0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 419.216499][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.219829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.222346][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 419.228163][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:31:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf0300000fc4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") [ 419.456532][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 419.462356][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:31:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000340)={0x0, 0x6}, 0x0, 0x0, 0x0) r0 = userfaultfd(0x80000) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff, 0x101000) readlinkat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/103, 0x67) epoll_wait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000, 0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) clone(0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)="6a4e49d755d6ff67799f2dbac9c838cbe2be4bfa379637dc84613619d162a787857f3b5db5dd1a88ee4f3bcd1d816d92979d95a515a8c4edd7cba520979a6a999571fcf11a3b6fb56ed3379152b81823719163759deca17bdfdf682378894ec7d4ca9e63231229d3e0cb3bc7dfcbdede99e597cb54fcc435f6e868f30c7214565ac0aa36629074a8f65f") read(r0, &(0x7f0000009f9c)=""/100, 0x64) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e22, @remote}], 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fallocate(r2, 0x10, 0xfffffffffffffffc, 0x101) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800040c004500a, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x1) 12:31:49 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x15e) 12:31:49 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="cd000000e7f6e0575d80f05a19598f5d33c2f0f3d36136c10ab66d5847080072314cf8cbc266ecbc9150fb8e219189e39ece6049c52dc1f812029e54531e02722acccd0b2ef53db5607e8c7584e88c23593af6a2524c7978a2d0be870f49b4c4053e5b6e4546de321f8618ac0b82184a1360bf73c96f14b7f67c072f021f0674182c7e400657092784010d51d1a4e1b38b28293100f4af74c94b4c691bc7b47cae1027983d480aa4d83ae132239469b082d9450349395af2f0d7fc453b3360286e97aae8c510b7a4458776cb756ef4b4d6a3da23"], &(0x7f0000000000)=0xd5) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x200, 0x8, 0x2, r1}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote}], 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4a) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x2, 0x0, 0x3, 0x401, 0x1}, 0x98) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000140)={{0x4, @addr=0x8}, 0x8, 0x90e2, 0x18a38052}) 12:31:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c01000010000302000000000000000000000000000000000000000000000000e000100100000000000000000d008000000000000000000000000000000000003e6e8484ced547b7a812301c539e0830f2f06220c3c7bc3c672149c030efda257e5795faba13d5dbd3ba692a804e0be797314eaa0a827154011025edab1ddc35f0f31fedfa6c02e206e6f4ca9a34e4708b3f0ee3c1ea9240ee4c2509", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0, @ANYRES64, @ANYRES32=r0]], 0x4}}, 0x0) 12:31:49 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x15f) 12:31:49 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:49 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000340)={'team0\x00', {0x2, 0x4e22, @rand_addr=0x1}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0xce24, @multicast2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000240)) r2 = socket(0x1d, 0x807, 0x9) accept$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, &(0x7f0000000300)=0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)='TRUE', 0x4, 0x1) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x182, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) [ 420.358904][T21790] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 420.371949][T21790] CPU: 1 PID: 21790 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 420.379944][T21790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.380059][T21790] Call Trace: [ 420.380082][T21790] dump_stack+0x172/0x1f0 [ 420.380101][T21790] dump_header+0x10f/0xb6c [ 420.380118][T21790] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 420.380133][T21790] ? ___ratelimit+0x60/0x595 [ 420.380148][T21790] ? do_raw_spin_unlock+0x57/0x270 [ 420.380164][T21790] oom_kill_process.cold+0x10/0x15 [ 420.380179][T21790] out_of_memory+0x79a/0x1280 [ 420.380200][T21790] ? lock_downgrade+0x880/0x880 [ 420.402469][T21790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.439043][T21790] ? oom_killer_disable+0x280/0x280 [ 420.444290][T21790] ? find_held_lock+0x35/0x130 [ 420.449173][T21790] mem_cgroup_out_of_memory+0x1ca/0x230 [ 420.454726][T21790] ? memcg_event_wake+0x230/0x230 [ 420.459874][T21790] ? do_raw_spin_unlock+0x57/0x270 [ 420.465111][T21790] ? _raw_spin_unlock+0x2d/0x50 [ 420.470150][T21790] try_charge+0x102c/0x15c0 [ 420.474670][T21790] ? find_held_lock+0x35/0x130 [ 420.479590][T21790] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 420.485170][T21790] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 420.490833][T21790] ? find_held_lock+0x35/0x130 [ 420.495787][T21790] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 420.505865][T21790] __memcg_kmem_charge_memcg+0x7c/0x130 [ 420.511428][T21790] ? memcg_kmem_put_cache+0xb0/0xb0 [ 420.516646][T21790] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 420.522328][T21790] __memcg_kmem_charge+0x136/0x300 [ 420.527456][T21790] __alloc_pages_nodemask+0x4bf/0x8d0 [ 420.532839][T21790] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 420.538652][T21790] ? save_stack+0xa9/0xd0 [ 420.542991][T21790] ? anon_vma_fork+0x1ea/0x4a0 [ 420.547760][T21790] ? copy_process.part.0+0x350f/0x7980 [ 420.553231][T21790] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 420.559502][T21790] alloc_pages_current+0x107/0x210 [ 420.564634][T21790] __pmd_alloc+0x41/0x460 [ 420.568974][T21790] ? pmd_val+0x100/0x100 [ 420.573237][T21790] pmd_alloc+0x10c/0x180 [ 420.577495][T21790] copy_page_range+0x62e/0x1f90 [ 420.582371][T21790] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 420.588214][T21790] ? vma_compute_subtree_gap+0x158/0x230 [ 420.593859][T21790] ? vma_gap_callbacks_rotate+0x62/0x80 [ 420.599423][T21790] ? pmd_alloc+0x180/0x180 [ 420.604290][T21790] ? validate_mm_rb+0xa3/0xc0 [ 420.608992][T21790] ? __vma_link_rb+0x279/0x370 [ 420.613773][T21790] copy_process.part.0+0x568b/0x7980 [ 420.619231][T21790] ? __cleanup_sighand+0x60/0x60 [ 420.624184][T21790] ? semctl_down+0x5e0/0x9f0 [ 420.628786][T21790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.635045][T21790] _do_fork+0x257/0xfd0 [ 420.639304][T21790] ? fork_idle+0x1d0/0x1d0 [ 420.643739][T21790] ? __ia32_sys_mkdir+0x80/0x80 [ 420.648607][T21790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.654253][T21790] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 420.659820][T21790] ? do_syscall_64+0x26/0x610 [ 420.664510][T21790] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.671026][T21790] ? do_syscall_64+0x26/0x610 [ 420.675904][T21790] ? lockdep_hardirqs_on+0x418/0x5d0 [ 420.681733][T21790] __ia32_sys_fork+0x1f/0x30 [ 420.686343][T21790] do_syscall_64+0x103/0x610 [ 420.691013][T21790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.696906][T21790] RIP: 0033:0x2000000a [ 420.700978][T21790] Code: Bad RIP value. [ 420.705136][T21790] RSP: 002b:00007fbf2a053bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 420.713643][T21790] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 420.721621][T21790] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 000000000f000003 [ 420.729607][T21790] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 420.737694][T21790] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 420.745692][T21790] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 420.759774][T21790] memory: usage 307200kB, limit 307200kB, failcnt 109 [ 420.778795][T21790] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 420.786545][T21790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 420.793402][T21790] Memory cgroup stats for /syz5: cache:148KB rss:271948KB rss_huge:258048KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:272184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 420.815294][T21790] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14786,uid=0 [ 420.835454][T21790] Memory cgroup out of memory: Killed process 14786 (syz-executor.5) total-vm:72448kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB 12:31:50 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:31:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x160) 12:31:50 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:50 executing program 2: r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x210000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7fff) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 12:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x13) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000d0468fe0704000000000000ff3f03000000450001070000001419001a000400020004000a004000000800005d14a4e91ee438", 0x39}], 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) 12:31:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 420.954106][T21808] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 420.971854][T21808] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 12:31:50 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xfe09b91b63eec541, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x7f, 0x0, 0x0, 0x18, 0x1, "088630006fe00e1bd348a543ce2020fc553aeab737c3c33600b25b58194d71ad2b2d0794d5d279239533e3fa956993e5804e8c52f48a92d1122b7e3656cae1df", "16f36f591ddd02c5888bb3ecd3f6fc19c4c15ad0fba2555988ee149cfb3be3d25d3c29ff05514d2a84905cbed688a508e5b36b18d69cc6620c4176b5977e9dea", "2ca1ddea4ecff64ab4b5bdecb58297423b589876c67defe623d57c40bcc41d0e", [0x6, 0x563]}) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000000)) 12:31:50 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mq_open(&(0x7f0000000080)='\x00', 0x840, 0x2, &(0x7f00000000c0)={0x8, 0x4, 0x8, 0xfed7, 0x3, 0x279b, 0x200, 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, &(0x7f0000000000), 0x4) 12:31:50 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x161) 12:31:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:31:51 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f76fa8)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000f75fdf)="3e244e7e87adeb0717edd8b867042a0dedf14029e85b62f01a0ca46272e04b65", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={0x0, 0x0, &(0x7f0000233fd0)=[{&(0x7f0000be4ffb)=""/1, 0x1}], 0x1}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000080)=""/21, 0x236, 0x0, 0x0, 0xfffffffffffffe8b) 12:31:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x10001, 0x20000) write$binfmt_elf64(r0, &(0x7f00000013c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xffffffff, 0x8, 0x9, 0xffffffff, 0x2, 0x3f, 0x2, 0xff, 0x40, 0x221, 0x1, 0x7, 0x38, 0x2, 0x400, 0x3e57, 0xfff}, [{0x4, 0x101, 0x7, 0x20, 0x7, 0x4, 0x7}], "410ef31b2ec26ee161b767ad13492ac80ff4ca6bc245d9baaf35c01f0a5f51290f1d065a4eea82792072611f56e0cf725345337c129e09aed5b41faa1798fc6184f9916392e27262651f1fdc6e3d0f47be406f37ca5a6009659f4104f3079a0ac81d158fb05d38eec125b5d3e6c39e08f402b56eb516dff5e5f13bf35eb7ec5374b5d04d7f22eab12e5542b4dc501045cb1338b7b5e6eb454d9447192e9c384a3651fedae6610c68bd1e672454864d42328cf345d36ea5ea23ef0d622fe2fe32c47b591c58d27fc4ba78b267b00a342e4dc9784501097c6ad4fd4966714c8d4d272f33bfe6eeb8e428d35dde7d5e12b6753b5f70678b0f4b7a8f1d0448277e4592a7951ab88d6a002dba3f331cf911c035e5254279d77cd19a2d5c6b3534569f8b9034d64b3b45bef6434eb140b8a8ab0344828524bb853e18eaf47f6bfd31999e753e227827c8270a3dbdcf61bdf9aba1866d9dd466d83571013a818d0231b19928ec682cc644a452f6a35f8633252913c40676005b2fb4e7212b5a1fe799e215e6813f4cd68227aaafd8b6d9f7f494a84159c301252dd01c1f27b6a345c4ca8af72c1caf90b17297d8d9e8a28befb9ac5ff1ee01bcbea6d4d08ce109a8f40df34484e0777d2e767d2821b3b1da9840a8a411e021b045c345f1ed0e9994d875d8c3fca38c3950e25e4efd3cdb9a5db9b04bc75bfce293418b3a865133a25a628bc58b87a317a55bde5e54cffe08a5f27c958a90d9b895ff33a755625ed3eed6474573c26e65be4604e35c5bbcf78c92293c5ed7a3f5f895054345d58a9b516a59140888754b84ec0af5e34a82a4580bd516b6edee5adffcf5d3d99717058e3ab995a29b6043473aecd9af4ecbb8ca41a66494aeae0580f4d91316adbed85d34461a1f556183d550274840813bee5aed28486393de568457dbc959f04fd558798d3aa5eba5748792f03bfc96f4b38c820bfa2ff7760f9a1712d8ddccf03d95b7d6c1eea24c3aaa7fcb89a372a5a8b1e80fa8b23af757721467b81b7f6b9e2e0df678f291020b61741988a5c95fa9d9a489107ab189787e9e77a6682bd813e5940bae26adbc094a5160f25edad780e58cee7e0b5ef54802c94aebc184b2fd3a696ed6b1e363587c4f77e60f056c92013c9fbf8b75cbebd093444d49cea84944b4c15cfc45c65cda21686221c3349c51c6a6b9846f148597fe7b27f92b7201e9eab26b316f7a585b0db63407f69129c6c41fdfd71b72dc15e2684945e482225756d1db3ae0e9f4c4773728c4566667836079c99f4311e6c2ee3a1bc8ac7e6c87f862666bdbbaa67d8f959998bbad4880fafffad87a527ea9f9942abd8998266426abf7635bbdbab4ec0eb63763001566a97bdd38effe7bee92a0f7e3c35a3e8ac6cf90e8ff10797e1cc3406ef4775f32d74f4f3cf4b62fdb7e93403f490e2374649bb52c29413beb1576508e0ab6c7cc91f3fd9d28697baf1e22ecd36883cb8ed8d1735f83db24be7ff26c9f735f4a3de20d80b6d393a81cc24065f5a9994508d9ff9b6318ae1cce2ee2418925690503f4ff88b7f8285a9d655befb455658efedd8c32402887bae0755dd0f7f83317f466803dfc0a2710588eb40b9665c980ff0d0993a14681312319c5c4a401dc0eb4819330b2ddd6e289c9ba7dfd4ff1b7d1dd748151158f95d2cce31d664b50d7785d0f1954593699a272626e30b0c13c833a8fa19538be99b896d34478894163670a8a40a511613eae8eff2563f53c5d49adc39b339972d3cb16dbe1781fb2b52cb20f3224c65595d15ae51d31becacfd9bf11f53be1683ec2cbb98fd734fc9ba67f5ecbada339db53feee531d7f484c7fa252e29fe96214fa7ba8c65f781034b49d8184ad56da4e3826380deb0a118d58345b0011b8def41d354ae62e545273e991ea7a4cec902dba45d44a6d62384e9a0fa32535740173acfe58bac98bd64b1bed5b9891367089842b611f54a9f56d80623c32205f63a45fd074c31003f8cbbc9ecc94096c3251c568670f924c4b20c375de8f757939b003f12cdb4032eb437e7896f9f1669b26944ef3dd49d84d3ac22bc84088ceb292a759a66a65c1d98700a21967bd0815d37c21df1929faab99b938e6c5218f0526b5e6b6c47bc95cc0bec27663de458034c10631a48df78b3aae8e197a0ede6dd22466f37ed8de064bcad8b9e96f8d5f113857f577196f5a61c25176c2266b5dedc861b425b71d94aff5fb808ad19e6451a79b738c89bab79afb832d6a84bdd0596afc67a602636a4364a78397f4c8e7ba73b0768a2f3d77c7d7854717a48e287c4230966354242a04e08d0c414e9fefb192ceea2c234c576424ec60bb1b6d5a2f0976970092b4f333508ee3f305b3087f66a0356a6caa4900a4bc3a30adb888007fa7a9f134fb524e15c2fe96879ed3d7165fe0e030a6c1ea210aaad62178207b9cf11eead67df042a14368c44bafdf0b205b643dcf2f41d8940936baae3e3a38ed41e5841a0509601b4c6898a3f7728ff06f63b4136d812e9d3244c8796eda5200a52498f0decf0497bda76dd34578104587d5232f991b8985597a4f222d2718a80b9b6e005bd2c26c4c921cd488a90c7cc787171bf47bde5cb996b32443713067827debab3c6fe34d0ab65131da52a1b350199865cc324302769cbe785c06aa862c404dbe2cd91d463650f5badd6a7b7a3083b3e29c70a9a7326fac2ab0b4ea2d3a954aa433810b01a5710e11f6bb93564183830ba3414c67ab8ff4abe4a825b5b18764bebf1d32928f37861d3de5424654f117536c4aec5db9e8340b891180d56f1aaa6c06f1dcd77ca33c0c9202a5a7fe117393cceb71a5de768824ae543edc951f7541c7fafe77619e4027e08fffa0545178d16526ccd6f9dbde12dda875811c4ba4e6ffb1ffa6342c352e14946fa1f4836d713d19922f60fe303c86d71f69ecf13ae508201b2c9ec137583701a3398824c468acf58cfb5212b3abd9ae5ef3328c03e177b439a1d31d75f8a478333699260be337761d726784c5309eac7708a7cff1776b17fd1bbc5f0c4cd86e3f017ca459bd188d9b6fbcf8776018cb32dd2e563ad1774b66a428bd414a8f015b86a0c71e045cce7c8f2f10f5cce24f258fbde885e675e7a6f3eb4383bc939e1bd62b3bb7a23586f4b8d9a6db1545ba2873ddb8463b7d712a7a6afb36d3fb3ba34fc09b3df7c36b15c93837bea967c20b1b3fffa32787ff3b0088d17b3b2c2ebadf12ff8b1f8ac89fbab1914cf8b0e10fa74a45857424b43c8fd48f637ce5b4bfd561fd7c4aa7e9d20a510a4dae4f903161c0de59eb6180bad697244adf1b92f87bce29c16926e1b425635970759270eee51f0d3fc9720d10d864ebb5aa1d699ece57e6a07062a6526ce59b96e3d3f779d85a3116e9b33b0ddb1ad5580aa9aef2feddcbfe8b92f59c56960c823a73f1174b9ceaa5b490dbf9e802d9ccff092547fa6446712e4c55a81f3adce184bbbf68dd038c725b733f1b87458141cf1f840276a9554d5219b8e91c90aabbe0c33d24481679f9e37b53cc2b08ce61b97fc13459f6909ae3ac27195dea1625e788e669dee40b3f7079cf6cbb3a4649b464fa184d9fc20a4769d367e78f7c7c60e452e36b6676be4b3cbd5a2ef138ae8adef32864986299f2be1112f678099bed8e668a2eef0c69823c83c14fad8d17e0b0f4372f72337225d6d325984c2049f9335a6e8e9a436b8964245815c4a38150059211423697dea5ef3ee409b442fd925393eabb19fbcc9f22624d86981acaab7743986d5bc8a35402456a6dd94a12dfe2c818deef18b006abae213b18ce64ba3b162ba070605352aa1cd64cfab584a6ae68187a866727e9e385f67b3cafd586fdeff602040f6faad191b2830b0bb2e07c968caa459bcdb96916d4a67c9df6944e023fa1ec7036127116c38923802e7a84b19f62af3162112f12cb411a2b60b5e8e36c09a5030f9c3ff65f9ccc2f122b048a8ad53525a9802e0fc7532a12390ffeff290ea61e19f4d2317533d5cd4df3440666051cdf9d1763e98b7df1aedd962832b54ac92d042dee524df9876c377ea2bc10772f155bf92512d3ad6ac85c7627ee3a808e2663f65103df0aa7109c313215395c88bb0c025a2bceb99918bfe24712694cb895467489f56c9f91e6c8193ba9a4584cb5b305d4bd1b0292242a2d71db43e607b082d6e860d385958843f72b29fb4aadaf2ac55fbaf43b37b060a20f4d366f6026d88a8f35f2db17d392a87d76c750331bf822e5de6ccc5864165b8e6e946a75432660ae066d6bb3fed76a86654ddb8b9125c6ed6bffc562f07f389fccab03a82160ae67d732061dfcb01c7451c17095185e83dc5b7da51d0dff31b00700332b8277c239172b58fde6f2fc4d234740889f0194489f5c7e023786ccb578605d96b6c34a3e7d4676931796657c91109956099e7dfc5a0e8740d1219b79ba09af3a395cc4cc8cfa622ae62840c80a59a1f74c719fb3ab31d142559a7a245a79d2be22aeca136c2246c234054e49d1405958211882f84b441a2ca8c6790e73d9168cbeda8ad8f9566722db1d5e88df6add29733ae6fb4076982816d949893c6c32e28b541a0343c4a97e3442b335f908506b2dc6fbedddbc8af6e17f0aeb15e42319d66ffb684f4c46166a43f823a64c8483264ad20ed042863917b91381b105bd3cdee4cfe2c4b7f97be7972ea0b746326bd00a43345d536fb5f283ad0b6a53c67f05c22f158ede89b0cfee7bc73cb146cef83be1d90ebea8f5f47b41ff8cc534b0beb273ab0b2880fe31b10b7e54db0f8ef8c8f25d0abe61a1f4cc7e49e99bb69c65a5dd735cf7dab752fc252604903ed4e3ba8ad494df247564f6273ff21900bf104143d129df079e8f49df808b6095b15c3a12b49fe913f59fca2e80fe1c0a865c4e06d44545cb86642769351eea082ce8b7ff9caba7c02f7e51444cc35ff8038c698be9da4b1da9c4480b5ec299f5edee8eaf46d1fd5dc13d178ac69e46c0e6b1a250f05a7c4d70bffbbab4906e30d9cddb44b98452df6a4098b4d4678c543505fd3233e255d80e7d0fe43c7cfbb36d66a3448ad7ffeea9db89a77bd727a759445b9a7926396a43489b0024d3bb87e17828a80e815a36edc62b7ce95ca7278af559eae8477971a6cd5e01a74c6750c6d685a0deaad18b717e6950d729588431eea72fca8f10db5e521140d00a5a31cffbe98138f00115e8b684ac2c2738bbc14ba6f3a200ecdd0b6860434b8632a1a0c1a489e22ea7e13e245cfe57e1e8f64c74a6788ffa157d2a8b0447c09197721324da4b61e2cd859ca7ffa1233ecd244188ac848c970ed2a758be1a4fa5645745752c1d361bac8d73443f6d66d79457189bb9a21b6818bf92c68c605c07f79ee2fe349a9b3474a9f53738092e8da6faeeb358b43e0fec74ba879e21933e45b6c76fecf873a97a7eefe7c69820a9aede3ec281a7884e807d22ec8fbfa1832793d4203f487735b12f4bc253871608f7d55e517491f75bc871a130bf4e2336e02a4dd4c767ba2acdb2895fe0dfb2ad0aa42faaa5686495a44c7308ac0a071e5cc3543b32db8d1efec6cee1001cab23d1da37922afe101679b1e5d6314be9dd6d07b4fc2d7f0161a8e2d187aa60d010bae260523450940bafa513ef2fda5332f076ef146703824d5cb771f60a4e305b4734d8b8014da758bd84d899cc26a5b37da208fb1381186cbc84369d7ffd0c68a6246786b9fe4716234a1dbc23c0f8c66d46b452ae6d41057b0d5e5df50c5e79117efb300508e0e100fa0d", [[], [], [], [], [], [], [], [], []]}, 0x1978) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc69123c127b8e9bd070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000001380)) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'trusted.', 'eth1\x00'}, &(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x11, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) 12:31:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x162) 12:31:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @local}}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) write(r1, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f00000000c0)) ioctl(r2, 0x2, &(0x7f0000000340)="0adc1f023c123f31575de7440d45f6702fa29bd0702d15493a32b239e494b6b08a15304a07fb491002db2f30080000ae60770bd37e2f3f64834e28fdaf27e12fc6b508af410e9005f7fc0de615c67ad24fb9e6f212fb669720237c3f0704abb72265974432") r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x50040, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000180)=""/28) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000280)={{0x3, 0x81}, 'port1\x00', 0x2, 0x40, 0x0, 0x20, 0x0, 0x3, 0x4, 0x0, 0x1, 0x9}) socket(0x400000000010, 0x3, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x199000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000240)={0x3}) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 12:31:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@v2, 0xa, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2e, r3}) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0xc1, 0x6}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000003c0)=0xe8) r5 = getegid() lchown(&(0x7f0000000280)='./file0\x00', r4, r5) write(r0, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000240)) 12:31:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x163) 12:31:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000013c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:31:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getgroups(0x1, &(0x7f0000000080)=[0x0]) setgid(r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000280)=0x7) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc) r5 = getgid() sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES64=r1, @ANYRES32, @ANYRES32=r5, @ANYBLOB="00a2b1d511e52a0100a9b7dc9001004e57a89fb20a874726606f0b", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x53}, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000180)={0x2, 0xfffffffffffff2c8, [{0x10001, 0x0, 0x8000}, {0x2, 0x0, 0x100000001}]}) 12:31:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 12:31:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:31:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f}}, 0x20) write(r1, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) r2 = dup3(r0, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) 12:31:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000480)={0x0, 0x0, {0x6, 0x4, 0x5, 0x12, 0x1, 0xff, 0x2, 0xf0, 0x1}}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000020}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01012bbd7000ffdbdf25030000003c00f6a87cfcae9143b48c1f5b9bc1662c17016d19400300140006003b39ca14099821000600000000000000000000000000000000010800040000000000080007004e240000080004000800000009000300140002006e6c6d6f6e300000000000000000000008000600030700002c0001000800020073000000080001000a000000714a050000000000080002003b000000080002003e000000080006000000000008000400a5bf14652b8650431db27c0240175f61e5abd0ee348c9eb85c7827972cde"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0) unshare(0x40000000) clone(0x400, &(0x7f0000000300)="0e1a38ef17081246779a4164d5e51b806a087c66b9df439af4067ccf7b8e287ccc1527dc9eeb9dd3bfbfb1426f5df4f3ad6ce95e2fe863198e8ebb2cedda07d9f76977ec1677bb34427598d8d468617d2e9049a9dcb724e39342b59e1fd363ce8750c1dcb3e1322230f56bea79974cd7e9a4ea3bc0da528b2d570a3efdb88790a659b965b3bc431355f2e1b47f1778d37d0a609efc5a8717de61cd2e4e6b9b7e688041e76987f5c2249248f60fe086f7be34", &(0x7f0000000000), &(0x7f0000000240), &(0x7f00000003c0)="13139b843f7639e3b106e37edd22f221d4245b081550370741b4f1ee38937656d37a6e9e5403b3b754bd436f0301ebf2f6787cbc7285926229a1cc88b786031ad3b1e39785a75153ce11177c301ce0dedb37838640690ae57a866b6fbe1524812352dbb1dedd2f0d6c2cfec6fc8d3dda316e32083ac436df83f59e108e2f2308e04e64843f3433532557747875fd6974de900c4e9dd22892c42aa2733a87ecbeb38224298fadd8ca51755b7886b2e17e1515288b928db70bc245d9d87c2f") 12:31:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x164) 12:31:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x13f}}, 0x20) write(r1, &(0x7f0000000140)="150000000800000000000000c86b6525000010", 0x13) r2 = dup3(r0, r1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) 12:31:52 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:31:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x165) 12:31:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 422.620258][T21944] IPVS: ftp: loaded support on port[0] = 21 12:31:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 422.697982][ T7633] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 422.772013][ T7633] CPU: 0 PID: 7633 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 422.780071][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.790399][ T7633] Call Trace: [ 422.793699][ T7633] dump_stack+0x172/0x1f0 [ 422.798217][ T7633] dump_header+0x10f/0xb6c [ 422.802651][ T7633] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 422.808468][ T7633] ? ___ratelimit+0x60/0x595 [ 422.813076][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 422.818225][ T7633] oom_kill_process.cold+0x10/0x15 [ 422.823442][ T7633] out_of_memory+0x79a/0x1280 [ 422.828125][ T7633] ? lock_downgrade+0x880/0x880 [ 422.832978][ T7633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.839344][ T7633] ? oom_killer_disable+0x280/0x280 [ 422.844548][ T7633] ? find_held_lock+0x35/0x130 [ 422.849431][ T7633] mem_cgroup_out_of_memory+0x1ca/0x230 [ 422.854991][ T7633] ? memcg_event_wake+0x230/0x230 [ 422.860036][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 422.865257][ T7633] ? _raw_spin_unlock+0x2d/0x50 [ 422.870120][ T7633] try_charge+0x102c/0x15c0 [ 422.870133][ T7633] ? find_held_lock+0x35/0x130 [ 422.870152][ T7633] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 422.884947][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 422.884964][ T7633] ? find_held_lock+0x35/0x130 [ 422.884979][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 422.885002][ T7633] __memcg_kmem_charge_memcg+0x7c/0x130 [ 422.906707][ T7633] ? memcg_kmem_put_cache+0xb0/0xb0 [ 422.912107][ T7633] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 422.917821][ T7633] __memcg_kmem_charge+0x136/0x300 [ 422.922942][ T7633] __alloc_pages_nodemask+0x4bf/0x8d0 [ 422.928330][ T7633] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 422.934089][ T7633] ? copy_page_range+0x125a/0x1f90 [ 422.939223][ T7633] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 422.945565][ T7633] alloc_pages_current+0x107/0x210 [ 422.950698][ T7633] pte_alloc_one+0x1b/0x1a0 [ 422.955213][ T7633] __pte_alloc+0x20/0x310 [ 422.959562][ T7633] copy_page_range+0x1529/0x1f90 [ 422.964520][ T7633] ? find_held_lock+0x35/0x130 [ 422.969313][ T7633] ? pmd_alloc+0x180/0x180 [ 422.973739][ T7633] ? __rb_insert_augmented+0x231/0xdf0 [ 422.979201][ T7633] ? validate_mm_rb+0xa3/0xc0 [ 422.983896][ T7633] ? __vma_link_rb+0x279/0x370 [ 422.988660][ T7633] copy_process.part.0+0x568b/0x7980 [ 422.988698][ T7633] ? __cleanup_sighand+0x60/0x60 [ 422.988731][ T7633] _do_fork+0x257/0xfd0 [ 422.998931][ T7633] ? fork_idle+0x1d0/0x1d0 [ 422.998955][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 422.998968][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 422.998987][ T7633] ? do_syscall_64+0x26/0x610 12:31:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 423.023112][ T7633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.029218][ T7633] ? do_syscall_64+0x26/0x610 [ 423.033908][ T7633] __x64_sys_clone+0xbf/0x150 [ 423.038857][ T7633] do_syscall_64+0x103/0x610 [ 423.043474][ T7633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.043487][ T7633] RIP: 0033:0x45737a [ 423.043509][ T7633] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 423.043515][ T7633] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 423.043525][ T7633] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 423.043532][ T7633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 423.043538][ T7633] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000027f3940 [ 423.043544][ T7633] R10: 00000000027f3c10 R11: 0000000000000246 R12: 0000000000000001 [ 423.043549][ T7633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 423.049091][ T7633] memory: usage 307200kB, limit 307200kB, failcnt 141 [ 423.085350][ T7633] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.122214][ T7633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.142140][ T7633] Memory cgroup stats for /syz5: cache:148KB rss:270648KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270696KB inactive_file:0KB active_file:0KB unevictable:0KB [ 423.177589][ T7633] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19568,uid=0 [ 423.239473][ T7633] Memory cgroup out of memory: Killed process 19568 (syz-executor.5) total-vm:72448kB, anon-rss:2168kB, file-rss:35912kB, shmem-rss:0kB [ 423.316483][T21951] IPVS: ftp: loaded support on port[0] = 21 [ 423.343386][T21982] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 423.378159][T21982] CPU: 1 PID: 21982 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 423.386190][T21982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.396390][T21982] Call Trace: [ 423.399701][T21982] dump_stack+0x172/0x1f0 [ 423.404039][T21982] dump_header+0x10f/0xb6c [ 423.404058][T21982] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.404077][T21982] ? ___ratelimit+0x60/0x595 [ 423.414266][T21982] ? do_raw_spin_unlock+0x57/0x270 [ 423.414286][T21982] oom_kill_process.cold+0x10/0x15 [ 423.414302][T21982] out_of_memory+0x79a/0x1280 [ 423.423983][T21982] ? lock_downgrade+0x880/0x880 [ 423.433915][T21982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.433931][T21982] ? oom_killer_disable+0x280/0x280 [ 423.433947][T21982] ? find_held_lock+0x35/0x130 [ 423.445120][T21982] mem_cgroup_out_of_memory+0x1ca/0x230 [ 423.445134][T21982] ? memcg_event_wake+0x230/0x230 [ 423.445156][T21982] ? do_raw_spin_unlock+0x57/0x270 [ 423.455106][T21982] ? _raw_spin_unlock+0x2d/0x50 [ 423.455126][T21982] try_charge+0x102c/0x15c0 [ 423.455142][T21982] ? find_held_lock+0x35/0x130 [ 423.470879][T21982] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 423.470893][T21982] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 423.470907][T21982] ? find_held_lock+0x35/0x130 [ 423.470922][T21982] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 423.470952][T21982] __memcg_kmem_charge_memcg+0x7c/0x130 [ 423.480372][T21982] ? memcg_kmem_put_cache+0xb0/0xb0 [ 423.480390][T21982] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 423.480408][T21982] __memcg_kmem_charge+0x136/0x300 [ 423.480428][T21982] __alloc_pages_nodemask+0x4bf/0x8d0 [ 423.480443][T21982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.480462][T21982] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 423.480480][T21982] ? copy_process.part.0+0x1d08/0x7980 [ 423.480497][T21982] ? lockdep_hardirqs_on+0x418/0x5d0 [ 423.490782][T21982] ? trace_hardirqs_on+0x67/0x230 [ 423.501182][T21982] copy_process.part.0+0x3e0/0x7980 [ 423.501200][T21982] ? __lock_acquire+0x548/0x3fb0 [ 423.517709][T21982] ? lockdep_init_map+0x1be/0x6d0 [ 423.517736][T21982] ? __might_fault+0x12b/0x1e0 [ 423.517759][T21982] ? __cleanup_sighand+0x60/0x60 [ 423.517776][T21982] ? lock_downgrade+0x880/0x880 [ 423.528423][T21982] _do_fork+0x257/0xfd0 [ 423.528441][T21982] ? fork_idle+0x1d0/0x1d0 [ 423.528464][T21982] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.528477][T21982] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 423.528492][T21982] ? do_syscall_64+0x26/0x610 [ 423.528507][T21982] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.528525][T21982] ? do_syscall_64+0x26/0x610 [ 423.528543][T21982] __x64_sys_clone+0xbf/0x150 [ 423.540229][T21982] do_syscall_64+0x103/0x610 [ 423.540254][T21982] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 423.551382][T21982] RIP: 0033:0x458da9 [ 423.561819][T21982] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 423.561827][T21982] RSP: 002b:00007fbf2a074c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 423.561844][T21982] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 423.576957][T21982] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 423.576966][T21982] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 423.576975][T21982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 423.576983][T21982] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 423.718568][T21982] memory: usage 307192kB, limit 307200kB, failcnt 165 [ 423.725460][T21982] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.733149][T21982] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.740195][T21982] Memory cgroup stats for /syz5: cache:148KB rss:270648KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270736KB inactive_file:0KB active_file:0KB unevictable:0KB [ 423.762546][T21982] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21545,uid=0 [ 423.780471][T21982] Memory cgroup out of memory: Killed process 21545 (syz-executor.5) total-vm:80824kB, anon-rss:2220kB, file-rss:35796kB, shmem-rss:0kB [ 423.822624][T21981] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 423.835932][T21981] CPU: 0 PID: 21981 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 423.843940][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.854021][T21981] Call Trace: [ 423.857320][T21981] dump_stack+0x172/0x1f0 [ 423.861697][T21981] dump_header+0x10f/0xb6c [ 423.866204][T21981] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.872100][T21981] ? ___ratelimit+0x60/0x595 [ 423.876696][T21981] ? do_raw_spin_unlock+0x57/0x270 [ 423.881814][T21981] oom_kill_process.cold+0x10/0x15 [ 423.886925][T21981] out_of_memory+0x79a/0x1280 [ 423.891616][T21981] ? oom_killer_disable+0x280/0x280 [ 423.896810][T21981] ? find_held_lock+0x35/0x130 [ 423.901616][T21981] mem_cgroup_out_of_memory+0x1ca/0x230 [ 423.907348][T21981] ? memcg_event_wake+0x230/0x230 [ 423.912388][T21981] ? do_raw_spin_unlock+0x57/0x270 [ 423.917508][T21981] ? _raw_spin_unlock+0x2d/0x50 [ 423.922379][T21981] try_charge+0xa87/0x15c0 [ 423.926802][T21981] ? find_held_lock+0x35/0x130 [ 423.931575][T21981] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 423.937127][T21981] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 423.947368][T21981] ? find_held_lock+0x35/0x130 [ 423.953634][T21981] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 423.959464][T21981] __memcg_kmem_charge_memcg+0x7c/0x130 [ 423.965021][T21981] ? memcg_kmem_put_cache+0xb0/0xb0 [ 423.970225][T21981] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 423.975780][T21981] __memcg_kmem_charge+0x136/0x300 [ 423.980931][T21981] __alloc_pages_nodemask+0x4bf/0x8d0 [ 423.986482][T21981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.992816][T21981] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 423.998545][T21981] ? copy_process.part.0+0x1d08/0x7980 [ 424.004145][T21981] ? lockdep_hardirqs_on+0x418/0x5d0 [ 424.009557][T21981] ? trace_hardirqs_on+0x67/0x230 [ 424.014624][T21981] copy_process.part.0+0x3e0/0x7980 [ 424.019829][T21981] ? psi_memstall_leave+0x11c/0x180 [ 424.025108][T21981] ? sched_clock+0x2e/0x50 [ 424.029526][T21981] ? psi_memstall_leave+0x12e/0x180 [ 424.034902][T21981] ? find_held_lock+0x35/0x130 [ 424.039673][T21981] ? psi_memstall_leave+0x12e/0x180 [ 424.044981][T21981] ? __cleanup_sighand+0x60/0x60 [ 424.049914][T21981] ? __lock_acquire+0x548/0x3fb0 [ 424.054856][T21981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.061202][T21981] _do_fork+0x257/0xfd0 [ 424.065364][T21981] ? fork_idle+0x1d0/0x1d0 [ 424.069942][T21981] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 424.076026][T21981] ? lock_downgrade+0x880/0x880 [ 424.080885][T21981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.087148][T21981] ? blkcg_exit_queue+0x30/0x30 [ 424.092005][T21981] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.097465][T21981] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.102926][T21981] ? do_syscall_64+0x26/0x610 [ 424.107812][T21981] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.113881][T21981] ? do_syscall_64+0x26/0x610 [ 424.119262][T21981] __x64_sys_clone+0xbf/0x150 [ 424.123950][T21981] do_syscall_64+0x103/0x610 [ 424.128545][T21981] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.134438][T21981] RIP: 0033:0x45b779 [ 424.138353][T21981] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 424.158046][T21981] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 424.166461][T21981] RAX: ffffffffffffffda RBX: 00007fbf2a054700 RCX: 000000000045b779 [ 424.174432][T21981] RDX: 00007fbf2a0549d0 RSI: 00007fbf2a053db0 RDI: 00000000003d0f00 [ 424.182489][T21981] RBP: 0000000000a4fcb0 R08: 00007fbf2a054700 R09: 00007fbf2a054700 [ 424.190478][T21981] R10: 00007fbf2a0549d0 R11: 0000000000000202 R12: 0000000000000000 [ 424.198633][T21981] R13: 0000000000a4fb4f R14: 00007fbf2a0549c0 R15: 000000000073bfac [ 424.206915][T21981] memory: usage 306976kB, limit 307200kB, failcnt 165 [ 424.213860][T21981] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.222304][T21981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.230150][T21981] Memory cgroup stats for [ 424.238058][T21981] /syz5: cache:148KB rss:270648KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270708KB inactive_file:0KB active_file:0KB unevictable:0KB [ 424.258004][T21981] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset= [ 424.258242][T21981] syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=18463,uid=0 [ 424.278402][T21981] Memory cgroup out of memory: Killed process 18463 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB [ 424.295379][ T1044] oom_reaper: reaped process 18463 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 424.479345][T21984] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 424.500797][T21984] CPU: 1 PID: 21984 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 424.508898][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.518962][T21984] Call Trace: [ 424.522279][T21984] dump_stack+0x172/0x1f0 [ 424.526705][T21984] dump_header+0x10f/0xb6c [ 424.531121][T21984] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 424.536933][T21984] ? ___ratelimit+0x60/0x595 [ 424.541527][T21984] ? do_raw_spin_unlock+0x57/0x270 [ 424.546646][T21984] oom_kill_process.cold+0x10/0x15 [ 424.551762][T21984] out_of_memory+0x79a/0x1280 [ 424.556442][T21984] ? lock_downgrade+0x880/0x880 [ 424.561288][T21984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.567622][T21984] ? oom_killer_disable+0x280/0x280 [ 424.572817][T21984] ? find_held_lock+0x35/0x130 [ 424.577868][T21984] mem_cgroup_out_of_memory+0x1ca/0x230 [ 424.583434][T21984] ? memcg_event_wake+0x230/0x230 [ 424.588474][T21984] ? do_raw_spin_unlock+0x57/0x270 [ 424.593600][T21984] ? _raw_spin_unlock+0x2d/0x50 [ 424.598491][T21984] try_charge+0x102c/0x15c0 [ 424.603002][T21984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.609252][T21984] ? should_fail+0x1de/0x852 [ 424.613855][T21984] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 424.619494][T21984] ? rcu_read_lock_sched_held+0x110/0x130 [ 424.625243][T21984] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 424.630906][T21984] __memcg_kmem_charge_memcg+0x7c/0x130 [ 424.636450][T21984] ? memcg_kmem_put_cache+0xb0/0xb0 [ 424.641652][T21984] ? cache_grow_begin+0x594/0x860 [ 424.646764][T21984] ? lockdep_hardirqs_on+0x418/0x5d0 [ 424.652063][T21984] ? trace_hardirqs_on+0x67/0x230 [ 424.657095][T21984] cache_grow_begin+0x5c0/0x860 [ 424.661952][T21984] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 424.668433][T21984] ? __cpuset_node_allowed+0x136/0x540 [ 424.673909][T21984] fallback_alloc+0x1fd/0x2d0 [ 424.678599][T21984] ____cache_alloc_node+0x1be/0x1e0 [ 424.683882][T21984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 424.690232][T21984] kmem_cache_alloc+0x1e8/0x6f0 [ 424.695083][T21984] ? validate_mm_rb+0xa3/0xc0 [ 424.699793][T21984] vm_area_dup+0x21/0x170 [ 424.704170][T21984] copy_process.part.0+0x3431/0x7980 [ 424.709482][T21984] ? __cleanup_sighand+0x60/0x60 [ 424.714466][T21984] ? semctl_down+0x5e0/0x9f0 [ 424.719142][T21984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.725429][T21984] _do_fork+0x257/0xfd0 [ 424.729595][T21984] ? fork_idle+0x1d0/0x1d0 [ 424.734008][T21984] ? __ia32_sys_mkdir+0x80/0x80 [ 424.738896][T21984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.744359][T21984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 424.749911][T21984] ? do_syscall_64+0x26/0x610 [ 424.754586][T21984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.760655][T21984] ? do_syscall_64+0x26/0x610 [ 424.765340][T21984] ? lockdep_hardirqs_on+0x418/0x5d0 [ 424.770635][T21984] __ia32_sys_fork+0x1f/0x30 [ 424.775227][T21984] do_syscall_64+0x103/0x610 [ 424.779849][T21984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.785742][T21984] RIP: 0033:0x2000000a [ 424.789907][T21984] Code: Bad RIP value. [ 424.793967][T21984] RSP: 002b:00007fbf2a053bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 424.802373][T21984] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 424.810608][T21984] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 000000001f000003 [ 424.818585][T21984] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 424.826570][T21984] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 424.834721][T21984] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 424.851241][T21984] memory: usage 307200kB, limit 307200kB, failcnt 203 [ 424.859701][T21984] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.870765][T21984] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.879459][T21984] Memory cgroup stats for /syz5: cache:148KB rss:270620KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270668KB inactive_file:0KB active_file:0KB unevictable:0KB [ 424.905360][T21984] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19674,uid=0 [ 424.922066][T21984] Memory cgroup out of memory: Killed process 19674 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 424.937326][ T1044] oom_reaper: reaped process 19674 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:31:57 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 2: clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x12, r1) ptrace$getsig(0x420b, r1, 0x8, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x3, 0x6, 0x2, 0xb628, 0x0, 0x7fff, 0x93410, 0xc, 0x100, 0x4, 0x4, 0x9, 0x2, 0x6, 0x5, 0x2, 0x9, 0x9, 0x1000, 0x100000000, 0x0, 0x7f, 0x62, 0x4, 0x9, 0x7fff, 0x6, 0xa1, 0x7f, 0x0, 0x81, 0x1000, 0x7, 0xfffffffffffffffe, 0x10000, 0x435e, 0x0, 0x200, 0x0, @perf_config_ext={0x8, 0x7}, 0x8014, 0x3, 0x43, 0x0, 0x6, 0x0, 0x3}, r1, 0x9, r2, 0x2) 12:31:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x166) 12:31:57 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000223c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:31:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 3: ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) fcntl$setlease(r2, 0x400, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000200)) add_key$user(0x0, &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000002c0), 0x0, 0x0, &(0x7f00000004c0)=""/4096) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6, &(0x7f0000000140)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x6, 0x4) creat(&(0x7f0000000240)='./file0\x00', 0x0) 12:31:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x167) [ 427.640012][T22005] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 12:31:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 427.746386][T22005] CPU: 0 PID: 22005 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 427.754695][T22005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.764757][T22005] Call Trace: [ 427.768047][T22005] dump_stack+0x172/0x1f0 [ 427.768066][T22005] dump_header+0x10f/0xb6c [ 427.768081][T22005] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 427.768095][T22005] ? ___ratelimit+0x60/0x595 [ 427.768108][T22005] ? do_raw_spin_unlock+0x57/0x270 [ 427.768122][T22005] oom_kill_process.cold+0x10/0x15 [ 427.768136][T22005] out_of_memory+0x79a/0x1280 [ 427.768150][T22005] ? lock_downgrade+0x880/0x880 [ 427.768164][T22005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.768179][T22005] ? oom_killer_disable+0x280/0x280 [ 427.768193][T22005] ? find_held_lock+0x35/0x130 [ 427.823841][T22005] mem_cgroup_out_of_memory+0x1ca/0x230 [ 427.829398][T22005] ? memcg_event_wake+0x230/0x230 [ 427.834434][T22005] ? do_raw_spin_unlock+0x57/0x270 [ 427.839654][T22005] ? _raw_spin_unlock+0x2d/0x50 [ 427.845753][T22005] try_charge+0x102c/0x15c0 [ 427.850266][T22005] ? find_held_lock+0x35/0x130 [ 427.855137][T22005] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 427.860707][T22005] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.866262][T22005] ? find_held_lock+0x35/0x130 [ 427.871030][T22005] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.876595][T22005] __memcg_kmem_charge_memcg+0x7c/0x130 [ 427.882358][T22005] ? memcg_kmem_put_cache+0xb0/0xb0 [ 427.887564][T22005] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 427.893116][T22005] __memcg_kmem_charge+0x136/0x300 [ 427.898240][T22005] __alloc_pages_nodemask+0x4bf/0x8d0 [ 427.903647][T22005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.909910][T22005] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 427.915667][T22005] ? copy_process.part.0+0x1d08/0x7980 [ 427.921135][T22005] ? lockdep_hardirqs_on+0x418/0x5d0 [ 427.926429][T22005] ? trace_hardirqs_on+0x67/0x230 [ 427.931560][T22005] ? kasan_check_read+0x11/0x20 [ 427.936515][T22005] copy_process.part.0+0x3e0/0x7980 [ 427.941814][T22005] ? semctl_down+0x5e0/0x9f0 [ 427.946410][T22005] ? find_held_lock+0x35/0x130 [ 427.951177][T22005] ? semctl_down+0x5e0/0x9f0 [ 427.955897][T22005] ? __cleanup_sighand+0x60/0x60 [ 427.960833][T22005] ? up_write+0x1c/0x150 [ 427.965078][T22005] ? semctl_down+0x5e0/0x9f0 [ 427.969686][T22005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.975940][T22005] _do_fork+0x257/0xfd0 [ 427.975962][T22005] ? fork_idle+0x1d0/0x1d0 [ 427.975976][T22005] ? __ia32_sys_mkdir+0x80/0x80 [ 427.975996][T22005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.989462][T22005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 427.989478][T22005] ? do_syscall_64+0x26/0x610 [ 427.989493][T22005] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.989509][T22005] ? do_syscall_64+0x26/0x610 [ 428.016042][T22005] ? lockdep_hardirqs_on+0x418/0x5d0 [ 428.021345][T22005] __ia32_sys_fork+0x1f/0x30 [ 428.025946][T22005] do_syscall_64+0x103/0x610 [ 428.030561][T22005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.036542][T22005] RIP: 0033:0x2000000a [ 428.040707][T22005] Code: Bad RIP value. 