eyring(0x1d, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:49:16 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10}], 0x5}, 0x0) 14:49:16 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\xce\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x13\x00 \x00\x00\x00\x03\x00', 0x101}) 14:49:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:49:16 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00>%x\x90\x1b\\%j\\!:\xe7\xf6\xf7\xbd`r;\xd6F\x00v\xae$\x19\xffb\xc3\xa57\xc3\x90\x86\xdb\xe3\x1d\x98$\x8d\xc1P\xbf\t\\\x8eW\x16\x84!\xa0\xae\x9e\x18\x9f\xd6?e\xa9\xc5\xc2B\x0e\xfa\xa1\xd2\x87i\xcf\xa7\xe0\x9ajF\x80\xda\xac3\xe3\xe9R\xf8\xb0^1\xf6+\x13\xf2\x1e\x9a\xdf\xdd\xaf\xf7\xe8\xa9\xb6\xf3\xe7!\xcd\xe8\x02J\xf1\xf3\xa8\xc4\xdbX\xebLC\x06\xab\xdf`\xdb>\xb4\xd2\x99,X Mhp\xdd \xb5\x18f\xa1~,\x1e[\xe3\x92\xef\xe8Q\r\xbe\x05B\xcd\x8f\x11\xc1EkQZ\xf0\xed[F\x85\x9b\xdbM \x9e\xa3\x1fX\x806Q\x19]\xc4r\xc8t9\x90\xc3\xe5A\x1cb\x99\xd5\b\xe0\x1d\xa1\xce\x88\x82]\xfb\xf6o\xbfv\xa8\xdc\x81\xe1\x05d\x00\x00\x00\x00\x00\x00\xe3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xde\x9cx\xb3?\xe4@\xb6.j\x89+\xd7~\xe7=rn\xdb\xe8\x1f\x9b\x9f\xb4\xa3>.[[\x05[o*\xfd5\xf4E\x01\x14\xc9D\xd2\a~?\xc0Y\x8f\x19+\x97\x83I\x7f\x90\xb8d\xe1>W~TZ\x0f\x96+\xcf\xcc\x8fr\xa9\xfc\xe5\x10\xf77\xbb\x96\xc7\r1\x14\xd7\x10+\x83\xfc9\a\xcfu\xff\xbeN\xdec\x1bg\xab\x88\xf6s?\x8d\x8e\xb0\xe0\xfe\x97=\xdc\x04S/\xdai\xcf\x06\xc1e=\xac\xb7&7bL:\xb1\xaa\x81IA\x13\x9c\xee\xb9_\xbd]\xd48B\x16\xdc\xb0\x058rF\x86y\xa5\xb7\x83', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400005) 14:49:16 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10}], 0x5}, 0x0) [ 835.767087] device lo left promiscuous mode 14:49:17 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00>%x\x90\x1b\\%j\\!:\xe7\xf6\xf7\xbd`r;\xd6F\x00v\xae$\x19\xffb\xc3\xa57\xc3\x90\x86\xdb\xe3\x1d\x98$\x8d\xc1P\xbf\t\\\x8eW\x16\x84!\xa0\xae\x9e\x18\x9f\xd6?e\xa9\xc5\xc2B\x0e\xfa\xa1\xd2\x87i\xcf\xa7\xe0\x9ajF\x80\xda\xac3\xe3\xe9R\xf8\xb0^1\xf6+\x13\xf2\x1e\x9a\xdf\xdd\xaf\xf7\xe8\xa9\xb6\xf3\xe7!\xcd\xe8\x02J\xf1\xf3\xa8\xc4\xdbX\xebLC\x06\xab\xdf`\xdb>\xb4\xd2\x99,X Mhp\xdd \xb5\x18f\xa1~,\x1e[\xe3\x92\xef\xe8Q\r\xbe\x05B\xcd\x8f\x11\xc1EkQZ\xf0\xed[F\x85\x9b\xdbM \x9e\xa3\x1fX\x806Q\x19]\xc4r\xc8t9\x90\xc3\xe5A\x1cb\x99\xd5\b\xe0\x1d\xa1\xce\x88\x82]\xfb\xf6o\xbfv\xa8\xdc\x81\xe1\x05d\x00\x00\x00\x00\x00\x00\xe3\xb8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xde\x9cx\xb3?\xe4@\xb6.j\x89+\xd7~\xe7=rn\xdb\xe8\x1f\x9b\x9f\xb4\xa3>.[[\x05[o*\xfd5\xf4E\x01\x14\xc9D\xd2\a~?\xc0Y\x8f\x19+\x97\x83I\x7f\x90\xb8d\xe1>W~TZ\x0f\x96+\xcf\xcc\x8fr\xa9\xfc\xe5\x10\xf77\xbb\x96\xc7\r1\x14\xd7\x10+\x83\xfc9\a\xcfu\xff\xbeN\xdec\x1bg\xab\x88\xf6s?\x8d\x8e\xb0\xe0\xfe\x97=\xdc\x04S/\xdai\xcf\x06\xc1e=\xac\xb7&7bL:\xb1\xaa\x81IA\x13\x9c\xee\xb9_\xbd]\xd48B\x16\xdc\xb0\x058rF\x86y\xa5\xb7\x83', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x400005) 14:49:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 14:49:17 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10}], 0x5}, 0x0) 14:49:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xe, &(0x7f0000000100)={0x80000000001c00}, &(0x7f0000000040)=0x1e0) 14:49:17 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) 14:49:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@local, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 14:49:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@local, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 14:49:17 executing program 3: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xe, &(0x7f0000000100)={0x80000000001c00}, &(0x7f0000000040)=0x1e0) 14:49:17 executing program 5: r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\xce\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x13\x00 \x00\x00\x00\x03\x00', 0x101}) 14:49:17 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x3f00}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000040)={0x0, 0x1000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') 14:49:17 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000180), 0x4) [ 836.999203] device lo entered promiscuous mode 