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xfffffffe, [0x0, 0x2000000]}, 0x6) 13:18:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x2000) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000001c0)={0x103fb3f, 0x54, 0x1, 0x2, 0x7, 0x3}) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240), 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x220000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @multicast2}, {0x6, @random="32cfdea27b10"}, 0x0, {0x2, 0x4e22, @loopback}, 'gre0\x00'}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='dummy0\x00') writev(r2, &(0x7f0000000700), 0x1000000000000110) 13:18:24 executing program 3: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') getdents(r0, &(0x7f0000000100)=""/183, 0xffffffffffffffec) 13:18:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0xaa, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x7a000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:24 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20420000) 13:18:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x5103000000000000, [0x0, 0x2000000]}, 0x6) 13:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x6db}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:24 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x800, 0x101000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x1, 0x80000000}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x80000000, @remote, 0x9}, @in6={0xa, 0x4e22, 0x87, @dev={0xfe, 0x80, [], 0xb}, 0xcfd}, @in6={0xa, 0x4e24, 0x0, @local, 0x1ff}, @in6={0xa, 0x4e23, 0x5, @loopback, 0x401}], 0x70) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x8, 0xd0, "8582739ec456b35b7b3bdc2324d70afefb4128078ff35a861d8f1384de14a22dfa9b93d4654242c07c49bbaac90a58561f6f9841146be152dbbf952048dc922876ebb0a4aa4f15e4e4436e1da91d547e858f1cf146db89216de82eb18c7bdce054959b9a6aee5423174e79a4b6403d1147fddcb5de103a529c3480a501cd38d0e42edc71a39c59fa5e00bc2f89836a676b659fef4a23e8313345dc841445a70cbbe83747efea37b7884e463b22bb4ab27a28930370c371a578e2ed34c1364149e8d8463246006994a849e55cc5fe54f4"}, 0xd8) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000140)=0x3) 13:18:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6(0xa, 0xffffffffffff, 0x2) ioctl(r1, 0x8912, &(0x7f0000000340)="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") r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x7f, 0x200) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x7, @ipv4={[], [], @loopback}, 0xffffffffffffffc0}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000240)={0x8, 0x9, 0x0, {0x0, 0x1c9c380}, 0x5}) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x88101, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xffffffff) write(r0, &(0x7f0000000040)="b63d794100010400000000000000000036f0011dcc606aed69d2bc7037cebc9bc2b3e8e0e3ff0000000000000000", 0x2e) 13:18:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x60a56afffe6fa756, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x434, 0x0, 0x0, 0x15b874b9}) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000063fc98c0100000400000000000000000065750ede825e45a90f3d09876e700cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235edbb98b7559414d05501b5357df02d2eed24a7c27189c3003b2cbdae69c72000000000000000710e13"], 0x7e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x0, 0x401}) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x1) 13:18:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000080)=0x4b) read(r0, &(0x7f0000000000)=""/39, 0x6) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x77) 13:18:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xa00, [0x0, 0x2000000]}, 0x6) 13:18:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x3a) 13:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x100000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) [ 434.843430] syz-executor1 (25285) used greatest stack depth: 12592 bytes left 13:18:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x8000000, @dev, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000040)='\f', 0x1}], 0x1, &(0x7f0000000580)}, 0x20008844) 13:18:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x280000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) fsync(r0) 13:18:24 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 13:18:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x1b6) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0xf4010000, [0x0, 0x2000000]}, 0x6) 13:18:24 executing program 5: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000009, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x8002, 0x0, 0x1, 0x72fffc, 0xffffffff7ff0bdbe}) 13:18:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x280000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) fsync(r0) [ 435.040194] print_req_error: I/O error, dev loop0, sector 0 [ 435.069806] ------------[ cut here ]------------ [ 435.098401] usb usb7: BOGUS urb flags, 1 --> 0 [ 435.103588] WARNING: CPU: 0 PID: 25351 at drivers/usb/core/urb.c:503 usb_submit_urb+0x717/0x14e0 [ 435.112536] Kernel panic - not syncing: panic_on_warn set ... [ 435.112536] [ 435.119918] CPU: 0 PID: 25351 Comm: syz-executor5 Not tainted 4.19.0-rc6+ #268 [ 435.127304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.136663] Call Trace: [ 435.139258] dump_stack+0x1c4/0x2b4 [ 435.142898] ? dump_stack_print_info.cold.2+0x52/0x52 [ 435.148112] panic+0x238/0x4e7 [ 435.151357] ? add_taint.cold.5+0x16/0x16 [ 435.155520] ? __warn.cold.8+0x148/0x1ba [ 435.159595] ? usb_submit_urb+0x717/0x14e0 [ 435.163843] __warn.cold.8+0x163/0x1ba [ 435.167742] ? usb_submit_urb+0x717/0x14e0 [ 435.171994] report_bug+0x254/0x2d0 [ 435.175646] do_error_trap+0x1fc/0x4d0 [ 435.179544] ? math_error+0x3f0/0x3f0 [ 435.183363] ? vprintk_default+0x28/0x30 [ 435.187438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.192294] ? trace_hardirqs_on_caller+0x310/0x310 13:18:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100), 0x7a, &(0x7f00000001c0)={&(0x7f0000000280)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xb0efff7f00000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) [ 435.197335] ? retint_kernel+0x2d/0x2d [ 435.201228] ? printk+0xa7/0xcf [ 435.204520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.209377] do_invalid_op+0x1b/0x20 [ 435.213106] invalid_op+0x14/0x20 [ 435.216567] RIP: 0010:usb_submit_urb+0x717/0x14e0 [ 435.221417] Code: 83 fc 48 8b 45 d0 48 8d b8 a0 00 00 00 e8 71 c0 44 ff 45 89 e0 44 89 e9 4c 89 fa 48 89 c6 48 c7 c7 40 72 71 88 e8 09 e1 4d fc <0f> 0b e8 02 ee 83 fc 48 c7 c6 40 73 71 88 4c 89 f7 e8 43 ef 83 fc [ 435.228188] kobject: 'loop4' (00000000f3afc48c): kobject_uevent_env [ 435.240809] RSP: 0018:ffff880167e97268 EFLAGS: 00010286 [ 435.240822] RAX: 0000000000000000 RBX: ffff8801cd2c1f00 RCX: ffffc9000bee6000 [ 435.240829] RDX: 000000000000ed65 RSI: ffffffff8164e3f5 RDI: 0000000000000005 [ 435.240837] RBP: ffff880167e972d8 R08: ffff88018c3ce600 R09: ffffed003b5c3ee2 [ 435.240844] R10: ffffed003b5c3ee2 R11: ffff8801dae1f717 R12: 0000000000000000 [ 435.240853] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8801ce292000 [ 435.240897] ? vprintk_func+0x85/0x181 [ 435.249549] kobject: 'loop4' (00000000f3afc48c): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 435.252674] ? usb_submit_urb+0x717/0x14e0 [ 435.252701] ? kasan_check_write+0x14/0x20 [ 435.252790] proc_do_submiturb+0x1b7d/0x4020 [ 435.252812] ? __might_fault+0xc1/0x1e0 [ 435.260747] kobject: 'loop2' (0000000012d00918): kobject_uevent_env [ 435.267358] ? free_async+0x540/0x540 [ 435.267391] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.267405] ? _copy_from_user+0xdf/0x150 [ 435.267422] proc_submiturb_compat+0x544/0x800 [ 435.267441] ? proc_do_submiturb+0x4020/0x4020 [ 435.274906] kobject: 'loop2' (0000000012d00918): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 435.281973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.282011] usbdev_do_ioctl+0x19a2/0x3b50 [ 435.282029] ? processcompl_compat+0x680/0x680 [ 435.282045] ? futex_wait+0x5ec/0xa50 [ 435.282065] ? mark_held_locks+0x130/0x130 [ 435.312175] kobject: 'loop0' (0000000064d26a53): kobject_uevent_env [ 435.315581] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 435.315598] ? futex_wake+0x304/0x760 [ 435.315627] ? lock_downgrade+0x900/0x900 [ 435.319810] kobject: 'loop0' (0000000064d26a53): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 435.325985] ? mark_held_locks+0x130/0x130 [ 435.326008] ? lock_downgrade+0x900/0x900 [ 435.326026] ? do_futex+0x249/0x26d0 [ 435.326046] ? kasan_check_read+0x11/0x20 [ 435.363756] kobject: 'loop3' (000000007dc3fcf9): kobject_uevent_env [ 435.367928] ? do_raw_spin_unlock+0xa7/0x2f0 [ 435.367945] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 435.367962] ? add_mm_counter_fast+0xd0/0xd0 [ 435.367984] ? __fget+0x4aa/0x740 [ 435.368014] ? lock_downgrade+0x900/0x900 [ 435.372690] kobject: 'loop3' (000000007dc3fcf9): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 435.376393] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 435.376421] ? __fget+0x4d1/0x740 [ 435.472299] ? ksys_dup3+0x680/0x680 [ 435.476038] ? __might_fault+0x12b/0x1e0 [ 435.480095] ? lock_downgrade+0x900/0x900 [ 435.484247] usbdev_ioctl+0x25/0x30 [ 435.487878] ? usbdev_compat_ioctl+0x30/0x30 [ 435.492299] do_vfs_ioctl+0x1de/0x1720 [ 435.496190] ? ioctl_preallocate+0x300/0x300 [ 435.500583] ? __fget_light+0x2e9/0x430 [ 435.504551] ? fget_raw+0x20/0x20 [ 435.508011] ? _copy_to_user+0xc8/0x110 [ 435.511973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.517503] ? put_timespec64+0x10f/0x1b0 [ 435.521638] ? nsecs_to_jiffies+0x30/0x30 [ 435.525775] ? security_file_ioctl+0x94/0xc0 [ 435.530188] ksys_ioctl+0xa9/0xd0 [ 435.533631] __x64_sys_ioctl+0x73/0xb0 [ 435.537508] do_syscall_64+0x1b9/0x820 [ 435.541383] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.546745] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.551671] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.556501] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.561507] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.566521] ? prepare_exit_to_usermode+0x291/0x3b0 [ 435.571531] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.576366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.581553] RIP: 0033:0x457579 [ 435.584735] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.603638] RSP: 002b:00007f56ad326c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.611337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 435.618610] RDX: 0000000020000080 RSI: 00000000802c550a RDI: 0000000000000003 [ 435.625882] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 435.633135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f56ad3276d4 [ 435.640389] R13: 00000000004bf6c0 R14: 00000000004cf598 R15: 00000000ffffffff [ 435.648596] Kernel Offset: disabled [ 435.652220] Rebooting in 86400 seconds..