12:31:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 428.044774][T22005] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 428.053200][T22005] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 428.061174][T22005] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000023020003 [ 428.069163][T22005] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 428.077144][T22005] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 428.085385][T22005] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 428.107548][T22005] memory: usage 307136kB, limit 307200kB, failcnt 232 [ 428.114772][T22005] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 428.156884][T22005] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 428.163771][T22005] Memory cgroup stats for /syz5: cache:148KB rss:270620KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270756KB inactive_file:0KB active_file:0KB unevictable:0KB 12:31:57 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX]], 0xfffffe54}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa080200000000000000000000010500060020000000055c000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c0500050000000d6cbb04984189dd0000ff1700000000630000000000000001170000000000000000"], 0x80}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x2, 0x2) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "f9b5964ff096f8e438db41693a30c4c9"}, 0x11, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf50ffff140000000a9e0000b10800000800000009000000010000007afd1ace382a2460dde0c084222fd82c682038c642c5d8506b86356879de69b3917e260600000000000000e0235cb9f00cb3ca27c89d37fed0eb116ab1c4af81c8961481db20f7478263c50f9012f5f512fbf0ee6d2f67530eece5db362a53792af223a41141ab80629dd1d5eff3962189d71fc4c96fa3a71329536a546714d069f96f11eeed9cd4dae72d6e464445b8d3f528494744566a5ee74a36f1bef54ee3fdfd97737324fd750e0c227d9b4519a4e5a60785"]) write$P9_RFLUSH(r1, &(0x7f0000000280)={0x7, 0x6d, 0x1}, 0x7) r3 = gettid() getpgrp(r3) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000003c0)=0xc3e8, 0x4) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000005c0)=""/228) 12:31:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:57 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:31:57 executing program 3: syz_emit_ethernet(0x140, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800000000019078ac7014bbb7141411030490780000060045400000000000002e3e0000c11414aaac1414000000000000000000020000004c5acda05b1f00000000007f00000100000000ffffffffac2186d8f2fb9b9f7116a95af107a6de00ce00000000004ed2a83f00ac14140000000000bd841100a3ace58a43a3b56c5df0ba47652e833585331fee4f6f4027e9a624ccbc3d00392976e8fce49b70ada1c9eab5e72d1fa8ed84706a80439c5ae1304d4ca18b3be785e910f83e0fbb"], 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x100, 0x1f, 0x0, 0x1ff, 0x2, 0x6, 0x3, {0x0, @in6={{0xa, 0x4e23, 0xe31e, @rand_addr="ce046b7304639f2e83c157c47763d474", 0x6}}, 0x3, 0x4, 0x8, 0xd6}}, &(0x7f0000000100)=0xb0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xa0080, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x1ff, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0)={r0, 0xffffffff}, 0x8) 12:31:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x168) 12:31:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 428.195199][T22005] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19903,uid=0 [ 428.210826][T22005] Memory cgroup out of memory: Killed process 19903 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 428.228330][ T1044] oom_reaper: reaped process 19903 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 428.243123][T22005] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 428.346497][T22005] CPU: 1 PID: 22005 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 428.354635][T22005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.364695][T22005] Call Trace: [ 428.368007][T22005] dump_stack+0x172/0x1f0 [ 428.372437][T22005] dump_header+0x10f/0xb6c [ 428.376856][T22005] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 428.382671][T22005] ? ___ratelimit+0x60/0x595 [ 428.387264][T22005] ? do_raw_spin_unlock+0x57/0x270 [ 428.392744][T22005] oom_kill_process.cold+0x10/0x15 [ 428.397957][T22005] out_of_memory+0x79a/0x1280 [ 428.402638][T22005] ? lock_downgrade+0x880/0x880 [ 428.407829][T22005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.414070][T22005] ? oom_killer_disable+0x280/0x280 [ 428.419281][T22005] ? find_held_lock+0x35/0x130 [ 428.424214][T22005] mem_cgroup_out_of_memory+0x1ca/0x230 [ 428.429759][T22005] ? memcg_event_wake+0x230/0x230 [ 428.434790][T22005] ? do_raw_spin_unlock+0x57/0x270 [ 428.439907][T22005] ? _raw_spin_unlock+0x2d/0x50 [ 428.444860][T22005] try_charge+0x102c/0x15c0 [ 428.449386][T22005] ? find_held_lock+0x35/0x130 [ 428.454166][T22005] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 428.459713][T22005] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 428.465256][T22005] ? find_held_lock+0x35/0x130 [ 428.470023][T22005] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 428.475601][T22005] __memcg_kmem_charge_memcg+0x7c/0x130 [ 428.481259][T22005] ? memcg_kmem_put_cache+0xb0/0xb0 [ 428.486688][T22005] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 428.492337][T22005] __memcg_kmem_charge+0x136/0x300 [ 428.502300][T22005] __alloc_pages_nodemask+0x4bf/0x8d0 [ 428.507719][T22005] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 428.513442][T22005] ? copy_page_range+0x125a/0x1f90 [ 428.518643][T22005] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.524893][T22005] alloc_pages_current+0x107/0x210 [ 428.530116][T22005] pte_alloc_one+0x1b/0x1a0 [ 428.534708][T22005] __pte_alloc+0x20/0x310 [ 428.539080][T22005] copy_page_range+0x1529/0x1f90 [ 428.544021][T22005] ? find_held_lock+0x35/0x130 [ 428.549026][T22005] ? pmd_alloc+0x180/0x180 [ 428.553442][T22005] ? __rb_insert_augmented+0x231/0xdf0 [ 428.559006][T22005] ? validate_mm_rb+0xa3/0xc0 [ 428.563689][T22005] ? __vma_link_rb+0x279/0x370 [ 428.568459][T22005] copy_process.part.0+0x568b/0x7980 [ 428.573835][T22005] ? __cleanup_sighand+0x60/0x60 [ 428.578869][T22005] ? semctl_down+0x5e0/0x9f0 [ 428.583465][T22005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.589720][T22005] _do_fork+0x257/0xfd0 [ 428.593884][T22005] ? fork_idle+0x1d0/0x1d0 [ 428.598294][T22005] ? __ia32_sys_mkdir+0x80/0x80 [ 428.603145][T22005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.608699][T22005] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.614153][T22005] ? do_syscall_64+0x26/0x610 [ 428.618838][T22005] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.624897][T22005] ? do_syscall_64+0x26/0x610 [ 428.629593][T22005] ? lockdep_hardirqs_on+0x418/0x5d0 [ 428.634890][T22005] __ia32_sys_fork+0x1f/0x30 [ 428.639570][T22005] do_syscall_64+0x103/0x610 [ 428.644162][T22005] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.650139][T22005] RIP: 0033:0x2000000a [ 428.654207][T22005] Code: Bad RIP value. [ 428.658272][T22005] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 428.666772][T22005] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 428.674750][T22005] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000023020003 [ 428.682893][T22005] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 428.691208][T22005] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b 12:31:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000400)={@remote, r4}, 0x14) 12:31:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 428.699345][T22005] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff 12:31:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x169) 12:31:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x3b}}) getpid() mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 12:31:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:31:58 executing program 2: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x2, 0x2) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000380)=@req3={0x2, 0x10001, 0x7, 0x1, 0x8d34, 0x101, 0x9}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x40080, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000180)={'ip6gre0\x00\x00\x00F\x9at\b\x00', @ifru_flags}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @dev}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@rand_addr="c9d1a1b9d7551a23388131dcf0fdf5cc", @in=@multicast1, 0x4e22, 0x4, 0x4e20, 0x6, 0xa, 0x20, 0x80, 0x0, r4, r1}, {0x0, 0x5, 0x7fff, 0x1000, 0x7ff, 0x512, 0x2, 0x400}, {0x5, 0xf8d1, 0x1, 0x3}, 0x5, 0x0, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d4, 0x32}, 0xa, @in=@remote, 0x3507, 0x0, 0x0, 0xa35e, 0x9, 0x0, 0xffffffff}}, 0xe8) [ 429.309420][T22005] memory: usage 307040kB, limit 307200kB, failcnt 266 [ 429.356533][T22005] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.364037][T22005] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.466453][T22005] Memory cgroup stats for /syz5: cache:148KB rss:270620KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270720KB inactive_file:0KB active_file:0KB unevictable:0KB [ 429.519793][T22005] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19976,uid=0 [ 429.537540][T22005] Memory cgroup out of memory: Killed process 19976 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 429.591479][ T7633] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 429.611773][ T7633] CPU: 0 PID: 7633 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 429.619701][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.629761][ T7633] Call Trace: [ 429.633063][ T7633] dump_stack+0x172/0x1f0 [ 429.637397][ T7633] dump_header+0x10f/0xb6c [ 429.641823][ T7633] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 429.647632][ T7633] ? ___ratelimit+0x60/0x595 [ 429.652220][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 429.657335][ T7633] oom_kill_process.cold+0x10/0x15 [ 429.663326][ T7633] out_of_memory+0x79a/0x1280 [ 429.668005][ T7633] ? oom_killer_disable+0x280/0x280 [ 429.673318][ T7633] ? find_held_lock+0x35/0x130 [ 429.678269][ T7633] mem_cgroup_out_of_memory+0x1ca/0x230 [ 429.683811][ T7633] ? memcg_event_wake+0x230/0x230 [ 429.688859][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 429.693974][ T7633] ? _raw_spin_unlock+0x2d/0x50 [ 429.698929][ T7633] try_charge+0xa87/0x15c0 [ 429.703351][ T7633] ? find_held_lock+0x35/0x130 [ 429.708137][ T7633] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 429.713684][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 429.719235][ T7633] ? find_held_lock+0x35/0x130 [ 429.724035][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 429.729591][ T7633] __memcg_kmem_charge_memcg+0x7c/0x130 [ 429.735138][ T7633] ? memcg_kmem_put_cache+0xb0/0xb0 [ 429.740343][ T7633] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 429.745890][ T7633] __memcg_kmem_charge+0x136/0x300 [ 429.751007][ T7633] __alloc_pages_nodemask+0x4bf/0x8d0 [ 429.756474][ T7633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.762718][ T7633] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 429.768447][ T7633] ? copy_process.part.0+0x1d08/0x7980 [ 429.773927][ T7633] ? lockdep_hardirqs_on+0x418/0x5d0 [ 429.779221][ T7633] ? trace_hardirqs_on+0x67/0x230 [ 429.784249][ T7633] ? kasan_check_read+0x11/0x20 [ 429.789105][ T7633] copy_process.part.0+0x3e0/0x7980 [ 429.794394][ T7633] ? __lock_acquire+0x548/0x3fb0 [ 429.799337][ T7633] ? wp_page_reuse+0x159/0x1d0 [ 429.804117][ T7633] ? __might_fault+0x12b/0x1e0 [ 429.808899][ T7633] ? __cleanup_sighand+0x60/0x60 [ 429.814201][ T7633] ? lock_downgrade+0x880/0x880 [ 429.819157][ T7633] _do_fork+0x257/0xfd0 [ 429.823504][ T7633] ? fork_idle+0x1d0/0x1d0 [ 429.827927][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.833388][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.838863][ T7633] ? do_syscall_64+0x26/0x610 [ 429.843540][ T7633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.849604][ T7633] ? do_syscall_64+0x26/0x610 [ 429.854289][ T7633] __x64_sys_clone+0xbf/0x150 [ 429.858988][ T7633] do_syscall_64+0x103/0x610 [ 429.863589][ T7633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.869495][ T7633] RIP: 0033:0x45737a [ 429.873396][ T7633] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 429.893089][ T7633] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 429.901512][ T7633] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 429.909607][ T7633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 429.917577][ T7633] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000027f3940 [ 429.925638][ T7633] R10: 00000000027f3c10 R11: 0000000000000246 R12: 0000000000000001 [ 429.933784][ T7633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 429.952974][ T7633] memory: usage 304772kB, limit 307200kB, failcnt 266 [ 429.959866][ T7633] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.973122][ T7633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.980375][ T7633] Memory cgroup stats for /syz5: cache:148KB rss:268516KB rss_huge:253952KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:268556KB inactive_file:0KB active_file:0KB unevictable:0KB [ 430.007826][ T7633] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20291,uid=0 [ 430.031360][ T7633] Memory cgroup out of memory: Killed process 20291 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 430.072533][T22091] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 430.088408][T22091] CPU: 0 PID: 22091 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 430.096438][T22091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.106590][T22091] Call Trace: [ 430.109893][T22091] dump_stack+0x172/0x1f0 [ 430.114488][T22091] dump_header+0x10f/0xb6c [ 430.118910][T22091] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 430.124713][T22091] ? ___ratelimit+0x60/0x595 [ 430.129303][T22091] ? do_raw_spin_unlock+0x57/0x270 [ 430.134412][T22091] oom_kill_process.cold+0x10/0x15 [ 430.139669][T22091] out_of_memory+0x79a/0x1280 [ 430.144468][T22091] ? oom_killer_disable+0x280/0x280 [ 430.149680][T22091] mem_cgroup_out_of_memory+0x1ca/0x230 [ 430.155314][T22091] ? memcg_event_wake+0x230/0x230 [ 430.160359][T22091] ? _raw_spin_unlock+0x41/0x50 [ 430.165206][T22091] try_charge+0x102c/0x15c0 [ 430.170484][T22091] ? find_held_lock+0x35/0x130 [ 430.175254][T22091] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 430.180890][T22091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.187244][T22091] ? kasan_check_read+0x11/0x20 [ 430.192117][T22091] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 430.197756][T22091] mem_cgroup_try_charge+0x24d/0x5e0 [ 430.203075][T22091] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 430.208795][T22091] wp_page_copy+0x408/0x1740 [ 430.213388][T22091] ? find_held_lock+0x35/0x130 [ 430.218166][T22091] ? pmd_pfn+0x1d0/0x1d0 [ 430.222408][T22091] ? lock_downgrade+0x880/0x880 [ 430.227446][T22091] ? swp_swapcount+0x540/0x540 [ 430.232238][T22091] ? kasan_check_read+0x11/0x20 [ 430.237203][T22091] ? do_raw_spin_unlock+0x57/0x270 [ 430.242491][T22091] do_wp_page+0x48e/0x1500 [ 430.247188][T22091] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 430.252569][T22091] __handle_mm_fault+0x22e8/0x3ec0 [ 430.257684][T22091] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 430.263319][T22091] ? find_held_lock+0x35/0x130 [ 430.268093][T22091] ? handle_mm_fault+0x322/0xb30 [ 430.273036][T22091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.279276][T22091] ? kasan_check_read+0x11/0x20 [ 430.284225][T22091] handle_mm_fault+0x43f/0xb30 [ 430.288992][T22091] __do_page_fault+0x5ef/0xda0 [ 430.293846][T22091] do_page_fault+0x71/0x581 [ 430.298348][T22091] ? page_fault+0x8/0x30 [ 430.302596][T22091] page_fault+0x1e/0x30 [ 430.306752][T22091] RIP: 0033:0x404c4e [ 430.310690][T22091] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00 [ 430.334777][T22091] RSP: 002b:00007fbf2a074c90 EFLAGS: 00010213 [ 430.340851][T22091] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000458da9 [ 430.348829][T22091] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fbf2a075608 [ 430.356913][T22091] RBP: 000000000073bf00 R08: 00007fbf2a074be0 R09: 000000000000000a [ 430.364879][T22091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 430.373034][T22091] R13: 00000000004c76c8 R14: 00000000004dd628 R15: 00000000ffffffff [ 430.390594][T22091] memory: usage 307160kB, limit 307200kB, failcnt 284 [ 430.401361][T22091] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 430.411234][T22091] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 430.422943][T22091] Memory cgroup stats for /syz5: cache:148KB rss:270624KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270656KB inactive_file:0KB active_file:0KB unevictable:0KB [ 430.452776][T22091] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20613,uid=0 12:32:00 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:00 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16a) 12:32:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000380)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000400)={@remote, r4}, 0x14) 12:32:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd7, &(0x7f0000000040)=0xcd, 0x4) lseek(r0, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000400)={@initdev, 0x0}, &(0x7f0000000440)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@ipv4={[], [], @empty}, @in=@empty, 0x4e24, 0x5, 0x4e23, 0x1, 0x2, 0x20, 0x0, 0xe7, r1, r2}, {0xf88a, 0xfffffffffffffffb, 0x5, 0x6108000000, 0x7, 0x80000000, 0x6, 0x1}, {0x60f, 0x7, 0x5, 0x8001}, 0xffff, 0x6e6bba, 0x1, 0x1, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x0, 0x3, 0x2, 0x7, 0x0, 0x7eb5, 0x5}}, 0xe8) prctl$PR_GET_TIMERSLACK(0x1e) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000600)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r1}, 0x14) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000640)={0x0, 0x1}) ioctl$RTC_UIE_OFF(r0, 0x7004) pwrite64(r0, &(0x7f0000000680)="06d4c24727b9888d47c7ace1a95caf519897112fd2e503ec2dbc120b680d89d25a001dcc656d9be0eeb258c3daa1321266d15fd12af6918ee8078cdfbc80a9a11d2d2e301fa38d6c405d822f20024a78b537e0456adf1fc41c1cb3675f648d498377370a992ae5b03b5e6feca6279b83eac0f5aaa7bec4fdae514ff06e8c48f04b73fbfc6fd1b111af52f23190f1d7349e4c4a14ea65b6bc5a84fc01863375e896c5748395060f4ea46384a39b159c30a2151e53e7a16e379dfb1a7125133ae68ae2f8012e3799b4b5f69d870bf4f98b3052295bc565d1c70b755f48c4d42da6fbc962e04d9f106e", 0xe8, 0x0) exit_group(0x8) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000780)=0xd764) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x22) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000880)=""/127, &(0x7f0000000900)=0x7f) r3 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000980)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000009c0)=0xb13, 0x4) r4 = socket$rds(0x15, 0x5, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000a00)='security.capability\x00', &(0x7f0000000a40)=@v1={0x1000000, [{0x1, 0x4}]}, 0xc, 0x3) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) r5 = socket$netlink(0x10, 0x3, 0x6) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000a80)={0x3, {{0x2, 0x4e22, @multicast2}}}, 0x88) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000b40)) fsetxattr$security_evm(r0, &(0x7f0000000b80)='security.evm\x00', &(0x7f0000000bc0)=@md5={0x1, "defe89a94345e0722e0f42c109ee96fa"}, 0x11, 0x1) fsetxattr(r3, &(0x7f0000000c00)=@known='trusted.overlay.redirect\x00', &(0x7f0000000c40)='/dev/input/mice\x00', 0x10, 0x3) fsetxattr$security_capability(r4, &(0x7f0000000c80)='security.capability\x00', &(0x7f0000000cc0)=@v3={0x3000000, [{0x40, 0x7}, {0x4, 0xff}], r2}, 0x18, 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 430.474549][T22091] Memory cgroup out of memory: Killed process 20613 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 430.495216][ T1044] oom_reaper: reaped process 20613 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:00 executing program 2: syz_open_dev$video(0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1b1dcc9d32d818908ad10a800f456183f635d9d63e88e2214aca2b250d2c", 0x1e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) r2 = dup2(r0, r1) read(r2, &(0x7f00000000c0)=""/85, 0x321) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x4, 0x0, 0x81}) close(0xffffffffffffffff) read(0xffffffffffffffff, &(0x7f00000000c0)=""/240, 0xf0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) 12:32:00 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16b) 12:32:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 430.802556][T22120] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 430.828924][T22120] CPU: 0 PID: 22120 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 430.836949][T22120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.847108][T22120] Call Trace: [ 430.850426][T22120] dump_stack+0x172/0x1f0 [ 430.854863][T22120] dump_header+0x10f/0xb6c [ 430.859300][T22120] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 430.865297][T22120] ? ___ratelimit+0x60/0x595 [ 430.869901][T22120] ? do_raw_spin_unlock+0x57/0x270 [ 430.875042][T22120] oom_kill_process.cold+0x10/0x15 [ 430.880185][T22120] out_of_memory+0x79a/0x1280 [ 430.884875][T22120] ? lock_downgrade+0x880/0x880 [ 430.884893][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.884910][T22120] ? oom_killer_disable+0x280/0x280 [ 430.884927][T22120] ? find_held_lock+0x35/0x130 [ 430.896281][T22120] mem_cgroup_out_of_memory+0x1ca/0x230 [ 430.896297][T22120] ? memcg_event_wake+0x230/0x230 [ 430.896320][T22120] ? do_raw_spin_unlock+0x57/0x270 [ 430.922122][T22120] ? _raw_spin_unlock+0x2d/0x50 [ 430.927084][T22120] try_charge+0x102c/0x15c0 [ 430.931702][T22120] ? find_held_lock+0x35/0x130 [ 430.936690][T22120] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 430.942255][T22120] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 430.947901][T22120] ? find_held_lock+0x35/0x130 [ 430.952887][T22120] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 430.958454][T22120] __memcg_kmem_charge_memcg+0x7c/0x130 [ 430.964007][T22120] ? memcg_kmem_put_cache+0xb0/0xb0 [ 430.969221][T22120] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 430.974780][T22120] __memcg_kmem_charge+0x136/0x300 [ 430.980078][T22120] __alloc_pages_nodemask+0x4bf/0x8d0 [ 430.985462][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.991745][T22120] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 430.997488][T22120] ? copy_process.part.0+0x1d08/0x7980 [ 431.003067][T22120] ? lockdep_hardirqs_on+0x418/0x5d0 [ 431.008386][T22120] ? trace_hardirqs_on+0x67/0x230 [ 431.013419][T22120] ? kasan_check_read+0x11/0x20 [ 431.018456][T22120] copy_process.part.0+0x3e0/0x7980 [ 431.023670][T22120] ? semctl_down+0x5e0/0x9f0 [ 431.028275][T22120] ? find_held_lock+0x35/0x130 [ 431.033129][T22120] ? semctl_down+0x5e0/0x9f0 [ 431.037825][T22120] ? __cleanup_sighand+0x60/0x60 [ 431.037839][T22120] ? up_write+0x1c/0x150 [ 431.037853][T22120] ? semctl_down+0x5e0/0x9f0 12:32:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 431.037867][T22120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.037891][T22120] _do_fork+0x257/0xfd0 [ 431.037911][T22120] ? fork_idle+0x1d0/0x1d0 [ 431.037927][T22120] ? __ia32_sys_mkdir+0x80/0x80 [ 431.037944][T22120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.037961][T22120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.082300][T22120] ? do_syscall_64+0x26/0x610 [ 431.086999][T22120] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.093159][T22120] ? do_syscall_64+0x26/0x610 [ 431.097858][T22120] ? lockdep_hardirqs_on+0x418/0x5d0 [ 431.103272][T22120] __ia32_sys_fork+0x1f/0x30 [ 431.107874][T22120] do_syscall_64+0x103/0x610 [ 431.112575][T22120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.118486][T22120] RIP: 0033:0x2000000a [ 431.122561][T22120] Code: Bad RIP value. [ 431.126718][T22120] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 431.135154][T22120] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 431.143316][T22120] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 000000003f000003 [ 431.151403][T22120] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 431.159393][T22120] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 431.167379][T22120] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 431.213492][T22120] memory: usage 307200kB, limit 307200kB, failcnt 326 [ 431.242385][T22120] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 431.253290][T22120] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 431.264591][T22120] Memory cgroup stats for /syz5: cache:148KB rss:270756KB rss_huge:256000KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270840KB inactive_file:0KB active_file:0KB unevictable:0KB [ 431.293468][T22120] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20660,uid=0 12:32:00 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:00 executing program 3: prctl$PR_GET_KEEPCAPS(0x7) r0 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40000) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffffffffffc, @local, 0x2}, 0x1c) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84002) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002c00)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000002c40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x7, r2}, 0xc) r3 = eventfd2(0x0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x2f, @remote, 0x4e24, 0x2, 'nq\x00', 0x1, 0x1f, 0xe}, {@loopback, 0x4e23, 0x4, 0x66, 0x401, 0x80000001}}, 0x44) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x1004e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) r4 = open(&(0x7f0000000040)='./file0\x00', 0x80100, 0x2) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000080)) 12:32:00 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:00 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16c) [ 431.316075][T22120] Memory cgroup out of memory: Killed process 20660 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB [ 431.336989][ T1044] oom_reaper: reaped process 20660 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:01 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:01 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x101, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x4, 0x7, 0x4, 0x800, {}, {0x3, 0x9, 0x9, 0x101, 0xfffffffffffffff7, 0xfffffffffffffffd, "c2a78972"}, 0x5, 0x3, @fd=0xffffffffffffff9c, 0x4}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)={0x2, 0x0, @pic={0x3ff, 0x4, 0x6, 0x8, 0x20, 0x0, 0x0, 0x6d058f1c, 0x9, 0xeed, 0x4c39, 0x3000000, 0x0, 0x800, 0x4, 0x3}}) 12:32:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16d) 12:32:01 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x40c002, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000594c000006000000000000000108000002000000"]) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000740)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000200)) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f0000000540)=""/234, &(0x7f0000000180)=0xea) getresgid(0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000008e9402010000000000008bff2e1c2222551fbc604e40fb6a99743e3b37d33db65ff8d115168aa8cef4ee241da3c9c5700ebdff10ece5ca1f61e061"], 0x3f) io_submit(0x0, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r5, &(0x7f0000000000), 0xfffffce4}]) pipe2(&(0x7f0000000000), 0x0) getsockname$unix(r2, &(0x7f0000000300), &(0x7f00000001c0)=0x6e) 12:32:01 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x4000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0xfffffffffffffffc, @mcast1, 0x5}}, 0x0, 0x1, 0x0, "39ffc5607dc682be309b2d240b4f806b849a20bea969b8ea31edd7479bde48f078ab49d3bf590d38d2b1fe5ec786e6c6cc231607f9ca7883607be9323b0ed6ff567328ee0c6173576895cf8e32db922c"}, 0xd8) r2 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(r2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCCBRK(r1, 0x5428) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0xfffffffffffffc95, &(0x7f0000000280)=[{0x0}], 0x2e}}], 0x400000000000087, 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x18f) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000100)) 12:32:01 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16e) 12:32:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) prctl$PR_GET_SECCOMP(0x15) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x2201) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x6, 0x0, 0x20, 'queue1\x00', 0x1e33}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) 12:32:01 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x16f) 12:32:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:01 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 432.361687][T22226] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 432.388622][T22226] CPU: 1 PID: 22226 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 432.396944][T22226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.406995][T22226] Call Trace: [ 432.410310][T22226] dump_stack+0x172/0x1f0 [ 432.414731][T22226] dump_header+0x10f/0xb6c [ 432.419262][T22226] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 432.425145][T22226] ? ___ratelimit+0x60/0x595 [ 432.429743][T22226] ? do_raw_spin_unlock+0x57/0x270 [ 432.434848][T22226] oom_kill_process.cold+0x10/0x15 [ 432.440389][T22226] out_of_memory+0x79a/0x1280 [ 432.445564][T22226] ? lock_downgrade+0x880/0x880 [ 432.450415][T22226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.456648][T22226] ? oom_killer_disable+0x280/0x280 [ 432.462003][T22226] ? find_held_lock+0x35/0x130 [ 432.466764][T22226] mem_cgroup_out_of_memory+0x1ca/0x230 [ 432.472362][T22226] ? memcg_event_wake+0x230/0x230 [ 432.477375][T22226] ? do_raw_spin_unlock+0x57/0x270 [ 432.482558][T22226] ? _raw_spin_unlock+0x2d/0x50 [ 432.487394][T22226] try_charge+0x102c/0x15c0 [ 432.492153][T22226] ? find_held_lock+0x35/0x130 [ 432.500991][T22226] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 432.506524][T22226] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 432.512138][T22226] ? find_held_lock+0x35/0x130 [ 432.516886][T22226] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 432.522512][T22226] __memcg_kmem_charge_memcg+0x7c/0x130 [ 432.528130][T22226] ? memcg_kmem_put_cache+0xb0/0xb0 [ 432.533578][T22226] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 432.539288][T22226] __memcg_kmem_charge+0x136/0x300 [ 432.544493][T22226] __alloc_pages_nodemask+0x4bf/0x8d0 [ 432.549860][T22226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.556091][T22226] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 432.561884][T22226] ? copy_process.part.0+0x1d08/0x7980 [ 432.567465][T22226] ? lockdep_hardirqs_on+0x418/0x5d0 [ 432.583694][T22226] ? trace_hardirqs_on+0x67/0x230 [ 432.588900][T22226] copy_process.part.0+0x3e0/0x7980 [ 432.594177][T22226] ? semctl_down+0x5e0/0x9f0 [ 432.598955][T22226] ? find_held_lock+0x35/0x130 [ 432.603875][T22226] ? semctl_down+0x5e0/0x9f0 [ 432.608576][T22226] ? __cleanup_sighand+0x60/0x60 [ 432.613502][T22226] ? up_write+0x1c/0x150 [ 432.617818][T22226] ? semctl_down+0x5e0/0x9f0 [ 432.622483][T22226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.628716][T22226] _do_fork+0x257/0xfd0 [ 432.632865][T22226] ? fork_idle+0x1d0/0x1d0 [ 432.637272][T22226] ? __ia32_sys_mkdir+0x80/0x80 [ 432.642111][T22226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.647651][T22226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.653200][T22226] ? do_syscall_64+0x26/0x610 [ 432.657872][T22226] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.663929][T22226] ? do_syscall_64+0x26/0x610 [ 432.668608][T22226] ? lockdep_hardirqs_on+0x418/0x5d0 [ 432.673897][T22226] __ia32_sys_fork+0x1f/0x30 [ 432.678670][T22226] do_syscall_64+0x103/0x610 [ 432.683264][T22226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.689139][T22226] RIP: 0033:0x2000000a [ 432.693313][T22226] Code: Bad RIP value. [ 432.697361][T22226] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 432.705949][T22226] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 432.713901][T22226] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000007000003 [ 432.721869][T22226] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 432.730112][T22226] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 432.738076][T22226] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 432.753711][T22226] memory: usage 307200kB, limit 307200kB, failcnt 370 12:32:02 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) timerfd_create(0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 12:32:02 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='^\x00', 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x8, 0x4) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, &(0x7f00000004c0)="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", 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, {0x2, 0x0, @local}}) r2 = syz_open_dev$dmmidi(0x0, 0x3, 0x6002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) write(r1, &(0x7f0000000140)="150000000800080000000000c86b6525000010", 0x13) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x3d, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000077a9d0e13adc519706a3"], 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) gettid() 12:32:02 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x170) [ 432.767957][T22226] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 12:32:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") tee(r0, r0, 0x7f, 0xc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001400191009004beafd0d8c560a84ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000080)={0x9725, 0x1, 0x5, 0x9, 0x5, 0x7}) 12:32:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:02 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x171) [ 432.947027][T22226] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 432.957004][T22226] Memory cgroup stats for /syz5: cache:148KB rss:269424KB rss_huge:253952KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:269504KB inactive_file:0KB active_file:0KB unevictable:0KB [ 433.122869][T22226] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21673,uid=0 [ 433.174015][T22226] Memory cgroup out of memory: Killed process 21673 (syz-executor.5) total-vm:146228kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB [ 433.213340][T22224] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 433.240609][T22224] CPU: 1 PID: 22224 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 433.248650][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.258723][T22224] Call Trace: [ 433.262119][T22224] dump_stack+0x172/0x1f0 [ 433.266562][T22224] dump_header+0x10f/0xb6c [ 433.271066][T22224] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 433.276869][T22224] ? ___ratelimit+0x60/0x595 [ 433.281577][T22224] ? do_raw_spin_unlock+0x57/0x270 [ 433.286705][T22224] oom_kill_process.cold+0x10/0x15 [ 433.291910][T22224] out_of_memory+0x79a/0x1280 [ 433.296591][T22224] ? oom_killer_disable+0x280/0x280 [ 433.301893][T22224] ? find_held_lock+0x35/0x130 [ 433.306759][T22224] mem_cgroup_out_of_memory+0x1ca/0x230 [ 433.312398][T22224] ? memcg_event_wake+0x230/0x230 [ 433.317524][T22224] ? do_raw_spin_unlock+0x57/0x270 [ 433.322747][T22224] ? _raw_spin_unlock+0x2d/0x50 [ 433.327611][T22224] try_charge+0xa87/0x15c0 [ 433.332455][T22224] ? find_held_lock+0x35/0x130 [ 433.337409][T22224] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 433.343508][T22224] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 433.349055][T22224] ? find_held_lock+0x35/0x130 [ 433.353840][T22224] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 433.359395][T22224] __memcg_kmem_charge_memcg+0x7c/0x130 [ 433.365112][T22224] ? memcg_kmem_put_cache+0xb0/0xb0 [ 433.370318][T22224] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 433.375876][T22224] __memcg_kmem_charge+0x136/0x300 [ 433.380990][T22224] __alloc_pages_nodemask+0x4bf/0x8d0 [ 433.386365][T22224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.392633][T22224] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 433.398457][T22224] ? copy_process.part.0+0x1d08/0x7980 [ 433.404007][T22224] ? lockdep_hardirqs_on+0x418/0x5d0 [ 433.409560][T22224] ? trace_hardirqs_on+0x67/0x230 [ 433.414620][T22224] copy_process.part.0+0x3e0/0x7980 [ 433.419821][T22224] ? psi_memstall_leave+0x11c/0x180 [ 433.425105][T22224] ? sched_clock+0x2e/0x50 [ 433.429527][T22224] ? psi_memstall_leave+0x12e/0x180 [ 433.434724][T22224] ? find_held_lock+0x35/0x130 [ 433.439507][T22224] ? psi_memstall_leave+0x12e/0x180 [ 433.444922][T22224] ? __cleanup_sighand+0x60/0x60 [ 433.449963][T22224] ? __lock_acquire+0x548/0x3fb0 [ 433.454996][T22224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.461277][T22224] _do_fork+0x257/0xfd0 [ 433.465553][T22224] ? fork_idle+0x1d0/0x1d0 [ 433.470080][T22224] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 433.476403][T22224] ? lock_downgrade+0x880/0x880 [ 433.481248][T22224] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.487506][T22224] ? blkcg_exit_queue+0x30/0x30 [ 433.492467][T22224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.498311][T22224] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.503767][T22224] ? do_syscall_64+0x26/0x610 [ 433.508618][T22224] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.514774][T22224] ? do_syscall_64+0x26/0x610 [ 433.519481][T22224] __x64_sys_clone+0xbf/0x150 [ 433.524172][T22224] do_syscall_64+0x103/0x610 [ 433.528951][T22224] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.534940][T22224] RIP: 0033:0x45b779 [ 433.541092][T22224] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 433.567841][T22224] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 433.576359][T22224] RAX: ffffffffffffffda RBX: 00007fbf2a054700 RCX: 000000000045b779 [ 433.584328][T22224] RDX: 00007fbf2a0549d0 RSI: 00007fbf2a053db0 RDI: 00000000003d0f00 [ 433.592484][T22224] RBP: 0000000000a4fcb0 R08: 00007fbf2a054700 R09: 00007fbf2a054700 [ 433.600723][T22224] R10: 00007fbf2a0549d0 R11: 0000000000000202 R12: 0000000000000000 [ 433.608780][T22224] R13: 0000000000a4fb4f R14: 00007fbf2a0549c0 R15: 000000000073bfac [ 433.625455][T22224] memory: usage 305172kB, limit 307200kB, failcnt 370 [ 433.632856][T22224] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 433.646089][T22224] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 433.653516][T22224] Memory cgroup stats for /syz5: cache:148KB rss:267364KB rss_huge:251904KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:267368KB inactive_file:0KB active_file:0KB unevictable:0KB [ 433.680860][T22224] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=10782,uid=0 [ 433.704304][T22224] Memory cgroup out of memory: Killed process 10782 (syz-executor.5) total-vm:72580kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB 12:32:03 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:03 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@local, @initdev}, &(0x7f0000000100)=0x8) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)=r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) acct(&(0x7f0000000040)='./file0\x00') 12:32:03 executing program 3: syz_execute_func(&(0x7f0000000000)="0c1ab5b598cd801b69e4f56962f5696200d9d9d0c441395bf9f2680c000000f1e9ec9b26c7e4c753fbc4e101edfec4427d822a2a00c4da7676f2168f4808eebcee7800358020afafc3dd6d68074851518fe9509b9b9bfc0000c1ea01efc4c3d57d89a70000004ec35b5b45363ef80f9966030faee42c240f5e5bf447000026400f0d18c401fe5ff6e3df646736676670664336660fd2938c0000000f01c36666450f17720d1d54111d00") mq_open(&(0x7f00000000c0)='eth1#$ppp0\x00', 0x880, 0x83, &(0x7f0000000100)={0xf5, 0x7, 0x1000, 0x8001, 0x0, 0x91d, 0x8, 0x1}) 12:32:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x172) [ 433.725415][ T1044] oom_reaper: reaped process 10782 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x2000000000a35) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3f, 0x200040) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000300)={&(0x7f0000000500)=""/215, 0xd7}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x6, 0x7, 0x2, 0x0, 0x6, 0x0, 0xa, 0x6}}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000001c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000340)) 12:32:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x173) 12:32:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x400000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000140)={0x3ff, 0x6, 0x4, 0x9, 0x100, 0x5}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f0000000340), 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) close(r1) write$nbd(r0, &(0x7f0000001380)={0x67446698, 0x0, 0x2, 0x3, 0x2, "79cbe1e391c7f2bef34c652a534491ee52c827dd1740a62ae484824f5176154509d3961e676c371d4f0c43080836945fb25f3b3bdba790a02095f5a286ec560f23b8f16ff5d9e95418be40d6ef08595cba07446c364d6ecf0254cda30e0b8b5ba86ba2de70dfdb"}, 0x77) readlinkat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)=""/54, 0x36) epoll_create(0xffffffffffff5bf7) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x100, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00', 0x0, 0x0) 12:32:03 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x480) recvfrom$unix(r1, &(0x7f0000000040)=""/144, 0x90, 0x20, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x129, 0x800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) 12:32:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_DUMPABLE(0x35) timer_create(0x2, &(0x7f0000000040)={0x0, 0x35, 0x6}, &(0x7f0000000080)=0x0) timer_delete(r1) 12:32:03 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x174) 12:32:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf0300000fc4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:03 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x8, 0x200800) write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0xde, 0x8, 0xffffffffffff6d27, 0x401, 0x7fffffff, 0x80000000, "c7d27009c9d5a783d1bbb7769c7492798286a25d519974b48ba93d27fb0dd0f21ceff45c7e8cb8d7e28a31148da2042709836d93ffa387cd4866bafb8792e1ad56607b07310614ee46ccd94b25b7e5746fc138f0c52ff6633c02e28253c7c2b12d38b8abe7a7ed5fd866af97d4edae5909137c6396055594e07b022e97a75331b7df5646dfe82cf7e7fd06cae7fcfd8ce00b3939bc5bd1aa7179209951b2322db6a53d32752f75d587a4047cf74a856c2bbd17287ddd9063712cb64bb498cfc633cab6d51e50904e1b0763142cd0db6bd794ba666d3ea5d8b244dbcc4533"}, 0x1f6) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2400, 0x0) memfd_create(0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000000)={0x0, 0xffffffffffffca52, 0xe3, &(0x7f0000000180)="e10712e266bd3ed8f40728e300db1dca0e55787e1895c2397cd470eb40ac94255b3c68dae20e28bfd1831d89bafd4b408ba51e1561f8ed32a13f7acbf4c5110dd74a92e3088c1ef2a86281da93a86117b61d2a6a82e2fb6f28003a2ec3848eef474108d4901abc697f6006ada02a2aa7df28615acbd00056c2627258f596c93a652909cecf2d5ca062b85b94175d38060f3937af8836f1e1cc7816d09fa1f4eb6732f940d405f8491b4c6e4dd0db2e266b5a016659bd107802d675e3b7df0a4700ce572ceb37882d16414514ae859154f8d7064a3f095a2554fe10aa025f4676a48297"}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x80000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) fchdir(r2) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)=0x9) syz_execute_func(&(0x7f0000000100)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c966440f38082173294ad0d26c4507c422f18cf0bf420fae9972b571b99f01467785fb") setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000080)={0xff, 0x5e41, 0xfff}, 0xc) 12:32:03 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x175) 12:32:04 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:04 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000440)=""/91) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x14, 0x3, 0x20}, 0xcc, 0x0, 0x3}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @initdev}, &(0x7f0000000040)=0xc) 12:32:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:04 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000010c4a37bf0c50141e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700), 0x100000000000010b) fcntl$notify(r2, 0x402, 0x10) 12:32:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:04 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x176) 12:32:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffe, &(0x7f0000000040)="0ad41f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:32:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 434.734893][T22381] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 12:32:04 executing program 3: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccb", 0x3, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c21782d4501b9dfbf48a9f3ea14cb792", 0xce) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000340)) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\\', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r0, r0}, &(0x7f0000000800)=""/240, 0x3d2, 0x0) [ 434.847710][T22381] CPU: 1 PID: 22381 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 434.855998][T22381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.866160][T22381] Call Trace: [ 434.869470][T22381] dump_stack+0x172/0x1f0 [ 434.873940][T22381] dump_header+0x10f/0xb6c [ 434.878382][T22381] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 434.884390][T22381] ? ___ratelimit+0x60/0x595 [ 434.888998][T22381] ? do_raw_spin_unlock+0x57/0x270 12:32:04 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x177) 12:32:04 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 434.894264][T22381] oom_kill_process.cold+0x10/0x15 [ 434.899388][T22381] out_of_memory+0x79a/0x1280 [ 434.904177][T22381] ? lock_downgrade+0x880/0x880 [ 434.909157][T22381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.915408][T22381] ? oom_killer_disable+0x280/0x280 [ 434.920625][T22381] ? find_held_lock+0x35/0x130 [ 434.925412][T22381] mem_cgroup_out_of_memory+0x1ca/0x230 [ 434.930983][T22381] ? memcg_event_wake+0x230/0x230 [ 434.936050][T22381] ? do_raw_spin_unlock+0x57/0x270 [ 434.941177][T22381] ? _raw_spin_unlock+0x2d/0x50 12:32:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000000202100, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="290000000000000000000000000000000000000000000000000800000000000000000000000000000000615c9374355dd4471b3e7c02d14fe76fcdccc1f8bc208d16db"]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0xffffffffffff0001}, &(0x7f0000000400)=0xffffffffffffffc8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x1fc) mkdir(&(0x7f0000000240)='./file0\x00', 0xb8) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r4, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000ac0)={r0, r1, 0x3, 0x97, &(0x7f0000000a00)="479aa50a95ce69e52638a668141f54dc22ad6a17b8c1adf4fbae0bc459e5bb68c67b623426f7e241f97e800b6eab5f7b210d7e4fafd334fa8f306fb616745d1d13477d1102b05d95e70cea7dea1f91043d9f8ec737a60caa04f43a6afa6676af616847abac2a200a462f04d43cd780c257f1d531e58d37c03a13a562c0a69cd0b7e8a09030400e8cf6966aa01e5626420adf59f09d5869", 0x4, 0x2, 0x725c, 0x7, 0x5, 0x759ca74c1459d7a2, 0x6, 'syz0\x00'}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(0xffffffffffffffff) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x6, 0x0, 0x7}, 0xa) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000440)=""/40) listen(0xffffffffffffffff, 0x80) close(0xffffffffffffffff) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000900)={'filter\x00', 0x0, 0x3, 0x50, [], 0x1, &(0x7f0000000400)=[{}], &(0x7f0000000880)=""/80}, &(0x7f0000000480)=0x78) ioctl$int_in(r2, 0x80000040045010, &(0x7f0000000040)=0xfeffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000004c0)) socket$inet_udplite(0x2, 0x2, 0x88) [ 434.946068][T22381] try_charge+0x102c/0x15c0 [ 434.950610][T22381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.956854][T22381] ? should_fail+0x1de/0x852 [ 434.961464][T22381] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 434.967042][T22381] ? rcu_read_lock_sched_held+0x110/0x130 [ 434.972871][T22381] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 434.978441][T22381] __memcg_kmem_charge_memcg+0x7c/0x130 [ 434.984031][T22381] ? memcg_kmem_put_cache+0xb0/0xb0 [ 434.989256][T22381] ? cache_grow_begin+0x594/0x860 12:32:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/psched\x00') ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000180)={0x81, 0x5, 0x1f, 0x8000, 0x10, 0x9}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000002c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000200)={0x80000001, 0x4, 0x80f, 0x1, 0x0, 0x20, 0x40, 0xfffffffffffffc01, 0x81}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0) fchdir(r0) [ 434.994299][T22381] ? lockdep_hardirqs_on+0x418/0x5d0 [ 434.994460][T22412] e proc: Unknown parameter 'x' [ 434.999687][T22381] ? trace_hardirqs_on+0x67/0x230 [ 434.999710][T22381] cache_grow_begin+0x5c0/0x860 [ 434.999729][T22381] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.999743][T22381] ? __cpuset_node_allowed+0x136/0x540 [ 434.999759][T22381] fallback_alloc+0x1fd/0x2d0 [ 434.999779][T22381] ____cache_alloc_node+0x1be/0x1e0 [ 435.036209][T22381] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.042479][T22381] kmem_cache_alloc+0x1e8/0x6f0 [ 435.047340][T22381] ? validate_mm_rb+0xa3/0xc0 [ 435.052048][T22381] vm_area_dup+0x21/0x170 [ 435.056384][T22381] copy_process.part.0+0x3431/0x7980 [ 435.061777][T22381] ? __cleanup_sighand+0x60/0x60 [ 435.066725][T22381] ? semctl_down+0x5e0/0x9f0 [ 435.071671][T22381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.078105][T22381] _do_fork+0x257/0xfd0 [ 435.082275][T22381] ? fork_idle+0x1d0/0x1d0 [ 435.086793][T22381] ? __ia32_sys_mkdir+0x80/0x80 [ 435.091652][T22381] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.097115][T22381] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 435.102588][T22381] ? do_syscall_64+0x26/0x610 [ 435.107284][T22381] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.113369][T22381] ? do_syscall_64+0x26/0x610 [ 435.118052][T22381] ? lockdep_hardirqs_on+0x418/0x5d0 [ 435.123346][T22381] __ia32_sys_fork+0x1f/0x30 [ 435.128038][T22381] do_syscall_64+0x103/0x610 [ 435.132722][T22381] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.138616][T22381] RIP: 0033:0x2000000a [ 435.142694][T22381] Code: Bad RIP value. [ 435.146789][T22381] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 435.155209][T22381] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 435.163702][T22381] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000010000003 [ 435.171679][T22381] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 435.179676][T22381] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 435.187852][T22381] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 435.311975][T22381] memory: usage 307200kB, limit 307200kB, failcnt 409 [ 435.320675][T22381] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.340778][T22381] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.348423][T22381] Memory cgroup stats for /syz5: cache:148KB rss:267928KB rss_huge:251904KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:267968KB inactive_file:0KB active_file:0KB unevictable:0KB [ 435.370714][T22381] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22297,uid=0 [ 435.388655][T22381] Memory