14:49:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xe, &(0x7f0000000100)={0x80000000001c00}, &(0x7f0000000040)=0x1e0) 14:49:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@local, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 14:49:17 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000180), 0x4) 14:49:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=@setlink={0x44, 0x13, 0x932f8fe2959679dd, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 14:49:17 executing program 4: syslog(0x3, &(0x7f0000930f14), 0x0) 14:49:17 executing program 3: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:17 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:17 executing program 0: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0xe, &(0x7f0000000100)={0x80000000001c00}, &(0x7f0000000040)=0x1e0) 14:49:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in6=@local, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) 14:49:17 executing program 4: syslog(0x3, &(0x7f0000930f14), 0x0) 14:49:17 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000180), 0x4) 14:49:17 executing program 3: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:18 executing program 4: syslog(0x3, &(0x7f0000930f14), 0x0) 14:49:18 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:18 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000180), 0x4) 14:49:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) 14:49:18 executing program 4: syslog(0x3, &(0x7f0000930f14), 0x0) 14:49:18 executing program 3: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:18 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f0000000040)=',mime_typebdev(\x00', 0x0) write(r0, &(0x7f0000000080)='X', 0x1) ftruncate(r0, 0x4) 14:49:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000243ff3)='/dev/snd/seq\x00', 0x0, 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80}) 14:49:18 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000001, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) 14:49:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) close(r0) pipe(&(0x7f0000de8ff8)={0x0, 0x0}) dup2(r2, r1) 14:49:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=',fscontext=u']) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, &(0x7f0000000480)) 14:49:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000243ff3)='/dev/snd/seq\x00', 0x0, 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80}) 14:49:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) 14:49:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) close(r0) pipe(&(0x7f0000de8ff8)={0x0, 0x0}) dup2(r2, r1) 14:49:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000243ff3)='/dev/snd/seq\x00', 0x0, 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80}) 14:49:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000121fec)="ff01000040000000000000000000000101000000", 0x14) 14:49:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000243ff3)='/dev/snd/seq\x00', 0x0, 0x40101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80}) 14:49:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) close(r0) pipe(&(0x7f0000de8ff8)={0x0, 0x0}) dup2(r2, r1) 14:49:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000121fec)="ff01000040000000000000000000000101000000", 0x14) 14:49:18 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) 14:49:19 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) close(r0) pipe(&(0x7f0000de8ff8)={0x0, 0x0}) dup2(r2, r1) 14:49:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000121fec)="ff01000040000000000000000000000101000000", 0x14) 14:49:19 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) 14:49:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 838.859620] net_ratelimit: 20 callbacks suppressed [ 838.859630] protocol 88fb is buggy, dev hsr_slave_0 [ 838.869880] protocol 88fb is buggy, dev hsr_slave_1 14:49:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000121fec)="ff01000040000000000000000000000101000000", 0x14) 14:49:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:19 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:19 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) rename(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:49:19 