cgroup out of memory: Killed process 22297 (syz-executor.5) total-vm:162612kB, anon-rss:2212kB, file-rss:35796kB, shmem-rss:0kB [ 435.404305][ T1044] oom_reaper: reaped process 22297 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 435.445250][T22375] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 435.455852][T22375] CPU: 0 PID: 22375 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 435.464405][T22375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.474868][T22375] Call Trace: [ 435.478175][T22375] dump_stack+0x172/0x1f0 [ 435.482595][T22375] dump_header+0x10f/0xb6c [ 435.487013][T22375] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 435.492811][T22375] ? ___ratelimit+0x60/0x595 [ 435.497568][T22375] ? do_raw_spin_unlock+0x57/0x270 [ 435.502760][T22375] oom_kill_process.cold+0x10/0x15 [ 435.507951][T22375] out_of_memory+0x79a/0x1280 [ 435.512714][T22375] ? lock_downgrade+0x880/0x880 [ 435.517568][T22375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.523887][T22375] ? oom_killer_disable+0x280/0x280 [ 435.529073][T22375] ? find_held_lock+0x35/0x130 [ 435.533992][T22375] mem_cgroup_out_of_memory+0x1ca/0x230 [ 435.539546][T22375] ? memcg_event_wake+0x230/0x230 [ 435.544647][T22375] ? do_raw_spin_unlock+0x57/0x270 [ 435.549765][T22375] ? _raw_spin_unlock+0x2d/0x50 [ 435.554795][T22375] try_charge+0x102c/0x15c0 [ 435.559309][T22375] ? find_held_lock+0x35/0x130 [ 435.564089][T22375] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 435.569645][T22375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.575899][T22375] ? kasan_check_read+0x11/0x20 [ 435.580740][T22375] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 435.586279][T22375] mem_cgroup_try_charge+0x24d/0x5e0 [ 435.591570][T22375] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 435.597197][T22375] wp_page_copy+0x408/0x1740 [ 435.601774][T22375] ? find_held_lock+0x35/0x130 [ 435.606545][T22375] ? pmd_pfn+0x1d0/0x1d0 [ 435.610873][T22375] ? lock_downgrade+0x880/0x880 [ 435.615988][T22375] ? swp_swapcount+0x540/0x540 [ 435.621787][T22375] ? kasan_check_read+0x11/0x20 [ 435.626624][T22375] ? do_raw_spin_unlock+0x57/0x270 [ 435.631803][T22375] do_wp_page+0x48e/0x1500 [ 435.636228][T22375] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 435.641881][T22375] __handle_mm_fault+0x22e8/0x3ec0 [ 435.647126][T22375] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 435.652659][T22375] ? find_held_lock+0x35/0x130 [ 435.657408][T22375] ? handle_mm_fault+0x322/0xb30 [ 435.662350][T22375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.668586][T22375] ? kasan_check_read+0x11/0x20 [ 435.673426][T22375] handle_mm_fault+0x43f/0xb30 [ 435.678194][T22375] __do_page_fault+0x5ef/0xda0 [ 435.683035][T22375] do_page_fault+0x71/0x581 [ 435.687526][T22375] ? page_fault+0x8/0x30 [ 435.691754][T22375] page_fault+0x1e/0x30 [ 435.695907][T22375] RIP: 0033:0x40e550 [ 435.699805][T22375] Code: 83 c3 01 e8 42 31 ff ff 39 dd 77 ee 48 8b 44 24 08 89 28 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 <89> 3c b5 00 00 73 00 eb 8f 89 eb 48 c1 e3 02 49 8d 6c 1d 00 49 39 [ 435.719493][T22375] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 435.725665][T22375] RAX: 00000000dcd1a75e RBX: 0000000070f499d3 RCX: 0000001b31c20000 [ 435.733801][T22375] RDX: 0000000000000000 RSI: 000000000000075e RDI: 00000000dcd1a75d [ 435.741858][T22375] RBP: 0000000000000003 R08: 00000000dcd1a761 R09: ffffffffffffffff [ 435.750050][T22375] R10: 0000000000a4fca0 R11: 0000000000000000 R12: 000000000073bf88 [ 435.758020][T22375] R13: 00007fbf2c076004 R14: 00007fbf2c076000 R15: 0000000000000022 [ 435.772239][T22375] memory: usage 307032kB, limit 307200kB, failcnt 443 [ 435.779105][T22375] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.791809][T22375] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.799148][T22375] Memory cgroup stats for /syz5: cache:148KB rss:267928KB rss_huge:251904KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:267888KB inactive_file:0KB active_file:0KB unevictable:0KB [ 435.826641][T22375] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13628,uid=0 12:32:05 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x10000000000002, @pix_mp}) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "beef7c3f5fc23385"}, 0x9, 0x3) 12:32:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1ff) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x200000) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x7, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) sendmmsg(r1, &(0x7f0000000140), 0x279ea79abe007bc, 0xc0) 12:32:05 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x178) [ 435.847693][T22375] Memory cgroup out of memory: Killed process 13628 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB [ 435.870364][ T1044] oom_reaper: reaped process 13628 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 12:32:05 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x3, 0xfffffffffffffffd, 0x3, 0x4, 0x6, [{0x0, 0x4, 0x1, 0x0, 0x0, 0x104}, {0x7, 0x6, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x800}, {0x40, 0x8, 0xffffffffffffe627, 0x0, 0x0, 0x80}, {0x10000, 0x7fff, 0x8000, 0x0, 0x0, 0x80}, {0xffffffff, 0x1000, 0x6, 0x0, 0x0, 0x81}]}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x1000000000}, 0x4) 12:32:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x179) 12:32:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000004004002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xb1b, 0x7fffffff, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x4, 0x5, 0x204, 0x10000, 0xffffffffffff0001, 0x7, 0x3, 0x2, r2}, 0x20) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) pipe(0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x9, 'syz1\x00', 0x7}) r3 = inotify_init1(0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000400)=0x7, 0x4) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, 0x0, 0xffffffffffffffb8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x1, 0x2) r5 = socket$inet6(0xa, 0x3, 0x6) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, 0x0) r6 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="7e54bb3198d340cfbda37ca123c85b5e0e1ba7f494770920c4039ef3700f5984b2189f2f8f8acf535066aa9191bf6c2bc71ceeba90a95cb1945e2927a237babcf8480ce30520da9dab398f4ffd60aa2c02caa80425901da9403b352cdf0f9251bd8e4b7992185587f5eed4e1305ee0e95eac49694a45397ce20a724d6be1021551b0e9411f92b2a9e4ff091418f75d4893e85796e49283de9a57426c94c5252fd4065b5c067cce315d61c3dee4a2618f1e9d307922d37290a7c3758994d9773dd1a7aaf494b96848418d1486f5063e0ab21c67bc", 0xd4, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000380)='dns_resolver\x00', &(0x7f00000003c0)='\x00') getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18') sendfile(r5, r7, &(0x7f00000000c0)=0x209, 0x5a) 12:32:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x400000) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000140), 0x4) syz_execute_func(&(0x7f0000000080)="b18691cd808e6b00440f1804e38a20d0d064e60041dea5f909bd1ac7c7e4c653fb0fc4b34cb8d79ab2f4405f3ff9f9863c3bd4e1796d5b5ba161c48192558dc3c366450f186746c421ed65dac4e1d3d0ce730f400f0d18c4ee6d8fa808958e3f00000000520fc226f74646436140090dd86f04f3d00fc7a004f4e1110f000000dcfe30") 12:32:05 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:05 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17a) 12:32:05 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) syz_open_procfs(0x0, &(0x7f0000272000)) 12:32:06 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:06 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17b) 12:32:06 executing program 2: r0 = gettid() mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x101000, 0x0) symlink(&(0x7f0000001000)='./file0\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x108180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r3, 0x310, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0xc, 0xfffffffffffffffc, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) gettid() capget(&(0x7f0000000140)={0x39980732}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000300)="fe46e72ef28f92f391b34d547c975c2a200efd9462ce89389bbbe77e65e6", 0x1e, 0xfffffffffffffff9) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8200030}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x364, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x49}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x576}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x101, @empty, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_LINK={0x170, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbbac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9cec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa176}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf083}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xebfa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x8804}, 0x24000851) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/93, 0x5d) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x3, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0xe3e, 0xff, 0x0, 0x6, 0x17, 0x80, 0x6, 0x200, 0x9, 0x2400000000000000, 0x7, 0x5}) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000040)={0xffffffff, 0x10000, 0xa483, 0x7, 0x2f3}) 12:32:06 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0xffff) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x80000) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x77b7, 0x4, 0x0, 0x3, 0x1}) prctl$PR_SET_FPEMU(0xa, 0x0) 12:32:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17c) 12:32:06 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:07 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x604040, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffff9c}) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x9, 0x501) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={r1, 0x80000, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x101000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000fe, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000080)="0527540f39da8efa1d48e9857c5d8b6df96b3bc59465b0b6f42e50e3e98c987dc66ab6990c18", &(0x7f00000000c0)=""/26}, 0x18) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)="39000000130009006900000000600000ab0080482900000046000107a2770014190002000d000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) 12:32:07 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17d) 12:32:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x5}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x40010, r3, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x4fe8c1f2a778a440) 12:32:07 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='timers\x00') ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x30b8) exit(0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x9, 0xe, 0x4, 0x80000000, {0x77359400}, {0x5, 0xc, 0x9, 0x23b, 0x40, 0x1, "f819006d"}, 0x2, 0x4, @planes=&(0x7f00000001c0)={0x80, 0xff, @userptr=0x4, 0x2}, 0x4}) syz_execute_func(&(0x7f0000000000)="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") 12:32:07 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17e) [ 437.632918][T22564] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 437.678450][T22564] CPU: 0 PID: 22564 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 437.686468][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.696616][T22564] Call Trace: [ 437.699915][T22564] dump_stack+0x172/0x1f0 [ 437.704247][T22564] dump_header+0x10f/0xb6c [ 437.708677][T22564] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 437.714584][T22564] ? ___ratelimit+0x60/0x595 [ 437.719178][T22564] ? do_raw_spin_unlock+0x57/0x270 [ 437.724298][T22564] oom_kill_process.cold+0x10/0x15 [ 437.724316][T22564] out_of_memory+0x79a/0x1280 [ 437.724331][T22564] ? lock_downgrade+0x880/0x880 [ 437.724350][T22564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.734114][T22564] ? oom_killer_disable+0x280/0x280 [ 437.750373][T22564] ? find_held_lock+0x35/0x130 [ 437.755160][T22564] mem_cgroup_out_of_memory+0x1ca/0x230 [ 437.760748][T22564] ? memcg_event_wake+0x230/0x230 [ 437.765807][T22564] ? do_raw_spin_unlock+0x57/0x270 [ 437.770926][T22564] ? _raw_spin_unlock+0x2d/0x50 [ 437.775805][T22564] try_charge+0x102c/0x15c0 [ 437.780311][T22564] ? find_held_lock+0x35/0x130 [ 437.785088][T22564] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 437.791159][T22564] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 437.796718][T22564] ? find_held_lock+0x35/0x130 [ 437.801486][T22564] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 437.807156][T22564] __memcg_kmem_charge_memcg+0x7c/0x130 [ 437.812806][T22564] ? memcg_kmem_put_cache+0xb0/0xb0 [ 437.818049][T22564] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 437.823604][T22564] __memcg_kmem_charge+0x136/0x300 [ 437.828724][T22564] __alloc_pages_nodemask+0x4bf/0x8d0 [ 437.834326][T22564] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 437.840075][T22564] ? copy_page_range+0x125a/0x1f90 [ 437.845286][T22564] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 437.851533][T22564] alloc_pages_current+0x107/0x210 [ 437.856651][T22564] pte_alloc_one+0x1b/0x1a0 [ 437.861158][T22564] __pte_alloc+0x20/0x310 [ 437.865500][T22564] copy_page_range+0x1529/0x1f90 [ 437.870439][T22564] ? find_held_lock+0x35/0x130 [ 437.875240][T22564] ? pmd_alloc+0x180/0x180 [ 437.879665][T22564] ? __rb_insert_augmented+0x231/0xdf0 [ 437.885124][T22564] ? validate_mm_rb+0xa3/0xc0 [ 437.889820][T22564] ? __vma_link_rb+0x279/0x370 [ 437.894602][T22564] copy_process.part.0+0x568b/0x7980 [ 437.899944][T22564] ? __cleanup_sighand+0x60/0x60 [ 437.904890][T22564] ? semctl_down+0x5e0/0x9f0 [ 437.909486][T22564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.915932][T22564] _do_fork+0x257/0xfd0 [ 437.920101][T22564] ? fork_idle+0x1d0/0x1d0 [ 437.924607][T22564] ? __ia32_sys_mkdir+0x80/0x80 [ 437.929467][T22564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 437.935179][T22564] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 437.940763][T22564] ? do_syscall_64+0x26/0x610 [ 437.945450][T22564] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.951517][T22564] ? do_syscall_64+0x26/0x610 [ 437.956317][T22564] ? lockdep_hardirqs_on+0x418/0x5d0 [ 437.961623][T22564] __ia32_sys_fork+0x1f/0x30 [ 437.966223][T22564] do_syscall_64+0x103/0x610 [ 437.970819][T22564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.976800][T22564] RIP: 0033:0x2000000a [ 437.980898][T22564] Code: Bad RIP value. [ 437.984981][T22564] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 437.993682][T22564] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 438.001763][T22564] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000014000003 [ 438.009826][T22564] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 438.017821][T22564] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b 12:32:07 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x8100, 0x0) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4000000000004e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x216) sendto$inet(r1, 0x0, 0x0, 0x20000803, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00\x02\x00', 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) sendto(r1, &(0x7f0000000100)="bc", 0x1, 0x0, 0x0, 0x0) [ 438.025857][T22564] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 438.050252][T22564] memory: usage 307200kB, limit 307200kB, failcnt 463 [ 438.067763][T22564] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 438.097900][T22564] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 438.111214][T22564] Memory cgroup stats for /syz5: cache:148KB rss:266380KB rss_huge:249856KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:266440KB inactive_file:0KB active_file:0KB unevictable:0KB [ 438.184267][T22564] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=14489,uid=0 [ 438.205563][T22564] Memory cgroup out of memory: Killed process 14489 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB 12:32:07 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:07 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x17f) [ 438.226762][ T1044] oom_reaper: reaped process 14489 (syz-executor.5), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 12:32:07 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2, 0x1b071, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80000, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x60800, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) mlock2(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) 12:32:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x180) 12:32:08 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000640)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000340)={r1, 0x2}) socket$inet6(0xa, 0x802, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80000000, 0x0, 0x6, 0x0, 0x10000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x807a00, 0x0) r3 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x8001, 0x6, 0x3, 0x10000, 0x0, 0x800, 0x400, 0x2, 0x3, 0xf52, 0xa0000000000000, 0x1ff, 0x4, 0x4, 0x9, 0x80000001, 0x5, 0x1, 0x11, 0x6, 0x9, 0x54, 0x3, 0x4, 0x9, 0x0, 0x9, 0xffffffffffffffff, 0x2, 0x6, 0x8, 0x0, 0x0, 0x10000, 0x3ff, 0x56, 0x0, 0x4a, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x2d400, 0x100000000, 0x4, 0xf, 0x958, 0x5, 0xc755}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r4 = openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) fcntl$getown(r2, 0x9) connect$pppoe(r4, &(0x7f0000000140)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'team_slave_0\x00'}}, 0x1e) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$P9_RCLUNK(r3, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x200000) 12:32:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f0000000080)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) 12:32:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ab553fece27d04000000288a6a1e835b5ec3399bd9edda299a5db3f5e1a8eb2484215c079e7f172090fc773f0b6d28f12ad8572937f0f417440365d57e371a5819234c0055bbf3716e3c4fa1896269ca612803cde429809e000f9e875aa7380c2d6ba6cf3ccf5390a782326432587e955a1fd9ccb4a066cfd6ed7268758c3bfb221d9d9ddb711969eecdee6981af6836f92827efe75de0b8885f6c3222354df4525c0e3b1a4ae7de66c214714d7c153afc3958718f004133b6692212f99f9b9cc2d5caae095c", 0xc6) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/150, 0x96}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 12:32:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:08 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x182) 12:32:08 executing program 2: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 12:32:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:08 executing program 3: r0 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xff) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x50010, r1, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="7a659a9bfb6ebc4cd0ad4eb2baf778c8", 0x10) r3 = syz_open_pts(r1, 0x5) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) r4 = dup3(r3, r1, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000200)={0x0, 0x3}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000280)={0xfffffffffffffffe, 0x2, 0x2, 0x7ff}, 0x10) write$UHID_INPUT(r4, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000240)={0x7, 0x1, 0x7fff, 0x9, 0x0, 0x8}) 12:32:08 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000084000000001b00"/24], 0x18}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="150000000000000000fae70000000000050000000000915900000010", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}, 0x200}}, [0x3, 0xffffffffffffff00, 0x1, 0x80000000, 0xbc, 0x7, 0xffffffff, 0x5, 0x1eb8, 0xffff, 0xd92, 0x5a92, 0x4, 0x401, 0x100]}, &(0x7f0000000140)=0x100) 12:32:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x183) 12:32:09 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50541e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:09 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$media(0x0, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xabtw/Z%B\xd2\xd6\x1e\xf0\xfc', 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0x40000000) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x5, 0x400) 12:32:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x184) 12:32:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x80000000008}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @remote}, 0x62, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='tunl0\x00', 0x3, 0x1ff, 0xfffffffffffffffa}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x38) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) 12:32:09 executing program 2: r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6bf28eff4fd5202a4689f20ad155b1cd28cbeb956ae6341fdd186556f75188ac09cc92bea6750a6180fe1174d54a71d20650c3f09ed35d3f26f18abdcdb16eba56f5dc723", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x101000, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0) 12:32:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x185) 12:32:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:09 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:10 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x186) 12:32:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xa) read$rfkill(r1, &(0x7f0000000180), 0x8) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x8, {{}, &(0x7f0000000e80), 0x0}}], 0x58}, 0x0) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x4) 12:32:10 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:10 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 440.504164][T22790] atomic_op 00000000c4971431 conn xmit_atomic (null) 12:32:10 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x187) 12:32:10 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 440.580881][T22798] atomic_op 00000000ccac2843 conn xmit_atomic (null) [ 440.584933][T22780] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 12:32:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = fcntl$dupfd(r0, 0x0, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000140)) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x80000000000007b, 0x600000000000000, [0x20000000000ce], [0xc2]}) 12:32:10 executing program 3: [ 440.713467][T22780] CPU: 0 PID: 22780 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 440.713483][T22780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.731566][T22780] Call Trace: [ 440.731592][T22780] dump_stack+0x172/0x1f0 [ 440.731612][T22780] dump_header+0x10f/0xb6c [ 440.731634][T22780] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 440.749621][T22780] ? ___ratelimit+0x60/0x595 [ 440.754218][T22780] ? do_raw_spin_unlock+0x57/0x270 [ 440.759326][T22780] oom_kill_process.cold+0x10/0x15 [ 440.764601][T22780] out_of_memory+0x79a/0x1280 [ 440.769266][T22780] ? lock_downgrade+0x880/0x880 [ 440.774102][T22780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.780327][T22780] ? oom_killer_disable+0x280/0x280 [ 440.785515][T22780] ? find_held_lock+0x35/0x130 [ 440.790312][T22780] mem_cgroup_out_of_memory+0x1ca/0x230 [ 440.795841][T22780] ? memcg_event_wake+0x230/0x230 [ 440.800852][T22780] ? do_raw_spin_unlock+0x57/0x270 [ 440.805957][T22780] ? _raw_spin_unlock+0x2d/0x50 [ 440.810797][T22780] try_charge+0x102c/0x15c0 [ 440.815283][T22780] ? find_held_lock+0x35/0x130 [ 440.820126][T22780] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 440.825666][T22780] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 440.831216][T22780] ? find_held_lock+0x35/0x130 [ 440.836074][T22780] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 440.841708][T22780] __memcg_kmem_charge_memcg+0x7c/0x130 [ 440.847239][T22780] ? memcg_kmem_put_cache+0xb0/0xb0 [ 440.852598][T22780] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 440.858221][T22780] __memcg_kmem_charge+0x136/0x300 [ 440.863319][T22780] __alloc_pages_nodemask+0x4bf/0x8d0 [ 440.868676][T22780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.874989][T22780] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 440.880701][T22780] ? copy_process.part.0+0x1d08/0x7980 [ 440.886237][T22780] ? lockdep_hardirqs_on+0x418/0x5d0 [ 440.891512][T22780] ? trace_hardirqs_on+0x67/0x230 [ 440.896539][T22780] copy_process.part.0+0x3e0/0x7980 [ 440.901720][T22780] ? __lockdep_free_key_range+0x120/0x120 [ 440.907427][T22780] ? semctl_down+0x5e0/0x9f0 [ 440.912000][T22780] ? find_held_lock+0x35/0x130 [ 440.917104][T22780] ? semctl_down+0x5e0/0x9f0 [ 440.921693][T22780] ? __cleanup_sighand+0x60/0x60 [ 440.926615][T22780] ? up_write+0x1c/0x150 [ 440.930848][T22780] ? semctl_down+0x5e0/0x9f0 [ 440.935429][T22780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.941664][T22780] _do_fork+0x257/0xfd0 [ 440.945812][T22780] ? fork_idle+0x1d0/0x1d0 [ 440.950213][T22780] ? __ia32_sys_mkdir+0x80/0x80 [ 440.955123][T22780] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 440.960652][T22780] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 440.966091][T22780] ? do_syscall_64+0x26/0x610 [ 440.970752][T22780] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.977149][T22780] ? do_syscall_64+0x26/0x610 [ 440.982511][T22780] ? lockdep_hardirqs_on+0x418/0x5d0 [ 440.987798][T22780] __ia32_sys_fork+0x1f/0x30 [ 440.992553][T22780] do_syscall_64+0x103/0x610 [ 440.997128][T22780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.003003][T22780] RIP: 0033:0x2000000a [ 441.007250][T22780] Code: Bad RIP value. 12:32:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 441.011299][T22780] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 441.019690][T22780] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 441.027648][T22780] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 441.035602][T22780] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 441.043815][T22780] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 441.051779][T22780] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 441.152630][T22780] memory: usage 307180kB, limit 307200kB, failcnt 492 [ 441.164224][T22780] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.172193][T22780] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.180314][T22780] Memory cgroup stats for /syz5: cache:148KB rss:264836KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264940KB inactive_file:0KB active_file:0KB unevictable:0KB [ 441.208552][T22780] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11129,uid=0 [ 441.225729][T22780] Memory cgroup out of memory: Killed process 11129 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 441.256345][T22776] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=1000 [ 441.286557][T22776] CPU: 0 PID: 22776 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 441.294585][T22776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.304649][T22776] Call Trace: [ 441.307936][T22776] dump_stack+0x172/0x1f0 [ 441.312253][T22776] dump_header+0x10f/0xb6c [ 441.316656][T22776] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.322447][T22776] ? ___ratelimit+0x60/0x595 [ 441.327510][T22776] ? do_raw_spin_unlock+0x57/0x270 [ 441.332610][T22776] oom_kill_process.cold+0x10/0x15 [ 441.337879][T22776] out_of_memory+0x79a/0x1280 [ 441.342592][T22776] ? oom_killer_disable+0x280/0x280 [ 441.347772][T22776] ? find_held_lock+0x35/0x130 [ 441.352544][T22776] mem_cgroup_out_of_memory+0x1ca/0x230 [ 441.358161][T22776] ? memcg_event_wake+0x230/0x230 [ 441.363175][T22776] ? do_raw_spin_unlock+0x57/0x270 [ 441.368272][T22776] ? _raw_spin_unlock+0x2d/0x50 [ 441.373109][T22776] try_charge+0xa87/0x15c0 [ 441.377689][T22776] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 441.383231][T22776] ? rcu_read_lock_sched_held+0x110/0x130 [ 441.389034][T22776] ? __alloc_pages_nodemask+0x61d/0x8d0 [ 441.394650][T22776] ? __lockdep_free_key_range+0x120/0x120 [ 441.400380][T22776] __memcg_kmem_charge_memcg+0x7c/0x130 [ 441.406013][T22776] ? memcg_kmem_put_cache+0xb0/0xb0 [ 441.411505][T22776] ? cache_grow_begin+0x594/0x860 [ 441.416512][T22776] ? lockdep_hardirqs_on+0x418/0x5d0 [ 441.421779][T22776] ? trace_hardirqs_on+0x67/0x230 [ 441.426963][T22776] cache_grow_begin+0x5c0/0x860 [ 441.431815][T22776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 441.438037][T22776] ? __cpuset_node_allowed+0x136/0x540 [ 441.443507][T22776] fallback_alloc+0x1fd/0x2d0 [ 441.448283][T22776] ____cache_alloc_node+0x1be/0x1e0 [ 441.453554][T22776] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.459869][T22776] kmem_cache_alloc_node+0xe3/0x710 [ 441.465147][T22776] ? lockdep_hardirqs_on+0x418/0x5d0 [ 441.470415][T22776] ? trace_hardirqs_on+0x67/0x230 [ 441.475431][T22776] copy_process.part.0+0x1d08/0x7980 [ 441.480792][T22776] ? __lockdep_free_key_range+0x120/0x120 [ 441.486499][T22776] ? sched_clock+0x2e/0x50 [ 441.490986][T22776] ? psi_memstall_leave+0x12e/0x180 [ 441.496169][T22776] ? find_held_lock+0x35/0x130 [ 441.500915][T22776] ? psi_memstall_leave+0x12e/0x180 [ 441.506116][T22776] ? __cleanup_sighand+0x60/0x60 [ 441.511035][T22776] ? perf_trace_lock+0xeb/0x510 [ 441.515873][T22776] ? __lockdep_free_key_range+0x120/0x120 [ 441.521586][T22776] _do_fork+0x257/0xfd0 [ 441.525728][T22776] ? fork_idle+0x1d0/0x1d0 [ 441.530146][T22776] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 441.536192][T22776] ? lock_downgrade+0x880/0x880 [ 441.541029][T22776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.547257][T22776] ? blkcg_exit_queue+0x30/0x30 [ 441.552097][T22776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.557558][T22776] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.563094][T22776] ? do_syscall_64+0x26/0x610 [ 441.567756][T22776] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.573809][T22776] ? do_syscall_64+0x26/0x610 [ 441.578817][T22776] __x64_sys_clone+0xbf/0x150 [ 441.583486][T22776] do_syscall_64+0x103/0x610 [ 441.588063][T22776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.594033][T22776] RIP: 0033:0x45b779 [ 441.598017][T22776] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 441.617688][T22776] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 441.626115][T22776] RAX: ffffffffffffffda RBX: 00007fbf2a033700 RCX: 000000000045b779 [ 441.634069][T22776] RDX: 00007fbf2a0339d0 RSI: 00007fbf2a032db0 RDI: 00000000003d0f00 [ 441.642117][T22776] RBP: 0000000000a4fcb0 R08: 00007fbf2a033700 R09: 00007fbf2a033700 [ 441.650075][T22776] R10: 00007fbf2a0339d0 R11: 0000000000000202 R12: 0000000000000000 [ 441.658033][T22776] R13: 0000000000a4fb4f R14: 00007fbf2a0339c0 R15: 000000000073c04c [ 441.720063][T22776] memory: usage 305044kB, limit 307200kB, failcnt 516 [ 441.728928][T22776] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.736806][T22776] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 441.743666][T22776] Memory cgroup stats for /syz5: cache:148KB rss:262700KB rss_huge:245760KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:262792KB inactive_file:0KB active_file:0KB unevictable:0KB [ 441.767191][T22776] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19925,uid=0 [ 441.784208][T22776] Memory cgroup out of memory: Killed process 19925 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 441.815504][T22787] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 441.827887][T22787] CPU: 0 PID: 22787 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 441.835883][T22787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.846124][T22787] Call Trace: [ 441.849457][T22787] dump_stack+0x172/0x1f0 [ 441.853801][T22787] dump_header+0x10f/0xb6c [ 441.858318][T22787] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 441.864141][T22787] ? ___ratelimit+0x60/0x595 [ 441.868739][T22787] ? do_raw_spin_unlock+0x57/0x270 [ 441.873862][T22787] oom_kill_process.cold+0x10/0x15 [ 441.879009][T22787] out_of_memory+0x79a/0x1280 [ 441.883791][T22787] ? oom_killer_disable+0x280/0x280 [ 441.889006][T22787] ? find_held_lock+0x35/0x130 [ 441.893965][T22787] mem_cgroup_out_of_memory+0x1ca/0x230 [ 441.899610][T22787] ? memcg_event_wake+0x230/0x230 [ 441.904736][T22787] ? do_raw_spin_unlock+0x57/0x270 [ 441.909857][T22787] ? _raw_spin_unlock+0x2d/0x50 [ 441.914807][T22787] try_charge+0xa87/0x15c0 [ 441.919229][T22787] ? find_held_lock+0x35/0x130 [ 441.924095][T22787] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 441.929646][T22787] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 441.935213][T22787] ? find_held_lock+0x35/0x130 [ 441.940073][T22787] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 441.945643][T22787] __memcg_kmem_charge_memcg+0x7c/0x130 [ 441.951213][T22787] ? memcg_kmem_put_cache+0xb0/0xb0 [ 441.956451][T22787] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 441.962013][T22787] __memcg_kmem_charge+0x136/0x300 [ 441.967141][T22787] __alloc_pages_nodemask+0x4bf/0x8d0 [ 441.972522][T22787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.978782][T22787] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 441.984506][T22787] ? copy_process.part.0+0x1d08/0x7980 [ 441.989985][T22787] ? lockdep_hardirqs_on+0x418/0x5d0 [ 441.995280][T22787] ? trace_hardirqs_on+0x67/0x230 [ 442.000330][T22787] copy_process.part.0+0x3e0/0x7980 [ 442.005531][T22787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.011844][T22787] ? debug_smp_processor_id+0x3c/0x280 [ 442.017311][T22787] ? perf_trace_lock+0xeb/0x510 [ 442.022291][T22787] ? __lockdep_free_key_range+0x120/0x120 [ 442.028034][T22787] ? __might_fault+0x12b/0x1e0 [ 442.032813][T22787] ? __cleanup_sighand+0x60/0x60 [ 442.037759][T22787] ? lock_downgrade+0x880/0x880 [ 442.042660][T22787] _do_fork+0x257/0xfd0 [ 442.046827][T22787] ? fork_idle+0x1d0/0x1d0 [ 442.051257][T22787] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.056736][T22787] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.062288][T22787] ? do_syscall_64+0x26/0x610 [ 442.066967][T22787] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.073033][T22787] ? do_syscall_64+0x26/0x610 [ 442.077807][T22787] __x64_sys_clone+0xbf/0x150 [ 442.082501][T22787] do_syscall_64+0x103/0x610 [ 442.087099][T22787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.092994][T22787] RIP: 0033:0x458da9 [ 442.097301][T22787] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.116915][T22787] RSP: 002b:00007fbf2a053c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 442.125341][T22787] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 442.133322][T22787] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 442.141304][T22787] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 442.149367][T22787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0546d4 [ 442.157551][T22787] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 442.167522][T22787] memory: usage 302876kB, limit 307200kB, failcnt 516 [ 442.174311][T22787] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.182354][T22787] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.189638][T22787] Memory cgroup stats for /syz5: cache:148KB rss:260560KB rss_huge:243712KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260652KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:11 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:11 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x188) 12:32:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:11 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:11 executing program 2: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000080)=""/155, &(0x7f0000000140)=0x9b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x80000000081}, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000200)={0x1, 0x6, 0x0, [{0x9, 0x163, 0x0, 0x40, 0x6, 0x10001, 0x9}, {0x6, 0x6, 0xd5, 0x80000001, 0xffffffff, 0x101, 0x80}, {0xd8f, 0x3, 0x8, 0xffffffff, 0x1f, 0x7, 0xf08c}, {0x6, 0x3f, 0x0, 0x400, 0x1, 0x2, 0x8000}, {0x3, 0x1ff, 0xfff, 0xa000, 0x6, 0x1, 0x3b07}, {0xffffffff, 0x2, 0x0, 0xfffffffffffffeff, 0xc70, 0x9, 0xc33}]}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000440)={0x40, 0x3, 0x0, [{0x3, 0x7, 0x0, 0x0, 0x6, 0x400, 0x81}, {0x20, 0x20, 0x6, 0xb05, 0x0, 0x5, 0xb4}, {0x9, 0x2, 0x200, 0x7, 0x24b6, 0x6, 0x9}]}) socket$alg(0x26, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x100, &(0x7f0000000400)={0x2fc0000000000000, 0x0, 0x356a, 0x2, 0x8, 0x9, 0x7ff, 0x10000}) [ 442.212083][T22787] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=19952,uid=0 [ 442.227935][T22787] Memory cgroup out of memory: Killed process 19952 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 442.243183][ T1044] oom_reaper: reaped process 19952 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = eventfd(0xffff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x3, 0x800008800000001) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000000000d, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x401, [], 0x0, r3, 0x0, 0x3da}, 0x3c) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) 12:32:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x189) 12:32:12 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0400004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200000) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x2) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x10) statx(r0, &(0x7f0000000140)='./file0\x00', 0x4000, 0x7ff, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)={{0x1cf, 0x401, 0x3, 0x1e7, 0x235, 0x401, 0x284, 0x4}, "7538318f7a0b690881b75ebd162d9ee90910f7473f9e8b055dfece98335d815f426a00b31814d5708f47b5eb8342598cac53", [[], [], [], [], [], [], [], [], []]}, 0x952) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x2}}, [0x3ae7, 0x7da, 0x1, 0x8, 0x2, 0x0, 0x200, 0xc01, 0x100, 0xfff, 0x1, 0x4, 0xec3, 0xb98, 0x8]}, &(0x7f0000000d40)=0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000d80)={r3}, &(0x7f0000000dc0)=0x8) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000e00)={'lapb0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000e40)) write$binfmt_aout(r0, &(0x7f0000000e80)={{0x10b, 0x9, 0x7, 0x31c, 0x367, 0x7, 0x2ab, 0x7f}, "2a6491e520ba8f1192bbc6af2a2249ca709c741ef2603f76c3e2456f2fe5611f29901bc540742a330801ee69eca80c4cfab99da7719db50ff44736a8a3ea134b389d01b054ba86e2a8b1ca1c95222e071c6569599bc8b60dbfecc35037dfa08b6ce8e2c6781cac77d2095569d2212cebc79d7a46a3ae86c7eebf60df24b1b60084431a0b839113ac8aefbf75adfee50f1eca556891fff5918a1dbbfd32c0864d0ad6075052c28d502ebe29c23252404548262e401eb55f838d", [[], [], [], [], [], []]}, 0x6d9) r4 = socket$nl_crypto(0x10, 0x3, 0x15) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000001580)={0x2a, 0x4, 0x0, {0x3, 0x0, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000015c0)={'gretap0\x00', 0x0}) sendmsg(r4, &(0x7f0000001b40)={&(0x7f0000001600)=@hci={0x1f, r5, 0x3}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)="4b8eaf88d47de2ebe69196b430758f4766643c0d2216ef99a4756dbfbbc80c1fa6980721e5b0097af2e7f39d92c9bccce232091ac6dacac2cc3b7b7d7a93d91d8883692d7cbcbdc2089a076fe049330b381813ada9f826", 0x57}, {&(0x7f0000001700)="8e84f7adb83ee3f56c9cfa", 0xb}], 0x2, &(0x7f0000001780)=[{0xf0, 0x0, 0x6, "3eceb486bea30aa72d3a4a4299ec617fe6b5b9ab300c3d77ddf00982e91e5e89a3f65e7420642ae5fb6bad65f6b2dfb0f96464d9f1a43ab2c1d550ded3aa8a05c085f272d058b0bc39a3d45b752ce1eb319f8ad0221e6ed7764e1c46798d32e326ec260914e1b70f757bb3f6ab3dc46f87b9f8ae70a29d4b51d6916bb3aaaae40bc5136a17f38cb4f92f94aa649e71ad65d11d0a3efd1bea25c070ea6dc591b6a42ce1b573887cd08871a8466eefbf2e2d5fdf1884288077e40dfbf89ee4e2ff94a84339d0b57da0e7c825299883732be3149dc5bacc0e319c"}, {0x60, 0x13e, 0x7fff, "cf55c360b7990293fe7cd48d319f09379c91f751fdb3dd0fd867741131dd6e0580953daef1e181b878a992dc76262373b2ffee64e2ee2cad37991de8650d66b7efe528a80c9ea518267aee"}, {0xa8, 0x18e, 0x5, "3e4c99db2bdcf69d1c0dbb173e2300009552a33bcb962157209e7c9a83f80d2c2c662f4caa0e6236cbf8c636c3ca445e9d51ae7c55b7090972422c3079e5b6328acf468f0a4b70fdf3cb097a98c4bdf4f0f30b39063120767719373b72a2d1adc89d36adaf8540562c32b074de5e8b185f112a67cd5e745462906713601b56c85aa0a6f46691901ba9fd16281970f158ca29dab317e71c"}, {0x20, 0x10a, 0x100, "302224c48fcd237e187c"}, {0x48, 0x1, 0x9115, "60eb78912c294af962b8e2af488fa2db12ffb60dc5bffdb5716e96f6e2e7e8f76889db41ba9e4d9babb3ada250f1e63fed7b"}, {0x38, 0x102, 0x33, "cb29bf89ed988855d2b1503f8d9bb6471f0beb7d7855b6689d827b34b836d5052a83"}, {0xf0, 0x115, 0x3, "d42158c189392cfe4ed8c6dd1de46eac121be8f8db1b9fada9e8d0b9ace9a2e741470df1751c33ef6dadd996709896e28333aa68fbf0abb0b4a05a596c6f48fab078fdabd68ad033b1bd0b97e8ceb298f93cc07ed2a4ae2ea380ccbb57ecbefb86fd5071e13f2b63d70c1a090b581a38e25a9ea2d6332d66fad3a893cc1b9c3dd5efee1e2edba9a04c74593991217ca1dcdc4d2d63c2abb8493e886763e5bb444c4dd82b5c55abf2bad193beff1be97827c197fa3470101ac020faafacaaa2fc4a19b2d0c6986489df30ae05d93d11787fbf50735d1dff17db"}], 0x388}, 0x4040) ioctl$TIOCCONS(r2, 0x541d) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000001b80)=0x3) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000001bc0)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001c40)=0x8) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000001c80)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000001d40)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x6, 0x7fff, {"10aa0353087aebb26e90088500c03de3"}, 0x7fffffff, 0x80, 0xfff}}}, 0x90) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000001e00)=0x5) ioctl(r4, 0x3, &(0x7f0000001e40)="cd6eb31a369fb0b73b5acd31af14c8768a1e1b28298a4f1a0e30e8396ba00474ccd7fe309aedb3eba94e6e5c3110ccb41ba9a1e415022a407d30580121dfa17a7b8898b820") write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000001ec0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x9, 0x800}}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001f80)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000002080)=0xe8) r8 = getegid() r9 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0}, &(0x7f0000002100)=0xc) mount$fuse(0x0, &(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)='fuse\x00', 0x964054, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8001}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1f}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@fsuuid={'fsuuid', 0x3d, {[0x7d, 0x65, 0x61, 0x7b, 0x0, 0x30, 0x66, 0x65], 0x2d, [0x33, 0x39, 0x63, 0x7f], 0x2d, [0x76, 0x62, 0x38, 0x64], 0x2d, [0x34, 0x65, 0x3d, 0x63], 0x2d, [0x32, 0x77, 0x7f, 0x77, 0x77, 0x33, 0x7f, 0x7d]}}}, {@fsname={'fsname', 0x3d, '/dev/ptmx\x00'}}, {@hash='hash'}, {@euid_gt={'euid>', r9}}, {@context={'context', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '+eth0'}}, {@fowner_lt={'fowner<', r10}}, {@appraise='appraise'}]}}) 12:32:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa48e9df3d214d54, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xc400, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0) 12:32:12 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1000000000000005, 0x84) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x3, 0x80000000, 0x3}) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x220c00) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x100000001, 0x6, [0x0, 0x80000000, 0x80, 0x7, 0x1f, 0x5]}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000280)={r4, 0x3, 0x9, 0xfff, 0x1f, 0xff}, &(0x7f00000002c0)=0x14) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\x17\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r5 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x10\x00\n\x00!!\x00\x00m\x80', @ifru_names='bond_slave_1\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000300)=0x4, 0x4) 12:32:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18a) 12:32:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:12 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa48e9df3d214d54, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xc400, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0) 12:32:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 443.005513][T22877] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 443.133345][T22877] CPU: 1 PID: 22877 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 443.141555][T22877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.151634][T22877] Call Trace: [ 443.155033][T22877] dump_stack+0x172/0x1f0 [ 443.159384][T22877] dump_header+0x10f/0xb6c [ 443.163917][T22877] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 443.169753][T22877] ? ___ratelimit+0x60/0x595 [ 443.174478][T22877] ? do_raw_spin_unlock+0x57/0x270 [ 443.179727][T22877] oom_kill_process.cold+0x10/0x15 [ 443.184982][T22877] out_of_memory+0x79a/0x1280 [ 443.189764][T22877] ? lock_downgrade+0x880/0x880 [ 443.194814][T22877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.201253][T22877] ? oom_killer_disable+0x280/0x280 [ 443.206506][T22877] ? find_held_lock+0x35/0x130 [ 443.211292][T22877] mem_cgroup_out_of_memory+0x1ca/0x230 [ 443.216861][T22877] ? memcg_event_wake+0x230/0x230 [ 443.221996][T22877] ? do_raw_spin_unlock+0x57/0x270 [ 443.227142][T22877] ? _raw_spin_unlock+0x2d/0x50 [ 443.232099][T22877] try_charge+0x102c/0x15c0 [ 443.236645][T22877] ? find_held_lock+0x35/0x130 [ 443.241531][T22877] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 443.247388][T22877] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 443.253111][T22877] ? find_held_lock+0x35/0x130 [ 443.257892][T22877] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 443.272245][T22877] __memcg_kmem_charge_memcg+0x7c/0x130 [ 443.278609][T22877] ? memcg_kmem_put_cache+0xb0/0xb0 12:32:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18b) [ 443.283839][T22877] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 443.289481][T22877] __memcg_kmem_charge+0x136/0x300 [ 443.294705][T22877] __alloc_pages_nodemask+0x4bf/0x8d0 [ 443.300070][T22877] ? __pud_alloc+0x1d3/0x250 [ 443.300087][T22877] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 443.300098][T22877] ? __pud_alloc+0x1d3/0x250 [ 443.300120][T22877] ? lock_downgrade+0x880/0x880 [ 443.300134][T22877] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 443.300150][T22877] alloc_pages_current+0x107/0x210 [ 443.300164][T22877] ? do_raw_spin_unlock+0x57/0x270 [ 443.300180][T22877] __pmd_alloc+0x41/0x460 [ 443.300194][T22877] ? pmd_val+0x100/0x100 [ 443.300214][T22877] pmd_alloc+0x10c/0x180 [ 443.349478][T22877] copy_page_range+0x62e/0x1f90 [ 443.354369][T22877] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 443.360111][T22877] ? vma_compute_subtree_gap+0x158/0x230 [ 443.365959][T22877] ? vma_gap_callbacks_rotate+0x62/0x80 [ 443.371846][T22877] ? pmd_alloc+0x180/0x180 [ 443.371861][T22877] ? validate_mm_rb+0xa3/0xc0 [ 443.371876][T22877] ? __vma_link_rb+0x279/0x370 [ 443.371901][T22877] copy_process.part.0+0x568b/0x7980 [ 443.371943][T22877] ? __cleanup_sighand+0x60/0x60 [ 443.371964][T22877] ? semctl_down+0x5e0/0x9f0 [ 443.371984][T22877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.407189][T22877] _do_fork+0x257/0xfd0 [ 443.411354][T22877] ? fork_idle+0x1d0/0x1d0 [ 443.415792][T22877] ? __ia32_sys_mkdir+0x80/0x80 [ 443.420664][T22877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.426142][T22877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.431712][T22877] ? do_syscall_64+0x26/0x610 [ 443.436410][T22877] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.442586][T22877] ? do_syscall_64+0x26/0x610 [ 443.447291][T22877] ? lockdep_hardirqs_on+0x418/0x5d0 [ 443.452593][T22877] __ia32_sys_fork+0x1f/0x30 [ 443.457194][T22877] do_syscall_64+0x103/0x610 [ 443.461793][T22877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.467698][T22877] RIP: 0033:0x2000000a [ 443.471772][T22877] Code: Bad RIP value. [ 443.475839][T22877] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 443.484255][T22877] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 443.492245][T22877] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 443.500370][T22877] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 443.508347][T22877] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 443.516334][T22877] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 443.544080][T22877] memory: usage 307200kB, limit 307200kB, failcnt 538 [ 443.551372][T22877] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.559126][T22877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.575661][T22877] Memory cgroup stats for /syz5: cache:148KB rss:264912KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 443.598379][T22877] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20013,uid=0 [ 443.614353][T22877] Memory cgroup out of memory: Killed process 20013 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 443.768014][T22866] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 443.797377][T22866] CPU: 1 PID: 22866 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 443.805488][T22866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.815639][T22866] Call Trace: [ 443.818954][T22866] dump_stack+0x172/0x1f0 [ 443.823302][T22866] dump_header+0x10f/0xb6c [ 443.827728][T22866] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 443.833536][T22866] ? ___ratelimit+0x60/0x595 [ 443.838136][T22866] ? do_raw_spin_unlock+0x57/0x270 [ 443.843264][T22866] oom_kill_process.cold+0x10/0x15 [ 443.848378][T22866] out_of_memory+0x79a/0x1280 [ 443.853156][T22866] ? lock_downgrade+0x880/0x880 [ 443.858156][T22866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.864399][T22866] ? oom_killer_disable+0x280/0x280 [ 443.869620][T22866] ? find_held_lock+0x35/0x130 [ 443.874425][T22866] mem_cgroup_out_of_memory+0x1ca/0x230 [ 443.880235][T22866] ? memcg_event_wake+0x230/0x230 [ 443.885286][T22866] ? do_raw_spin_unlock+0x57/0x270 [ 443.890407][T22866] ? _raw_spin_unlock+0x2d/0x50 [ 443.895349][T22866] try_charge+0x102c/0x15c0 [ 443.899860][T22866] ? find_held_lock+0x35/0x130 [ 443.904647][T22866] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 443.910194][T22866] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 443.915739][T22866] ? find_held_lock+0x35/0x130 [ 443.920602][T22866] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 443.926160][T22866] __memcg_kmem_charge_memcg+0x7c/0x130 [ 443.931706][T22866] ? memcg_kmem_put_cache+0xb0/0xb0 [ 443.937025][T22866] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 443.942575][T22866] __memcg_kmem_charge+0x136/0x300 [ 443.947700][T22866] __alloc_pages_nodemask+0x4bf/0x8d0 [ 443.953073][T22866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.959328][T22866] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 443.965147][T22866] ? copy_process.part.0+0x1d08/0x7980 [ 443.970609][T22866] ? lockdep_hardirqs_on+0x418/0x5d0 [ 443.975903][T22866] ? trace_hardirqs_on+0x67/0x230 [ 443.981060][T22866] ? kasan_check_read+0x11/0x20 [ 443.985916][T22866] copy_process.part.0+0x3e0/0x7980 [ 443.991116][T22866] ? __handle_mm_fault+0x21b7/0x3ec0 [ 443.996405][T22866] ? find_held_lock+0x35/0x130 [ 444.001196][T22866] ? __handle_mm_fault+0x21b7/0x3ec0 [ 444.006695][T22866] ? lock_downgrade+0x880/0x880 [ 444.011553][T22866] ? migration_entry_to_page+0x320/0x320 [ 444.017980][T22866] ? lru_cache_add+0x21c/0x590 [ 444.022765][T22866] ? __cleanup_sighand+0x60/0x60 [ 444.027707][T22866] ? __handle_mm_fault+0x7cd/0x3ec0 [ 444.032913][T22866] ? __lockdep_free_key_range+0x120/0x120 [ 444.038640][T22866] ? __do_page_fault+0x623/0xda0 [ 444.043575][T22866] ? find_held_lock+0x35/0x130 [ 444.048430][T22866] _do_fork+0x257/0xfd0 [ 444.052590][T22866] ? fork_idle+0x1d0/0x1d0 [ 444.057030][T22866] ? kasan_check_write+0x14/0x20 [ 444.061978][T22866] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.067530][T22866] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.072987][T22866] ? do_syscall_64+0x26/0x610 [ 444.077702][T22866] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.083779][T22866] ? do_syscall_64+0x26/0x610 [ 444.088463][T22866] __x64_sys_clone+0xbf/0x150 [ 444.093153][T22866] do_syscall_64+0x103/0x610 [ 444.097790][T22866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.103678][T22866] RIP: 0033:0x45b779 [ 444.107660][T22866] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 444.127388][T22866] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 444.135902][T22866] RAX: ffffffffffffffda RBX: 00007fbf2a033700 RCX: 000000000045b779 [ 444.143877][T22866] RDX: 00007fbf2a0339d0 RSI: 00007fbf2a032db0 RDI: 00000000003d0f00 [ 444.151851][T22866] RBP: 0000000000a4fcb0 R08: 00007fbf2a033700 R09: 00007fbf2a033700 [ 444.159921][T22866] R10: 00007fbf2a0339d0 R11: 0000000000000202 R12: 0000000000000000 [ 444.167981][T22866] R13: 0000000000a4fb4f R14: 00007fbf2a0339c0 R15: 000000000073c04c [ 444.583088][T22866] memory: usage 307176kB, limit 307200kB, failcnt 582 [ 444.596899][T22866] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 444.612374][T22866] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 444.627268][T22866] Memory cgroup stats for /syz5: cache:148KB rss:264912KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264952KB inactive_file:0KB active_file:0KB unevictable:0KB [ 444.674382][T22866] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20035,uid=0 [ 444.705748][T22866] Memory cgroup out of memory: Killed process 20035 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 444.761437][T22907] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 444.783109][T22907] CPU: 1 PID: 22907 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 444.791234][T22907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.801524][T22907] Call Trace: [ 444.804832][T22907] dump_stack+0x172/0x1f0 [ 444.809192][T22907] dump_header+0x10f/0xb6c [ 444.813880][T22907] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 444.819699][T22907] ? ___ratelimit+0x60/0x595 [ 444.824313][T22907] ? do_raw_spin_unlock+0x57/0x270 [ 444.829437][T22907] oom_kill_process.cold+0x10/0x15 [ 444.834554][T22907] out_of_memory+0x79a/0x1280 [ 444.839251][T22907] ? oom_killer_disable+0x280/0x280 [ 444.844455][T22907] ? find_held_lock+0x35/0x130 [ 444.849342][T22907] mem_cgroup_out_of_memory+0x1ca/0x230 [ 444.854890][T22907] ? memcg_event_wake+0x230/0x230 [ 444.860015][T22907] ? do_raw_spin_unlock+0x57/0x270 [ 444.865129][T22907] ? _raw_spin_unlock+0x2d/0x50 [ 444.869991][T22907] try_charge+0xa87/0x15c0 [ 444.874405][T22907] ? find_held_lock+0x35/0x130 [ 444.879186][T22907] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 444.884734][T22907] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.890503][T22907] ? find_held_lock+0x35/0x130 [ 444.895272][T22907] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 444.900850][T22907] __memcg_kmem_charge_memcg+0x7c/0x130 [ 444.906506][T22907] ? memcg_kmem_put_cache+0xb0/0xb0 [ 444.911719][T22907] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 444.917276][T22907] __memcg_kmem_charge+0x136/0x300 [ 444.922512][T22907] __alloc_pages_nodemask+0x4bf/0x8d0 [ 444.927888][T22907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.934144][T22907] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 444.940237][T22907] ? copy_process.part.0+0x1d08/0x7980 [ 444.945727][T22907] ? lockdep_hardirqs_on+0x418/0x5d0 [ 444.951105][T22907] ? trace_hardirqs_on+0x67/0x230 [ 444.956741][T22907] ? kasan_check_read+0x11/0x20 [ 444.961606][T22907] copy_process.part.0+0x3e0/0x7980 [ 444.966810][T22907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.973055][T22907] ? debug_smp_processor_id+0x3c/0x280 [ 444.978619][T22907] ? perf_trace_lock+0xeb/0x510 [ 444.983608][T22907] ? __lockdep_free_key_range+0x120/0x120 [ 444.989345][T22907] ? __might_fault+0x12b/0x1e0 [ 444.994125][T22907] ? __cleanup_sighand+0x60/0x60 [ 444.999098][T22907] ? lock_downgrade+0x880/0x880 [ 445.004407][T22907] _do_fork+0x257/0xfd0 [ 445.008585][T22907] ? fork_idle+0x1d0/0x1d0 [ 445.013014][T22907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.018492][T22907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.023953][T22907] ? do_syscall_64+0x26/0x610 [ 445.028810][T22907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.034881][T22907] ? do_syscall_64+0x26/0x610 [ 445.039576][T22907] __x64_sys_clone+0xbf/0x150 [ 445.044346][T22907] do_syscall_64+0x103/0x610 [ 445.048956][T22907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.054851][T22907] RIP: 0033:0x458da9 [ 445.058748][T22907] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.078688][T22907] RSP: 002b:00007fbf2a053c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 445.087103][T22907] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 445.095081][T22907] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 445.103177][T22907] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 445.111167][T22907] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0546d4 [ 445.119424][T22907] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 445.501728][T22907] memory: usage 306860kB, limit 307200kB, failcnt 582 [ 445.515450][T22907] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.531043][T22907] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.547175][T22907] Memory cgroup stats for /syz5: cache:148KB rss:264912KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264896KB inactive_file:0KB active_file:0KB unevictable:0KB [ 445.591653][T22907] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20060,uid=0 [ 445.607777][T22907] Memory cgroup out of memory: Killed process 20060 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:15 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:15 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) gettid() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa48e9df3d214d54, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0xc400, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x57, &(0x7f00000002c0)=[{&(0x7f0000001840), 0x1fff8}], 0x1}, 0x0) 12:32:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 3: mlock2(&(0x7f0000b5f000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000b53000/0x14000)=nil, 0x14000, 0x3) 12:32:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18c) 12:32:15 executing program 3: pause() syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c4e1a5f97300660f3a8e16649c675100617b12e5c441dfd04b00c442019dccd211d46f") syz_execute_func(&(0x7f0000000340)="4a2be9c4627d0ff9980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea355002f2ff3336667da4e329200d2dec461dc55b13e410f353809131325000e818f470fd6c567450f289369000000b10085368f4978830f0f2cf18282e97c810f69c4a1a1ec92000000004cbec5c4c2858c3f8f560f01d4dfc5497dbf30470f866f2a37ad59438f34b267f36ab4c4c2e9adc25643052c16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e289c4a1fa16a4d8000000008ab6f04346dce7440f704eee9846dec43b7d0fd63af4f4f4c4617be6d2bb2cbb610a09912af3430f47bb00000000000045126d6dc4c27d34c68d8d00c44299723e3e6a5babb9c463d90d2408413e65660f5cb54cf60a0000004805c462a52b6e0b8fa810ecd6091a1af20fa576ac8fc978014bc365d085431fe7204577cbc40355423900f4b07c1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a07c401f1eb27f247acc4a2dd910cb1c423990a184436660f38058b976192361d09f4f5e58847910002c1045c0b47cc47cc5c0f1ea5322333332ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") 12:32:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18d) 12:32:15 executing program 2: 12:32:15 executing program 3: 12:32:15 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 3: 12:32:15 executing program 2: 12:32:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18e) 12:32:15 executing program 3: 12:32:15 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:15 executing program 2: 12:32:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:16 executing program 3: clock_adjtime(0x0, &(0x7f0000000100)) [ 446.987531][T22989] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 447.013873][T22989] CPU: 1 PID: 22989 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 447.022478][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.032558][T22989] Call Trace: [ 447.036085][T22989] dump_stack+0x172/0x1f0 [ 447.040647][T22989] dump_header+0x10f/0xb6c [ 447.045306][T22989] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 447.051513][T22989] ? ___ratelimit+0x60/0x595 [ 447.056695][T22989] ? do_raw_spin_unlock+0x57/0x270 [ 447.062049][T22989] oom_kill_process.cold+0x10/0x15 [ 447.067354][T22989] out_of_memory+0x79a/0x1280 [ 447.072066][T22989] ? lock_downgrade+0x880/0x880 [ 447.077279][T22989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.084034][T22989] ? oom_killer_disable+0x280/0x280 [ 447.089339][T22989] ? find_held_lock+0x35/0x130 [ 447.094391][T22989] mem_cgroup_out_of_memory+0x1ca/0x230 [ 447.100065][T22989] ? memcg_event_wake+0x230/0x230 [ 447.105116][T22989] ? do_raw_spin_unlock+0x57/0x270 [ 447.110599][T22989] ? _raw_spin_unlock+0x2d/0x50 [ 447.115956][T22989] try_charge+0x102c/0x15c0 [ 447.120862][T22989] ? find_held_lock+0x35/0x130 [ 447.125842][T22989] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 447.131728][T22989] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.137292][T22989] ? find_held_lock+0x35/0x130 [ 447.142513][T22989] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 447.148468][T22989] __memcg_kmem_charge_memcg+0x7c/0x130 [ 447.154440][T22989] ? memcg_kmem_put_cache+0xb0/0xb0 [ 447.160081][T22989] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 447.165820][T22989] __memcg_kmem_charge+0x136/0x300 [ 447.171051][T22989] __alloc_pages_nodemask+0x4bf/0x8d0 [ 447.177246][T22989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.183934][T22989] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 447.191014][T22989] ? copy_process.part.0+0x1d08/0x7980 [ 447.196667][T22989] ? lockdep_hardirqs_on+0x418/0x5d0 [ 447.202590][T22989] ? trace_hardirqs_on+0x67/0x230 [ 447.208286][T22989] ? kasan_check_read+0x11/0x20 [ 447.213539][T22989] copy_process.part.0+0x3e0/0x7980 [ 447.218944][T22989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.225605][T22989] ? debug_smp_processor_id+0x3c/0x280 [ 447.231775][T22989] ? perf_trace_lock+0xeb/0x510 [ 447.237230][T22989] ? __lockdep_free_key_range+0x120/0x120 [ 447.243341][T22989] ? __might_fault+0x12b/0x1e0 [ 447.248526][T22989] ? __cleanup_sighand+0x60/0x60 [ 447.253733][T22989] ? lock_downgrade+0x880/0x880 [ 447.258928][T22989] _do_fork+0x257/0xfd0 [ 447.263476][T22989] ? fork_idle+0x1d0/0x1d0 [ 447.268032][T22989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.273769][T22989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.280393][T22989] ? do_syscall_64+0x26/0x610 [ 447.285430][T22989] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.292386][T22989] ? do_syscall_64+0x26/0x610 [ 447.297799][T22989] __x64_sys_clone+0xbf/0x150 [ 447.302846][T22989] do_syscall_64+0x103/0x610 [ 447.308022][T22989] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.314340][T22989] RIP: 0033:0x458da9 [ 447.318603][T22989] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.339199][T22989] RSP: 002b:00007fbf2a053c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 447.348250][T22989] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 447.356987][T22989] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 447.365221][T22989] RBP: 000000000073bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 447.373686][T22989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0546d4 [ 447.381854][T22989] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 447.863258][T22989] memory: usage 307132kB, limit 307200kB, failcnt 603 [ 447.871065][T22989] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.902805][T22989] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 447.917522][T22989] Memory cgroup stats for /syz5: cache:148KB rss:264904KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265040KB inactive_file:0KB active_file:0KB unevictable:0KB [ 447.941105][T22989] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=22930,uid=0 [ 447.959648][T22989] Memory cgroup out of memory: Killed process 22930 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35800kB, shmem-rss:0kB [ 447.992567][T22957] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 448.006168][T22957] CPU: 1 PID: 22957 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 448.014349][T22957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.024522][T22957] Call Trace: [ 448.028034][T22957] dump_stack+0x172/0x1f0 [ 448.032476][T22957] dump_header+0x10f/0xb6c [ 448.037000][T22957] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 448.043287][T22957] ? ___ratelimit+0x60/0x595 [ 448.048065][T22957] ? do_raw_spin_unlock+0x57/0x270 [ 448.053209][T22957] oom_kill_process.cold+0x10/0x15 [ 448.058601][T22957] out_of_memory+0x79a/0x1280 [ 448.063593][T22957] ? oom_killer_disable+0x280/0x280 [ 448.068990][T22957] ? find_held_lock+0x35/0x130 [ 448.074073][T22957] mem_cgroup_out_of_memory+0x1ca/0x230 [ 448.080142][T22957] ? memcg_event_wake+0x230/0x230 [ 448.086000][T22957] ? do_raw_spin_unlock+0x57/0x270 [ 448.091747][T22957] ? _raw_spin_unlock+0x2d/0x50 [ 448.096971][T22957] try_charge+0xa87/0x15c0 [ 448.101660][T22957] ? find_held_lock+0x35/0x130 [ 448.106627][T22957] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 448.112469][T22957] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.118287][T22957] ? find_held_lock+0x35/0x130 [ 448.123898][T22957] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 448.130149][T22957] __memcg_kmem_charge_memcg+0x7c/0x130 [ 448.136300][T22957] ? memcg_kmem_put_cache+0xb0/0xb0 [ 448.141987][T22957] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 448.147975][T22957] __memcg_kmem_charge+0x136/0x300 [ 448.153111][T22957] __alloc_pages_nodemask+0x4bf/0x8d0 [ 448.158652][T22957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.165338][T22957] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 448.171271][T22957] ? copy_process.part.0+0x1d08/0x7980 [ 448.177425][T22957] ? lockdep_hardirqs_on+0x418/0x5d0 [ 448.183471][T22957] ? trace_hardirqs_on+0x67/0x230 [ 448.188691][T22957] ? kasan_check_read+0x11/0x20 [ 448.194014][T22957] copy_process.part.0+0x3e0/0x7980 [ 448.199721][T22957] ? __lockdep_free_key_range+0x120/0x120 [ 448.205853][T22957] ? sched_clock+0x2e/0x50 [ 448.211104][T22957] ? psi_memstall_leave+0x12e/0x180 [ 448.216599][T22957] ? find_held_lock+0x35/0x130 [ 448.221644][T22957] ? psi_memstall_leave+0x12e/0x180 [ 448.227316][T22957] ? __cleanup_sighand+0x60/0x60 [ 448.232480][T22957] ? perf_trace_lock+0xeb/0x510 [ 448.238050][T22957] ? __lockdep_free_key_range+0x120/0x120 [ 448.244108][T22957] _do_fork+0x257/0xfd0 [ 448.248484][T22957] ? fork_idle+0x1d0/0x1d0 [ 448.253638][T22957] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 448.260109][T22957] ? lock_downgrade+0x880/0x880 [ 448.265472][T22957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.272381][T22957] ? blkcg_exit_queue+0x30/0x30 [ 448.277432][T22957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.283901][T22957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.289623][T22957] ? do_syscall_64+0x26/0x610 [ 448.294430][T22957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.300955][T22957] ? do_syscall_64+0x26/0x610 [ 448.305777][T22957] __x64_sys_clone+0xbf/0x150 [ 448.310851][T22957] do_syscall_64+0x103/0x610 [ 448.315743][T22957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.322142][T22957] RIP: 0033:0x45b779 [ 448.326308][T22957] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 448.350557][T22957] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 448.359246][T22957] RAX: ffffffffffffffda RBX: 00007fbf2a012700 RCX: 000000000045b779 [ 448.367340][T22957] RDX: 00007fbf2a0129d0 RSI: 00007fbf2a011db0 RDI: 00000000003d0f00 [ 448.375982][T22957] RBP: 0000000000a4fcb0 R08: 00007fbf2a012700 R09: 00007fbf2a012700 [ 448.384267][T22957] R10: 00007fbf2a0129d0 R11: 0000000000000202 R12: 0000000000000000 [ 448.392613][T22957] R13: 0000000000a4fb4f R14: 00007fbf2a0129c0 R15: 000000000073c0ec [ 448.405707][T22957] memory: usage 304828kB, limit 307200kB, failcnt 603 [ 448.420914][T22957] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.439208][T22957] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 448.454999][T22957] Memory cgroup stats for /syz5: cache:148KB rss:262836KB rss_huge:245760KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:262924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 448.504381][T22957] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20106,uid=0 12:32:18 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x18f) 12:32:18 executing program 2: r0 = memfd_create(&(0x7f0000001500)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x14\x00\x8c\x00', 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000942000)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x7ff) keyctl$negate(0xd, 0x0, 0x0, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x00'}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) exit(0x1007) sendto$inet(r1, &(0x7f0000000b40), 0xfffffffffffffee3, 0x40000cb, 0x0, 0xfffffffffffffd7f) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x1000, 0x1}) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) accept4$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e, 0x80800) finit_module(r0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=@v1={0x1000000, [{0x7f, 0x6}]}, 0xc, 0x1) [ 448.521049][T22957] Memory cgroup out of memory: Killed process 20106 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB 12:32:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2842, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x200000af}], 0xf, 0x0) 12:32:18 executing program 2: syz_emit_ethernet(0x320, &(0x7f0000000100)={@random="b100485caa2a", @random="43333e128ef5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x312, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x14, 0x0, 0x0, @multicast1=0xe0000002}}}}}, 0x0) 12:32:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) close(r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 12:32:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x190) 12:32:18 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:32:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 449.012842][T23033] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 12:32:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x191) 12:32:18 executing program 2: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x402000) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x3, 0x401}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a09000000123f1188233b") mlock(&(0x7f0000375000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000da1000/0x1000)=nil) [ 449.113624][T23033] CPU: 1 PID: 23033 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 449.121954][T23033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.132207][T23033] Call Trace: [ 449.135624][T23033] dump_stack+0x172/0x1f0 [ 449.140610][T23033] dump_header+0x10f/0xb6c [ 449.145422][T23033] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 449.151459][T23033] ? ___ratelimit+0x60/0x595 [ 449.156356][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 449.161666][T23033] oom_kill_process.cold+0x10/0x15 [ 449.167003][T23033] out_of_memory+0x79a/0x1280 [ 449.172494][T23033] ? lock_downgrade+0x880/0x880 [ 449.177656][T23033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.184851][T23033] ? oom_killer_disable+0x280/0x280 [ 449.190861][T23033] ? find_held_lock+0x35/0x130 [ 449.196255][T23033] mem_cgroup_out_of_memory+0x1ca/0x230 [ 449.202185][T23033] ? memcg_event_wake+0x230/0x230 [ 449.207438][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 449.212955][T23033] ? _raw_spin_unlock+0x2d/0x50 [ 449.217869][T23033] try_charge+0x102c/0x15c0 [ 449.222658][T23033] ? find_held_lock+0x35/0x130 [ 449.227778][T23033] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 449.233687][T23033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.240320][T23033] ? kasan_check_read+0x11/0x20 [ 449.245406][T23033] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 449.251069][T23033] mem_cgroup_try_charge+0x24d/0x5e0 [ 449.256872][T23033] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 449.262833][T23033] wp_page_copy+0x408/0x1740 [ 449.267848][T23033] ? find_held_lock+0x35/0x130 [ 449.273190][T23033] ? pmd_pfn+0x1d0/0x1d0 [ 449.273208][T23033] ? lock_downgrade+0x880/0x880 [ 449.273226][T23033] ? __pte_alloc_kernel+0x220/0x220 [ 449.288011][T23033] ? kasan_check_read+0x11/0x20 [ 449.288028][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 449.288046][T23033] do_wp_page+0x48e/0x1500 [ 449.288058][T23033] ? do_raw_spin_lock+0x12a/0x2e0 [ 449.288073][T23033] ? rwlock_bug.part.0+0x90/0x90 [ 449.288087][T23033] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 449.288100][T23033] ? add_mm_counter_fast.part.0+0x40/0x40 [ 449.288121][T23033] __handle_mm_fault+0x22e8/0x3ec0 [ 449.332240][T23033] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 449.338515][T23033] ? find_held_lock+0x35/0x130 [ 449.343800][T23033] ? handle_mm_fault+0x322/0xb30 [ 449.348843][T23033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.355260][T23033] ? kasan_check_read+0x11/0x20 [ 449.360302][T23033] handle_mm_fault+0x43f/0xb30 [ 449.365071][T23033] __do_page_fault+0x5ef/0xda0 [ 449.370037][T23033] do_page_fault+0x71/0x581 [ 449.374723][T23033] ? page_fault+0x8/0x30 [ 449.379573][T23033] page_fault+0x1e/0x30 [ 449.383965][T23033] RIP: 0033:0x40e018 [ 449.388016][T23033] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ac e3 4b 00 31 c0 e8 03 39 ff ff 31 ff e8 4c 35 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 4e 24 64 00 12:32:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 449.409403][T23033] RSP: 002b:0000000000a4fb00 EFLAGS: 00010246 [ 449.415904][T23033] RAX: 0000000010214cc2 RBX: 00000000b42341af RCX: 0000001b31c20000 [ 449.424501][T23033] RDX: 0000000000000000 RSI: 0000000000000cc2 RDI: ffffffff10214cc2 [ 449.433097][T23033] RBP: 0000000000000001 R08: 0000000010214cc2 R09: 0000000010214cc6 [ 449.441692][T23033] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 449.450624][T23033] R13: 0000000080000000 R14: 00007fbf2c076008 R15: 0000000000000001 12:32:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x80) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x200030) perf_event_open(0x0, 0x0, 0xb, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x5a2a000000000, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000002b80)=""/4096) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000240)={&(0x7f0000ffd000/0x1000)=nil, 0x100000000, 0x5, 0xd0, &(0x7f0000ffd000/0x3000)=nil, 0x1ff}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x11) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x9, 0xfc1e}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000d36db6a6b6ee04edeebc6591806dc008d7f563ae469f2a3544df36216d3c0745f5f1c3da90cc12996c8a0b00000000000000"], 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000140)={0x2, 0x7, 0x6, 0x3c7e, 0x9, 0x7f06}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffffffffffc, @loopback, 0x80}, 0x1c) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8801, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00'}) clone(0x82102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:32:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 449.535535][T23033] memory: usage 307168kB, limit 307200kB, failcnt 634 12:32:19 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x192) [ 449.634394][T23033] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.676275][T23033] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 449.715062][T23033] Memory cgroup stats for /syz5: cache:148KB rss:264948KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265084KB inactive_file:0KB active_file:0KB unevictable:0KB [ 449.867470][T23033] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20200,uid=0 [ 449.903480][T23033] Memory cgroup out of memory: Killed process 20200 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 449.959910][T23080] syz-executor.3 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 449.986398][T23080] CPU: 0 PID: 23080 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 449.994590][T23080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.005496][T23080] Call Trace: [ 450.008804][T23080] dump_stack+0x172/0x1f0 [ 450.013268][T23080] dump_header+0x10f/0xb6c [ 450.017761][T23080] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.024037][T23080] ? ___ratelimit+0x60/0x595 [ 450.029012][T23080] ? do_raw_spin_unlock+0x57/0x270 [ 450.034330][T23080] oom_kill_process.cold+0x10/0x15 [ 450.039572][T23080] out_of_memory+0x79a/0x1280 [ 450.044364][T23080] ? lock_downgrade+0x880/0x880 [ 450.049512][T23080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.056210][T23080] ? oom_killer_disable+0x280/0x280 [ 450.062283][T23080] ? find_held_lock+0x35/0x130 [ 450.067227][T23080] mem_cgroup_out_of_memory+0x1ca/0x230 [ 450.073199][T23080] ? memcg_event_wake+0x230/0x230 [ 450.078565][T23080] ? do_raw_spin_unlock+0x57/0x270 [ 450.084048][T23080] ? _raw_spin_unlock+0x2d/0x50 [ 450.090601][T23080] try_charge+0x102c/0x15c0 [ 450.095665][T23080] ? find_held_lock+0x35/0x130 [ 450.100559][T23080] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 450.106373][T23080] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.112383][T23080] ? find_held_lock+0x35/0x130 [ 450.117213][T23080] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 450.122878][T23080] __memcg_kmem_charge_memcg+0x7c/0x130 [ 450.129054][T23080] ? memcg_kmem_put_cache+0xb0/0xb0 [ 450.134504][T23080] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 450.140787][T23080] __memcg_kmem_charge+0x136/0x300 [ 450.146015][T23080] __alloc_pages_nodemask+0x4bf/0x8d0 [ 450.151436][T23080] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 450.157679][T23080] ? __kmalloc_node+0x3d/0x70 [ 450.162603][T23080] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.169220][T23080] alloc_pages_current+0x107/0x210 [ 450.174530][T23080] ? ___might_sleep+0x163/0x280 [ 450.179855][T23080] __vmalloc_node_range+0x4b0/0x790 [ 450.185170][T23080] ? __kvm_set_memory_region+0xb95/0x2120 [ 450.191230][T23080] __vmalloc_node_flags_caller+0x71/0x90 [ 450.196989][T23080] ? __kvm_set_memory_region+0xb95/0x2120 [ 450.202926][T23080] kvmalloc_node+0xdc/0x100 [ 450.207689][T23080] __kvm_set_memory_region+0xb95/0x2120 [ 450.213389][T23080] ? kvm_vcpu_block+0xce0/0xce0 [ 450.218427][T23080] kvm_set_memory_region+0x2f/0x50 [ 450.223560][T23080] kvm_vm_ioctl+0x75e/0x19c0 [ 450.228639][T23080] ? save_stack+0xa9/0xd0 [ 450.233165][T23080] ? kvm_unregister_device_ops+0x70/0x70 [ 450.238998][T23080] ? kasan_slab_free+0xe/0x10 [ 450.243766][T23080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.250121][T23080] ? debug_smp_processor_id+0x3c/0x280 [ 450.255763][T23080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.262234][T23080] ? debug_smp_processor_id+0x3c/0x280 [ 450.267981][T23080] ? perf_trace_lock+0xeb/0x510 [ 450.273119][T23080] ? perf_trace_lock+0xeb/0x510 [ 450.278157][T23080] ? perf_trace_lock+0xeb/0x510 [ 450.283233][T23080] ? tomoyo_domain+0xc5/0x160 [ 450.287963][T23080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.294234][T23080] ? tomoyo_init_request_info+0x105/0x1d0 [ 450.300069][T23080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.306863][T23080] ? tomoyo_path_number_perm+0x263/0x520 [ 450.312916][T23080] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 450.319177][T23080] ? __lockdep_free_key_range+0x120/0x120 [ 450.325035][T23080] ? __fget+0x35a/0x550 [ 450.333779][T23080] ? kvm_unregister_device_ops+0x70/0x70 [ 450.339737][T23080] do_vfs_ioctl+0xd6e/0x1390 [ 450.344675][T23080] ? ioctl_preallocate+0x210/0x210 [ 450.350282][T23080] ? __fget+0x381/0x550 [ 450.354874][T23080] ? ksys_dup3+0x3e0/0x3e0 [ 450.359599][T23080] ? __bad_area_nosemaphore+0xb3/0x420 [ 450.365584][T23080] ? tomoyo_file_ioctl+0x23/0x30 [ 450.370786][T23080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.377509][T23080] ? security_file_ioctl+0x93/0xc0 [ 450.382766][T23080] ksys_ioctl+0xab/0xd0 [ 450.387147][T23080] __x64_sys_ioctl+0x73/0xb0 [ 450.392000][T23080] do_syscall_64+0x103/0x610 [ 450.396880][T23080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.403254][T23080] RIP: 0033:0x458c17 [ 450.407219][T23080] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.427724][T23080] RSP: 002b:00007f3165419068 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.436506][T23080] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c17 [ 450.444766][T23080] RDX: 00007f3165419510 RSI: 000000004020ae46 RDI: 0000000000000004 [ 450.452889][T23080] RBP: 0000000020002000 R08: 00007f3165419070 R09: 000000000073c040 [ 450.460892][T23080] R10: 00007f316541b9d0 R11: 0000000000000246 R12: 00000000fec00000 [ 450.468891][T23080] R13: 0000000000000004 R14: 00000000004dd838 R15: 00000000ffffffff [ 450.487580][T23080] memory: usage 307180kB, limit 307200kB, failcnt 1614 [ 450.527798][T23080] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.547715][T23080] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.567618][T23080] Memory cgroup stats for /syz3: cache:144KB rss:270656KB rss_huge:256000KB shmem:264KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:56KB active_anon:270760KB inactive_file:0KB active_file:0KB unevictable:0KB [ 450.630864][T23080] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8680,uid=0 [ 450.675106][T23080] Memory cgroup out of memory: Killed process 8680 (syz-executor.3) total-vm:72448kB, anon-rss:4244kB, file-rss:35796kB, shmem-rss:0kB [ 450.899758][T23042] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 450.946485][T23042] CPU: 0 PID: 23042 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 450.954605][T23042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.964889][T23042] Call Trace: [ 450.968376][T23042] dump_stack+0x172/0x1f0 [ 450.972920][T23042] dump_header+0x10f/0xb6c [ 450.977445][T23042] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.983881][T23042] ? ___ratelimit+0x60/0x595 [ 450.989001][T23042] ? do_raw_spin_unlock+0x57/0x270 [ 450.994288][T23042] oom_kill_process.cold+0x10/0x15 [ 451.000035][T23042] out_of_memory+0x79a/0x1280 [ 451.005056][T23042] ? oom_killer_disable+0x280/0x280 [ 451.010434][T23042] ? find_held_lock+0x35/0x130 [ 451.015446][T23042] mem_cgroup_out_of_memory+0x1ca/0x230 [ 451.021285][T23042] ? memcg_event_wake+0x230/0x230 [ 451.026614][T23042] ? do_raw_spin_unlock+0x57/0x270 [ 451.031863][T23042] ? _raw_spin_unlock+0x2d/0x50 [ 451.036744][T23042] try_charge+0xa87/0x15c0 [ 451.041448][T23042] ? find_held_lock+0x35/0x130 [ 451.046569][T23042] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 451.052438][T23042] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 451.058379][T23042] ? find_held_lock+0x35/0x130 [ 451.063169][T23042] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 451.069099][T23042] __memcg_kmem_charge_memcg+0x7c/0x130 [ 451.075031][T23042] ? memcg_kmem_put_cache+0xb0/0xb0 [ 451.080441][T23042] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 451.086378][T23042] __memcg_kmem_charge+0x136/0x300 [ 451.092272][T23042] __alloc_pages_nodemask+0x4bf/0x8d0 [ 451.097760][T23042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.104109][T23042] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 451.109956][T23042] ? copy_process.part.0+0x1d08/0x7980 [ 451.115722][T23042] copy_process.part.0+0x3e0/0x7980 [ 451.121051][T23042] ? __lockdep_free_key_range+0x120/0x120 [ 451.126956][T23042] ? sched_clock+0x2e/0x50 [ 451.131391][T23042] ? psi_memstall_leave+0x12e/0x180 [ 451.136891][T23042] ? find_held_lock+0x35/0x130 [ 451.141810][T23042] ? psi_memstall_leave+0x12e/0x180 [ 451.147303][T23042] ? __cleanup_sighand+0x60/0x60 [ 451.152261][T23042] ? perf_trace_lock+0xeb/0x510 [ 451.157399][T23042] ? __lockdep_free_key_range+0x120/0x120 [ 451.163497][T23042] _do_fork+0x257/0xfd0 [ 451.167792][T23042] ? fork_idle+0x1d0/0x1d0 [ 451.172454][T23042] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 451.178747][T23042] ? lock_downgrade+0x880/0x880 [ 451.183899][T23042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.190882][T23042] ? blkcg_exit_queue+0x30/0x30 [ 451.195945][T23042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.201527][T23042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.207388][T23042] ? do_syscall_64+0x26/0x610 [ 451.212426][T23042] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.218892][T23042] ? do_syscall_64+0x26/0x610 [ 451.223779][T23042] __x64_sys_clone+0xbf/0x150 [ 451.228688][T23042] do_syscall_64+0x103/0x610 [ 451.233305][T23042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.239472][T23042] RIP: 0033:0x45b779 [ 451.243942][T23042] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 451.294208][T23042] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 451.303032][T23042] RAX: ffffffffffffffda RBX: 00007f31653fa700 RCX: 000000000045b779 [ 451.311702][T23042] RDX: 00007f31653fa9d0 RSI: 00007f31653f9db0 RDI: 00000000003d0f00 [ 451.319965][T23042] RBP: 0000000000a4fcb0 R08: 00007f31653fa700 R09: 00007f31653fa700 [ 451.327970][T23042] R10: 00007f31653fa9d0 R11: 0000000000000202 R12: 0000000000000000 [ 451.336191][T23042] R13: 0000000000a4fb4f R14: 00007f31653fa9c0 R15: 000000000073c0ec [ 451.354331][T23042] memory: usage 302816kB, limit 307200kB, failcnt 1614 [ 451.367009][T23042] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.387648][T23042] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.407694][T23042] Memory cgroup stats for /syz3: cache:144KB rss:266436KB rss_huge:251904KB shmem:264KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:56KB active_anon:266552KB inactive_file:0KB active_file:0KB unevictable:0KB [ 451.456577][T23042] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18430,uid=0 [ 451.499844][T23042] Memory cgroup out of memory: Killed process 18430 (syz-executor.3) total-vm:72844kB, anon-rss:2220kB, file-rss:35804kB, shmem-rss:0kB [ 451.529417][ T1044] oom_reaper: reaped process 18430 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 451.568116][T23033] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 451.682880][T23033] CPU: 1 PID: 23033 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 451.691546][T23033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.702314][T23033] Call Trace: [ 451.705718][T23033] dump_stack+0x172/0x1f0 [ 451.710159][T23033] dump_header+0x10f/0xb6c [ 451.714955][T23033] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 451.720870][T23033] ? ___ratelimit+0x60/0x595 [ 451.725712][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 451.731024][T23033] oom_kill_process.cold+0x10/0x15 [ 451.736536][T23033] out_of_memory+0x79a/0x1280 [ 451.741498][T23033] ? oom_killer_disable+0x280/0x280 [ 451.747088][T23033] ? find_held_lock+0x35/0x130 [ 451.752033][T23033] mem_cgroup_out_of_memory+0x1ca/0x230 [ 451.758214][T23033] ? memcg_event_wake+0x230/0x230 [ 451.763427][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 451.768654][T23033] ? _raw_spin_unlock+0x2d/0x50 [ 451.773711][T23033] try_charge+0x102c/0x15c0 [ 451.778231][T23033] ? find_held_lock+0x35/0x130 [ 451.783726][T23033] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 451.789557][T23033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.796503][T23033] ? kasan_check_read+0x11/0x20 [ 451.801725][T23033] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 451.807613][T23033] mem_cgroup_try_charge+0x24d/0x5e0 [ 451.813129][T23033] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 451.819390][T23033] wp_page_copy+0x408/0x1740 [ 451.824347][T23033] ? find_held_lock+0x35/0x130 [ 451.829141][T23033] ? pmd_pfn+0x1d0/0x1d0 [ 451.833614][T23033] ? lock_downgrade+0x880/0x880 [ 451.838749][T23033] ? swp_swapcount+0x540/0x540 [ 451.843876][T23033] ? kasan_check_read+0x11/0x20 [ 451.849039][T23033] ? do_raw_spin_unlock+0x57/0x270 [ 451.854734][T23033] do_wp_page+0x48e/0x1500 [ 451.859196][T23033] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 451.865235][T23033] __handle_mm_fault+0x22e8/0x3ec0 [ 451.870653][T23033] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 451.876725][T23033] ? find_held_lock+0x35/0x130 [ 451.881626][T23033] ? handle_mm_fault+0x322/0xb30 [ 451.886679][T23033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.893124][T23033] ? kasan_check_read+0x11/0x20 [ 451.898378][T23033] handle_mm_fault+0x43f/0xb30 [ 451.903307][T23033] __do_page_fault+0x5ef/0xda0 [ 451.908759][T23033] do_page_fault+0x71/0x581 [ 451.913662][T23033] ? page_fault+0x8/0x30 [ 451.918042][T23033] page_fault+0x1e/0x30 [ 451.922217][T23033] RIP: 0033:0x40b828 [ 451.926211][T23033] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 38 2c 00 00 8b 05 e2 c7 32 00 48 8b 15 73 4c 64 00 83 c0 01 <89> 05 d2 c7 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 451.946867][T23033] RSP: 002b:0000000000a4fb60 EFLAGS: 00010206 [ 451.953152][T23033] RAX: 0000000000000005 RBX: 0000001b30c2274c RCX: 0000001b31c20000 [ 451.961143][T23033] RDX: 0000001b30c20000 RSI: 0000000000000104 RDI: 00000000939d4104 [ 451.969305][T23033] RBP: 0000001b30c22750 R08: 00000000939d4108 R09: ffffffffffffffff [ 451.977494][T23033] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 0000001b30c22754 [ 451.985667][T23033] R13: 000000000006dd93 R14: 000000000073bf00 R15: 000000000073bf0c [ 452.016004][T23033] memory: usage 306752kB, limit 307200kB, failcnt 649 [ 452.032500][T23033] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.045048][T23033] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 452.053029][T23033] Memory cgroup stats for /syz5: cache:148KB rss:264920KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265028KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:21 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:21 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x18) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd87, 0x7ffd) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) getsockname$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r3 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000200)={r1, r1, 0x3}) 12:32:21 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x193) 12:32:21 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x45, 0xc3, &(0x7f0000000000)="d17601cce16ae71ecee45f50bf60b0315783d77f7bd650fce062186ccfc30c634513318bbaf14e561ba682254dc8ff781ed1d7a3d3094f680052691d0055a400934d1bca27", &(0x7f0000000080)=""/195, 0x5}, 0x28) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) [ 452.076118][T23033] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20332,uid=0 [ 452.092227][T23033] Memory cgroup out of memory: Killed process 20332 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 452.109150][ T1044] oom_reaper: reaped process 20332 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f00000001c0), 0xc) 12:32:21 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000040)={0x1, 0xd003, 0x800000000000000, 0x8, 0x1}) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x29a}, 0x14) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendfile(r0, r1, &(0x7f0000000080), 0x2000000000005c36) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000100)=0x101) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'bond0\x00'}}, 0x1e) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f00000001c0)={0x1, &(0x7f0000000180)="ff422d5395f0b8ab4e90b821"}) inotify_init() setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x8}, 0x4) fallocate(r1, 0x4, 0x3, 0x20) 12:32:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x194) 12:32:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:22 executing program 2: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000000)=0x54) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r0 = socket$inet(0x10, 0x8, 0x2000000) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000160007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000007180)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/68, 0x44}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000005c0)=""/139, 0x8b}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000840)=""/9, 0x9}, 0xffffffffffff434d}, {{0x0, 0x0, &(0x7f0000003380)}}], 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0xd21a, 0x0, 0x4, 0x400}, {0x9, 0x81, 0x9, 0x400}, {0x200, 0x90cb, 0xbad, 0x1ff}, {0x3, 0x7, 0x5e51, 0x7}]}) r2 = getpid() getpriority(0x2, r2) 12:32:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x140, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x6}, @in6={0xa, 0x4e20, 0x13e, @dev={0xfe, 0x80, [], 0x1d}}], 0x38) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:32:22 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x195) 12:32:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2000000080003, 0xc) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[]}, 0x78) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x02\x00\x00\x00\x00t\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x2, 0x0, &(0x7f0000000380)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x1f, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 'veth0_to_bond\x00', 'vcan0\x00', '\tlan0\x00', @broadcast, [0x0, 0x0, 0xff], @empty, [0xfffffffffffffffe, 0x0, 0x4000000], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2dd17a8bb85b9c4, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x40) [ 452.682173][T23137] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 452.754435][T23137] CPU: 0 PID: 23137 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 452.763369][T23137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.773749][T23137] Call Trace: [ 452.777583][T23137] dump_stack+0x172/0x1f0 [ 452.782197][T23137] dump_header+0x10f/0xb6c [ 452.786850][T23137] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 452.793447][T23137] ? ___ratelimit+0x60/0x595 [ 452.798093][T23137] ? do_raw_spin_unlock+0x57/0x270 [ 452.803239][T23137] oom_kill_process.cold+0x10/0x15 [ 452.808879][T23137] out_of_memory+0x79a/0x1280 [ 452.813808][T23137] ? lock_downgrade+0x880/0x880 [ 452.819214][T23137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.825684][T23137] ? oom_killer_disable+0x280/0x280 [ 452.831922][T23137] ? find_held_lock+0x35/0x130 [ 452.837373][T23137] mem_cgroup_out_of_memory+0x1ca/0x230 [ 452.844439][T23137] ? memcg_event_wake+0x230/0x230 [ 452.850355][T23137] ? do_raw_spin_unlock+0x57/0x270 [ 452.855967][T23137] ? _raw_spin_unlock+0x2d/0x50 [ 452.861043][T23137] try_charge+0x102c/0x15c0 [ 452.865577][T23137] ? find_held_lock+0x35/0x130 [ 452.870395][T23137] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 452.876266][T23137] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 452.882256][T23137] ? find_held_lock+0x35/0x130 [ 452.887066][T23137] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 452.893233][T23137] __memcg_kmem_charge_memcg+0x7c/0x130 [ 452.899243][T23137] ? memcg_kmem_put_cache+0xb0/0xb0 [ 452.904576][T23137] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 452.910544][T23137] __memcg_kmem_charge+0x136/0x300 [ 452.916755][T23137] __alloc_pages_nodemask+0x4bf/0x8d0 [ 452.922427][T23137] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 452.928652][T23137] ? copy_page_range+0x125a/0x1f90 [ 452.933963][T23137] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.940734][T23137] alloc_pages_current+0x107/0x210 [ 452.946410][T23137] pte_alloc_one+0x1b/0x1a0 [ 452.951311][T23137] __pte_alloc+0x20/0x310 [ 452.956314][T23137] copy_page_range+0x1529/0x1f90 [ 452.961598][T23137] ? perf_trace_lock+0xeb/0x510 [ 452.966857][T23137] ? pmd_alloc+0x180/0x180 [ 452.971822][T23137] ? __rb_insert_augmented+0x231/0xdf0 [ 452.977763][T23137] ? validate_mm_rb+0xa3/0xc0 [ 452.983183][T23137] ? __vma_link_rb+0x279/0x370 [ 452.988113][T23137] copy_process.part.0+0x568b/0x7980 [ 452.993777][T23137] ? __cleanup_sighand+0x60/0x60 [ 452.998990][T23137] ? semctl_down+0x5e0/0x9f0 [ 453.003960][T23137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.010432][T23137] _do_fork+0x257/0xfd0 [ 453.014756][T23137] ? fork_idle+0x1d0/0x1d0 [ 453.019378][T23137] ? __ia32_sys_mkdir+0x80/0x80 [ 453.024445][T23137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.030056][T23137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 453.035696][T23137] ? do_syscall_64+0x26/0x610 [ 453.040607][T23137] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.046874][T23137] ? do_syscall_64+0x26/0x610 [ 453.051577][T23137] ? lockdep_hardirqs_on+0x418/0x5d0 [ 453.056893][T23137] __ia32_sys_fork+0x1f/0x30 [ 453.061591][T23137] do_syscall_64+0x103/0x610 [ 453.066203][T23137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.072213][T23137] RIP: 0033:0x2000000a [ 453.076747][T23137] Code: Bad RIP value. [ 453.081001][T23137] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 453.089765][T23137] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a 12:32:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 453.098125][T23137] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 453.106765][T23137] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 453.114843][T23137] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 453.122842][T23137] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff 12:32:22 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 453.499523][T23137] memory: usage 307200kB, limit 307200kB, failcnt 674 [ 453.525712][T23137] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.539467][T23137] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 453.546724][T23137] Memory cgroup stats for /syz5: cache:148KB rss:265132KB rss_huge:247808KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 453.570645][T23137] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23101,uid=0 