executing program 3: setrlimit(0x7, &(0x7f0000a9cff8)) socket$inet(0x10, 0x2, 0x0) 14:49:19 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:19 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:19 executing program 3: setrlimit(0x7, &(0x7f0000a9cff8)) socket$inet(0x10, 0x2, 0x0) 14:49:19 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 839.419644] protocol 88fb is buggy, dev hsr_slave_0 [ 839.424927] protocol 88fb is buggy, dev hsr_slave_1 [ 839.430141] protocol 88fb is buggy, dev hsr_slave_0 [ 839.430190] protocol 88fb is buggy, dev hsr_slave_1 14:49:20 executing program 3: setrlimit(0x7, &(0x7f0000a9cff8)) socket$inet(0x10, 0x2, 0x0) 14:49:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@mcast1}, 0x1290881c40d88ab4) [ 839.900352] protocol 88fb is buggy, dev hsr_slave_0 [ 839.906431] protocol 88fb is buggy, dev hsr_slave_1 14:49:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:20 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf433, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 14:49:20 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@rose, @remote, @bcast, @rose, @bcast, @netrom]}, 0x1c) 14:49:20 executing program 3: setrlimit(0x7, &(0x7f0000a9cff8)) socket$inet(0x10, 0x2, 0x0) 14:49:20 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\xee\xff\xff0;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 14:49:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@mcast1}, 0x1290881c40d88ab4) 14:49:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:20 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf433, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 14:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@mcast1}, 0x1290881c40d88ab4) 14:49:20 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf433, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 14:49:20 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@rose, @remote, @bcast, @rose, @bcast, @netrom]}, 0x1c) [ 840.379609] protocol 88fb is buggy, dev hsr_slave_0 [ 840.384866] protocol 88fb is buggy, dev hsr_slave_1 14:49:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@mcast1}, 0x1290881c40d88ab4) 14:49:21 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf433, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) 14:49:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:21 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@rose, @remote, @bcast, @rose, @bcast, @netrom]}, 0x1c) 14:49:21 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") bind$rose(r0, &(0x7f0000000080)=@full={0xb, @dev, @remote, 0x0, [@rose, @remote, @bcast, @rose, @bcast, @netrom]}, 0x1c) 14:49:21 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000000640)=""/213, 0xd5) 14:49:21 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(0xffffffffffffffff) pipe2(0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x42ff1205d268861c) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x0) r3 = perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x4, 0x2000004, 0xfff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000100)) accept4$inet(r2, &(0x7f00000003c0)={0x2, 0x0, @dev}, &(0x7f0000000480)=0x10, 0x800) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0x379) io_setup(0x1909, &(0x7f0000000080)=0x0) io_cancel(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x6, r3, &(0x7f0000000080), 0x304, 0xfffffffffffffffc, 0x0, 0x0, r0}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x0, 0x0) clone(0x0, &(0x7f0000000240)="f0543ea004b5630695000000000000000000", 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') sendfile(r1, r6, &(0x7f0000000500), 0x80000003) 14:49:22 executing program 5: add_key$user(&(0x7f0000000280)='user\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0) 14:49:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:22 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000000640)=""/213, 0xd5) 14:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x1) memfd_create(&(0x7f00000003c0), 0x100000100000002) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x4400) socket$packet(0x11, 0x0, 0x300) fallocate(r1, 