12:32:23 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x196) 12:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 453.606600][T23137] Memory cgroup out of memory: Killed process 23101 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35800kB, shmem-rss:0kB 12:32:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="70b1465f32c3d9ac336e429dd77e2f286e1de34c", 0x14}, {&(0x7f0000000040)="7e512f9f7cc6ffd82602506497de70ef7e9a83051a1f08355338848720e7f26a330aaa091c964d0d25e55b0f8e86ee3693abd4d135dc581e06469e3b8edc1496e3980dd94dcd5fcde4320bc2460a100495d50fea17ff56c5d88d802690cc4219ec0d58dca170eaa0d184e85b540653457b65", 0x72}, {&(0x7f00000000c0)="4750bc0dd0bee286704719f8f0bd1b9637cf494b0b0be143e137ab1b22b3980f9867f95aaebdb45eee87151f21a1e98f809badec0b06b9fb7fe2d514c5a85f56b8244b957d194720ce6430d6a9bfdad395204a127fb3ba0ee8bb00d4a029d5a63912e4bbb06b47af8d0859df4362f9ebcb5a64d892b2c6172d2730c4a5c6c7ea9e01e3f38ce58f1f398444374542dfa3e0379da03aef6c4afb8da181903ba6051299ea9301d74365d9883003689ccbe08c8a", 0xb2}, {&(0x7f0000000240)="907f2edeb280742e8fa62c80d27600755e40baf8a003938ae832d66f5732552797b42627d758fc945dbdd511125368a6a6ae822df261b8475208ec45baaa065872c80679c71b4cd47e91c32c4e341ac0bee049ffd51189301f1abf459f9d40a335f507b0f979335ede650cbd465e7f6333f13af24bfd14abd34d4677fcfe1ac7b8d504a2bfa16a950fe76974bc4372079bf71ebde009d1450b7d1b9cd6", 0x9d}, {&(0x7f0000000300)="40f7dca8296d7079c6a06f2ab82b10bcf03cabe5f6964dcaa2d234d4d37277bf96c417daa38c83832fcb0d93aa1f2282c67906a007e53da9a49cf1407b30c4ddb11052e334d6db3a525ec0cbf15b79273912f2f2ecf910c05657374cfbdea17247cc237c828f14cb49606ed182ff12e7486ba800971e884c9189863443e6e7b1bcbd737dd14c3602cc8509559f80a1730be4b5dd9955a92b33d984d5e93955b90b3e8cf21c70fc3c4d6c27f47a0ee28adf93aff9e3fb25f7dd9a28113a731976d04d66373568bd5e0154f61863a5e3dedfc3d11b46dd1241372b326b8b2a918b257afc4af7e0d32395eb4c9d3cd48b9bee49a147bcacaec371b05753158ec85a63effd71025c6e20e6bdc56b59e4df0efcc66724c1225d2e945dd73e7403371c9d341de39112b80162b16b9cce2e213473f5b39eefc2ad246dbf4ba941972b293bc2f9e9751cabe609fa55158b10aedd25d2dfb6140b809a1525f4e01603da2de248fbadf2c09a3995fd904a30b78f0dbaf75a2bd561d276c4352cc8365b92c4ad5f98cf305bc34e147c2787183673cc41dbf6f7c2089279e16f6641f23fba90df55e0437e1be5e5d139ec1dbf7d3b2cfc701815231fd998072df9b2ffb7ab730a0e7162795729b59d0a1bfa873be977b78a46063ac8f2a591d8c34e4ab9cd7b9306eaa87342716ffe0d3c45bef4d13739a7a8efabaf28262c82300747432dfd63f5c2696209802d5435dda6882f4f873baceed3838c8c8d3aa60264089a8714030377619ef5803c94a01a1d9cf3666b0dd72669e0a6bd8c4ea929679ae9f5da0a7898723f5a58bc0cd63308edb39ec6205a80d9f24761b66424972c24db2befd4027a08238584463a8450ac0c26c0ca698d2df244408b3d0cc9d263bda77626d1d1d1fdb859e50242d2c9d6e858dd583eb4ffa0b56e0468eb05bda2b8dc1424dd93bf2ace9d43e5d7a13b579c6c67f3a3d147cc3c8fdb3c3c0985e7fb61f083f91fec9ba437eb23f976ff7cb1119ef3dfb30f088001a4ba3e243e5ee16feca5352a08175371cbbe2b9b2d62ceeb2cd86049e383fe1c6ea54882e2267f14addd76c69ac560a7eb75925477ab152ace0d9013eea66488005ec77c461819a1a61fd4a1e4233b40ea8ee130be660aec7867d7d51ebd3eb036b868c60ca6482e7e8ce60a221d49b4c953779b46653c2584e424abbf541fee1dc96d642a4896b50e01b61ecb823561674873298ff01003e927b63c263c2b81b319a412c3c4b044425dfe8770bf04fc42eeee7766a091dedce91b856fc1c0657e52c18e7b0a6e1381191b379d75bd60550d63411b48b366ba39f7bc49d4364e37580acb82515b7699493b9e7f3a8cd7c87039cc54b59f8a6eaa7a534bc2fd77aeb058253f35d743d64b53788340634450b93766ab5795543c2d812b22ca20e6eaac2e91dc20a2887b0c2e408c619fe4013fde359fa2a3ba40aa4e8edbbde43940f3a38c067662c09ed81b027568fd8d3d9d68e276ce5302195ea91aa81eec2ee67b66a57f081fd8670c6dc27e9100b01f35c5a50ccb9a1a65b8348ef9cecc71daf6d5a8a28da96923e8d9e614215e9f1b71fe4a0ab278e53d49aea4f24f0fc2eea2ee758e988b9818ed2a2d9dc531abbe48babe305fb817b0503524f05165c288909717df008987b9e662b4f7af1b19228a29f49669bd0dd9a2739b1190bd1f17b932fa6d3f24de568e3c71c56d59ba9572dd5a788f781b4103d66991c37b1814d53a0b30115d16b0407b4c51031be279f18222fc278eb59c14ff531938af68ac3cbff4096433a97919c04056f06864cbc24e6ae9788c097c1ede750cc9f07b203e49641c9b03943e39c93a2a7ff4d05d3969a208b78801b47d8b2b0af66aa2487cc1a740583d3fa84e89b132fb90b7ed111794084df44cb1c85651457cae6e5568b8a7cb8cdf47f7dc7ece535976b8e76d4a4d53b7b87776b4fcc88d79a95efde3ee446224541e0511ea92c82e90fa51d0d3addc998403ffefc249eadb756863260ec764788e37a3965a57413a062f15002bdd7d1b260e6cdd922109179e38e290ef533c2d1ecc0f8fc13f1e46f125678ae3c1eb7e430e050cca63adf0ef0dd43984a01f29d3ba793f8a472896c0bd06024da0abc2f03900ccc5eb0d126999353a7ffe2c6a3a10ceb84b9dc9d6990476107dda3dbdcbede370d50a158c3ea0bcd68ed1bc45ef2652b7bd5db099a0b9ec590a9d19bc26713eb98d15fd27f6a380b65ea8d8e0fb5e4d07f50e6b6e3aba5c7fe36dffd6ac796d297aab7c53e27a641ba3f3b4aad66f58df08e2b3e560b0ae349d57496f4620f2456b598b3893b6ab8af950c3b678564f92b672308b07e7fb66c56512b6276e7dae2c92b1b55c7676b87652b6fb71ec106db141dbeb8c949d28cb1b92ff93f3efd82453250eace025eba8ce6b27854af745c4a74267b6baaae1dafa05b4125b15bd34b48e2e09e0c75600715976165bfb30396828de9cad558ef7b500d740830aaf647b998d58494d9d1a2ca1354aa9206281bd9b282b8c245e2e1667ea7714b341545c2e86f5b1bea80beb1a619b217c1fe19b776f47d412993106603461302929214f212bb1b48f26643aaf76d2d6b1ba05de191909709402d85ad0679597724c5b0f471bd7e7f71b74ecd1327f25932e6ad09ce4b7ae3cb3868d6c41b3528e375515aba46081eef898baf34c038559bc8095d88008f0ef152c02074bb72cd4dbbdc1689b2d5064bd0e06bd50f6d0bd06605e8e416d49888d4c7e9faa4823b566bef7bd895ae2fd55d097a772478ad06da678ac9bc6934d6f38fb85239efbfef30e5120ecc5b49d99253d1e5ad3176d0050fde21e285bb19a03dc0bde7a164bbe7924449d47ffd464555c2d8e0ee41a6407a6b59fbd6e49797a9848c744b687b2838ad43a610d1c14b16b4386b686a4758073a31fab5d3ba16af7695e70a12d47828f8b677c1b0d9739503033eedb70b4714ae5e2e8b7b7dcc710fc9fb0d2a376a613f183b33faa140104c40b776450beea24e5e11f4ef774f6b1a99d20639669387f5cdb847384ca8442d25b67060a4c9405ae4b5d4cdaf996b27619be423ee7d17dbccf2488a74ebe05e203aa0434caea2930a35589cf472a0ddc6aca63f937b1ddb170bcd1652c800128751aa102bd4971dd1e3a09169bad1a07ee9239cf3bc632b04052721d47bffcb1fd79ee8eb5663fdc27d4c11b63fe38f446c850c6999301b23f959e1427ecb9d87dca8b84fdff550fd032e528a080e85bc182fdbc3eb82db46180e25af148e5c0cd123bfc4b59c6f28af40ceff70eb72056e2cc43d9290fa1ad0072b33c13c46d80ba6cd266afaa6e2715d2a9054c392770b7f98ad42f0ad73e2b3655d20868454649d0342533413c1c0fd79dd92b68ef3c1f2ba5a41b18abdb92def6035f101245be9c837704b0eea3af970db6d1e576348c902f2c9bb6306000ec733f34452949f06ffd44c5ea97c63fb98b7fa88e6c789a1d5190d93144088a4ca54334fc405c8f5d9264074ec2681ff985ebb9ec42dcc8a8d857d3f4153da02801af55a0660b74ecf54fd09fb3b93141884a49c748692a4dc94c77ceda0a78387e296abc89ea16865627f822431f891e2b61a58b6320a07ff243f5bdde69b22f3bf937285aa24b526b62b765c87bf4cd5192edcd085ec9102f0a9c7ab2b83f91a515352d12f46d4fcd94d60b2ec909b10db6191fa2e896062a4c8af348b527e937ff627ac83655d15e927ae4aa95ad75b0cf6b50308afdd082b7b0087b9d2a2cec4f456eefa5c2c4a02617be385738ce7f61fac96f82e7ece3060790176bbfbc2f47060219650ffc45a17680991818b7c83b5030e4d91b94e6a357b66d4a05eace8c846d99e4dceadb3bb4be13645682c19bf5dd9960c025c7cae3642947dca3c4092e8c48a9e2d3f46d5c8240738a7a229761ccba254db2d3c6cd8c6fd742d890464f2bcaf26d5f17b475a8712f93477fa8374626534d10bd0805a993fff1ee4aab62cd017ec2a33d3bb5d2dc1873c9cbe8133e17eddc1a8d329567a51aee1115118e9fcb824c57c6954979a287795af5a34e2973db4434e96195884ac3671dd8f970f19c6d741b032aa19ac47a9a5089b8e7bd3b4a34111016bf2f452a770767f8b52b1e42c5f91bdc7da29270a91924fa0765c5d172069dca36b86c38c9eb0a9325684929eeb95293b175b72c3e69c27c812e72d05f9ad174ab4ebfc54f6d89d1a395772daa4fb91ae593d37d22a2c4f9f573a9b90f828ff6546099a6424d8521ab072358fd439dcb7bd208d8deea5996eea4c0d53a12ff8f238de34060feba56dc8b15aa944af699b16552af91cd5838d4bba3650fbfeff0e6bab0fc7c388bb4a578a3b6b1df74c556c712b2f876da0498a4a9ca269afa112fcb107c417478208979498bdad16a5ed24821d65c765c5ed8d608f6cf16a33e6423831abff7845f60d7138a619b5ce183d8a8d3e2937e7d85d4123ded665ef9e8800376aad549c1e04260879c9f74c77c87ab3af8c89955c6be89e753f503b856305ad1024f2e5a27195a32213f9a74d6648275ead7a224b2c750e0301906dd86f92adf16766824f64964c7a2bd2c4b5956e36c3aff3df422d42074fe2d0769226031feaa0ef20968e4196b7eb0a8a6b58db7d174c2ae7fea1b8a0b44e149a45b933ec7950d3160980709cfd27fb37510bda6fbf729390a87c165303e7bee4e501faf58995f5adca56ea07f50ebfba4aff91f077f3ed480923ed964db79aa5829800eef56bd800890e14e8c9d1b075793703e9bf7630cdaed439e973dae9838eb412063afecbcab8aa2c97655e7ca19e7d65317623fa0bca6862b619a1ea4618b16d899c22c3fe04b8752d5e02ba114cbc498763f75be5c00f72f3ca12ad1092f21a2994c0dd928f49140d63e1a8a4d31f8b8d42cf7f27c839af49f670aa02ffd2128ea93c2d012154f34c5fc3444a7774a74c52fa02e4fe2329398d9b3d4eb7b9f805a73a2f8f21f4016e56e1909850cb5d1db17ce08f96f2db68c721c7adf5f22c681bd7f56d3e7344579c49774fa1a13c07c305889b38e0ad86969a3f45fc3cf82f56881fbdda0feef0f80f795d3e1239cd2fa5e5850504f28af02dfe24f04499f6254045f8088b596d6a77944262a3158edd9af536ead50b6899e9cab2be476b09f99b1b9e96603ee33e23447499d3ef0b131072591672d08d93544d8b1d497d3d050edf345344a3cdd410ee3fb289ec9d10f9d30d885f551796fda3cd1dfdc41daebb89648d64a820a0e0c88a45250f8ff10a86cb2fffd8810ede258ef71b51277cbb05653549725553bc3ec2408a5f50a7d114056e7288c212b5a2d2c277bc11e9b79610f9243b930374d7a507326d979230df7beb1a9286adb71d260b66686d32a46283012ca60d7cc0c905043e197b0585fa3089b38157593cb74fbf445f3d6f3997c80fcf2d27b2695ef4db5a63bbcf5a5751db1c073ed3d8761b734132247e0ec68c0356abaa660ab8598dcbb1b142503844a9b13c0dbb7f11ea0b968f9eefb0b10eb76b72088095211bbe88a72a8c9d2bc40abcb332caed08298694d968a108ce4cb0007ad58c431e987aaf39f520e246e85840dae1856ec660d7b378e1f8e8fa6c0b9d481ee947732d0411e77383ef893848c75e1c0b8a64574e572b4a7eccd54f655c974ddf8b8fb3fc5c4cc74b76c6cfcd97ff9bf74df25773ae03eb736bcf28cdd39fd6c4ccd6ef9f1c0f201945ad56107c1805b5a0957aa7216c02586fd36ec4ff27f668466bf04", 0x1000}, {&(0x7f0000000180)="b3ca1dc2accb0769c7e16c3c8d726bcb2a732972b958d0fe11a9d872ec46680a227621e95fb3908bac2efa806aec3600af5fed98955ec8a6e10747", 0x3b}, {&(0x7f0000001300)="05ee3915e9e6d8edebf62dc3da8ae5baa33cd8937bd76c7fe08d85722bec38b479e52a4685be9ef64f20892cfdb1d58b6a80da29c4af5d3f9adbb42444a363bc051f90e968dc351a28b7af37a780edd04a55f4566ea4f73b1ae356919b12913fd42468cfe1fe5311705d208b", 0x6c}], 0x7, &(0x7f0000001540)=[{0x98, 0x0, 0x8, "7aa8c3f400f0e2b2d623e6af125fbc245da2aa22d069cfd798951d62abb1a046155d3ace58db4e1604b14d55679578812eb36d47899e4ed5329bdeba2ba3abab89cb8e68e3ada9fa6a15d1cef2af35ead7036d49dd5530b96be5066321701744f05ca48bcd9045336775493cb37f59e2e4f2296cd6059a670787a69bd8317ba26dc0c2f9a94bf3"}], 0x98}, 0x9}], 0x1, 0x4008000) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 12:32:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x20000000004e20, 0x0, @ipv4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000002c0)=0x8, 0x4) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x3bfde9d00c37b4f0}, 0x2000) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x82040) sendmmsg(r0, &(0x7f00000000c0), 0x7ffffffffffff8d, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) wait4(r2, &(0x7f0000000280), 0x1, &(0x7f0000000300)) lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'L-'}, 0x28, 0x3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4c0000) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000140)={0x2, 0x80, 0xffffffff, 0x5, 0x0, 0x400}) 12:32:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x600001, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x1, 0xfffffffffffff000, 0x6000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x100000002, 0x195) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(r2, 0x302) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veridge\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="000018"]}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 12:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) ioctl$void(r0, 0xc0045878) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000, 0x6, 0x0, 0x5}, 0x51f74a0773640fcb) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) 12:32:23 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x197) 12:32:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x6, 0x3f}, 0x14) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) sendto(r1, &(0x7f0000000300)="d8", 0x1, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xfffffffffffffec4) connect(r1, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 12:32:23 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000000000000, @dev, 0x5}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r2 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r0, r1, &(0x7f0000000140), 0x101) getpeername(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000200)=0x80) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f00000004c0)=0x9, 0x4) shmget$private(0x0, 0x2000, 0x7800002d, &(0x7f0000ffd000/0x2000)=nil) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$VHOST_GET_FEATURES(r5, 0x8008af00, &(0x7f0000000100)) connect$l2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 12:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x198) 12:32:24 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x600001, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x1, 0xfffffffffffff000, 0x6000}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x100000002, 0x195) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(r2, 0x302) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veridge\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="000018"]}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 12:32:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r3 = dup2(r2, r1) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000000c0)="d36d4a88cac6faac22b94b1c75f941a086389c7c76876319344129c4948f6049f268dc651762e9632a17fd960293f2e5a2fa00e5c4f1f7cf473820998168c734e8ef44df6209a4327ec2c42bbb2564237286f62294c44b930478279f6fcb9b37da545f4fd94b9d4fc8f7887b82ed0e5cf9295e196b4112e5c96c50924bbf4e39c6a52baa0cf221db4f39bfaa24a8878790a0d32a5d55d1b84736aaca513e842590096a3f95c114fdde0d62a108d8cb8e14f4b48aa343482470645ff3787d295ffe5bcf") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc0305302, &(0x7f000013e000)={0x0, 0x0, {0xa}}) 12:32:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x199) 12:32:24 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x88) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='smaps\x00') futex(&(0x7f0000000040), 0x1, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x1) sendfile(r0, r1, 0x0, 0x88001) 12:32:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) recvmmsg(r0, &(0x7f0000004bc0)=[{{&(0x7f0000004940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000004a80), 0x2e, &(0x7f0000004ac0)=""/197, 0xc5}}], 0x1300, 0x3b9ac9ff, &(0x7f0000004dc0)={0x77359400}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 455.114728][T23297] tls_set_device_offload_rx: netdev lo with no TLS offload [ 455.172907][T23300] tls_set_device_offload_rx: netdev lo with no TLS offload 12:32:25 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19a) 12:32:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x18000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x2a, "10209e5d71b00a4c27fbbf18bd33390506bde1c44a67b58adcd0de48873823935ee0711113e086f4305f"}, &(0x7f0000000540)=0x32) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000580)={r3, 0x1ff}, 0x8) 12:32:25 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000fc0000"]], 0x0, 0x0, 0x0}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)={r2, 0x13}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x10100) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x200) [ 455.545937][T23311] binder: 23310:23311 transaction failed 29189/-22, size 24-8 line 2995 12:32:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xa0801, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x400, 0x200000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x9e\xaf\xfb\xf8\xac\xc5D?$p\x819P\xed\xb1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6') r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x800, 0x0) getdents64(r2, &(0x7f0000000000)=""/103, 0x0) 12:32:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x6, 0x0, 0xffffffffffffff4e) 12:32:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 455.726271][ T3597] binder: undelivered TRANSACTION_ERROR: 29189 12:32:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19b) 12:32:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0402004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:25 executing program 2: r0 = userfaultfd(0x0) r1 = userfaultfd(0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) rt_sigtimedwait(&(0x7f0000000080)={0x9}, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x8) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) pipe(&(0x7f0000000000)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) 12:32:25 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x2000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffffffffffffe, 0x6, 0x7f, 0x2, 0x33}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x9, 0x8bc, 0x2b, 0x7ff, 0x7}, &(0x7f0000000280)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000140)="1c17b5b598cd801b69e4f56962f5696200d9dbd0ec17795bf2680c000000c443950d74d70011c7e4c753fbc4e101edfec4427d82663ed107c4415814c4f216c422c5930c025111c4a27d181ec1ea01eff265dc5f00c401611282030000005b5b304545e269a805000f9966030f3e2ef29fe424c4a15de1c054635bdedec4a1e1e0ef26400f0d18c401fe5ff6c4c1782ea600000100adc4c1f9133766470f38088d796fc8d42e443b0fc7bf0d5e00008000800f3a0bc401d5f421") 12:32:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:25 executing program 3: r0 = socket$inet(0xa, 0x1, 0x40) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x83) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x3, 0x3d77777b, 0x3, @discrete={0x3f, 0x6}}) inotify_rm_watch(0xffffffffffffffff, r1) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) getpeername(r2, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000001c0)=0x80) 12:32:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x5, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xd) 12:32:25 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19c) 12:32:25 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 456.092303][T23359] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 456.173961][T23359] CPU: 0 PID: 23359 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 456.183594][T23359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.194553][T23359] Call Trace: [ 456.198362][T23359] dump_stack+0x172/0x1f0 [ 456.203462][T23359] dump_header+0x10f/0xb6c [ 456.208014][T23359] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.214256][T23359] ? ___ratelimit+0x60/0x595 [ 456.218952][T23359] ? do_raw_spin_unlock+0x57/0x270 [ 456.224272][T23359] oom_kill_process.cold+0x10/0x15 [ 456.229404][T23359] out_of_memory+0x79a/0x1280 [ 456.234105][T23359] ? lock_downgrade+0x880/0x880 [ 456.239448][T23359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.245994][T23359] ? oom_killer_disable+0x280/0x280 [ 456.251825][T23359] ? find_held_lock+0x35/0x130 [ 456.256963][T23359] mem_cgroup_out_of_memory+0x1ca/0x230 [ 456.262705][T23359] ? memcg_event_wake+0x230/0x230 [ 456.268037][T23359] ? do_raw_spin_unlock+0x57/0x270 [ 456.273354][T23359] ? _raw_spin_unlock+0x2d/0x50 [ 456.278253][T23359] try_charge+0x102c/0x15c0 [ 456.283244][T23359] ? find_held_lock+0x35/0x130 [ 456.288383][T23359] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 456.293962][T23359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.300983][T23359] ? kasan_check_read+0x11/0x20 [ 456.305860][T23359] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 456.311432][T23359] mem_cgroup_try_charge+0x24d/0x5e0 [ 456.316842][T23359] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 456.322828][T23359] wp_page_copy+0x408/0x1740 [ 456.332084][T23359] ? find_held_lock+0x35/0x130 [ 456.337138][T23359] ? pmd_pfn+0x1d0/0x1d0 [ 456.341634][T23359] ? lock_downgrade+0x880/0x880 [ 456.346632][T23359] ? __pte_alloc_kernel+0x220/0x220 [ 456.351852][T23359] ? kasan_check_read+0x11/0x20 [ 456.356822][T23359] ? do_raw_spin_unlock+0x57/0x270 [ 456.362058][T23359] do_wp_page+0x48e/0x1500 [ 456.366497][T23359] ? do_raw_spin_lock+0x12a/0x2e0 [ 456.371714][T23359] ? rwlock_bug.part.0+0x90/0x90 [ 456.376846][T23359] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 456.383049][T23359] ? add_mm_counter_fast.part.0+0x40/0x40 [ 456.388889][T23359] __handle_mm_fault+0x22e8/0x3ec0 [ 456.394313][T23359] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 456.400072][T23359] ? find_held_lock+0x35/0x130 [ 456.404942][T23359] ? handle_mm_fault+0x322/0xb30 [ 456.410019][T23359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.416485][T23359] ? kasan_check_read+0x11/0x20 [ 456.421712][T23359] handle_mm_fault+0x43f/0xb30 [ 456.427251][T23359] __do_page_fault+0x5ef/0xda0 [ 456.432045][T23359] do_page_fault+0x71/0x581 [ 456.436916][T23359] ? page_fault+0x8/0x30 [ 456.441272][T23359] page_fault+0x1e/0x30 [ 456.445880][T23359] RIP: 0033:0x40e018 [ 456.450160][T23359] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ac e3 4b 00 31 c0 e8 03 39 ff ff 31 ff e8 4c 35 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 4e 24 64 00 12:32:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:26 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20002, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xb60f, 0x30, 0x2, 0x100000001}, &(0x7f00000000c0)=0x18) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x7, 0x200, 0x80, 0x6, 0x100000000}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="130000004200010100000000004e000000000000"], 0x14}}, 0x0) [ 456.470831][T23359] RSP: 002b:0000000000a4fb00 EFLAGS: 00010246 [ 456.476933][T23359] RAX: 0000000031e3bc2d RBX: 00000000cff4ebcc RCX: 0000001b31c20000 [ 456.485876][T23359] RDX: 0000000000000000 RSI: 0000000000001c2d RDI: ffffffff31e3bc2d [ 456.498504][T23359] RBP: 0000000000000005 R08: 0000000031e3bc2d R09: 0000000031e3bc31 [ 456.506586][T23359] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 456.514661][T23359] R13: 0000000080000000 R14: 00007fbf2c076008 R15: 0000000000000005 12:32:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000640)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000740)=0xe8) r7 = getuid() getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x4}, [{0x2, 0x3, r1}, {0x2, 0x3, r2}, {0x2, 0x3, r3}, {0x2, 0x0, r4}, {0x2, 0x5, r5}, {0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x2, r8}], {0x4, 0x4}, [{0x8, 0x2}], {0x10, 0x4}, {0x20, 0x5}}, 0x6c, 0x3) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000002ade52979420ee1e651b1f0d78aaa6aab478fa0aa77a27a3044123558f8215a23c885f84636f70578b51282249e390afceb445f995ab823977ab982369d986b216288d83f857ef14e358174dc4a6ace77dae2825c832b2fe3c615b154709fda95130afe58f70325480f466726f90a4b158ccae372832253723c0d1ee4f6b6cb42da7684a21acd54fa6"], 0x24, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) [ 456.738199][T23359] memory: usage 307200kB, limit 307200kB, failcnt 691 [ 456.766226][T23359] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.777597][T23359] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 456.789303][T23359] Memory cgroup stats for /syz5: cache:148KB rss:263668KB rss_huge:245760KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:263876KB inactive_file:0KB active_file:0KB unevictable:0KB [ 456.821219][T23359] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20403,uid=0 [ 456.843902][T23359] Memory cgroup out of memory: Killed process 20403 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35788kB, shmem-rss:0kB [ 456.867035][ T1044] oom_reaper: reaped process 20403 (syz-executor.5), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 456.889606][T23360] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 456.913352][T23360] CPU: 0 PID: 23360 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 456.921501][T23360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.931877][T23360] Call Trace: [ 456.935384][T23360] dump_stack+0x172/0x1f0 [ 456.940579][T23360] dump_header+0x10f/0xb6c [ 456.946325][T23360] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.952410][T23360] ? ___ratelimit+0x60/0x595 [ 456.957368][T23360] ? do_raw_spin_unlock+0x57/0x270 [ 456.962521][T23360] oom_kill_process.cold+0x10/0x15 [ 456.967763][T23360] out_of_memory+0x79a/0x1280 [ 456.972496][T23360] ? lock_downgrade+0x880/0x880 [ 456.977370][T23360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.983822][T23360] ? oom_killer_disable+0x280/0x280 [ 456.989029][T23360] ? find_held_lock+0x35/0x130 [ 456.993908][T23360] mem_cgroup_out_of_memory+0x1ca/0x230 [ 456.999638][T23360] ? memcg_event_wake+0x230/0x230 [ 457.004868][T23360] ? do_raw_spin_unlock+0x57/0x270 [ 457.010433][T23360] ? _raw_spin_unlock+0x2d/0x50 [ 457.015392][T23360] try_charge+0x102c/0x15c0 [ 457.019995][T23360] ? find_held_lock+0x35/0x130 [ 457.024776][T23360] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 457.030358][T23360] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 457.036180][T23360] ? find_held_lock+0x35/0x130 [ 457.041044][T23360] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 457.046784][T23360] __memcg_kmem_charge_memcg+0x7c/0x130 [ 457.052339][T23360] ? memcg_kmem_put_cache+0xb0/0xb0 [ 457.057650][T23360] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 457.063207][T23360] __memcg_kmem_charge+0x136/0x300 [ 457.068469][T23360] __alloc_pages_nodemask+0x4bf/0x8d0 [ 457.073857][T23360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.080200][T23360] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 457.085921][T23360] ? copy_process.part.0+0x1d08/0x7980 [ 457.091396][T23360] ? lockdep_hardirqs_on+0x418/0x5d0 [ 457.096691][T23360] ? trace_hardirqs_on+0x67/0x230 [ 457.101718][T23360] ? kasan_check_read+0x11/0x20 [ 457.106591][T23360] copy_process.part.0+0x3e0/0x7980 [ 457.111878][T23360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.118127][T23360] ? debug_smp_processor_id+0x3c/0x280 [ 457.123599][T23360] ? perf_trace_lock+0xeb/0x510 [ 457.128464][T23360] ? __lockdep_free_key_range+0x120/0x120 [ 457.134192][T23360] ? __might_fault+0x12b/0x1e0 [ 457.138969][T23360] ? __cleanup_sighand+0x60/0x60 [ 457.144004][T23360] ? lock_downgrade+0x880/0x880 [ 457.148975][T23360] _do_fork+0x257/0xfd0 [ 457.153148][T23360] ? fork_idle+0x1d0/0x1d0 [ 457.157583][T23360] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.163048][T23360] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.168509][T23360] ? do_syscall_64+0x26/0x610 [ 457.173188][T23360] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.179358][T23360] ? do_syscall_64+0x26/0x610 [ 457.184272][T23360] __x64_sys_clone+0xbf/0x150 [ 457.188957][T23360] do_syscall_64+0x103/0x610 [ 457.193555][T23360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.199445][T23360] RIP: 0033:0x458da9 [ 457.203538][T23360] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.223421][T23360] RSP: 002b:00007fbf2a074c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 457.231848][T23360] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 457.239911][T23360] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 457.247888][T23360] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 457.256040][T23360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 457.264011][T23360] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 457.280637][T23360] memory: usage 307112kB, limit 307200kB, failcnt 728 [ 457.295561][T23360] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.320874][T23360] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.331606][T23360] Memory cgroup stats for /syz5: cache:148KB rss:263800KB rss_huge:245760KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:263868KB inactive_file:0KB active_file:0KB unevictable:0KB [ 457.359875][T23360] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20416,uid=0 [ 457.381841][T23360] Memory cgroup out of memory: Killed process 20416 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 457.424505][T23400] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 457.444298][T23400] CPU: 0 PID: 23400 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 457.452503][T23400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.462568][T23400] Call Trace: [ 457.465882][T23400] dump_stack+0x172/0x1f0 [ 457.470251][T23400] dump_header+0x10f/0xb6c [ 457.474764][T23400] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 457.480575][T23400] ? ___ratelimit+0x60/0x595 [ 457.485173][T23400] ? do_raw_spin_unlock+0x57/0x270 [ 457.490299][T23400] oom_kill_process.cold+0x10/0x15 [ 457.495448][T23400] out_of_memory+0x79a/0x1280 [ 457.500139][T23400] ? oom_killer_disable+0x280/0x280 [ 457.505340][T23400] ? find_held_lock+0x35/0x130 [ 457.510206][T23400] mem_cgroup_out_of_memory+0x1ca/0x230 [ 457.515844][T23400] ? memcg_event_wake+0x230/0x230 [ 457.520884][T23400] ? do_raw_spin_unlock+0x57/0x270 [ 457.526003][T23400] ? _raw_spin_unlock+0x2d/0x50 [ 457.530879][T23400] try_charge+0xa87/0x15c0 [ 457.535317][T23400] ? find_held_lock+0x35/0x130 [ 457.540119][T23400] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 457.545671][T23400] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 457.551567][T23400] ? find_held_lock+0x35/0x130 [ 457.556343][T23400] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 457.561910][T23400] __memcg_kmem_charge_memcg+0x7c/0x130 [ 457.567504][T23400] ? memcg_kmem_put_cache+0xb0/0xb0 [ 457.572807][T23400] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 457.578475][T23400] __memcg_kmem_charge+0x136/0x300 [ 457.583685][T23400] __alloc_pages_nodemask+0x4bf/0x8d0 [ 457.589080][T23400] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 457.594817][T23400] ? copy_page_range+0x125a/0x1f90 [ 457.599954][T23400] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.606226][T23400] alloc_pages_current+0x107/0x210 [ 457.611362][T23400] pte_alloc_one+0x1b/0x1a0 [ 457.615870][T23400] __pte_alloc+0x20/0x310 [ 457.620204][T23400] copy_page_range+0x1529/0x1f90 [ 457.625145][T23400] ? perf_trace_lock+0xeb/0x510 [ 457.630021][T23400] ? pmd_alloc+0x180/0x180 [ 457.634445][T23400] ? __rb_insert_augmented+0x231/0xdf0 [ 457.639906][T23400] ? validate_mm_rb+0xa3/0xc0 [ 457.644598][T23400] ? __vma_link_rb+0x279/0x370 [ 457.649462][T23400] copy_process.part.0+0x568b/0x7980 [ 457.654784][T23400] ? __cleanup_sighand+0x60/0x60 [ 457.659760][T23400] ? semctl_down+0x5e0/0x9f0 [ 457.664364][T23400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.670713][T23400] _do_fork+0x257/0xfd0 [ 457.674893][T23400] ? fork_idle+0x1d0/0x1d0 [ 457.679312][T23400] ? __ia32_sys_mkdir+0x80/0x80 [ 457.684177][T23400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.689649][T23400] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.695125][T23400] ? do_syscall_64+0x26/0x610 [ 457.699919][T23400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.706171][T23400] ? do_syscall_64+0x26/0x610 [ 457.710857][T23400] ? lockdep_hardirqs_on+0x418/0x5d0 [ 457.716183][T23400] __ia32_sys_fork+0x1f/0x30 [ 457.720875][T23400] do_syscall_64+0x103/0x610 [ 457.725475][T23400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.731379][T23400] RIP: 0033:0x2000000a [ 457.735459][T23400] Code: Bad RIP value. [ 457.739611][T23400] RSP: 002b:00007fbf2a053bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 457.748023][T23400] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 457.756119][T23400] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 457.764116][T23400] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 457.772099][T23400] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 457.780089][T23400] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 457.800216][T23400] memory: usage 304984kB, limit 307200kB, failcnt 759 [ 457.825951][T23400] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.849780][T23400] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 457.862545][T23400] Memory cgroup stats for /syz5: cache:148KB rss:261764KB rss_huge:243712KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261800KB inactive_file:0KB active_file:0KB unevictable:0KB [ 457.891666][T23400] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20437,uid=0 [ 457.916327][T23400] Memory cgroup out of memory: Killed process 20437 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:27 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19d) 12:32:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x7f, 0x2, [0x20f, 0x4800], [0xc1]}) 12:32:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xbd, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x402000, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fddbdf25110000000c00020008000b000200000054000200080002004e24000008000500000000000800090040000000080005000000000008000400050000000800060008000000080002004e22000008000b000a0000000800090069b3000008000400010000000800060009000000340002000002004e240000080005001c4b0000080002004e23000008000400803e641d080006007f000000080006000300000008000500ff03000008000400ff0f00000800040003000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40840}, 0x4004000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x9, 0x800000100, 0x0, {0x0, 0x0, 0x6, 0x300}}) 12:32:27 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:27 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0402004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:27 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:27 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19e) 12:32:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x1000000004, @rand_addr="b7eb16e9038a46491fe0faaeac20ea67", 0x103}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffffffffe, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040000, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) r3 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, 0x0, 0x0) sendto$isdn(r3, &(0x7f0000000040)={0x3, 0xd12, "c7e82769c3a4fb2e986f1de7c13f18f542ffebb74b0e39bac7de5fffcfeb85c24c47ba87daae8b326504456eeaaef5c7587a49a140f76fb250b0158526de75bab8080854ee32fdd400836cac611cbd1d9071dd0f2b1711581eeae51d61051640dd4d00f0d6e042cadde6abb0a44df5d97934e12f0ce63877bf76"}, 0x82, 0x4000040, &(0x7f0000000100)={0x22, 0x5, 0x3ff, 0x6, 0x2}, 0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00h\x10\x00\x00\x03\t\x1d', @ifru_flags}) 12:32:28 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0003004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:mount_exec_t:s0\x00', 0x22) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x415, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0xfffffffffffffffe) prctl$PR_GET_DUMPABLE(0x27) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0xa0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) 12:32:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x19f) 12:32:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) signalfd(r0, &(0x7f0000000300)={0x3}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in=@dev}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x22b) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28) 12:32:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000000)={0x9f0000, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0xfffdfffffffffffe, [], @p_u16=&(0x7f0000000040)}}) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xce3, 0x0) 12:32:28 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 458.728365][T23477] tls_set_device_offload_rx: netdev ip_vti0 with no TLS offload 12:32:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a0) 12:32:28 executing program 2: getrandom(&(0x7f0000000000)=""/49, 0x31, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x202880, 0x0) r1 = getpgrp(0xffffffffffffffff) mq_notify(r0, &(0x7f0000000180)={0x0, 0x11, 0x1, @tid=r1}) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.opaque\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000280)={0xfffffffffffeffff, 0x0, 0x5, 0x1, 0x9}) getpeername(r0, &(0x7f00000002c0)=@tipc=@name, &(0x7f0000000340)=0x80) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000440)={0xb3, &(0x7f0000000380)="45cb9c50291d5dfe50d179452a806611acf2a7a4760868a1de8b86b5e74ad5124fd0e208ac678441cf6d33be5ed0ab3eb281dc532daa323233fb7ffe7e35d241ace0507fbc6879db6819ac6858c677fec10a76e5ff4d242a43e7bd6e8bd64e64e5f7b96d501045a02c2e2270f2a9aef14e1f4e9ed243609c786eb831218cac4acff4cb1fa416323ced8b5da4f0283fe05df8ebbd3d26746cbf81e3be9b5f61b15e29397ff15ff9e24231de531f3f3dac72390c"}) mount(0x0, &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x80) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0)={0x2, 0x200}, 0x2) mq_notify(r2, 0x0) 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x100000, 0x4, 0x4], 0x4, 0x49, 0xac3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x80\x00', 0xbf, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 12:32:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x2000400000000009, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x400, 0x4200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x3, 0x7, 0x9, 0x8c03, 'syz0\x00'}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, "d60700000000000000000032f101000080917149fd661837b011b15f24fc4d12", 0x0, 0x0, 0x0, 0x70effc, 0x100000002}) ppoll(&(0x7f00000000c0)=[{r2, 0x8410}, {r0, 0x10}, {r1, 0x1000}, {r0, 0x400}, {r1, 0x200}, {r0, 0x8000}, {r0, 0x40}, {r0, 0x204}, {r0, 0x108}, {r0, 0x8}], 0xa, &(0x7f0000000140), &(0x7f0000000280)={0x10000000000}, 0x8) 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a1) 12:32:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffc7, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) accept4$packet(r1, 0x0, &(0x7f0000000080), 0x80800) 12:32:28 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:29 executing program 3: userfaultfd(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x7, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffe000/0x1000)=nil, 0x3000}, &(0x7f0000000080)=0xffffffffffffffd0) sendmmsg(r2, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@hci, 0x80, &(0x7f0000000140), 0x17b, &(0x7f0000000080)}}], 0x2, 0x0) 12:32:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f00000000c0)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4001, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000140)={0x40, 0x2, 0x0, [{0x81e6, 0x2, 0x7ff, 0x10001, 0x0, 0x20, 0x2}, {0x7, 0x3ff, 0x5, 0x1, 0x800, 0x80000000000000, 0xfffffffffffff585}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="3a009e3307aa7d6636fdcd3624a2d86a7c863ec85fbf905523939169ce359895dfed64fe6ad8739f5d70f3f51198da32cbe3d09d95cc691548f1f9e42df5db562d2c791ffc88e2bfaf2cde79b340c67e92477c0f6fca3a33eb3566082098af59ec89c7f4df19124ef3c43ad15e381a059d03b9b0b7d0d248d6550ff938e093fb"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 12:32:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a2) [ 459.875962][T23546] libceph: parse_ips bad ip '' 12:32:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) futex(&(0x7f0000000140), 0x9, 0x1, &(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x1) ioctl(r0, 0x400001000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000001200)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001040)=@broute={'broute\x00', 0x20, 0x5, 0xed8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f00000000c0), &(0x7f0000001240)=ANY=[@ANYBLOB="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"]}, 0xf3f) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000001100)={0x0, 0x9, 0x7, 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x100}) timer_create(0x7, &(0x7f0000001140)={0x0, 0x2e, 0x1}, &(0x7f0000001180)=0x0) timer_getoverrun(r2) 12:32:29 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x800) getdents64(r0, &(0x7f0000000040)=""/130, 0x82) r1 = syz_open_dev$sndctrl(&(0x7f00000003c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0x40405514, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [], {0x0, 0x1c9c380}}) 12:32:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a3) 12:32:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x80003, 0xfc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x1, 0x0, [{0x9, 0x0, 0x8}]}) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$notify(r1, 0x402, 0x80000000) syz_execute_func(&(0x7f0000000300)="b18d91cd801b69696c69dc02d9d9d0c44139fd5bf9c7c7e4c653fb6d58c4a1e96be7c44149f2168f4808eebce00000802000c423fa3a51c1ea01efc48192558dc3c36645c4c1e173fb65f1400fae28787c3e460f569f000000003ef0954200fcc401fe5ff6c4a27d33e4646736676666430fefb3000000000804f4e4837d1118fbc40213f5930a0000060013a485851369879f000000fe") 12:32:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast2, 0xb}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) getuid() connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x217) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x80000001, 0x81, &(0x7f0000000100)=""/129, 0x40f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x40}, 0x10}, 0x70) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x900000000000000) 12:32:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:29 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a4) 12:32:30 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x54}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffffb}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:32:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f0000000380)="f3e100def9575cc3b7d991d6734ec44290f79808edc3214a460f30096ccc2e67660e52e94d00c9c966440f38082173294ad0d26c5507d6c422f18cf0bf420fae9972b571b99f0146775f") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0xfffffffffffffffa, 0x10001}) 12:32:30 executing program 2: r0 = memfd_create(&(0x7f0000000240)='\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x0, 'client0\x00', 0x0, "f7be0a4057040ac4", "b6b9c0ad83e5d85462698ae8cb09ddcd7e3e42566600"}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x6, 0x67, &(0x7f0000000080)="f57e2c98e77d9597fb279b95b183d88c86139d820e0692d596c84c327c7ae09ce383cec6c39dcab5971314bfa6ab4b28f35bc5eace5e2b44428a915acf5f9f424e149616242815b34ae2047bdd04f3414f0fc0717fa6e16237703bf66e5e8f18d9062e9503818f", 0xa7d, 0x7fffffff, 0x0, 0x10001, 0x3ff, 0x2, 0x4, 'syz0\x00'}) 12:32:30 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a5) 12:32:30 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:30 executing program 2: futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000040), 0xa1f3ffff) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x8, 0x80) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x104, @tick=0x2, 0x1, {0x8, 0x80000001}, 0x0, 0x1, 0x8001}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x10000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x3, 0x0, [{0x1, 0x6, 0x0, 0x0, @msi={0x3, 0x5, 0x697}}, {0x8000, 0x4, 0x0, 0x0, @irqchip={0x2, 0x8}}, {0x4, 0x3, 0x0, 0x0, @adapter={0x8000, 0x100000001, 0x6, 0x9, 0x28}}]}) 12:32:30 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:30 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = epoll_create1(0x80000) sendfile(r0, r1, &(0x7f0000000100), 0x800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @local}, 0x78, {0x2, 0x0, @multicast1}, 'veth0_to_team\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) syz_open_procfs(r2, &(0x7f00000001c0)='net/ptype\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) 12:32:30 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a6) [ 461.332731][T23640] futex_wake_op: syz-executor.2 tries to shift op by -193; fix this program 12:32:31 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:31 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$int_in(r0, 0x80000080044d76, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000140)=""/83}) 12:32:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 461.398465][T23640] futex_wake_op: syz-executor.2 tries to shift op by -193; fix this program 12:32:31 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000740)='cgroup\x00', 0x0, &(0x7f0000000840)='fo,e\x00') setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xffffffffffffffff, 0x401, 0x8001, 0x400, 0x6, 0x8682, 0x80000001, 0x15bf0eb1, 0xaf, 0x8, 0x4}, 0xb) mlockall(0x2) io_setup(0x773, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x2, @local}) 12:32:31 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a7) 12:32:31 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 461.596284][T23670] e cgroup1: Unknown subsys name 'fo' [ 461.673064][T23670] e cgroup1: Unknown subsys name 'fo' [ 461.688516][T23661] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 461.731276][T23661] CPU: 1 PID: 23661 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 461.739445][T23661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.749513][T23661] Call Trace: [ 461.752823][T23661] dump_stack+0x172/0x1f0 [ 461.757164][T23661] dump_header+0x10f/0xb6c [ 461.761586][T23661] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 461.767424][T23661] ? ___ratelimit+0x60/0x595 [ 461.772014][T23661] ? do_raw_spin_unlock+0x57/0x270 [ 461.777412][T23661] oom_kill_process.cold+0x10/0x15 [ 461.782625][T23661] out_of_memory+0x79a/0x1280 [ 461.787402][T23661] ? lock_downgrade+0x880/0x880 [ 461.792275][T23661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.798635][T23661] ? oom_killer_disable+0x280/0x280 [ 461.803839][T23661] ? find_held_lock+0x35/0x130 [ 461.808617][T23661] mem_cgroup_out_of_memory+0x1ca/0x230 [ 461.814169][T23661] ? memcg_event_wake+0x230/0x230 [ 461.819388][T23661] ? do_raw_spin_unlock+0x57/0x270 [ 461.824509][T23661] ? _raw_spin_unlock+0x2d/0x50 [ 461.829455][T23661] try_charge+0x102c/0x15c0 [ 461.834308][T23661] ? find_held_lock+0x35/0x130 [ 461.839204][T23661] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 461.845199][T23661] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 461.850765][T23661] ? find_held_lock+0x35/0x130 [ 461.855541][T23661] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 461.861280][T23661] __memcg_kmem_charge_memcg+0x7c/0x130 [ 461.866926][T23661] ? memcg_kmem_put_cache+0xb0/0xb0 [ 461.872153][T23661] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 461.877715][T23661] __memcg_kmem_charge+0x136/0x300 [ 461.882837][T23661] __alloc_pages_nodemask+0x4bf/0x8d0 [ 461.888236][T23661] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 461.893978][T23661] ? save_stack+0x45/0xd0 [ 461.898312][T23661] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 461.904126][T23661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.910368][T23661] ? debug_smp_processor_id+0x3c/0x280 [ 461.915833][T23661] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 461.922082][T23661] alloc_pages_current+0x107/0x210 [ 461.927326][T23661] pte_alloc_one+0x1b/0x1a0 [ 461.932015][T23661] __pte_alloc+0x20/0x310 [ 461.936530][T23661] copy_page_range+0x1529/0x1f90 [ 461.941499][T23661] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 461.947498][T23661] ? pmd_alloc+0x180/0x180 [ 461.952135][T23661] ? validate_mm_rb+0xa3/0xc0 [ 461.956843][T23661] ? __vma_link_rb+0x279/0x370 [ 461.961647][T23661] copy_process.part.0+0x568b/0x7980 [ 461.966974][T23661] ? __cleanup_sighand+0x60/0x60 [ 461.971927][T23661] ? semctl_down+0x5e0/0x9f0 [ 461.976638][T23661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 461.982902][T23661] _do_fork+0x257/0xfd0 [ 461.987070][T23661] ? fork_idle+0x1d0/0x1d0 [ 461.991500][T23661] ? __ia32_sys_mkdir+0x80/0x80 [ 461.996359][T23661] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.001995][T23661] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.007459][T23661] ? do_syscall_64+0x26/0x610 [ 462.012139][T23661] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.018227][T23661] ? do_syscall_64+0x26/0x610 [ 462.022911][T23661] ? lockdep_hardirqs_on+0x418/0x5d0 [ 462.028216][T23661] __ia32_sys_fork+0x1f/0x30 [ 462.033078][T23661] do_syscall_64+0x103/0x610 [ 462.037708][T23661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.043775][T23661] RIP: 0033:0x2000000a [ 462.047860][T23661] Code: Bad RIP value. [ 462.051930][T23661] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 462.060358][T23661] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 462.068342][T23661] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 462.076324][T23661] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 462.084303][T23661] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 462.092283][T23661] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 462.151076][T23661] memory: usage 307200kB, limit 307200kB, failcnt 828 [ 462.158549][T23661] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 462.166172][T23661] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 462.173298][T23661] Memory cgroup stats for /syz5: cache:148KB rss:262416KB rss_huge:243712KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:262504KB inactive_file:0KB active_file:0KB unevictable:0KB [ 462.196268][T23661] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23421,uid=0 [ 462.212228][T23661] Memory cgroup out of memory: Killed process 23421 (syz-executor.5) total-vm:72712kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB [ 462.377841][T23651] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 462.402799][T23651] CPU: 1 PID: 23651 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 462.410840][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.420896][T23651] Call Trace: [ 462.424197][T23651] dump_stack+0x172/0x1f0 [ 462.428541][T23651] dump_header+0x10f/0xb6c [ 462.432961][T23651] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 462.438775][T23651] ? ___ratelimit+0x60/0x595 [ 462.443378][T23651] ? do_raw_spin_unlock+0x57/0x270 [ 462.448605][T23651] oom_kill_process.cold+0x10/0x15 [ 462.453741][T23651] out_of_memory+0x79a/0x1280 [ 462.458533][T23651] ? lock_downgrade+0x880/0x880 [ 462.463474][T23651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.469803][T23651] ? oom_killer_disable+0x280/0x280 [ 462.475001][T23651] ? find_held_lock+0x35/0x130 [ 462.479774][T23651] mem_cgroup_out_of_memory+0x1ca/0x230 [ 462.485314][T23651] ? memcg_event_wake+0x230/0x230 [ 462.490350][T23651] ? do_raw_spin_unlock+0x57/0x270 [ 462.501083][T23651] ? _raw_spin_unlock+0x2d/0x50 [ 462.506039][T23651] try_charge+0x102c/0x15c0 [ 462.510542][T23651] ? find_held_lock+0x35/0x130 [ 462.515330][T23651] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 462.520876][T23651] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 462.526420][T23651] ? find_held_lock+0x35/0x130 [ 462.531203][T23651] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 462.536855][T23651] __memcg_kmem_charge_memcg+0x7c/0x130 [ 462.542678][T23651] ? memcg_kmem_put_cache+0xb0/0xb0 [ 462.547881][T23651] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 462.553430][T23651] __memcg_kmem_charge+0x136/0x300 [ 462.558547][T23651] __alloc_pages_nodemask+0x4bf/0x8d0 [ 462.563916][T23651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.570174][T23651] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 462.575896][T23651] ? copy_process.part.0+0x1d08/0x7980 [ 462.581361][T23651] ? lockdep_hardirqs_on+0x418/0x5d0 [ 462.586677][T23651] ? trace_hardirqs_on+0x67/0x230 [ 462.591719][T23651] ? kasan_check_read+0x11/0x20 [ 462.596681][T23651] copy_process.part.0+0x3e0/0x7980 [ 462.602404][T23651] ? __lockdep_free_key_range+0x120/0x120 [ 462.608137][T23651] ? sched_clock+0x2e/0x50 [ 462.612659][T23651] ? psi_memstall_leave+0x12e/0x180 [ 462.617857][T23651] ? find_held_lock+0x35/0x130 [ 462.622620][T23651] ? psi_memstall_leave+0x12e/0x180 [ 462.628214][T23651] ? __cleanup_sighand+0x60/0x60 [ 462.633155][T23651] ? perf_trace_lock+0xeb/0x510 [ 462.638081][T23651] ? __lockdep_free_key_range+0x120/0x120 [ 462.643828][T23651] _do_fork+0x257/0xfd0 [ 462.647991][T23651] ? fork_idle+0x1d0/0x1d0 [ 462.652408][T23651] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 462.658473][T23651] ? lock_downgrade+0x880/0x880 [ 462.663327][T23651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 462.669674][T23651] ? blkcg_exit_queue+0x30/0x30 [ 462.674524][T23651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.680070][T23651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 462.685525][T23651] ? do_syscall_64+0x26/0x610 [ 462.690203][T23651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.696366][T23651] ? do_syscall_64+0x26/0x610 [ 462.701052][T23651] __x64_sys_clone+0xbf/0x150 [ 462.705762][T23651] do_syscall_64+0x103/0x610 [ 462.710361][T23651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 462.716254][T23651] RIP: 0033:0x45b779 [ 462.720147][T23651] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 462.739865][T23651] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 462.748280][T23651] RAX: ffffffffffffffda RBX: 00007fbf2a033700 RCX: 000000000045b779 [ 462.756252][T23651] RDX: 00007fbf2a0339d0 RSI: 00007fbf2a032db0 RDI: 00000000003d0f00 [ 462.764402][T23651] RBP: 0000000000a4fcb0 R08: 00007fbf2a033700 R09: 00007fbf2a033700 [ 462.772552][T23651] R10: 00007fbf2a0339d0 R11: 0000000000000202 R12: 0000000000000000 [ 462.780611][T23651] R13: 0000000000a4fb4f R14: 00007fbf2a0339c0 R15: 000000000073c04c [ 463.230426][T23651] memory: usage 306980kB, limit 307200kB, failcnt 875 [ 463.245613][T23651] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 463.253312][T23651] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 463.261671][T23651] Memory cgroup stats for /syz5: cache:148KB rss:262548KB rss_huge:243712KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:262472KB inactive_file:0KB active_file:0KB unevictable:0KB [ 463.306184][T23651] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20497,uid=0 [ 463.326034][T23651] Memory cgroup out of memory: Killed process 20497 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 463.342080][ T1044] oom_reaper: reaped process 20497 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 12:32:33 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) syz_emit_ethernet(0x16, &(0x7f0000000100)={@dev, @empty, [], {@mpls_uc={0x8847, {[{}, {0x8000, 0x5, 0x7e0fb892, 0x6}]}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7f000000000, @remote, 0x4}}, 0x0, 0x9, 0x2, 0x6, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r1, 0x7ff}, &(0x7f0000000040)=0x6) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x196) 12:32:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x2, 0x5aa, 0xe3bc, 0x80}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x805c4d65, &(0x7f0000000000)) 12:32:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a8) 12:32:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1f, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 12:32:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="59f3fabb6e72d1858cd1b5c087dc89fa89854f94b037e206", 0xffffffffffffffa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002240)="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", 0x1bb}], 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 12:32:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1a9) 12:32:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xaea2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) fcntl$setown(r2, 0x8, r4) 12:32:33 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0xc, 0x1, 0x0, {0x401, 0x6, 0x8, 0x3}}) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0305615, &(0x7f0000000140)={0x2}) 12:32:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1aa) 12:32:34 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fstatfs(r0, &(0x7f00000001c0)=""/152) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x986, 0x40000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d300008e", @ANYRES16=r2, @ANYBLOB="0c0e2cbd7000ffdbdf250b0000001800070008000100080000000c0003009b860000000000000c00090008000200241d000008000600040002006800010044000400200001000a004e22ffffffff0000000000000000000000000000000100000000200002000a004e2100000028ff010000000000000000000000000001000200001000010069623a726f73653000000000080003000100000008000300070000002000020008000100000000000400040004000400040004000800010001000000140002000800020001000000080002007f000000"], 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x3, 0x2, 0x7ff, 0x21d, 0x0, r3}) mkdir(0x0, 0x0) request_key(&(0x7f0000000100)='id_legacy\x00', 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_eee={0xe}}) 12:32:34 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:34 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/20) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x400, 0x2) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000113f0869b1900854955700a62377cad2680a335b352deeb138"], 0x10}}], 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x2000c0) sendmmsg(r3, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) 12:32:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ab) 12:32:34 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff66a, 0x280c42) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x9, 0x4, 0xfffffffffffffff9}, 0x8) personality(0x400000) io_setup(0x101, &(0x7f0000000d00)) [ 464.656311][T23744] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 464.708516][T23744] CPU: 0 PID: 23744 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 464.716587][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.726656][T23744] Call Trace: [ 464.729963][T23744] dump_stack+0x172/0x1f0 [ 464.734406][T23744] dump_header+0x10f/0xb6c [ 464.738843][T23744] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 464.744664][T23744] ? ___ratelimit+0x60/0x595 [ 464.749355][T23744] ? do_raw_spin_unlock+0x57/0x270 [ 464.754494][T23744] oom_kill_process.cold+0x10/0x15 [ 464.759622][T23744] out_of_memory+0x79a/0x1280 [ 464.764316][T23744] ? lock_downgrade+0x880/0x880 [ 464.769176][T23744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.775428][T23744] ? oom_killer_disable+0x280/0x280 [ 464.780734][T23744] ? find_held_lock+0x35/0x130 [ 464.785522][T23744] mem_cgroup_out_of_memory+0x1ca/0x230 [ 464.791080][T23744] ? memcg_event_wake+0x230/0x230 [ 464.796129][T23744] ? do_raw_spin_unlock+0x57/0x270 [ 464.801257][T23744] ? _raw_spin_unlock+0x2d/0x50 [ 464.806120][T23744] try_charge+0x102c/0x15c0 [ 464.810632][T23744] ? find_held_lock+0x35/0x130 [ 464.815416][T23744] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 464.820985][T23744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.827242][T23744] ? kasan_check_read+0x11/0x20 [ 464.832111][T23744] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 464.837672][T23744] mem_cgroup_try_charge+0x24d/0x5e0 [ 464.842980][T23744] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 464.848631][T23744] wp_page_copy+0x408/0x1740 [ 464.853232][T23744] ? find_held_lock+0x35/0x130 [ 464.858012][T23744] ? pmd_pfn+0x1d0/0x1d0 [ 464.862288][T23744] ? lock_downgrade+0x880/0x880 [ 464.867161][T23744] ? swp_swapcount+0x540/0x540 [ 464.872028][T23744] ? kasan_check_read+0x11/0x20 [ 464.877005][T23744] ? do_raw_spin_unlock+0x57/0x270 [ 464.882136][T23744] do_wp_page+0x48e/0x1500 [ 464.886569][T23744] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 464.892049][T23744] __handle_mm_fault+0x22e8/0x3ec0 [ 464.897178][T23744] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 464.902836][T23744] ? find_held_lock+0x35/0x130 [ 464.907605][T23744] ? handle_mm_fault+0x322/0xb30 [ 464.912565][T23744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.918841][T23744] ? kasan_check_read+0x11/0x20 [ 464.923718][T23744] handle_mm_fault+0x43f/0xb30 [ 464.928504][T23744] __do_page_fault+0x5ef/0xda0 [ 464.933371][T23744] do_page_fault+0x71/0x581 [ 464.937889][T23744] ? page_fault+0x8/0x30 [ 464.942151][T23744] page_fault+0x1e/0x30 [ 464.946347][T23744] RIP: 0033:0x40e550 [ 464.950290][T23744] Code: 83 c3 01 e8 42 31 ff ff 39 dd 77 ee 48 8b 44 24 08 89 28 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 <89> 3c b5 00 00 73 00 eb 8f 89 eb 48 c1 e3 02 49 8d 6c 1d 00 49 39 [ 464.969998][T23744] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 464.976074][T23744] RAX: 00000000f1f43930 RBX: 00000000f36c3157 RCX: 0000001b31c20000 [ 464.984140][T23744] RDX: 0000000000000000 RSI: 0000000000001930 RDI: 00000000f1f4392e [ 464.992121][T23744] RBP: 000000000000000a R08: 00000000f1f43932 R09: ffffffffffffffff [ 465.000275][T23744] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 465.008637][T23744] R13: 00007fbf2c076004 R14: 00007fbf2c076000 R15: 0000000000000067 [ 465.042343][T23744] memory: usage 307200kB, limit 307200kB, failcnt 916 [ 465.069333][T23744] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 465.086134][T23744] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 465.097996][T23744] Memory cgroup stats for /syz5: cache:148KB rss:262372KB rss_huge:243712KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:262572KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:34 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000080)="360f08b8010000000f01c10f32c4c1f573ff73660f14f666b828018ec00f01d1f1b805000000b9e70a00000f01c10fc72c1c", 0x32}], 0xaaaaaaaaaaaaaf4, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x11, 0x7, 0x3}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/122) 12:32:34 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:34 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ac) 12:32:34 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000300)={0x6, @win={{0x2, 0x100, 0x4, 0x10000}, 0x0, 0x6, &(0x7f00000000c0)={{0x8, 0xfffffffffffffffb, 0x80000001, 0xffffffff}, &(0x7f0000000080)={{0x6f, 0xfffffffffffffffa, 0xc5, 0xe1}}}, 0x81, &(0x7f0000000100)="ec4177305bc5178345ea8d86ee22ce75ae05b19bed5411b7bf8ae40580ab2793e6dcd75ffc427831b599cb492507873605b9f44eadbc0a88a4dec2fc928125e02558fc8be794e4ea9130c34a22ff53a5d5f2bdf7869eecc623e5b5a6491c70fc32655406ae83a5f05ddfa4fffcaefcdd13588bd6f61e148445b3f6a6b0", 0x3}}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$EVIOCGPROP(r4, 0x4004743d, &(0x7f00000001c0)=""/246) dup3(r0, r3, 0x0) [ 465.149639][T23744] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20522,uid=0 [ 465.166156][T23744] Memory cgroup out of memory: Killed process 20522 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ad) 12:32:35 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:35 executing program 3: r0 = socket(0xa, 0x802, 0x80000000088) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f00000001c0)={0x7, 0x5}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000010028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x12710, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 12:32:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x801000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) listen(r0, 0x0) 12:32:35 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x30}, &(0x7f0000000140)=0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000200)=0x100000001) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000001c0)={r2, 0xcf01}, 0x8) r3 = getuid() r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x420000, 0x0) ioctl$TIOCGETD(r4, 0x5424, &(0x7f00000003c0)) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0x78, 0x0, 0x5, {0x81, 0xfa, 0x0, {0x4, 0x8, 0x3, 0x5, 0x9, 0xfff, 0x0, 0xffff, 0xffffffffffffff4c, 0xfffffffffffffff8, 0xfffffffffffffe01, r3, r5, 0x800, 0x3}}}, 0x78) restart_syscall() r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioperm(0x2, 0x100000001, 0x0) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0adc1a123c123f319bd070") ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000400)={0x0, 0x800, 0x1015}) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x48, 0x0, 0x12, 0xfffffffffffffffd], [0xc2]}) 12:32:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ae) 12:32:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="b4c7b1f1d07cf807ac52b4f999d94a9e40cd"], &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="739c98560bbd171eba2038fd73ed1ad619f0c11e7a453c5eafca22a278765386aebc3289e9885c6f2e59985b9e5507c652779eec1ec68635ad8a1a521c699858f4b172edf0ddd872dea0795141c17ab5737ea588fcd4036bcb752991159cd7f683ff69a31906b144d370cd"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r1 = accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000280)={0x1, 0x70, 0x6, 0x2, 0x0, 0xf26, 0x0, 0xffffffffffffff67, 0x12, 0xd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x4, 0x1ff, 0x9, 0xfffffffffffffffc, 0x7, 0xfff, 0x0, 0x80000000, 0x0, 0xac7a, 0x1, 0x6, 0x8, 0x0, 0xfffffffffffffe01, 0x100, 0x2f, 0xffffffff, 0x401, 0x9, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x6, 0x3}, 0x0, 0x7, 0x7fffffff, 0x3, 0x6, 0x7e79, 0x9}) fcntl$getown(r1, 0x9) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)) 12:32:35 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:35 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys\x0f\x1e\x1f\x80ne\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00etriF\r4\x82n\\\xed\x90\xbd)\x8a\x94\xd7d\x9c\re\x8e\xb1GM_)\xb6`\a\xae]\xea\xa7\x11\xfb\x89\x13\xf5\xf0{\x83\xf5c\x10\xcb0xffffffffffffffff]) getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) setresgid(r0, r1, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x17, &(0x7f0000000000), 0x4) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) 12:32:35 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b0) 12:32:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:36 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:36 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 466.671508][T23908] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 466.708075][T23908] CPU: 0 PID: 23908 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 466.716233][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.726313][T23908] Call Trace: [ 466.729620][T23908] dump_stack+0x172/0x1f0 [ 466.734175][T23908] dump_header+0x10f/0xb6c [ 466.738602][T23908] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 466.744415][T23908] ? ___ratelimit+0x60/0x595 [ 466.749012][T23908] ? do_raw_spin_unlock+0x57/0x270 [ 466.754131][T23908] oom_kill_process.cold+0x10/0x15 [ 466.759252][T23908] out_of_memory+0x79a/0x1280 [ 466.763943][T23908] ? lock_downgrade+0x880/0x880 [ 466.768798][T23908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.775041][T23908] ? oom_killer_disable+0x280/0x280 [ 466.780328][T23908] ? find_held_lock+0x35/0x130 [ 466.785191][T23908] mem_cgroup_out_of_memory+0x1ca/0x230 [ 466.790760][T23908] ? memcg_event_wake+0x230/0x230 [ 466.795801][T23908] ? do_raw_spin_unlock+0x57/0x270 [ 466.800916][T23908] ? _raw_spin_unlock+0x2d/0x50 [ 466.805879][T23908] try_charge+0x102c/0x15c0 [ 466.810385][T23908] ? find_held_lock+0x35/0x130 [ 466.815267][T23908] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 466.820827][T23908] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 466.826555][T23908] ? find_held_lock+0x35/0x130 [ 466.831405][T23908] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 466.837060][T23908] __memcg_kmem_charge_memcg+0x7c/0x130 [ 466.842608][T23908] ? memcg_kmem_put_cache+0xb0/0xb0 [ 466.848342][T23908] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 466.853893][T23908] __memcg_kmem_charge+0x136/0x300 [ 466.859189][T23908] __alloc_pages_nodemask+0x4bf/0x8d0 [ 466.864568][T23908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.870993][T23908] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 466.876720][T23908] ? copy_process.part.0+0x1d08/0x7980 [ 466.882280][T23908] ? lockdep_hardirqs_on+0x418/0x5d0 [ 466.887572][T23908] ? trace_hardirqs_on+0x67/0x230 [ 466.892723][T23908] ? kasan_check_read+0x11/0x20 [ 466.897587][T23908] copy_process.part.0+0x3e0/0x7980 [ 466.902786][T23908] ? __lockdep_free_key_range+0x120/0x120 [ 466.908508][T23908] ? semctl_down+0x5e0/0x9f0 [ 466.913098][T23908] ? find_held_lock+0x35/0x130 [ 466.917861][T23908] ? semctl_down+0x5e0/0x9f0 [ 466.922672][T23908] ? __cleanup_sighand+0x60/0x60 [ 466.927611][T23908] ? up_write+0x1c/0x150 [ 466.931858][T23908] ? semctl_down+0x5e0/0x9f0 [ 466.936450][T23908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.942707][T23908] _do_fork+0x257/0xfd0 [ 466.946876][T23908] ? fork_idle+0x1d0/0x1d0 [ 466.951307][T23908] ? __ia32_sys_mkdir+0x80/0x80 [ 466.956164][T23908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.961627][T23908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.967111][T23908] ? do_syscall_64+0x26/0x610 [ 466.971876][T23908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.978115][T23908] ? do_syscall_64+0x26/0x610 [ 466.982887][T23908] ? lockdep_hardirqs_on+0x418/0x5d0 [ 466.988179][T23908] __ia32_sys_fork+0x1f/0x30 [ 466.992856][T23908] do_syscall_64+0x103/0x610 [ 466.997453][T23908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.003344][T23908] RIP: 0033:0x2000000a [ 467.007420][T23908] Code: Bad RIP value. [ 467.011481][T23908] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 467.020183][T23908] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 467.028242][T23908] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 467.036221][T23908] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 467.044199][T23908] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 467.052633][T23908] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff 12:32:36 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) accept4(r2, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) 12:32:36 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b1) 12:32:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5100, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x441, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) 12:32:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:36 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 467.164134][T23908] memory: usage 307196kB, limit 307200kB, failcnt 953 [ 467.180053][T23908] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 12:32:36 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 467.225796][T23908] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 467.245208][T23908] Memory cgroup stats for /syz5: cache:148KB rss:261032KB rss_huge:241664KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261112KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:36 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b2) 12:32:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 467.307174][T23908] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20540,uid=0 12:32:36 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/208, &(0x7f00000001c0)=0xd0) [ 467.345446][T23908] Memory cgroup out of memory: Killed process 20540 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 467.412237][T23907] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 467.501729][T23907] CPU: 0 PID: 23907 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 467.509761][T23907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.519919][T23907] Call Trace: [ 467.523257][T23907] dump_stack+0x172/0x1f0 [ 467.527606][T23907] dump_header+0x10f/0xb6c [ 467.532036][T23907] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 467.537851][T23907] ? ___ratelimit+0x60/0x595 [ 467.542443][T23907] ? do_raw_spin_unlock+0x57/0x270 [ 467.547566][T23907] oom_kill_process.cold+0x10/0x15 [ 467.552687][T23907] out_of_memory+0x79a/0x1280 [ 467.557375][T23907] ? oom_killer_disable+0x280/0x280 [ 467.562613][T23907] ? find_held_lock+0x35/0x130 [ 467.567434][T23907] mem_cgroup_out_of_memory+0x1ca/0x230 [ 467.573008][T23907] ? memcg_event_wake+0x230/0x230 [ 467.578044][T23907] ? do_raw_spin_unlock+0x57/0x270 [ 467.583192][T23907] ? _raw_spin_unlock+0x2d/0x50 [ 467.588172][T23907] try_charge+0xa87/0x15c0 [ 467.592679][T23907] ? find_held_lock+0x35/0x130 [ 467.597478][T23907] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 467.603125][T23907] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 467.608672][T23907] ? find_held_lock+0x35/0x130 [ 467.613650][T23907] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 467.619223][T23907] __memcg_kmem_charge_memcg+0x7c/0x130 [ 467.624781][T23907] ? memcg_kmem_put_cache+0xb0/0xb0 [ 467.629982][T23907] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 467.635544][T23907] __memcg_kmem_charge+0x136/0x300 [ 467.640664][T23907] __alloc_pages_nodemask+0x4bf/0x8d0 [ 467.646048][T23907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.652294][T23907] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 467.658019][T23907] ? copy_process.part.0+0x1d08/0x7980 [ 467.663576][T23907] ? lockdep_hardirqs_on+0x418/0x5d0 [ 467.668867][T23907] ? trace_hardirqs_on+0x67/0x230 [ 467.673894][T23907] ? kasan_check_read+0x11/0x20 [ 467.678755][T23907] copy_process.part.0+0x3e0/0x7980 [ 467.683973][T23907] ? __lockdep_free_key_range+0x120/0x120 [ 467.689806][T23907] ? sched_clock+0x2e/0x50 [ 467.694236][T23907] ? psi_memstall_leave+0x12e/0x180 [ 467.699660][T23907] ? find_held_lock+0x35/0x130 [ 467.704434][T23907] ? psi_memstall_leave+0x12e/0x180 [ 467.709736][T23907] ? __cleanup_sighand+0x60/0x60 [ 467.714682][T23907] ? perf_trace_lock+0xeb/0x510 [ 467.719567][T23907] ? __lockdep_free_key_range+0x120/0x120 [ 467.725301][T23907] _do_fork+0x257/0xfd0 [ 467.729467][T23907] ? fork_idle+0x1d0/0x1d0 [ 467.733894][T23907] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 467.739962][T23907] ? lock_downgrade+0x880/0x880 [ 467.744842][T23907] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.751091][T23907] ? blkcg_exit_queue+0x30/0x30 [ 467.756073][T23907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.761533][T23907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.767257][T23907] ? do_syscall_64+0x26/0x610 [ 467.771938][T23907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.778095][T23907] ? do_syscall_64+0x26/0x610 [ 467.782867][T23907] __x64_sys_clone+0xbf/0x150 [ 467.787557][T23907] do_syscall_64+0x103/0x610 [ 467.792151][T23907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.798046][T23907] RIP: 0033:0x45b779 [ 467.801941][T23907] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 467.821640][T23907] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 467.830141][T23907] RAX: ffffffffffffffda RBX: 00007fbf2a054700 RCX: 000000000045b779 [ 467.838296][T23907] RDX: 00007fbf2a0549d0 RSI: 00007fbf2a053db0 RDI: 00000000003d0f00 [ 467.846285][T23907] RBP: 0000000000a4fcb0 R08: 00007fbf2a054700 R09: 00007fbf2a054700 [ 467.854258][T23907] R10: 00007fbf2a0549d0 R11: 0000000000000202 R12: 0000000000000000 [ 467.862883][T23907] R13: 0000000000a4fb4f R14: 00007fbf2a0549c0 R15: 000000000073bfac [ 468.178229][T23907] memory: usage 307036kB, limit 307200kB, failcnt 969 [ 468.185052][T23907] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.192950][T23907] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.207385][T23907] Memory cgroup stats for /syz5: cache:148KB rss:261032KB rss_huge:241664KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261084KB inactive_file:0KB active_file:0KB unevictable:0KB [ 468.246519][T23907] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20675,uid=0 [ 468.286573][T23907] Memory cgroup out of memory: Killed process 20675 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 468.339082][T23909] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 468.363100][T23909] CPU: 0 PID: 23909 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 468.371147][T23909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.381215][T23909] Call Trace: [ 468.384513][T23909] dump_stack+0x172/0x1f0 [ 468.388856][T23909] dump_header+0x10f/0xb6c [ 468.393290][T23909] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 468.399106][T23909] ? ___ratelimit+0x60/0x595 [ 468.403702][T23909] ? do_raw_spin_unlock+0x57/0x270 [ 468.408829][T23909] oom_kill_process.cold+0x10/0x15 [ 468.414032][T23909] out_of_memory+0x79a/0x1280 [ 468.418728][T23909] ? oom_killer_disable+0x280/0x280 [ 468.423959][T23909] ? find_held_lock+0x35/0x130 [ 468.428738][T23909] mem_cgroup_out_of_memory+0x1ca/0x230 [ 468.434461][T23909] ? memcg_event_wake+0x230/0x230 [ 468.439499][T23909] ? do_raw_spin_unlock+0x57/0x270 [ 468.444716][T23909] ? _raw_spin_unlock+0x2d/0x50 [ 468.449588][T23909] try_charge+0xa87/0x15c0 [ 468.454010][T23909] ? find_held_lock+0x35/0x130 [ 468.458799][T23909] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 468.464350][T23909] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 468.469917][T23909] ? find_held_lock+0x35/0x130 [ 468.474697][T23909] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 468.480436][T23909] __memcg_kmem_charge_memcg+0x7c/0x130 [ 468.485985][T23909] ? memcg_kmem_put_cache+0xb0/0xb0 [ 468.491193][T23909] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 468.500908][T23909] __memcg_kmem_charge+0x136/0x300 [ 468.506119][T23909] __alloc_pages_nodemask+0x4bf/0x8d0 [ 468.511535][T23909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.517788][T23909] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 468.523605][T23909] ? copy_process.part.0+0x1d08/0x7980 [ 468.529069][T23909] ? lockdep_hardirqs_on+0x418/0x5d0 [ 468.534360][T23909] ? trace_hardirqs_on+0x67/0x230 [ 468.539395][T23909] copy_process.part.0+0x3e0/0x7980 [ 468.545032][T23909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.551305][T23909] ? debug_smp_processor_id+0x3c/0x280 [ 468.557030][T23909] ? perf_trace_lock+0xeb/0x510 [ 468.561891][T23909] ? __lockdep_free_key_range+0x120/0x120 [ 468.567718][T23909] ? __might_fault+0x12b/0x1e0 [ 468.572509][T23909] ? __cleanup_sighand+0x60/0x60 [ 468.577755][T23909] ? lock_downgrade+0x880/0x880 [ 468.582684][T23909] _do_fork+0x257/0xfd0 [ 468.586852][T23909] ? fork_idle+0x1d0/0x1d0 [ 468.591285][T23909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.596741][T23909] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.602227][T23909] ? do_syscall_64+0x26/0x610 [ 468.606963][T23909] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.613032][T23909] ? do_syscall_64+0x26/0x610 [ 468.617719][T23909] __x64_sys_clone+0xbf/0x150 [ 468.622401][T23909] do_syscall_64+0x103/0x610 [ 468.627017][T23909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.632997][T23909] RIP: 0033:0x458da9 [ 468.636893][T23909] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.656762][T23909] RSP: 002b:00007fbf2a074c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 468.665436][T23909] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 468.673507][T23909] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 468.681479][T23909] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 468.689460][T23909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 468.697518][T23909] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 469.054007][T23909] memory: usage 306804kB, limit 307200kB, failcnt 969 [ 469.075007][T23909] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 469.096449][T23909] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 469.103337][T23909] Memory cgroup stats for /syz5: cache:148KB rss:261032KB rss_huge:241664KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261052KB inactive_file:0KB active_file:0KB unevictable:0KB [ 469.156468][T23909] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20701,uid=0 [ 469.186509][T23909] Memory cgroup out of memory: Killed process 20701 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 469.216983][ T1044] oom_reaper: reaped process 20701 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 469.229674][T23908] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 469.242118][T23908] CPU: 0 PID: 23908 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 469.250113][T23908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.260318][T23908] Call Trace: [ 469.263620][T23908] dump_stack+0x172/0x1f0 [ 469.267959][T23908] dump_header+0x10f/0xb6c [ 469.272383][T23908] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 469.278193][T23908] ? ___ratelimit+0x60/0x595 [ 469.282790][T23908] ? do_raw_spin_unlock+0x57/0x270 [ 469.287918][T23908] oom_kill_process.cold+0x10/0x15 [ 469.293034][T23908] out_of_memory+0x79a/0x1280 [ 469.297730][T23908] ? oom_killer_disable+0x280/0x280 [ 469.302928][T23908] ? find_held_lock+0x35/0x130 [ 469.307708][T23908] mem_cgroup_out_of_memory+0x1ca/0x230 [ 469.313281][T23908] ? memcg_event_wake+0x230/0x230 [ 469.318317][T23908] ? do_raw_spin_unlock+0x57/0x270 [ 469.323435][T23908] ? _raw_spin_unlock+0x2d/0x50 [ 469.328772][T23908] try_charge+0x102c/0x15c0 [ 469.333277][T23908] ? find_held_lock+0x35/0x130 [ 469.338068][T23908] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 469.343639][T23908] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 469.349190][T23908] ? find_held_lock+0x35/0x130 [ 469.353984][T23908] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 469.359548][T23908] __memcg_kmem_charge_memcg+0x7c/0x130 [ 469.365121][T23908] ? memcg_kmem_put_cache+0xb0/0xb0 [ 469.370335][T23908] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 469.375888][T23908] __memcg_kmem_charge+0x136/0x300 [ 469.381011][T23908] __alloc_pages_nodemask+0x4bf/0x8d0 [ 469.386479][T23908] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 469.392209][T23908] ? save_stack+0x45/0xd0 [ 469.396553][T23908] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 469.402386][T23908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.408630][T23908] ? debug_smp_processor_id+0x3c/0x280 [ 469.414105][T23908] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 469.420443][T23908] alloc_pages_current+0x107/0x210 [ 469.425571][T23908] pte_alloc_one+0x1b/0x1a0 [ 469.430105][T23908] __pte_alloc+0x20/0x310 [ 469.434440][T23908] copy_page_range+0x1529/0x1f90 [ 469.439401][T23908] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 469.445150][T23908] ? pmd_alloc+0x180/0x180 [ 469.449588][T23908] ? validate_mm_rb+0xa3/0xc0 [ 469.454271][T23908] ? __vma_link_rb+0x279/0x370 [ 469.459067][T23908] copy_process.part.0+0x568b/0x7980 [ 469.464396][T23908] ? __cleanup_sighand+0x60/0x60 [ 469.469442][T23908] ? semctl_down+0x5e0/0x9f0 [ 469.474050][T23908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.480317][T23908] _do_fork+0x257/0xfd0 [ 469.484589][T23908] ? fork_idle+0x1d0/0x1d0 [ 469.489059][T23908] ? __ia32_sys_mkdir+0x80/0x80 [ 469.493927][T23908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.499390][T23908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 469.504854][T23908] ? do_syscall_64+0x26/0x610 [ 469.509620][T23908] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.515865][T23908] ? do_syscall_64+0x26/0x610 [ 469.520547][T23908] ? lockdep_hardirqs_on+0x418/0x5d0 [ 469.525895][T23908] __ia32_sys_fork+0x1f/0x30 [ 469.530505][T23908] do_syscall_64+0x103/0x610 [ 469.535113][T23908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.541005][T23908] RIP: 0033:0x2000000a [ 469.545093][T23908] Code: Bad RIP value. [ 469.549160][T23908] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 469.557582][T23908] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 469.565555][T23908] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 469.573535][T23908] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 469.581507][T23908] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 469.589490][T23908] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 470.053202][T23908] memory: usage 304576kB, limit 307200kB, failcnt 969 [ 470.060089][T23908] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 470.074359][T23908] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 470.081606][T23908] Memory cgroup stats for /syz5: cache:148KB rss:258932KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:258912KB inactive_file:0KB active_file:0KB unevictable:0KB [ 470.112158][T23908] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20810,uid=0 [ 470.135205][T23908] Memory cgroup out of memory: Killed process 20810 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x2, 0x4400) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$FICLONE(r1, 0x40049409, r2) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000065ffff0100000006e53850323030306b502579165c3619a2cfaf3b40b41e5fe10a1b"], 0x13) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 12:32:39 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:39 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b3) 12:32:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) write$P9_RAUTH(r2, &(0x7f0000000000)={0x14}, 0x14) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmmsg(r0, &(0x7f0000001000), 0x3fffffffffffefe, 0x2, 0x0) 12:32:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 2: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xab, 0x80) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000200)=""/143) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000080)={0x1, 0x8001, 0x7, 0xe97e}) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x1d, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000000)='wlan1\x00') setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000002c0), 0x4) 12:32:40 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b4) 12:32:40 executing program 3: r0 = socket$inet6(0xa, 0x400001, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x100000000}}, 0x20, 0xacd, 0x7fff, 0xffffffffffff7fff, 0x5}, &(0x7f0000000100)=0x98) r1 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x10) r3 = inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0x0) inotify_rm_watch(r2, r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="5f90000003a9445c1ce89b1f5854e9498ec1bf4b3a8702bba29f844178e3b82a5c2104eb0e1336e5be7eb0c2703a6eb6c4b86cafb8f8959674e6b691c0699d17953126f755a963f3ec57ef3aaad06b819928516d688081c84beea8a43b23527ac4f6ac0d6de020fba937be4d8818ae26ea2d9c843a2033ce05bb92238efb5db9b6a3e200670888ebb7ab7a72c379b98323752801c86a82c585d2937f0c6f8868eb6ab1a3d1c74c3f161c8a30", @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004050}, 0x4004000) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="91f6a3460a99", 'batadv0\x00'}}, 0x1e) socket$bt_bnep(0x1f, 0x3, 0x4) sendmmsg(r1, &(0x7f0000005b40), 0x40000000000014d, 0x0) fstat(r0, &(0x7f0000000140)) 12:32:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x32, 0x119, 0xfffffffffffffffc, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x8, 0x10, @ipv4=@multicast1=0x4000600}]}]}, 0x24}}, 0x0) 12:32:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 470.641774][T24006] openvswitch: netlink: IP tunnel dst address not specified 12:32:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b5) 12:32:40 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xdce, 0x80200) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f00000000c0)=0x5) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x20401040, 0x4) 12:32:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet_buf(r1, 0x0, 0x15, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0xdd, @remote, 0x4e22, 0x4, 'fo\x00', 0x20, 0x3, 0x1b}, {@local, 0x4e21, 0x1, 0x101, 0x1, 0x200}}, 0x44) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 471.002581][ T7633] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 12:32:40 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b6) [ 471.180055][ T7633] CPU: 0 PID: 7633 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 471.188261][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.198681][ T7633] Call Trace: [ 471.202101][ T7633] dump_stack+0x172/0x1f0 [ 471.206444][ T7633] dump_header+0x10f/0xb6c [ 471.210963][ T7633] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 471.216804][ T7633] ? ___ratelimit+0x60/0x595 [ 471.221508][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 471.226631][ T7633] oom_kill_process.cold+0x10/0x15 [ 471.231756][ T7633] out_of_memory+0x79a/0x1280 [ 471.236447][ T7633] ? lock_downgrade+0x880/0x880 [ 471.241437][ T7633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.241462][T24042] IPVS: set_ctl: invalid protocol: 221 172.20.20.187:20002 [ 471.247704][ T7633] ? oom_killer_disable+0x280/0x280 [ 471.247718][ T7633] ? find_held_lock+0x35/0x130 [ 471.247742][ T7633] mem_cgroup_out_of_memory+0x1ca/0x230 [ 471.247754][ T7633] ? memcg_event_wake+0x230/0x230 [ 471.247775][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 471.289339][ T7633] ? _raw_spin_unlock+0x2d/0x50 [ 471.294207][ T7633] try_charge+0x102c/0x15c0 [ 471.298749][ T7633] ? find_held_lock+0x35/0x130 [ 471.303659][ T7633] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 471.309213][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 471.314779][ T7633] ? find_held_lock+0x35/0x130 [ 471.319557][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 471.325684][ T7633] __memcg_kmem_charge_memcg+0x7c/0x130 [ 471.331250][ T7633] ? memcg_kmem_put_cache+0xb0/0xb0 [ 471.336637][ T7633] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 471.342234][ T7633] __memcg_kmem_charge+0x136/0x300 [ 471.347360][ T7633] __alloc_pages_nodemask+0x4bf/0x8d0 [ 471.352751][ T7633] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 471.358494][ T7633] ? copy_page_range+0x125a/0x1f90 [ 471.363616][ T7633] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 471.370067][ T7633] alloc_pages_current+0x107/0x210 [ 471.375224][ T7633] pte_alloc_one+0x1b/0x1a0 [ 471.379737][ T7633] __pte_alloc+0x20/0x310 [ 471.384173][ T7633] copy_page_range+0x1529/0x1f90 [ 471.389209][ T7633] ? perf_trace_lock+0xeb/0x510 [ 471.394208][ T7633] ? pmd_alloc+0x180/0x180 [ 471.398731][ T7633] ? __rb_insert_augmented+0x231/0xdf0 [ 471.404424][ T7633] ? validate_mm_rb+0xa3/0xc0 [ 471.409120][ T7633] ? __vma_link_rb+0x279/0x370 [ 471.414018][ T7633] copy_process.part.0+0x568b/0x7980 [ 471.419342][ T7633] ? __cleanup_sighand+0x60/0x60 [ 471.424391][ T7633] _do_fork+0x257/0xfd0 [ 471.428561][ T7633] ? fork_idle+0x1d0/0x1d0 [ 471.433105][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 471.438768][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 471.444256][ T7633] ? do_syscall_64+0x26/0x610 [ 471.449035][ T7633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.455106][ T7633] ? do_syscall_64+0x26/0x610 [ 471.459833][ T7633] __x64_sys_clone+0xbf/0x150 [ 471.464607][ T7633] do_syscall_64+0x103/0x610 [ 471.469309][ T7633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.475224][ T7633] RIP: 0033:0x45737a [ 471.479120][ T7633] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 471.498823][ T7633] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 471.507255][ T7633] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 471.515236][ T7633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 471.523215][ T7633] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000027f3940 12:32:41 executing program 3: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000140)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r2 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r2, 0x7fe, 0x2) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') fcntl$addseals(r3, 0x409, 0x4) sendfile(r3, r4, &(0x7f00000000c0)=0x202, 0x8) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) 12:32:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 471.531478][ T7633] R10: 00000000027f3c10 R11: 0000000000000246 R12: 0000000000000001 [ 471.539545][ T7633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 471.555436][T24042] IPVS: set_ctl: invalid protocol: 221 172.20.20.187:20002 12:32:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:41 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b7) [ 471.686652][ T7633] memory: usage 307200kB, limit 307200kB, failcnt 995 [ 471.693621][ T7633] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.838119][ T7633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 471.869036][ T7633] Memory cgroup stats for /syz5: cache:148KB rss:261188KB rss_huge:241664KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261192KB inactive_file:0KB active_file:0KB unevictable:0KB [ 471.937937][ T7633] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=23971,uid=0 [ 472.016657][ T7633] Memory cgroup out of memory: Killed process 23971 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35800kB, shmem-rss:0kB [ 472.089955][T24067] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 472.123272][T24067] CPU: 0 PID: 24067 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 472.131304][T24067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.141625][T24067] Call Trace: [ 472.144927][T24067] dump_stack+0x172/0x1f0 [ 472.149271][T24067] dump_header+0x10f/0xb6c [ 472.153798][T24067] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 472.159716][T24067] ? ___ratelimit+0x60/0x595 [ 472.164310][T24067] ? do_raw_spin_unlock+0x57/0x270 [ 472.169562][T24067] oom_kill_process.cold+0x10/0x15 [ 472.174693][T24067] out_of_memory+0x79a/0x1280 [ 472.179754][T24067] ? lock_downgrade+0x880/0x880 [ 472.184605][T24067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.190862][T24067] ? oom_killer_disable+0x280/0x280 [ 472.196173][T24067] ? find_held_lock+0x35/0x130 [ 472.200948][T24067] mem_cgroup_out_of_memory+0x1ca/0x230 [ 472.206492][T24067] ? memcg_event_wake+0x230/0x230 [ 472.211527][T24067] ? do_raw_spin_unlock+0x57/0x270 [ 472.216638][T24067] ? _raw_spin_unlock+0x2d/0x50 [ 472.221502][T24067] try_charge+0x102c/0x15c0 [ 472.226010][T24067] ? find_held_lock+0x35/0x130 [ 472.230959][T24067] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 472.236511][T24067] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 472.242056][T24067] ? find_held_lock+0x35/0x130 [ 472.247011][T24067] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 472.252572][T24067] __memcg_kmem_charge_memcg+0x7c/0x130 [ 472.258121][T24067] ? memcg_kmem_put_cache+0xb0/0xb0 [ 472.263335][T24067] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 472.268887][T24067] __memcg_kmem_charge+0x136/0x300 [ 472.274012][T24067] __alloc_pages_nodemask+0x4bf/0x8d0 [ 472.279391][T24067] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 472.285206][T24067] ? find_held_lock+0x35/0x130 [ 472.289970][T24067] ? percpu_ref_put_many+0x94/0x190 [ 472.295171][T24067] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 472.301546][T24067] alloc_pages_current+0x107/0x210 [ 472.306753][T24067] __get_free_pages+0xc/0x40 [ 472.311343][T24067] pgd_alloc+0x8b/0x3f0 [ 472.315499][T24067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.321765][T24067] ? pgd_page_get_mm+0x40/0x40 [ 472.327041][T24067] ? lockdep_init_map+0x1be/0x6d0 [ 472.332068][T24067] ? lockdep_init_map+0x1be/0x6d0 [ 472.337110][T24067] mm_init+0x590/0x9b0 [ 472.341185][T24067] copy_process.part.0+0x2b65/0x7980 [ 472.346473][T24067] ? __lockdep_free_key_range+0x120/0x120 [ 472.352281][T24067] ? semctl_down+0x5e0/0x9f0 [ 472.356887][T24067] ? semctl_down+0x5e0/0x9f0 [ 472.361862][T24067] ? __cleanup_sighand+0x60/0x60 [ 472.366905][T24067] ? semctl_down+0x5e0/0x9f0 [ 472.371499][T24067] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.377751][T24067] _do_fork+0x257/0xfd0 [ 472.381914][T24067] ? fork_idle+0x1d0/0x1d0 [ 472.386503][T24067] ? __ia32_sys_mkdir+0x80/0x80 [ 472.391359][T24067] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.396830][T24067] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 472.402305][T24067] ? do_syscall_64+0x26/0x610 [ 472.406982][T24067] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.413052][T24067] ? do_syscall_64+0x26/0x610 [ 472.417734][T24067] ? lockdep_hardirqs_on+0x418/0x5d0 [ 472.423051][T24067] __ia32_sys_fork+0x1f/0x30 [ 472.427678][T24067] do_syscall_64+0x103/0x610 [ 472.432273][T24067] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.438170][T24067] RIP: 0033:0x2000000a [ 472.442249][T24067] Code: Bad RIP value. [ 472.446322][T24067] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 472.454908][T24067] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 472.463069][T24067] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 472.471075][T24067] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 472.479046][T24067] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 472.487015][T24067] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 472.992640][T24067] memory: usage 307192kB, limit 307200kB, failcnt 1052 [ 473.012636][T24067] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.032645][T24067] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.072893][T24067] Memory cgroup stats for /syz5: cache:148KB rss:261188KB rss_huge:241664KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 473.101920][T24067] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20844,uid=0 [ 473.124017][T24067] Memory cgroup out of memory: Killed process 20844 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 473.147639][ T1044] oom_reaper: reaped process 20844 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 473.167980][T24068] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 473.186909][T24068] CPU: 1 PID: 24068 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 473.195015][T24068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.205166][T24068] Call Trace: [ 473.208493][T24068] dump_stack+0x172/0x1f0 [ 473.212851][T24068] dump_header+0x10f/0xb6c [ 473.217471][T24068] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 473.223293][T24068] ? ___ratelimit+0x60/0x595 [ 473.227912][T24068] ? do_raw_spin_unlock+0x57/0x270 [ 473.233040][T24068] oom_kill_process.cold+0x10/0x15 [ 473.238161][T24068] out_of_memory+0x79a/0x1280 [ 473.242856][T24068] ? oom_killer_disable+0x280/0x280 [ 473.248236][T24068] ? find_held_lock+0x35/0x130 [ 473.253031][T24068] mem_cgroup_out_of_memory+0x1ca/0x230 [ 473.258586][T24068] ? memcg_event_wake+0x230/0x230 [ 473.263624][T24068] ? do_raw_spin_unlock+0x57/0x270 [ 473.268749][T24068] ? _raw_spin_unlock+0x2d/0x50 [ 473.273726][T24068] try_charge+0xa87/0x15c0 [ 473.278190][T24068] ? find_held_lock+0x35/0x130 [ 473.283072][T24068] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 473.288622][T24068] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 473.294332][T24068] ? find_held_lock+0x35/0x130 [ 473.299106][T24068] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 473.304696][T24068] __memcg_kmem_charge_memcg+0x7c/0x130 [ 473.310294][T24068] ? memcg_kmem_put_cache+0xb0/0xb0 [ 473.315514][T24068] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 473.321083][T24068] __memcg_kmem_charge+0x136/0x300 [ 473.326518][T24068] __alloc_pages_nodemask+0x4bf/0x8d0 [ 473.331910][T24068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.338166][T24068] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 473.343896][T24068] ? copy_process.part.0+0x1d08/0x7980 [ 473.349561][T24068] ? lockdep_hardirqs_on+0x418/0x5d0 [ 473.354863][T24068] ? trace_hardirqs_on+0x67/0x230 [ 473.360071][T24068] ? kasan_check_read+0x11/0x20 [ 473.364939][T24068] copy_process.part.0+0x3e0/0x7980 [ 473.370143][T24068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.376477][T24068] ? debug_smp_processor_id+0x3c/0x280 [ 473.381974][T24068] ? perf_trace_lock+0xeb/0x510 [ 473.386850][T24068] ? __lockdep_free_key_range+0x120/0x120 [ 473.392585][T24068] ? __might_fault+0x12b/0x1e0 [ 473.397466][T24068] ? __cleanup_sighand+0x60/0x60 [ 473.402414][T24068] ? lock_downgrade+0x880/0x880 [ 473.407291][T24068] _do_fork+0x257/0xfd0 [ 473.411454][T24068] ? fork_idle+0x1d0/0x1d0 [ 473.415887][T24068] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.421372][T24068] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 473.426929][T24068] ? do_syscall_64+0x26/0x610 [ 473.431611][T24068] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.437692][T24068] ? do_syscall_64+0x26/0x610 [ 473.442474][T24068] __x64_sys_clone+0xbf/0x150 [ 473.447339][T24068] do_syscall_64+0x103/0x610 [ 473.452028][T24068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.458006][T24068] RIP: 0033:0x458da9 [ 473.461994][T24068] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.481612][T24068] RSP: 002b:00007fbf2a074c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 473.490038][T24068] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 473.499100][T24068] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 473.507075][T24068] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 473.515069][T24068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 473.523058][T24068] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 473.540527][T24068] memory: usage 304796kB, limit 307200kB, failcnt 1052 [ 473.550834][T24068] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.561885][T24068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 473.572282][T24068] Memory cgroup stats for /syz5: cache:148KB rss:259020KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259120KB inactive_file:0KB active_file:0KB unevictable:0KB [ 473.600936][T24068] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20872,uid=0 [ 473.624007][T24068] Memory cgroup out of memory: Killed process 20872 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 473.648205][ T1044] oom_reaper: reaped process 20872 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 473.667714][T24066] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 473.695974][T24066] CPU: 0 PID: 24066 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 473.704010][T24066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.714188][T24066] Call Trace: [ 473.717484][T24066] dump_stack+0x172/0x1f0 [ 473.721910][T24066] dump_header+0x10f/0xb6c [ 473.726327][T24066] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 473.732226][T24066] ? ___ratelimit+0x60/0x595 [ 473.736839][T24066] ? do_raw_spin_unlock+0x57/0x270 [ 473.741954][T24066] oom_kill_process.cold+0x10/0x15 [ 473.747088][T24066] out_of_memory+0x79a/0x1280 [ 473.751856][T24066] ? oom_killer_disable+0x280/0x280 [ 473.757058][T24066] ? find_held_lock+0x35/0x130 [ 473.761839][T24066] mem_cgroup_out_of_memory+0x1ca/0x230 [ 473.767389][T24066] ? memcg_event_wake+0x230/0x230 [ 473.772434][T24066] ? do_raw_spin_unlock+0x57/0x270 [ 473.777581][T24066] ? _raw_spin_unlock+0x2d/0x50 [ 473.782436][T24066] try_charge+0xa87/0x15c0 [ 473.786849][T24066] ? find_held_lock+0x35/0x130 [ 473.791637][T24066] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 473.797193][T24066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.803447][T24066] ? kasan_check_read+0x11/0x20 [ 473.809176][T24066] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 473.814729][T24066] mem_cgroup_try_charge+0x24d/0x5e0 [ 473.820042][T24066] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 473.825770][T24066] __handle_mm_fault+0x1e1f/0x3ec0 [ 473.830983][T24066] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 473.836542][T24066] ? find_held_lock+0x35/0x130 [ 473.841577][T24066] ? handle_mm_fault+0x322/0xb30 [ 473.846554][T24066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.852813][T24066] ? kasan_check_read+0x11/0x20 [ 473.857684][T24066] handle_mm_fault+0x43f/0xb30 [ 473.862459][T24066] __do_page_fault+0x5ef/0xda0 [ 473.868189][T24066] do_page_fault+0x71/0x581 [ 473.872714][T24066] ? page_fault+0x8/0x30 [ 473.876979][T24066] page_fault+0x1e/0x30 [ 473.881134][T24066] RIP: 0033:0x45b75d [ 473.885198][T24066] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 473.904807][T24066] RSP: 002b:0000000000a4fa98 EFLAGS: 00010202 [ 473.910897][T24066] RAX: ffffffffffffffea RBX: 00007fbf2a054700 RCX: 00007fbf2a054700 [ 473.919343][T24066] RDX: 00000000003d0f00 RSI: 00007fbf2a053db0 RDI: 000000000040fbb0 [ 473.927405][T24066] RBP: 0000000000a4fcb0 R08: 00007fbf2a0549d0 R09: 00007fbf2a054700 [ 473.947730][T24066] R10: 00007fbf2a053dc0 R11: 0000000000000246 R12: 0000000000000000 [ 473.972692][T24066] R13: 0000000000a4fb4f R14: 00007fbf2a0549c0 R15: 000000000073bfac [ 474.358203][T24066] memory: usage 302484kB, limit 307200kB, failcnt 1052 [ 474.373259][T24066] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 474.396494][T24066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 474.403478][T24066] Memory cgroup stats for /syz5: cache:148KB rss:256880KB rss_huge:237568KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:256980KB inactive_file:0KB active_file:0KB unevictable:0KB [ 474.496479][T24066] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20902,uid=0 [ 474.519628][T24066] Memory cgroup out of memory: Killed process 20902 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:44 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c003f004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:44 executing program 2: r0 = gettid() r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000140)=""/128) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r4 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) lseek(r1, 0x0, 0x7) tkill(r0, 0x1000000000014) 12:32:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc1205531, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) mkdir(0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) mount(&(0x7f0000000080), 0x0, 0x0, 0x5010, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x0, @multicast2, 0x4e23, 0x0, 'wlc\x00', 0x9, 0x4, 0x32}, 0x2c) shmget$private(0x0, 0x4000, 0x848, &(0x7f0000ffa000/0x4000)=nil) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='mountinfo\x00') ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000200)={0x3bbf9b25, 0x7, 0xffffffff, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000280)={{0x51, 0xad44}, {0x9, 0x9}, 0x80000001, 0x3, 0x2}) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000001280)=""/242, 0xffffff7a}, {&(0x7f0000001380)=""/239, 0x47}], 0x4, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000240)={r1, r1, 0x8}) 12:32:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b8) 12:32:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0xb, 0x4, 0x3, 0xfee, 0x5}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x4001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0xfffffffffffffffd}) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x3, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:32:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1b9) 12:32:44 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 475.058269][T24121] *** Guest State *** [ 475.066747][T24121] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 475.123728][T24121] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 475.166832][T24121] CR3 = 0x0000000000000000 [ 475.171713][T24121] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 475.186814][T24121] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 475.194708][T24121] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 475.216816][T24121] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 475.226311][T24121] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.235956][T24121] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.256856][T24121] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.266052][T24121] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.275590][T24121] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.285225][T24121] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 475.294864][T24121] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 475.304583][T24121] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 475.314461][T24121] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 475.324086][T24121] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 475.332617][T24121] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 475.341778][T24121] Interruptibility = 00000000 ActivityState = 00000000 [ 475.349764][T24121] *** Host State *** [ 475.354085][T24121] RIP = 0xffffffff811b4980 RSP = 0xffff8880294e78e0 [ 475.361641][T24121] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 475.369910][T24121] FSBase=00007f316545d700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 475.379334][T24121] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 475.386341][T24121] CR0=0000000080050033 CR3=0000000091bd4000 CR4=00000000001426f0 [ 475.394886][T24121] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 475.403186][T24121] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 475.410808][T24121] *** Control State *** [ 475.415297][T24121] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 475.423617][T24121] EntryControls=0000d1ff ExitControls=002fefff [ 475.430457][T24121] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 475.438971][T24121] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 475.447267][T24121] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 475.454879][T24121] reason=80000021 qualification=0000000000000000 12:32:45 executing program 2: r0 = socket$inet(0x10, 0xfffffffffffffffe, 0xa) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@empty, @loopback, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@broadcast, 0x4e21, 0xffffffff7fffffff, 0x4e24, 0x8, 0x0, 0x20, 0xa0, 0xff, r1, r2}, {0xfffffffffffffffb, 0x6, 0xffffffffffff8000, 0x6, 0x7, 0x5, 0x80, 0x5}, {0x1, 0xfffffffffffffb4d, 0x972e, 0xffffffffffffff8a}, 0x4, 0x6e6bbb, 0x3, 0x1, 0x1, 0x3}, {{@in6=@rand_addr="e23718dc03eaa6a60f20dfbdc4fbe88e", 0x4d5, 0xff}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x6, 0x1}}, 0xe8) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 12:32:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:45 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:45 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ba) 12:32:45 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 475.462846][T24121] IDTVectoring: info=00000000 errcode=00000000 [ 475.470101][T24121] TSC Offset = 0xfffffefebea79f29 [ 475.487258][T24121] TPR Threshold = 0x00 [ 475.491447][T24121] EPT pointer = 0x00000000a553701e 12:32:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x8000}, &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) write$cgroup_pid(r3, &(0x7f0000000280)=r4, 0x12) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000040)={0xff, 0x20}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0x101}, 0x20}, 0x1, 0x900000000000000}, 0x0) 12:32:45 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 475.678362][T24144] *** Guest State *** [ 475.682455][T24144] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 12:32:45 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1bb) [ 475.766668][T24144] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 475.789425][T24144] CR3 = 0x0000000000000000 [ 475.808187][T24144] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 475.814947][T24144] RFLAGS=0xffffffffffffffff DR7 = 0x0000000000000400 [ 475.882353][T24144] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 475.900242][T24144] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 475.923618][T24144] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.943930][T24144] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.961701][T24144] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 475.984017][T24144] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 476.001317][T24144] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 476.019042][T24144] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 476.036475][T24144] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 476.045294][T24144] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 476.066592][T24144] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 476.075467][T24144] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 476.096573][T24144] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 476.110730][T24144] Interruptibility = 00000000 ActivityState = 00000000 [ 476.124663][T24144] *** Host State *** [ 476.132432][T24144] RIP = 0xffffffff811b4980 RSP = 0xffff888051f778e0 [ 476.146492][T24144] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 476.160621][T24144] FSBase=00007f316543c700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 476.176613][T24144] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 476.190315][T24144] CR0=0000000080050033 CR3=0000000091bd4000 CR4=00000000001426f0 [ 476.204247][T24144] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 476.221881][T24144] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 476.229960][T24144] *** Control State *** [ 476.242712][T24144] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 476.256589][T24144] EntryControls=0000d1ff ExitControls=002fefff [ 476.263049][T24144] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 476.291739][T24144] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 476.300495][T24144] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 476.313216][T24144] reason=80000021 qualification=0000000000000000 [ 476.321702][T24144] IDTVectoring: info=00000000 errcode=00000000 [ 476.337847][T24144] TSC Offset = 0xfffffefe6b930393 [ 476.343062][T24144] TPR Threshold = 0x00 [ 476.351478][T24144] EPT pointer = 0x000000008bebb01e 12:32:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x18, 0x0, &(0x7f0000000040)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa0380, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x24020022}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x1b, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x410, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xffffffffffff5093, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000) 12:32:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1bc) 12:32:46 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4004af07, &(0x7f0000000000)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/dlm-control\x00', 0x10400, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001b40)=@assoc_value={0x0, 0x7fff}, &(0x7f0000001b80)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001bc0)={r2, 0x1000, "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"}, &(0x7f0000002c00)=0x1008) 12:32:46 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0xffffffffffffffff, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80800, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000000)=0x40, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x6, 0x5}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x4045d, 0x1, 0x8, 0x0, r1}, 0x10) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:32:46 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x980914, 0x3}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x4) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x111000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) dup2(r1, r0) 12:32:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1bd) 12:32:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x9, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x80, 0x4, 0x7fff, 0x8000, 0x0, 0x7, 0x400, 0x5, 0x20, 0x17c87058, 0x800, 0x9, 0x7fff, 0xfffffffffffffff7, 0xca1, 0x4, 0x2, 0x8000, 0x7fff, 0x9, 0x8, 0x9400, 0x0, 0x5, 0x7, 0x7f, 0x101, 0x9c, 0x9, 0x8000, 0x853d, 0xfff, 0x40, 0xffffffffffffffe0, 0x40, 0x10000, 0x0, 0x9, 0x4, @perf_config_ext={0x10000, 0x6b85}, 0x10, 0xfffffffffffffff7, 0x2, 0x0, 0x9, 0xff, 0x1}, r2, 0x4, r3, 0x1) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000040)=0xb785) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:32:46 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:46 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1be) 12:32:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x8901, 0x507100) r1 = dup2(r0, r0) socket$key(0xf, 0x3, 0x2) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$TIOCSTI(r1, 0x5412, 0x80) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x3, 0x6}) 12:32:47 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0007004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="c750a48cce6baaaaaaaaaaaa0800450000240000000000029078000000dde0000001000000000401907800b93b6600c0c792afd10aa162bd7ad04a3addcd5ae1a3d0bc343a5f366b94cc8b7c6a44"], 0x0) r1 = syz_open_dev$usb(&(0x7f00000025c0)='/dev/bus/usb/00#/00#\x00', 0x2, 0x200580) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000002600)=0x3, 0x4) socketpair(0x9, 0x80000, 0x41000, &(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001280)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000001340)={&(0x7f0000001240), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x3c, r3, 0x308, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1f}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x8000, 0x4, 0x4, 0x80]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44850) 12:32:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/162, 0xa2}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000280)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x168) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) ftruncate(0xffffffffffffffff, 0x200004) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r3, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80) dup3(r0, r2, 0x0) 12:32:47 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:47 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1bf) [ 477.443256][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 12:32:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:47 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd940101830020200a000902000006000001000000000000ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 12:32:47 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c0) 12:32:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 477.690578][T24259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 12:32:47 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 477.777706][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 477.992157][T24239] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=2, oom_score_adj=1000 [ 478.012449][T24239] CPU: 0 PID: 24239 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 478.020482][T24239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.030550][T24239] Call Trace: [ 478.033855][T24239] dump_stack+0x172/0x1f0 [ 478.038198][T24239] dump_header+0x10f/0xb6c [ 478.042625][T24239] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 478.048440][T24239] ? ___ratelimit+0x60/0x595 [ 478.053045][T24239] ? do_raw_spin_unlock+0x57/0x270 [ 478.058264][T24239] oom_kill_process.cold+0x10/0x15 [ 478.063475][T24239] out_of_memory+0x79a/0x1280 [ 478.068269][T24239] ? oom_killer_disable+0x280/0x280 [ 478.073499][T24239] mem_cgroup_out_of_memory+0x1ca/0x230 [ 478.079051][T24239] ? memcg_event_wake+0x230/0x230 [ 478.084082][T24239] ? do_raw_spin_unlock+0x57/0x270 [ 478.089210][T24239] ? _raw_spin_unlock+0x2d/0x50 [ 478.094083][T24239] try_charge+0x102c/0x15c0 [ 478.098594][T24239] ? trace_hardirqs_on_caller+0x6a/0x220 [ 478.104268][T24239] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 478.109835][T24239] ? mark_held_locks+0xa4/0xf0 [ 478.114697][T24239] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 478.120431][T24239] ? __sk_mem_raise_allocated+0x557/0x1390 [ 478.126247][T24239] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 478.131893][T24239] ? lockdep_hardirqs_on+0x418/0x5d0 [ 478.137192][T24239] ? trace_hardirqs_on+0x67/0x230 [ 478.142331][T24239] mem_cgroup_charge_skmem+0x12f/0x280 [ 478.147803][T24239] ? mem_cgroup_sk_free+0x90/0x90 [ 478.152912][T24239] ? tcp_current_mss+0x239/0x390 [ 478.157864][T24239] ? tcp_mtu_to_mss+0x3f0/0x3f0 [ 478.162730][T24239] __sk_mem_raise_allocated+0x557/0x1390 [ 478.168386][T24239] __sk_mem_schedule+0x6d/0xe0 [ 478.173328][T24239] do_tcp_sendpages+0x198d/0x1b70 [ 478.178391][T24239] ? sk_stream_alloc_skb+0x860/0x860 [ 478.183689][T24239] ? lockdep_hardirqs_on+0x418/0x5d0 [ 478.189003][T24239] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 478.194821][T24239] tls_push_sg+0x1de/0x680 [ 478.199252][T24239] tls_tx_records+0x3c8/0x760 [ 478.203921][T24239] tls_push_record+0x1e8f/0x33f0 [ 478.208860][T24239] ? tls_tx_records+0x760/0x760 [ 478.213715][T24239] ? lock_downgrade+0x880/0x880 [ 478.218636][T24239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.224955][T24239] ? kasan_check_read+0x11/0x20 [ 478.229795][T24239] bpf_exec_tx_verdict+0xe30/0x1280 [ 478.235165][T24239] ? get_user_pages_fast+0x236/0x3b0 [ 478.240451][T24239] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 478.246158][T24239] ? tls_push_record+0x33f0/0x33f0 [ 478.251313][T24239] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.257549][T24239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.263824][T24239] ? sk_msg_alloc+0x62d/0x8d0 [ 478.268500][T24239] tls_sw_sendmsg+0x107c/0x17b0 [ 478.273459][T24239] ? tx_work_handler+0xf0/0xf0 [ 478.278209][T24239] ? aa_sk_perm+0x288/0x880 [ 478.282877][T24239] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 478.288464][T24239] inet_sendmsg+0x147/0x5d0 [ 478.292968][T24239] ? ipip_gro_receive+0x100/0x100 [ 478.298019][T24239] sock_sendmsg+0xdd/0x130 [ 478.302438][T24239] __sys_sendto+0x262/0x380 [ 478.306930][T24239] ? __ia32_sys_getpeername+0xb0/0xb0 [ 478.312317][T24239] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 478.318584][T24239] ? put_timespec64+0xda/0x140 [ 478.323339][T24239] ? nsecs_to_jiffies+0x30/0x30 [ 478.328600][T24239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 478.334042][T24239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 478.339486][T24239] ? do_syscall_64+0x26/0x610 [ 478.344150][T24239] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.350382][T24239] __x64_sys_sendto+0xe1/0x1a0 [ 478.355136][T24239] do_syscall_64+0x103/0x610 [ 478.359716][T24239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.365592][T24239] RIP: 0033:0x458da9 [ 478.369483][T24239] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.389084][T24239] RSP: 002b:00007f316545cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 478.397480][T24239] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000458da9 [ 478.405607][T24239] RDX: 00000000e0ffffff RSI: 00000000200005c0 RDI: 0000000000000004 [ 478.413570][T24239] RBP: 000000000073bf00 R08: 0000000000000000 R09: 00000000000000d8 [ 478.421559][T24239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f316545d6d4 [ 478.429643][T24239] R13: 00000000004c6732 R14: 00000000004db0f0 R15: 00000000ffffffff 12:32:48 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:48 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c1) [ 478.635990][T24239] memory: usage 307196kB, limit 307200kB, failcnt 1640 [ 478.655307][T24239] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 478.659345][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 478.703336][T24239] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 478.725675][T24239] Memory cgroup stats for /syz3: cache:144KB rss:270736KB rss_huge:256000KB shmem:264KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:56KB active_anon:270744KB inactive_file:0KB active_file:0KB unevictable:0KB [ 478.792737][T24239] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9295,uid=0 [ 478.817352][T24239] Memory cgroup out of memory: Killed process 9295 (syz-executor.3) total-vm:72976kB, anon-rss:2228kB, file-rss:35788kB, shmem-rss:0kB [ 478.891966][T24238] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 478.927427][T24238] CPU: 1 PID: 24238 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #97 [ 478.935537][T24238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.945597][T24238] Call Trace: [ 478.948914][T24238] dump_stack+0x172/0x1f0 [ 478.953283][T24238] dump_header+0x10f/0xb6c [ 478.957710][T24238] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 478.963535][T24238] ? ___ratelimit+0x60/0x595 [ 478.968143][T24238] ? do_raw_spin_unlock+0x57/0x270 [ 478.973273][T24238] oom_kill_process.cold+0x10/0x15 [ 478.978393][T24238] out_of_memory+0x79a/0x1280 [ 478.983279][T24238] ? oom_killer_disable+0x280/0x280 [ 478.988479][T24238] ? find_held_lock+0x35/0x130 [ 478.993428][T24238] mem_cgroup_out_of_memory+0x1ca/0x230 [ 478.998974][T24238] ? memcg_event_wake+0x230/0x230 [ 479.004008][T24238] ? do_raw_spin_unlock+0x57/0x270 [ 479.009128][T24238] ? _raw_spin_unlock+0x2d/0x50 [ 479.014025][T24238] try_charge+0xa87/0x15c0 [ 479.018541][T24238] ? find_held_lock+0x35/0x130 [ 479.023381][T24238] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 479.029033][T24238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.035375][T24238] ? kasan_check_read+0x11/0x20 [ 479.040244][T24238] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 479.046004][T24238] mem_cgroup_try_charge+0x24d/0x5e0 [ 479.051302][T24238] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 479.057035][T24238] __handle_mm_fault+0x1e1f/0x3ec0 [ 479.062160][T24238] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 479.067718][T24238] ? find_held_lock+0x35/0x130 [ 479.072496][T24238] ? handle_mm_fault+0x322/0xb30 [ 479.077561][T24238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.083818][T24238] ? kasan_check_read+0x11/0x20 [ 479.088678][T24238] handle_mm_fault+0x43f/0xb30 [ 479.093447][T24238] __do_page_fault+0x5ef/0xda0 [ 479.098402][T24238] do_page_fault+0x71/0x581 [ 479.102908][T24238] ? page_fault+0x8/0x30 [ 479.107154][T24238] page_fault+0x1e/0x30 [ 479.111308][T24238] RIP: 0033:0x4107bf [ 479.115287][T24238] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 479.134903][T24238] RSP: 002b:0000000000a4fae0 EFLAGS: 00010206 [ 479.140979][T24238] RAX: 00007f31653fb000 RBX: 0000000000020000 RCX: 0000000000458dfa [ 479.148953][T24238] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 479.156931][T24238] RBP: 0000000000a4fbc0 R08: ffffffffffffffff R09: 0000000000000000 [ 479.164993][T24238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fcb0 [ 479.172988][T24238] R13: 00007f316541b700 R14: 0000000000000002 R15: 000000000073c04c [ 479.288496][T24238] memory: usage 302772kB, limit 307200kB, failcnt 1649 [ 479.295397][T24238] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 479.309829][T24238] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 479.319517][T24238] Memory cgroup stats for /syz3: cache:144KB rss:268552KB rss_huge:253952KB shmem:264KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:56KB active_anon:268540KB inactive_file:0KB active_file:0KB unevictable:0KB [ 479.349508][T24238] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=18351,uid=0 [ 479.371801][T24238] Memory cgroup out of memory: Killed process 18351 (syz-executor.3) total-vm:72976kB, anon-rss:2228kB, file-rss:35788kB, shmem-rss:0kB [ 479.394091][ T1044] oom_reaper: reaped process 18351 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB 12:32:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x801, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) setxattr$security_smack_entry(0x0, &(0x7f0000000200)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = accept4(r3, &(0x7f0000b17000)=@generic, 0x0, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="829184805b8ccc478d18e30b8fedf689c3cee267eef314435922fee5b20c3146faea16f9987068fbd557d01bc912e133557a38237b07a0a1ea8d84389affcb062389559feb9337aa0cafe4f6bf712b51ef31005065c889aec2da58e7543ab0e2cd505163bdd7923a9c9c"]) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x86000) connect(r4, &(0x7f0000000080)=@in={0x2, 0x4e20, @remote}, 0x80) 12:32:49 executing program 2: ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)=0x1) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000900)={0xb, 0x0, {0x57, 0x4, 0x0, {0x6e38, 0xc2}, {0x2}, @const={0x100000001, {0x0, 0x20, 0x0, 0x4}}}, {0x0, 0x0, 0x3f, {0x6}, {0xfffffffffffffff8, 0x6}, @ramp={0x1e2, 0x0, {0x9f0e, 0x38, 0x0, 0x6}}}}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x90000, 0x0) fcntl$addseals(r0, 0x409, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x700, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8, 0x60}}], 0x48, 0x7}, 0x0) 12:32:49 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:49 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c2) 12:32:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:49 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:49 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0x11000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000040)="2c4041ba21d8f623d3027f91487a716291ddc42acc82d660cb456dc646d2e1080eb2d3492b1c9fa453f8162834c137ec399d8525079285fbc19286c1c07d27", 0x3f, r0}, 0x68) 12:32:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 479.720543][ T7633] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 12:32:49 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 479.787597][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:32:49 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c3) 12:32:49 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 479.904435][ T7633] CPU: 0 PID: 7633 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 479.912463][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.922783][ T7633] Call Trace: [ 479.926088][ T7633] dump_stack+0x172/0x1f0 [ 479.930614][ T7633] dump_header+0x10f/0xb6c [ 479.935028][ T7633] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 479.940843][ T7633] ? ___ratelimit+0x60/0x595 [ 479.945445][ T7633] ? do_raw_spin_unlock+0x57/0x270 12:32:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 479.950570][ T7633] oom_kill_process.cold+0x10/0x15 [ 479.955698][ T7633] out_of_memory+0x79a/0x1280 [ 479.960406][ T7633] ? lock_downgrade+0x880/0x880 [ 479.965371][ T7633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.971605][ T7633] ? oom_killer_disable+0x280/0x280 [ 479.971618][ T7633] ? find_held_lock+0x35/0x130 [ 479.971640][ T7633] mem_cgroup_out_of_memory+0x1ca/0x230 [ 479.971652][ T7633] ? memcg_event_wake+0x230/0x230 [ 479.971676][ T7633] ? do_raw_spin_unlock+0x57/0x270 [ 479.997744][ T7633] ? _raw_spin_unlock+0x2d/0x50 [ 480.002708][ T7633] try_charge+0x102c/0x15c0 [ 480.007216][ T7633] ? find_held_lock+0x35/0x130 [ 480.012048][ T7633] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 480.018002][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 480.023839][ T7633] ? find_held_lock+0x35/0x130 [ 480.028623][ T7633] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 480.034212][ T7633] __memcg_kmem_charge_memcg+0x7c/0x130 [ 480.039784][ T7633] ? memcg_kmem_put_cache+0xb0/0xb0 [ 480.045023][ T7633] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 480.050580][ T7633] __memcg_kmem_charge+0x136/0x300 [ 480.055712][ T7633] __alloc_pages_nodemask+0x4bf/0x8d0 [ 480.061099][ T7633] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 480.067016][ T7633] ? copy_page_range+0x125a/0x1f90 [ 480.072139][ T7633] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 480.078476][ T7633] alloc_pages_current+0x107/0x210 [ 480.083608][ T7633] pte_alloc_one+0x1b/0x1a0 [ 480.088123][ T7633] __pte_alloc+0x20/0x310 [ 480.092564][ T7633] copy_page_range+0x1529/0x1f90 [ 480.097550][ T7633] ? perf_trace_lock+0xeb/0x510 [ 480.102433][ T7633] ? pmd_alloc+0x180/0x180 [ 480.106860][ T7633] ? __rb_insert_augmented+0x231/0xdf0 [ 480.112318][ T7633] ? validate_mm_rb+0xa3/0xc0 [ 480.117082][ T7633] ? __vma_link_rb+0x279/0x370 [ 480.121853][ T7633] copy_process.part.0+0x568b/0x7980 [ 480.127185][ T7633] ? __cleanup_sighand+0x60/0x60 [ 480.132160][ T7633] _do_fork+0x257/0xfd0 [ 480.136320][ T7633] ? fork_idle+0x1d0/0x1d0 [ 480.140753][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 480.146214][ T7633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 480.151694][ T7633] ? do_syscall_64+0x26/0x610 [ 480.156369][ T7633] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.162430][ T7633] ? do_syscall_64+0x26/0x610 [ 480.167117][ T7633] __x64_sys_clone+0xbf/0x150 [ 480.171815][ T7633] do_syscall_64+0x103/0x610 [ 480.176416][ T7633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.182419][ T7633] RIP: 0033:0x45737a [ 480.186838][ T7633] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 480.207331][ T7633] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 480.215750][ T7633] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045737a [ 480.223725][ T7633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 480.231701][ T7633] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 00000000027f3940 [ 480.239885][ T7633] R10: 00000000027f3c10 R11: 0000000000000246 R12: 0000000000000001 [ 480.247860][ T7633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 12:32:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x4}) r2 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x20000) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x3f) 12:32:50 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030207031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x203) 12:32:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:50 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 480.309946][ T7633] memory: usage 307200kB, limit 307200kB, failcnt 1114 [ 480.317219][ T7633] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 480.341443][ T7633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 480.380637][ T7633] Memory cgroup stats for /syz5: cache:148KB rss:259828KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259920KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 480.559127][ T7633] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24107,uid=0 [ 480.605388][ T7633] Memory cgroup out of memory: Killed process 24107 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35800kB, shmem-rss:0kB [ 480.656152][T24362] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 480.668657][T24362] CPU: 0 PID: 24362 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 480.676695][T24362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.686852][T24362] Call Trace: [ 480.690160][T24362] dump_stack+0x172/0x1f0 [ 480.694493][T24362] dump_header+0x10f/0xb6c [ 480.698915][T24362] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 480.704727][T24362] ? ___ratelimit+0x60/0x595 [ 480.709323][T24362] ? do_raw_spin_unlock+0x57/0x270 [ 480.714442][T24362] oom_kill_process.cold+0x10/0x15 [ 480.719555][T24362] out_of_memory+0x79a/0x1280 [ 480.724230][T24362] ? lock_downgrade+0x880/0x880 [ 480.729091][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.735336][T24362] ? oom_killer_disable+0x280/0x280 [ 480.740533][T24362] ? find_held_lock+0x35/0x130 [ 480.745431][T24362] mem_cgroup_out_of_memory+0x1ca/0x230 [ 480.750978][T24362] ? memcg_event_wake+0x230/0x230 [ 480.756014][T24362] ? do_raw_spin_unlock+0x57/0x270 [ 480.761132][T24362] ? _raw_spin_unlock+0x2d/0x50 [ 480.765985][T24362] try_charge+0x102c/0x15c0 [ 480.770488][T24362] ? find_held_lock+0x35/0x130 [ 480.775263][T24362] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 480.780808][T24362] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 480.786352][T24362] ? find_held_lock+0x35/0x130 [ 480.791120][T24362] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 480.796767][T24362] __memcg_kmem_charge_memcg+0x7c/0x130 [ 480.802323][T24362] ? memcg_kmem_put_cache+0xb0/0xb0 [ 480.807631][T24362] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 480.813445][T24362] __memcg_kmem_charge+0x136/0x300 [ 480.818780][T24362] __alloc_pages_nodemask+0x4bf/0x8d0 [ 480.825048][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.831583][T24362] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 480.837308][T24362] ? copy_process.part.0+0x1d08/0x7980 [ 480.842859][T24362] ? lockdep_hardirqs_on+0x418/0x5d0 [ 480.848148][T24362] ? trace_hardirqs_on+0x67/0x230 [ 480.853175][T24362] ? kasan_check_read+0x11/0x20 [ 480.858034][T24362] copy_process.part.0+0x3e0/0x7980 [ 480.863292][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.870181][T24362] ? debug_smp_processor_id+0x3c/0x280 [ 480.875887][T24362] ? perf_trace_lock+0xeb/0x510 [ 480.880937][T24362] ? __lockdep_free_key_range+0x120/0x120 [ 480.886665][T24362] ? __might_fault+0x12b/0x1e0 [ 480.891445][T24362] ? __cleanup_sighand+0x60/0x60 [ 480.896384][T24362] ? lock_downgrade+0x880/0x880 [ 480.901250][T24362] _do_fork+0x257/0xfd0 [ 480.905500][T24362] ? fork_idle+0x1d0/0x1d0 [ 480.910021][T24362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 480.915681][T24362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 480.921233][T24362] ? do_syscall_64+0x26/0x610 [ 480.925918][T24362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.933122][T24362] ? do_syscall_64+0x26/0x610 [ 480.938109][T24362] __x64_sys_clone+0xbf/0x150 [ 480.942986][T24362] do_syscall_64+0x103/0x610 [ 480.947890][T24362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.954046][T24362] RIP: 0033:0x458da9 [ 480.958044][T24362] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.978117][T24362] RSP: 002b:00007fbf2a074c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 480.986642][T24362] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458da9 [ 480.994669][T24362] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 481.002886][T24362] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 481.011841][T24362] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 481.019993][T24362] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 481.033675][T24362] memory: usage 307200kB, limit 307200kB, failcnt 1139 [ 481.040822][T24362] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 481.048929][T24362] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 481.055998][T24362] Memory cgroup stats for /syz5: cache:148KB rss:259828KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259952KB inactive_file:0KB active_file:0KB unevictable:0KB [ 481.078904][T24362] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20928,uid=0 [ 481.094992][T24362] Memory cgroup out of memory: Killed process 20928 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 481.111455][ T1044] oom_reaper: reaped process 20928 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 481.142310][T24362] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 481.155072][T24362] CPU: 0 PID: 24362 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 481.163077][T24362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.173578][T24362] Call Trace: [ 481.176876][T24362] dump_stack+0x172/0x1f0 [ 481.181222][T24362] dump_header+0x10f/0xb6c [ 481.185739][T24362] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 481.191564][T24362] ? ___ratelimit+0x60/0x595 [ 481.196161][T24362] ? do_raw_spin_unlock+0x57/0x270 [ 481.201282][T24362] oom_kill_process.cold+0x10/0x15 [ 481.206401][T24362] out_of_memory+0x79a/0x1280 [ 481.211088][T24362] ? lock_downgrade+0x880/0x880 [ 481.216032][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.223163][T24362] ? oom_killer_disable+0x280/0x280 [ 481.228547][T24362] ? find_held_lock+0x35/0x130 [ 481.233378][T24362] mem_cgroup_out_of_memory+0x1ca/0x230 [ 481.239013][T24362] ? memcg_event_wake+0x230/0x230 [ 481.244235][T24362] ? do_raw_spin_unlock+0x57/0x270 [ 481.249348][T24362] ? _raw_spin_unlock+0x2d/0x50 [ 481.254206][T24362] try_charge+0x102c/0x15c0 [ 481.259512][T24362] ? find_held_lock+0x35/0x130 [ 481.274455][T24362] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 481.280121][T24362] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 481.285753][T24362] ? find_held_lock+0x35/0x130 [ 481.290525][T24362] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 481.296096][T24362] __memcg_kmem_charge_memcg+0x7c/0x130 [ 481.301644][T24362] ? memcg_kmem_put_cache+0xb0/0xb0 [ 481.306853][T24362] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 481.312399][T24362] __memcg_kmem_charge+0x136/0x300 [ 481.317522][T24362] __alloc_pages_nodemask+0x4bf/0x8d0 [ 481.322924][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.329667][T24362] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 481.335393][T24362] ? copy_process.part.0+0x1d08/0x7980 [ 481.340938][T24362] ? lockdep_hardirqs_on+0x418/0x5d0 [ 481.346227][T24362] ? trace_hardirqs_on+0x67/0x230 [ 481.351339][T24362] ? kasan_check_read+0x11/0x20 [ 481.356200][T24362] copy_process.part.0+0x3e0/0x7980 [ 481.361402][T24362] ? __lockdep_free_key_range+0x120/0x120 [ 481.367158][T24362] ? semctl_down+0x5e0/0x9f0 [ 481.371756][T24362] ? find_held_lock+0x35/0x130 [ 481.376612][T24362] ? semctl_down+0x5e0/0x9f0 [ 481.381221][T24362] ? __cleanup_sighand+0x60/0x60 [ 481.386190][T24362] ? up_write+0x1c/0x150 [ 481.390523][T24362] ? semctl_down+0x5e0/0x9f0 [ 481.395114][T24362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.401381][T24362] _do_fork+0x257/0xfd0 [ 481.405543][T24362] ? fork_idle+0x1d0/0x1d0 [ 481.409962][T24362] ? __ia32_sys_mkdir+0x80/0x80 [ 481.414826][T24362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 481.421939][T24362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 481.427484][T24362] ? do_syscall_64+0x26/0x610 [ 481.432163][T24362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.438259][T24362] ? do_syscall_64+0x26/0x610 [ 481.442940][T24362] ? lockdep_hardirqs_on+0x418/0x5d0 [ 481.448252][T24362] __ia32_sys_fork+0x1f/0x30 [ 481.452844][T24362] do_syscall_64+0x103/0x610 [ 481.457441][T24362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.463425][T24362] RIP: 0033:0x2000000a [ 481.469073][T24362] Code: Bad RIP value. [ 481.473139][T24362] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 481.481554][T24362] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 481.489520][T24362] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 481.497497][T24362] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 481.505467][T24362] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 481.513439][T24362] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 481.523653][T24362] memory: usage 307028kB, limit 307200kB, failcnt 1199 [ 481.531041][T24362] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 481.539345][T24362] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 481.546827][T24362] Memory cgroup stats for /syz5: cache:148KB rss:259828KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259968KB inactive_file:0KB active_file:0KB unevictable:0KB [ 481.569590][T24362] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21024,uid=0 [ 481.585741][T24362] Memory cgroup out of memory: Killed process 21024 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:51 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c4) 12:32:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="b96405000000d0e5c4c5140000002200018b6e00001ade00000000000400"], 0x14}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x15c6, 0x100000001, 0x1f}, 0x10) 12:32:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x40004e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$admmidi(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000380)='security.evm\x00', &(0x7f00000004c0)=@sha1={0x1, "750404fcace4fa95b68ef4f8d9b33098bcc5f0b5"}, 0x15, 0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="de05"], 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x6}}, [0x5, 0x2, 0x9791, 0x3, 0x5, 0x43a, 0xf768, 0x6, 0x1f, 0xfffffffffffffff9, 0x1, 0x20, 0xffff, 0x9, 0x8000]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r5, 0x40}, &(0x7f0000000200)=0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000300)={0x1, 0x8001}, 0x8) recvfrom$rxrpc(r3, &(0x7f0000000240)=""/110, 0x6e, 0x2002, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x24) close(r2) 12:32:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x6f, 0x9, 0x5, 0x80000000, 0x14, 0x9, 0x275, 0x5d1c, 0x6, 0x100}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r1, 0x655}) 12:32:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:51 executing program 2: sync() r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x6, 0x0, &(0x7f0000000140)) 12:32:51 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c5) 12:32:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 481.995713][T24382] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 482.029616][T24382] CPU: 1 PID: 24382 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 482.037723][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.037729][T24382] Call Trace: [ 482.037751][T24382] dump_stack+0x172/0x1f0 [ 482.037770][T24382] dump_header+0x10f/0xb6c [ 482.037785][T24382] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 482.037799][T24382] ? ___ratelimit+0x60/0x595 [ 482.037813][T24382] ? do_raw_spin_unlock+0x57/0x270 [ 482.037829][T24382] oom_kill_process.cold+0x10/0x15 [ 482.037845][T24382] out_of_memory+0x79a/0x1280 [ 482.037862][T24382] ? lock_downgrade+0x880/0x880 [ 482.037877][T24382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.037891][T24382] ? oom_killer_disable+0x280/0x280 [ 482.037902][T24382] ? find_held_lock+0x35/0x130 [ 482.037927][T24382] mem_cgroup_out_of_memory+0x1ca/0x230 [ 482.037941][T24382] ? memcg_event_wake+0x230/0x230 [ 482.037972][T24382] ? do_raw_spin_unlock+0x57/0x270 [ 482.037987][T24382] ? _raw_spin_unlock+0x2d/0x50 [ 482.038003][T24382] try_charge+0x102c/0x15c0 [ 482.038015][T24382] ? find_held_lock+0x35/0x130 [ 482.038039][T24382] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 482.085911][T24382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.085933][T24382] ? kasan_check_read+0x11/0x20 [ 482.085952][T24382] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 482.085978][T24382] mem_cgroup_try_charge+0x24d/0x5e0 [ 482.164630][T24382] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 482.170274][T24382] wp_page_copy+0x408/0x1740 [ 482.175043][T24382] ? find_held_lock+0x35/0x130 [ 482.179832][T24382] ? pmd_pfn+0x1d0/0x1d0 [ 482.184085][T24382] ? lock_downgrade+0x880/0x880 [ 482.188943][T24382] ? swp_swapcount+0x540/0x540 [ 482.193815][T24382] ? kasan_check_read+0x11/0x20 [ 482.198761][T24382] ? do_raw_spin_unlock+0x57/0x270 [ 482.203885][T24382] do_wp_page+0x48e/0x1500 [ 482.208344][T24382] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 482.213839][T24382] __handle_mm_fault+0x22e8/0x3ec0 [ 482.218984][T24382] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 482.224538][T24382] ? find_held_lock+0x35/0x130 [ 482.229314][T24382] ? handle_mm_fault+0x322/0xb30 [ 482.234266][T24382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.240690][T24382] ? kasan_check_read+0x11/0x20 [ 482.245563][T24382] handle_mm_fault+0x43f/0xb30 [ 482.250335][T24382] __do_page_fault+0x5ef/0xda0 [ 482.255123][T24382] do_page_fault+0x71/0x581 [ 482.259633][T24382] ? page_fault+0x8/0x30 [ 482.263880][T24382] page_fault+0x1e/0x30 [ 482.268190][T24382] RIP: 0033:0x414633 [ 482.272094][T24382] Code: e9 4c 89 e2 ff 74 24 48 4c 8b 4c 24 10 89 ee 4c 8b 44 24 18 48 89 df e8 cb f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 48 f7 d8 <64> 89 04 25 d4 ff ff ff 48 83 c8 ff c3 48 81 ec 98 00 00 00 31 ff [ 482.293265][T24382] RSP: 002b:0000000000a4fbc8 EFLAGS: 00010213 [ 482.299519][T24382] RAX: 000000000000006e RBX: 000000000000002d RCX: 0000000000458da9 [ 482.307610][T24382] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf0c [ 482.315591][T24382] RBP: 00000000000003e8 R08: ffffffffffffffff R09: ffffffffffffffff [ 482.327168][T24382] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf00 [ 482.335168][T24382] R13: 0000000000075a63 R14: 0000000000075a90 R15: 000000000073bf0c [ 482.370477][T24382] memory: usage 307200kB, limit 307200kB, failcnt 1243 [ 482.386162][T24382] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.416484][T24382] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 482.423486][T24382] Memory cgroup stats for /syz5: cache:148KB rss:259964KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259984KB inactive_file:0KB active_file:0KB unevictable:0KB [ 482.467488][T24382] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21103,uid=0 [ 482.499825][T24382] Memory cgroup out of memory: Killed process 21103 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 482.575970][T24396] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 482.597319][T24396] CPU: 0 PID: 24396 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 482.605601][T24396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.615690][T24396] Call Trace: [ 482.618992][T24396] dump_stack+0x172/0x1f0 [ 482.623341][T24396] dump_header+0x10f/0xb6c [ 482.627767][T24396] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 482.633590][T24396] ? ___ratelimit+0x60/0x595 [ 482.638286][T24396] ? do_raw_spin_unlock+0x57/0x270 [ 482.643409][T24396] oom_kill_process.cold+0x10/0x15 [ 482.648533][T24396] out_of_memory+0x79a/0x1280 [ 482.653259][T24396] ? oom_killer_disable+0x280/0x280 [ 482.658549][T24396] ? find_held_lock+0x35/0x130 [ 482.663332][T24396] mem_cgroup_out_of_memory+0x1ca/0x230 [ 482.668988][T24396] ? memcg_event_wake+0x230/0x230 [ 482.674023][T24396] ? do_raw_spin_unlock+0x57/0x270 [ 482.679145][T24396] ? _raw_spin_unlock+0x2d/0x50 [ 482.684056][T24396] try_charge+0xa87/0x15c0 [ 482.688560][T24396] ? find_held_lock+0x35/0x130 [ 482.693334][T24396] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 482.698888][T24396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.705317][T24396] ? kasan_check_read+0x11/0x20 [ 482.710269][T24396] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 482.715824][T24396] mem_cgroup_try_charge+0x24d/0x5e0 [ 482.721208][T24396] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 482.726852][T24396] wp_page_copy+0x408/0x1740 [ 482.731534][T24396] ? find_held_lock+0x35/0x130 [ 482.736314][T24396] ? pmd_pfn+0x1d0/0x1d0 [ 482.740561][T24396] ? lock_downgrade+0x880/0x880 [ 482.745415][T24396] ? swp_swapcount+0x540/0x540 [ 482.750190][T24396] ? kasan_check_read+0x11/0x20 [ 482.755052][T24396] ? do_raw_spin_unlock+0x57/0x270 [ 482.760176][T24396] do_wp_page+0x48e/0x1500 [ 482.764602][T24396] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 482.769986][T24396] __handle_mm_fault+0x22e8/0x3ec0 [ 482.775196][T24396] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 482.780747][T24396] ? find_held_lock+0x35/0x130 [ 482.785517][T24396] ? handle_mm_fault+0x322/0xb30 [ 482.790470][T24396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.796815][T24396] ? kasan_check_read+0x11/0x20 [ 482.801676][T24396] handle_mm_fault+0x43f/0xb30 [ 482.806625][T24396] __do_page_fault+0x5ef/0xda0 [ 482.811410][T24396] do_page_fault+0x71/0x581 [ 482.815950][T24396] page_fault+0x1e/0x30 [ 482.820107][T24396] RIP: 0010:__clear_user+0x3e/0x70 [ 482.825230][T24396] Code: 00 00 00 48 c7 c7 40 27 1a 88 e8 4d 02 8c fa 0f 1f 00 48 89 d8 48 89 da 4c 89 e7 48 c1 e8 03 83 e2 07 48 89 c1 48 85 c9 74 0f <48> c7 07 00 00 00 00 48 83 c7 08 ff c9 75 f1 48 89 d1 85 c9 74 0a [ 482.844937][T24396] RSP: 0000:ffff888016f87c40 EFLAGS: 00010202 [ 482.851030][T24396] RAX: 0000000000000008 RBX: 0000000000000040 RCX: 0000000000000008 [ 482.859008][T24396] RDX: 0000000000000000 RSI: ffffffff819ace93 RDI: 00007fbf2a074a80 [ 482.867173][T24396] RBP: ffff888016f87c50 R08: ffff888096d6c480 R09: 0000000000000001 [ 482.875336][T24396] R10: ffff888096d6cd00 R11: ffff888096d6c480 R12: 00007fbf2a074a80 [ 482.883585][T24396] R13: 00007fbf2a074880 R14: ffff888096d6c480 R15: 00007ffffffff000 [ 482.891768][T24396] ? __might_fault+0x1a3/0x1e0 [ 482.896588][T24396] copy_fpstate_to_sigframe+0x28b/0x560 [ 482.902201][T24396] get_sigframe.isra.0.constprop.0+0x4c8/0x8c0 [ 482.908375][T24396] ? get_signal+0x177e/0x1d50 [ 482.913107][T24396] ? restore_sigcontext+0x790/0x790 [ 482.918410][T24396] do_signal+0xb4e/0x1940 [ 482.922753][T24396] ? setup_sigcontext+0x7d0/0x7d0 [ 482.927782][T24396] ? __bad_area_nosemaphore+0xb3/0x420 [ 482.933387][T24396] ? exit_to_usermode_loop+0x43/0x2c0 [ 482.938766][T24396] ? lockdep_hardirqs_on+0x418/0x5d0 [ 482.944053][T24396] ? trace_hardirqs_on+0x67/0x230 [ 482.949172][T24396] exit_to_usermode_loop+0x244/0x2c0 [ 482.954486][T24396] prepare_exit_to_usermode+0x279/0x2e0 [ 482.960227][T24396] ? page_fault+0x8/0x30 [ 482.964474][T24396] retint_user+0x8/0x18 [ 482.968709][T24396] RIP: 0033: (null) [ 482.973285][T24396] Code: Bad RIP value. [ 482.977345][T24396] RSP: 002b:00007fbf2a074c80 EFLAGS: 00010217 [ 482.983406][T24396] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000458da9 [ 482.991471][T24396] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffe [ 482.999448][T24396] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 483.007594][T24396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 483.015570][T24396] R13: 00000000004bf166 R14: 00000000004d01a0 R15: 00000000ffffffff [ 483.041630][T24396] memory: usage 306972kB, limit 307200kB, failcnt 1243 [ 483.058764][T24396] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.081892][T24396] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 483.095299][T24396] Memory cgroup stats for /syz5: cache:148KB rss:259964KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:259952KB inactive_file:0KB active_file:0KB unevictable:0KB 12:32:52 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0010004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getrandom(&(0x7f0000000000)=""/44, 0x138, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x3}]]}}}]}, 0x38}}, 0x0) r2 = dup3(r1, r1, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 12:32:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82200, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f01cab800008ec0ba4300ecf4baf80c66b8fc60548066efbafc0c66ed6636660fee8cc400b8190c8ed8f0f618baa10066b8d78ede5466ef66b9290b000066b80080000066ba000000000f30", 0x4c}], 0x1, 0x2, &(0x7f0000000180)=[@dstype0={0x6, 0xfffffffffffffff8}, @cr4={0x1, 0x240}], 0x2) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae09, &(0x7f0000000300)={0x7b, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 12:32:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:52 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c6) [ 483.123370][T24396] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21198,uid=0 [ 483.145278][T24396] Memory cgroup out of memory: Killed process 21198 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 483.226100][T24418] Unknown ioctl 1075883590 [ 483.263433][T24418] Unknown ioctl 1075883590 [ 483.288129][T24418] Unknown ioctl 1075883590 [ 483.292700][T24418] Unknown ioctl 1075883590 12:32:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 483.328792][T24418] Unknown ioctl 1075883590 [ 483.349970][T24418] Unknown ioctl 1075883590 [ 483.365603][T24425] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 483.385052][T24418] Unknown ioctl 1075883590 [ 483.389683][T24418] Unknown ioctl 1075883590 [ 483.394306][T24418] Unknown ioctl 1075883590 12:32:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c7) 12:32:53 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 483.404843][T24418] Unknown ioctl 1075883590 [ 483.414685][T24418] Unknown ioctl 1075883590 12:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/cachefiles\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300)='/dev/full\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x7fff, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) vmsplice(r0, 0x0, 0x0, 0xa) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)={0x0, [0x0, 0x500000000000000]}) r4 = dup2(r2, r3) syz_open_dev$media(0x0, 0x6, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000001440)={0x0, 0xfff}) r5 = gettid() syz_open_procfs(0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000180)='task\x00') syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') [ 483.447625][T24418] Unknown ioctl 1075883590 [ 483.478308][T24418] Unknown ioctl 1075883590 [ 483.496661][T24418] Unknown ioctl 1075883590 [ 483.505955][T24425] CPU: 1 PID: 24425 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 483.513973][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.524133][T24425] Call Trace: [ 483.527481][T24425] dump_stack+0x172/0x1f0 [ 483.531829][T24425] dump_header+0x10f/0xb6c [ 483.536272][T24425] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 483.542102][T24425] ? ___ratelimit+0x60/0x595 [ 483.546663][T24418] Unknown ioctl 1075883590 [ 483.546710][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 483.546730][T24425] oom_kill_process.cold+0x10/0x15 [ 483.559784][T24418] Unknown ioctl 1075883590 [ 483.561703][T24425] out_of_memory+0x79a/0x1280 [ 483.561722][T24425] ? lock_downgrade+0x880/0x880 [ 483.561747][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.582019][T24425] ? oom_killer_disable+0x280/0x280 [ 483.586898][T24418] Unknown ioctl 1075883590 [ 483.587315][T24425] ? find_held_lock+0x35/0x130 [ 483.587347][T24425] mem_cgroup_out_of_memory+0x1ca/0x230 [ 483.602224][T24425] ? memcg_event_wake+0x230/0x230 [ 483.607279][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 483.612026][T24418] Unknown ioctl 1075883590 [ 483.612400][T24425] ? _raw_spin_unlock+0x2d/0x50 [ 483.612424][T24425] try_charge+0x102c/0x15c0 [ 483.626301][T24425] ? find_held_lock+0x35/0x130 [ 483.626329][T24425] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 483.626347][T24425] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 483.635939][T24418] Unknown ioctl 1075883590 [ 483.636661][T24425] ? find_held_lock+0x35/0x130 [ 483.636678][T24425] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 483.636705][T24425] __memcg_kmem_charge_memcg+0x7c/0x130 [ 483.636721][T24425] ? memcg_kmem_put_cache+0xb0/0xb0 [ 483.636739][T24425] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 483.636758][T24425] __memcg_kmem_charge+0x136/0x300 12:32:53 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 483.636780][T24425] __alloc_pages_nodemask+0x4bf/0x8d0 [ 483.636801][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.636821][T24425] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 483.636844][T24425] ? copy_process.part.0+0x1d08/0x7980 [ 483.636867][T24425] ? lockdep_hardirqs_on+0x418/0x5d0 [ 483.651581][T24425] ? trace_hardirqs_on+0x67/0x230 [ 483.651600][T24425] ? kasan_check_read+0x11/0x20 [ 483.651625][T24425] copy_process.part.0+0x3e0/0x7980 [ 483.651651][T24425] ? __lockdep_free_key_range+0x120/0x120 [ 483.658070][T24418] Unknown ioctl 1075883590 [ 483.662741][T24425] ? sched_clock+0x2e/0x50 [ 483.662758][T24425] ? psi_memstall_leave+0x12e/0x180 [ 483.662774][T24425] ? find_held_lock+0x35/0x130 [ 483.662788][T24425] ? psi_memstall_leave+0x12e/0x180 [ 483.662817][T24425] ? __cleanup_sighand+0x60/0x60 [ 483.681703][T24418] Unknown ioctl 1075883590 [ 483.684010][T24425] ? perf_trace_lock+0xeb/0x510 [ 483.684033][T24425] ? __lockdep_free_key_range+0x120/0x120 [ 483.684060][T24425] _do_fork+0x257/0xfd0 [ 483.684082][T24425] ? fork_idle+0x1d0/0x1d0 [ 483.693217][T24418] Unknown ioctl 1075883590 [ 483.696033][T24425] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 483.696051][T24425] ? lock_downgrade+0x880/0x880 [ 483.696067][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.696085][T24425] ? blkcg_exit_queue+0x30/0x30 [ 483.696110][T24425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 483.703330][T24418] Unknown ioctl 1075883590 [ 483.706914][T24425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 483.706930][T24425] ? do_syscall_64+0x26/0x610 [ 483.706947][T24425] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.706960][T24425] ? do_syscall_64+0x26/0x610 [ 483.706978][T24425] __x64_sys_clone+0xbf/0x150 [ 483.706996][T24425] do_syscall_64+0x103/0x610 [ 483.707014][T24425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.707026][T24425] RIP: 0033:0x45b779 [ 483.707041][T24425] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 12:32:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 483.707048][T24425] RSP: 002b:0000000000a4fa98 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 483.707062][T24425] RAX: ffffffffffffffda RBX: 00007fbf2a075700 RCX: 000000000045b779 [ 483.707071][T24425] RDX: 00007fbf2a0759d0 RSI: 00007fbf2a074db0 RDI: 00000000003d0f00 [ 483.707080][T24425] RBP: 0000000000a4fcb0 R08: 00007fbf2a075700 R09: 00007fbf2a075700 [ 483.707089][T24425] R10: 00007fbf2a0759d0 R11: 0000000000000202 R12: 0000000000000000 [ 483.707097][T24425] R13: 0000000000a4fb4f R14: 00007fbf2a0759c0 R15: 000000000073bf0c [ 484.032218][T24429] Unknown ioctl 1075883590 [ 484.050732][T24429] Unknown ioctl 1075883590 [ 484.066533][T24418] Unknown ioctl 1075883590 [ 484.071013][T24418] Unknown ioctl 1075883590 [ 484.071422][T24429] Unknown ioctl 1075883590 [ 484.088928][T24425] memory: usage 307192kB, limit 307200kB, failcnt 1273 [ 484.103103][T24429] Unknown ioctl 1075883590 [ 484.104971][T24425] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.111449][T24429] Unknown ioctl 1075883590 [ 484.116770][T24425] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.154613][T24425] Memory cgroup stats for /syz5: cache:148KB rss:259964KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260112KB inactive_file:0KB active_file:0KB unevictable:0KB [ 484.206663][T24425] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=24396,uid=0 [ 484.225496][T24425] Memory cgroup out of memory: Killed process 24396 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35800kB, shmem-rss:0kB [ 484.246986][ T1044] oom_reaper: reaped process 24396 (syz-executor.5), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 484.269244][T24425] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 484.279909][T24425] CPU: 0 PID: 24425 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 484.287899][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.297962][T24425] Call Trace: [ 484.301269][T24425] dump_stack+0x172/0x1f0 [ 484.305610][T24425] dump_header+0x10f/0xb6c [ 484.310039][T24425] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 484.316048][T24425] ? ___ratelimit+0x60/0x595 [ 484.320650][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.330254][T24425] oom_kill_process.cold+0x10/0x15 [ 484.335379][T24425] out_of_memory+0x79a/0x1280 [ 484.340078][T24425] ? lock_downgrade+0x880/0x880 [ 484.344935][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.351185][T24425] ? oom_killer_disable+0x280/0x280 [ 484.356388][T24425] ? find_held_lock+0x35/0x130 [ 484.361163][T24425] mem_cgroup_out_of_memory+0x1ca/0x230 [ 484.366809][T24425] ? memcg_event_wake+0x230/0x230 [ 484.371875][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.376994][T24425] ? _raw_spin_unlock+0x2d/0x50 [ 484.381945][T24425] try_charge+0x102c/0x15c0 [ 484.386453][T24425] ? find_held_lock+0x35/0x130 [ 484.391231][T24425] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 484.396802][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.403053][T24425] ? kasan_check_read+0x11/0x20 [ 484.407914][T24425] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 484.413558][T24425] mem_cgroup_try_charge+0x24d/0x5e0 [ 484.418854][T24425] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 484.424495][T24425] wp_page_copy+0x408/0x1740 [ 484.429091][T24425] ? find_held_lock+0x35/0x130 [ 484.433863][T24425] ? pmd_pfn+0x1d0/0x1d0 [ 484.438110][T24425] ? lock_downgrade+0x880/0x880 [ 484.442967][T24425] ? __pte_alloc_kernel+0x220/0x220 [ 484.448278][T24425] ? kasan_check_read+0x11/0x20 [ 484.453141][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.458359][T24425] do_wp_page+0x48e/0x1500 [ 484.462875][T24425] ? do_raw_spin_lock+0x12a/0x2e0 [ 484.468196][T24425] ? rwlock_bug.part.0+0x90/0x90 [ 484.473228][T24425] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 484.478889][T24425] ? add_mm_counter_fast.part.0+0x40/0x40 [ 484.484816][T24425] __handle_mm_fault+0x22e8/0x3ec0 [ 484.490032][T24425] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 484.499919][T24425] ? find_held_lock+0x35/0x130 [ 484.504705][T24425] ? handle_mm_fault+0x322/0xb30 [ 484.509663][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.516009][T24425] ? kasan_check_read+0x11/0x20 [ 484.520876][T24425] handle_mm_fault+0x43f/0xb30 [ 484.525739][T24425] __do_page_fault+0x5ef/0xda0 [ 484.530711][T24425] do_page_fault+0x71/0x581 [ 484.535594][T24425] ? page_fault+0x8/0x30 [ 484.539931][T24425] page_fault+0x1e/0x30 [ 484.544086][T24425] RIP: 0033:0x40e018 [ 484.547982][T24425] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf ac e3 4b 00 31 c0 e8 03 39 ff ff 31 ff e8 4c 35 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 4e 24 64 00 [ 484.567589][T24425] RSP: 002b:0000000000a4fb00 EFLAGS: 00010246 [ 484.573767][T24425] RAX: 000000003556b9a6 RBX: 000000006b9ac8cd RCX: 0000001b31c20000 [ 484.581837][T24425] RDX: 0000000000000000 RSI: 00000000000019a6 RDI: ffffffff3556b9a6 [ 484.590202][T24425] RBP: 0000000000000002 R08: 000000003556b9a6 R09: 000000003556b9aa [ 484.598182][T24425] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 484.606331][T24425] R13: 0000000080000000 R14: 00007fbf2c076008 R15: 0000000000000002 [ 484.614651][T24425] memory: usage 307036kB, limit 307200kB, failcnt 1327 [ 484.622582][T24425] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.630357][T24425] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 484.637513][T24425] Memory cgroup stats for /syz5: cache:148KB rss:259964KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260072KB inactive_file:0KB active_file:0KB unevictable:0KB [ 484.659800][T24425] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21220,uid=0 [ 484.675445][T24425] Memory cgroup out of memory: Killed process 21220 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 484.691355][ T1044] oom_reaper: reaped process 21220 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 484.717057][T24425] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 484.727671][T24425] CPU: 0 PID: 24425 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 484.735650][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.745798][T24425] Call Trace: [ 484.749101][T24425] dump_stack+0x172/0x1f0 [ 484.753444][T24425] dump_header+0x10f/0xb6c [ 484.757872][T24425] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 484.763691][T24425] ? ___ratelimit+0x60/0x595 [ 484.768301][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.773429][T24425] oom_kill_process.cold+0x10/0x15 [ 484.778649][T24425] out_of_memory+0x79a/0x1280 [ 484.783334][T24425] ? lock_downgrade+0x880/0x880 [ 484.788187][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.794436][T24425] ? oom_killer_disable+0x280/0x280 [ 484.799810][T24425] ? find_held_lock+0x35/0x130 [ 484.804586][T24425] mem_cgroup_out_of_memory+0x1ca/0x230 [ 484.810136][T24425] ? memcg_event_wake+0x230/0x230 [ 484.815352][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.820646][T24425] ? _raw_spin_unlock+0x2d/0x50 [ 484.825505][T24425] try_charge+0x102c/0x15c0 [ 484.830099][T24425] ? find_held_lock+0x35/0x130 [ 484.834879][T24425] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 484.840528][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.846974][T24425] ? kasan_check_read+0x11/0x20 [ 484.851837][T24425] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 484.857394][T24425] mem_cgroup_try_charge+0x24d/0x5e0 [ 484.862783][T24425] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 484.868467][T24425] wp_page_copy+0x408/0x1740 [ 484.873335][T24425] ? find_held_lock+0x35/0x130 [ 484.878297][T24425] ? pmd_pfn+0x1d0/0x1d0 [ 484.882548][T24425] ? lock_downgrade+0x880/0x880 [ 484.887398][T24425] ? swp_swapcount+0x540/0x540 [ 484.892168][T24425] ? kasan_check_read+0x11/0x20 [ 484.897021][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 484.902145][T24425] do_wp_page+0x48e/0x1500 [ 484.906763][T24425] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 484.912151][T24425] __handle_mm_fault+0x22e8/0x3ec0 [ 484.917286][T24425] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 484.923093][T24425] ? find_held_lock+0x35/0x130 [ 484.927932][T24425] ? handle_mm_fault+0x322/0xb30 [ 484.932973][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.939222][T24425] ? kasan_check_read+0x11/0x20 [ 484.944085][T24425] handle_mm_fault+0x43f/0xb30 [ 484.948900][T24425] __do_page_fault+0x5ef/0xda0 [ 484.953689][T24425] do_page_fault+0x71/0x581 [ 484.958206][T24425] ? page_fault+0x8/0x30 [ 484.962453][T24425] page_fault+0x1e/0x30 [ 484.966695][T24425] RIP: 0033:0x40e550 [ 484.970705][T24425] Code: 83 c3 01 e8 42 31 ff ff 39 dd 77 ee 48 8b 44 24 08 89 28 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 <89> 3c b5 00 00 73 00 eb 8f 89 eb 48 c1 e3 02 49 8d 6c 1d 00 49 39 [ 484.990607][T24425] RSP: 002b:0000000000a4fb10 EFLAGS: 00010246 [ 484.996677][T24425] RAX: 00000000f14512b2 RBX: 00000000a9ce942f RCX: 0000001b31c20000 [ 485.004654][T24425] RDX: 0000000000000000 RSI: 00000000000012b2 RDI: 00000000f14512b2 [ 485.012627][T24425] RBP: 0000000000000000 R08: 00000000f14512b6 R09: ffffffffffffffff [ 485.020642][T24425] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf88 [ 485.028614][T24425] R13: 00007fbf2c076004 R14: 00007fbf2c076000 R15: 000000000000001f [ 485.038625][T24425] memory: usage 307040kB, limit 307200kB, failcnt 1366 [ 485.045495][T24425] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.053266][T24425] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.060485][T24425] Memory cgroup stats for /syz5: cache:148KB rss:260036KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260020KB inactive_file:0KB active_file:0KB unevictable:0KB [ 485.082468][T24425] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21240,uid=0 [ 485.098316][T24425] Memory cgroup out of memory: Killed process 21240 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 485.118298][ T1044] oom_reaper: reaped process 21240 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 485.158367][T24462] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 485.196352][T24462] CPU: 1 PID: 24462 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 485.204727][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.215166][T24462] Call Trace: [ 485.218735][T24462] dump_stack+0x172/0x1f0 [ 485.223107][T24462] dump_header+0x10f/0xb6c [ 485.227562][T24462] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 485.233539][T24462] ? ___ratelimit+0x60/0x595 [ 485.238678][T24462] ? do_raw_spin_unlock+0x57/0x270 [ 485.243976][T24462] oom_kill_process.cold+0x10/0x15 [ 485.249087][T24462] out_of_memory+0x79a/0x1280 [ 485.253904][T24462] ? lock_downgrade+0x880/0x880 [ 485.259048][T24462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.265292][T24462] ? oom_killer_disable+0x280/0x280 [ 485.270604][T24462] ? find_held_lock+0x35/0x130 [ 485.275387][T24462] mem_cgroup_out_of_memory+0x1ca/0x230 [ 485.280937][T24462] ? memcg_event_wake+0x230/0x230 [ 485.285975][T24462] ? do_raw_spin_unlock+0x57/0x270 [ 485.291197][T24462] ? _raw_spin_unlock+0x2d/0x50 [ 485.296063][T24462] try_charge+0x102c/0x15c0 [ 485.300679][T24462] ? find_held_lock+0x35/0x130 [ 485.305547][T24462] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 485.311449][T24462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.317981][T24462] ? kasan_check_read+0x11/0x20 [ 485.323107][T24462] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 485.328851][T24462] mem_cgroup_try_charge+0x24d/0x5e0 [ 485.334178][T24462] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 485.340171][T24462] wp_page_copy+0x408/0x1740 [ 485.344854][T24462] ? find_held_lock+0x35/0x130 [ 485.349724][T24462] ? pmd_pfn+0x1d0/0x1d0 [ 485.353990][T24462] ? lock_downgrade+0x880/0x880 [ 485.359016][T24462] ? swp_swapcount+0x540/0x540 [ 485.364058][T24462] ? kasan_check_read+0x11/0x20 [ 485.368999][T24462] ? do_raw_spin_unlock+0x57/0x270 [ 485.374464][T24462] do_wp_page+0x48e/0x1500 [ 485.378899][T24462] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 485.384284][T24462] __handle_mm_fault+0x22e8/0x3ec0 [ 485.389667][T24462] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 485.395248][T24462] ? find_held_lock+0x35/0x130 [ 485.400018][T24462] ? handle_mm_fault+0x322/0xb30 [ 485.404968][T24462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.411563][T24462] ? kasan_check_read+0x11/0x20 [ 485.416418][T24462] handle_mm_fault+0x43f/0xb30 [ 485.421187][T24462] __do_page_fault+0x5ef/0xda0 [ 485.426051][T24462] do_page_fault+0x71/0x581 [ 485.430644][T24462] ? page_fault+0x8/0x30 [ 485.434983][T24462] page_fault+0x1e/0x30 [ 485.439162][T24462] RIP: 0033:0x404c4e [ 485.443059][T24462] Code: 48 8b 55 40 48 8b 75 38 48 8b 7d 30 ff 75 70 ff 75 68 ff 75 60 4c 8b 4d 58 4c 8b 45 50 ff d0 48 83 c4 20 48 89 c3 48 83 fb ff <48> 89 5d 78 41 8b 04 24 0f 85 d4 00 00 00 85 c0 0f 85 cc 00 00 00 [ 485.462757][T24462] RSP: 002b:00007fbf2a074c90 EFLAGS: 00010213 [ 485.468827][T24462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000458da9 [ 485.476895][T24462] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fbf2a075608 [ 485.484889][T24462] RBP: 000000000073bf00 R08: 00007fbf2a074be0 R09: 000000000000000a [ 485.493860][T24462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf2a0756d4 [ 485.501937][T24462] R13: 00000000004c76c8 R14: 00000000004dd628 R15: 00000000ffffffff [ 485.521124][T24462] memory: usage 307040kB, limit 307200kB, failcnt 1385 [ 485.532470][T24462] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.542535][T24462] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 485.554018][T24462] Memory cgroup stats for /syz5: cache:148KB rss:260012KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260004KB inactive_file:0KB active_file:0KB unevictable:0KB [ 485.583090][T24462] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21325,uid=0 [ 485.605628][T24462] Memory cgroup out of memory: Killed process 21325 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB [ 485.626969][ T1044] oom_reaper: reaped process 21325 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 485.646137][T24425] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 485.679324][T24425] CPU: 0 PID: 24425 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 485.687358][T24425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.697506][T24425] Call Trace: [ 485.700803][T24425] dump_stack+0x172/0x1f0 [ 485.705174][T24425] dump_header+0x10f/0xb6c [ 485.709603][T24425] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 485.715433][T24425] ? ___ratelimit+0x60/0x595 [ 485.720035][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 485.725154][T24425] oom_kill_process.cold+0x10/0x15 [ 485.730273][T24425] out_of_memory+0x79a/0x1280 [ 485.735255][T24425] ? oom_killer_disable+0x280/0x280 [ 485.741447][T24425] ? find_held_lock+0x35/0x130 [ 485.746431][T24425] mem_cgroup_out_of_memory+0x1ca/0x230 [ 485.752251][T24425] ? memcg_event_wake+0x230/0x230 [ 485.758038][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 485.763771][T24425] ? _raw_spin_unlock+0x2d/0x50 [ 485.770367][T24425] try_charge+0xa87/0x15c0 [ 485.776960][T24425] ? find_held_lock+0x35/0x130 [ 485.781857][T24425] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 485.787412][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.793749][T24425] ? kasan_check_read+0x11/0x20 [ 485.798652][T24425] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 485.804210][T24425] mem_cgroup_try_charge+0x24d/0x5e0 [ 485.809516][T24425] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 485.815254][T24425] wp_page_copy+0x408/0x1740 [ 485.819847][T24425] ? find_held_lock+0x35/0x130 [ 485.824812][T24425] ? pmd_pfn+0x1d0/0x1d0 [ 485.829090][T24425] ? lock_downgrade+0x880/0x880 [ 485.833947][T24425] ? swp_swapcount+0x540/0x540 [ 485.839001][T24425] ? kasan_check_read+0x11/0x20 [ 485.843860][T24425] ? do_raw_spin_unlock+0x57/0x270 [ 485.848984][T24425] do_wp_page+0x48e/0x1500 [ 485.853411][T24425] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 485.858803][T24425] __handle_mm_fault+0x22e8/0x3ec0 [ 485.863958][T24425] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 485.869512][T24425] ? find_held_lock+0x35/0x130 [ 485.874280][T24425] ? handle_mm_fault+0x322/0xb30 [ 485.879237][T24425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.885482][T24425] ? kasan_check_read+0x11/0x20 [ 485.890432][T24425] handle_mm_fault+0x43f/0xb30 [ 485.895290][T24425] __do_page_fault+0x5ef/0xda0 [ 485.900115][T24425] do_page_fault+0x71/0x581 [ 485.904641][T24425] ? page_fault+0x8/0x30 [ 485.909110][T24425] page_fault+0x1e/0x30 [ 485.913367][T24425] RIP: 0033:0x414633 [ 485.917784][T24425] Code: e9 4c 89 e2 ff 74 24 48 4c 8b 4c 24 10 89 ee 4c 8b 44 24 18 48 89 df e8 cb f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 48 f7 d8 <64> 89 04 25 d4 ff ff ff 48 83 c8 ff c3 48 81 ec 98 00 00 00 31 ff [ 485.938176][T24425] RSP: 002b:0000000000a4fbc8 EFLAGS: 00010213 [ 485.944332][T24425] RAX: 000000000000006e RBX: 000000000000002d RCX: 0000000000458da9 [ 485.952399][T24425] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf0c [ 485.960458][T24425] RBP: 00000000000003e8 R08: ffffffffffffffff R09: ffffffffffffffff [ 485.968430][T24425] R10: 0000000000a4fca0 R11: 0000000000000246 R12: 000000000073bf00 [ 485.976526][T24425] R13: 00000000000766f2 R14: 000000000007671f R15: 000000000073bf0c [ 485.989184][T24425] memory: usage 304736kB, limit 307200kB, failcnt 1385 [ 485.996508][T24425] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 486.004160][T24425] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 12:32:55 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x7ff, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400192340834b80043f679a10ff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a00"/88, 0x58}], 0x1) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x100000001}) 12:32:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c8) 12:32:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x75, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x400000) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x0, 0x40) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000018620b8300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000100000003000500000000000100000000000010020000000000000009000000000000000000000000000000000000000000000000000000000000006800000020000000050000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbe625d7a19b7300000000000000000000000000000000000000000000000000000000060000000000000000aef23636eea33080954f00"/321]) listen(r2, 0x200000000002) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) [ 486.014544][T24425] Memory cgroup stats for /syz5: cache:148KB rss:257908KB rss_huge:237568KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:257872KB inactive_file:0KB active_file:0KB unevictable:0KB [ 486.037469][T24425] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21346,uid=0 [ 486.052943][T24425] Memory cgroup out of memory: Killed process 21346 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x3}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:55 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x402200, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="951341d4c57364d537e881d7215e4495f74cf21b7a0959cd5de3d14d86e921b60d9cbc8e087554f15378e5defbaa3f1f3820796c8fffb387f1b837f09c6d8759d12d15793ffeec1d2195f66a2fbe40e033b988dc1b", 0x55) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha512_mb,ecb(des3_ede))\x00'}, 0x58) write$binfmt_script(0xffffffffffffffff, 0x0, 0x24f) 12:32:55 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1c9) 12:32:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f000035d000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) msgget(0x3, 0x241) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f00000000c0)=""/147) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045516, &(0x7f000035dffc)) 12:32:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x6}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:56 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x7}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x8001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000788ffc)=0x100000001, 0x4) getsockopt$inet_mreq(r1, 0x0, 0x40000000000020, &(0x7f00000001c0)={@broadcast, @remote}, &(0x7f00000000c0)=0x33) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x5d24, 0x4) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x0) 12:32:56 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ca) 12:32:56 executing program 3: syz_execute_func(&(0x7f0000000100)="b1b891cd806969ef69dc00d9d0d0c44139fd5bf91cc10f788e008000000fc4014c5868f4a95ff9c44149f2168f4808eebce00000802000c421fc51c1ea01efc48192558dc3c366450f186746f3400faee47c7c730f5726400f0d18c401fe5ff6e3df646736676666430fefb3000000000804f4f30f1a1254111d54111d00") r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0xfffffe18, 0x21, 0x1}, 0xffffffad) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000080)={0x2, 0x10e000}) 12:32:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008982, &(0x7f00000001c0)='\n') fstat(r0, &(0x7f0000000000)) 12:32:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x60}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:56 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40022001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x5100, 0x0) 12:32:56 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:56 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1cb) 12:32:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x300}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 487.299196][T24547] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 487.417554][T24547] CPU: 0 PID: 24547 Comm: syz-executor.5 Not tainted 5.1.0-rc7+ #97 [ 487.425621][T24547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.435862][T24547] Call Trace: [ 487.439198][T24547] dump_stack+0x172/0x1f0 [ 487.443590][T24547] dump_header+0x10f/0xb6c [ 487.448107][T24547] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 487.453921][T24547] ? ___ratelimit+0x60/0x595 [ 487.458541][T24547] ? do_raw_spin_unlock+0x57/0x270 [ 487.463682][T24547] oom_kill_process.cold+0x10/0x15 [ 487.468806][T24547] out_of_memory+0x79a/0x1280 [ 487.473596][T24547] ? lock_downgrade+0x880/0x880 [ 487.478455][T24547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.484705][T24547] ? oom_killer_disable+0x280/0x280 [ 487.489908][T24547] ? find_held_lock+0x35/0x130 [ 487.494690][T24547] mem_cgroup_out_of_memory+0x1ca/0x230 [ 487.500239][T24547] ? memcg_event_wake+0x230/0x230 [ 487.505307][T24547] ? do_raw_spin_unlock+0x57/0x270 [ 487.510447][T24547] ? _raw_spin_unlock+0x2d/0x50 [ 487.515398][T24547] try_charge+0x102c/0x15c0 [ 487.519924][T24547] ? find_held_lock+0x35/0x130 [ 487.524713][T24547] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 487.530268][T24547] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 487.535940][T24547] ? find_held_lock+0x35/0x130 [ 487.540921][T24547] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 487.546574][T24547] __memcg_kmem_charge_memcg+0x7c/0x130 [ 487.552135][T24547] ? memcg_kmem_put_cache+0xb0/0xb0 [ 487.557340][T24547] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 487.562898][T24547] __memcg_kmem_charge+0x136/0x300 [ 487.568024][T24547] __alloc_pages_nodemask+0x4bf/0x8d0 [ 487.573406][T24547] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 487.579146][T24547] ? copy_page_range+0x125a/0x1f90 [ 487.584268][T24547] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 487.590617][T24547] alloc_pages_current+0x107/0x210 [ 487.595751][T24547] pte_alloc_one+0x1b/0x1a0 [ 487.600271][T24547] __pte_alloc+0x20/0x310 [ 487.604616][T24547] copy_page_range+0x1529/0x1f90 [ 487.609614][T24547] ? perf_trace_lock+0xeb/0x510 [ 487.614509][T24547] ? pmd_alloc+0x180/0x180 [ 487.619114][T24547] ? __rb_insert_augmented+0x231/0xdf0 [ 487.624578][T24547] ? validate_mm_rb+0xa3/0xc0 [ 487.629351][T24547] ? __vma_link_rb+0x279/0x370 [ 487.634159][T24547] copy_process.part.0+0x568b/0x7980 [ 487.639497][T24547] ? __cleanup_sighand+0x60/0x60 [ 487.644461][T24547] ? semctl_down+0x5e0/0x9f0 [ 487.649060][T24547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.655324][T24547] _do_fork+0x257/0xfd0 [ 487.659535][T24547] ? fork_idle+0x1d0/0x1d0 [ 487.663978][T24547] ? __ia32_sys_mkdir+0x80/0x80 [ 487.668843][T24547] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 487.674311][T24547] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 487.679811][T24547] ? do_syscall_64+0x26/0x610 [ 487.684501][T24547] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.690577][T24547] ? do_syscall_64+0x26/0x610 [ 487.695262][T24547] ? lockdep_hardirqs_on+0x418/0x5d0 [ 487.700561][T24547] __ia32_sys_fork+0x1f/0x30 [ 487.705157][T24547] do_syscall_64+0x103/0x610 [ 487.709766][T24547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.715680][T24547] RIP: 0033:0x2000000a [ 487.719758][T24547] Code: Bad RIP value. [ 487.723824][T24547] RSP: 002b:00007fbf2a074bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000039 [ 487.732264][T24547] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000002000000a [ 487.740236][T24547] RDX: 0000000000000000 RSI: 0000000080000034 RDI: 0000000000000003 [ 487.748228][T24547] RBP: 0000000000000080 R08: 0000000000000005 R09: 0000000000000006 [ 487.756465][T24547] R10: 0000000000000007 R11: 0000000000000202 R12: 000000000000000b [ 487.764453][T24547] R13: 000000000000000c R14: 000000000000000d R15: 00000000ffffffff [ 487.777179][T24547] memory: usage 307200kB, limit 307200kB, failcnt 1419 [ 487.784606][T24547] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 487.797678][T24547] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 487.806136][T24547] Memory cgroup stats for /syz5: cache:148KB rss:260004KB rss_huge:239616KB shmem:32KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260112KB inactive_file:0KB active_file:0KB unevictable:0KB [ 487.839861][T24547] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21367,uid=0 [ 487.871617][T24547] Memory cgroup out of memory: Killed process 21367 (syz-executor.5) total-vm:72580kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 12:32:57 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:32:57 executing program 2: r0 = msgget(0xffffffffffffffff, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x400000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x1, 0x4) msgctl$IPC_RMID(r0, 0x0) r2 = getpid() capget(&(0x7f0000000000)={0x0, r2}, &(0x7f0000000040)={0x0, 0x40, 0x3, 0x0, 0x80, 0x3fdf}) 12:32:57 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect(r0, &(0x7f0000000080)=@x25={0x9, @null=' \x00'}, 0x80) 12:32:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x600}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:57 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1cc) 12:32:57 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x208d3f, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x8, [0x7, 0x7fa, 0x2, 0x101, 0x7, 0x4, 0x9, 0x4]}, &(0x7f0000000240)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x80000001}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000300)=r3, 0x4) ppoll(&(0x7f0000000140)=[{}], 0xd8, 0x0, 0x0, 0x0) 12:32:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x700}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:57 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x200001) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) syz_execute_func(&(0x7f0000000140)="b1d591cd806969ef69dc00d9c4a17c52d1c482290a6800c7c7e4c653fb0fc4013e4c4c443030410f17a13a000000f966410f106f038f4808eebc1000802000c421fc75c101efc4032568b71a5b2920020d186746402f12c421ede11326ca400f0d18a018a0fe5ff665430f73d71f646736676666430fefb3000000000804f4f30f1a1254111d54111d00") 12:32:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0xb, @pix={0x69ac, 0x7, 0x777f7f7f, 0x7, 0x8, 0x8, 0xd, 0x3, 0x1, 0x3, 0x1, 0x6}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") eventfd(0x3) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) 12:32:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1cd) 12:32:58 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0014004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x3f00}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200100, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000180)={0x7cfcc428cd69b850, 0x0, &(0x7f0000ff9000/0x4000)=nil}) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) flistxattr(r0, &(0x7f0000000040)=""/250, 0xfa) ptrace$setopts(0x4206, r2, 0x0, 0x0) waitid(0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0) tkill(r2, 0x38) 12:32:58 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) 12:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x4000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1ce) 12:32:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000480)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x800100f, 0x6, 0x3}) 12:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x6000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0xff00}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:32:59 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="994a2ae92c10964c0f05bf03000000c4a37bf0c50141e2e9c422e9aabb3c0030004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000000f5fd25cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") 12:32:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffdf2, 0x884, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='gre0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x240) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) fdatasync(r1) 12:32:59 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1cf) 12:33:01 executing program 2: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x108, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x1) 12:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x1000000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:33:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') pread64(r1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)={0x0, [0x0, 0x500000000000000]}) dup2(r0, r2) 12:33:01 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:33:01 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") 12:33:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1d0) 12:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x2000000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:33:01 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x101000, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff55f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0x4, 0x19c3e9d177914dfa) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x3000000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) 12:33:01 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r1 = io_uring_setup(0x64, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x2, &(0x7f0000001300)=[{0x0}], 0x1d1) 12:33:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = io_uring_setup(0x64, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000, 0xfffffffffffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2, &(0x7f0000003680)=[{&(0x7f0000000140)=""/4096}, {&(0x7f0000001140)=""/100}, {&(0x7f0000001340)=""/4096}, {&(0x7f00000011c0)=""/222}, {&(0x7f0000002340)=""/229}, {&(0x7f00000012c0)=""/51}, {&(0x7f0000002440)=""/33}, {&(0x7f0000003740)=""/225}, {&(0x7f0000002580)=""/206}, {&(0x7f0000002680)=""/4096}], 0x29b) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x40, 0x4fe, 0x1, 0x0, 0x0, [{r2}]}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000100)=""/20) dup2(r1, r2) 12:33:01 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x848000000015, 0x805, 0x0) getpeername$netlink(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x114, 0x2713, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x0) 12:33:01 executing program 5: socket$vsock_stream(0x28, 0x1, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000000)="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") [ 492.029165][T24724] WARNING: CPU: 1 PID: 24724 at include/linux/cpumask.h:121 io_uring_setup+0x1399/0x1ac0 [ 492.039037][T24724] Kernel panic - not syncing: panic_on_warn set ... [ 492.045762][T24724] CPU: 1 PID: 24724 Comm: syz-executor.2 Not tainted 5.1.0-rc7+ #97 [ 492.053841][T24724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.068855][T24724] Call Trace: [ 492.072167][T24724] dump_stack+0x172/0x1f0 [ 492.076117][ T3878] kobject: 'loop5' (00000000fe190cbe): kobject_uevent_env [ 492.076507][T24724] ? io_uring_setup+0x12f0/0x1ac0 [ 492.076529][T24724] panic+0x2cb/0x65c [ 492.076547][T24724] ? __warn_printk+0xf3/0xf3 [ 492.076567][T24724] ? io_uring_setup+0x1399/0x1ac0 [ 492.076583][T24724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 492.076605][T24724] ? __warn.cold+0x5/0x45 [ 492.083737][ T3878] kobject: 'loop5' (00000000fe190cbe): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 492.088742][T24724] ? io_uring_setup+0x1399/0x1ac0 12:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x6000000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 492.088757][T24724] __warn.cold+0x20/0x45 [ 492.088769][T24724] ? io_uring_setup+0x1399/0x1ac0 [ 492.088786][T24724] report_bug+0x263/0x2b0 [ 492.088805][T24724] do_error_trap+0x11b/0x200 [ 492.088822][T24724] do_invalid_op+0x37/0x50 [ 492.088834][T24724] ? io_uring_setup+0x1399/0x1ac0 [ 492.088849][T24724] invalid_op+0x14/0x20 [ 492.088866][T24724] RIP: 0010:io_uring_setup+0x1399/0x1ac0 [ 492.165757][T24724] Code: 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 84 f8 fd ff ff 4c 89 f7 e8 d1 7d e0 ff e9 eb fd ff ff e8 07 67 a8 ff <0f> 0b e9 27 f7 ff ff e8 fb 66 a8 ff 4c 89 ff e8 83 3b 7a ff e9 fd [ 492.175936][ T3878] kobject: 'loop4' (00000000a38d4535): kobject_uevent_env [ 492.185639][T24724] RSP: 0018:ffff888029e47dc8 EFLAGS: 00010212 [ 492.185651][T24724] RAX: 0000000000040000 RBX: 0000000000004000 RCX: ffffc9000a235000 [ 492.185659][T24724] RDX: 0000000000000247 RSI: ffffffff81c825a9 RDI: 0000000000000005 [ 492.185666][T24724] RBP: ffff888029e47ef0 R08: ffff8880298ea500 R09: ffffed10072d1914 [ 492.185678][T24724] R10: ffffed10072d1913 R11: ffff88803968c89f R12: ffff88805e0dc900 [ 492.185686][T24724] R13: ffff888029e47ec8 R14: ffff88805e0dc940 R15: ffff88805e0dc954 [ 492.185715][T24724] ? io_uring_setup+0x1399/0x1ac0 [ 492.185732][T24724] ? io_uring_setup+0x1399/0x1ac0 [ 492.185749][T24724] ? io_uring_release+0x50/0x50 [ 492.185764][T24724] ? nsecs_to_jiffies+0x30/0x30 [ 492.185789][T24724] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 492.221530][T24730] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 492.223323][T24724] ? do_syscall_64+0x26/0x610 [ 492.223339][T24724] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.223356][T24724] ? do_syscall_64+0x26/0x610 [ 492.239700][ T3878] kobject: 'loop4' (00000000a38d4535): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 492.244414][T24724] ? lockdep_hardirqs_on+0x418/0x5d0 [ 492.244438][T24724] __x64_sys_io_uring_setup+0x54/0x80 [ 492.311025][T24724] do_syscall_64+0x103/0x610 [ 492.315821][T24724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 492.321989][T24724] RIP: 0033:0x458da9 12:33:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="cd390b081bf2", @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [], @rand_addr=0x7000000}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x4, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, [], "802a08000000006b"}}}}}}}, 0x0) [ 492.330131][T24724] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.350102][T24724] RSP: 002b:00007fd923bcec78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 492.358624][T24724] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000458da9 [ 492.366788][T24724] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000064 [ 492.374773][T24724] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 492.382760][T24724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd923bcf6d4 [ 492.390751][T24724] R13: 00000000004bffde R14: 00000000004d2318 R15: 00000000ffffffff [ 492.401024][T24724] Kernel Offset: disabled [ 492.405688][T24724] Rebooting in 86400 seconds..