0x3, 0x0, 0x100000001) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0xfffffe91) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000001c0)) r3 = syz_open_dev$usbmon(0x0, 0x9, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000380)={@local}) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) stat(0x0, &(0x7f0000000440)) r5 = syz_open_pts(r3, 0x0) flock(r5, 0x4) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x500}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:22 executing program 5: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:22 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000000640)=""/213, 0xd5) 14:49:22 executing program 0: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) lseek(r0, 0x1, 0x1) getdents(r0, &(0x7f0000000640)=""/213, 0xd5) 14:49:22 executing program 5: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:23 executing program 2: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:23 executing program 5: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:23 executing program 4: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:24 executing program 5: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:24 executing program 2: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:24 executing program 4: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000800)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228f94d1cef9f7830897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477253900"/192, 0xc0, r0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00'}}) 14:49:24 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) [ 844.059518] net_ratelimit: 20 callbacks suppressed [ 844.059528] protocol 88fb is buggy, dev hsr_slave_0 [ 844.069710] protocol 88fb is buggy, dev hsr_slave_1 14:49:24 executing program 2: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 14:49:24 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 14:49:24 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/i\x87v\xf2\xbb2\x18\xd9\xfa2k@\x8dd\xa24/vs/na', 0x2, 0x0) 14:49:25 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) [ 844.539580] protocol 88fb is buggy, dev hsr_slave_0 [ 844.544736] protocol 88fb is buggy, dev hsr_slave_1 14:49:25 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/i\x87v\xf2\xbb2\x18\xd9\xfa2k@\x8dd\xa24/vs/na', 0x2, 0x0) 14:49:25 executing program 4: socket$inet(0x2b, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x3, 0x0, 0xc1b) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x7fff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000500)={0x8, 0x0, 0x7}) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x10000) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x0, &(0x7f0000000300), 0x4) select(0x40, &(0x7f00000001c0)={0x200, 0x6, 0x0, 0x10001, 0x6, 0x0, 0x7, 0x8}, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffffffffff9}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$fuseblk(&(0x7f0000000380)='/dev/loop0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='fuseblk\x00', 0x1000030, &(0x7f0000000980)=ANY=[@ANYBLOB="2cbc04b397b28b67af8874d76d61b59f5e4568ca41a8c41b7bab5c78253f3078f50f956a522ebdeb6bfa6aa15d130700c9154a8c5c3f7d61fe1d010000000000000030303030302732765e05a2ca7284f1dbdaf800e7323e1a99f7d63296c6193c7a38aac5f141140538188053f519ae5e130a5e8c80b5334b4881cbdef3b6dcdc06599c99c48768976b91e8d31c97b222c5ead7fd7ccfdc52deac74594acaeec8610f1d10de3f19747a4c76458085ed8f492824ec74d0"]) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000540)=0x109) getrandom(&(0x7f0000000040)=""/153, 0xfffffffffffffe4b, 0x4000000003) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000ac0)={@multicast2}, &(0x7f0000000a80)=0x6) syz_genetlink_get_family_id$fou(0x0) 14:49:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xa5a) 14:49:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xa5a) 14:49:25 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 14:49:25 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/i\x87v\xf2\xbb2\x18\xd9\xfa2k@\x8dd\xa24/vs/na', 0x2, 0x0) 14:49:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 14:49:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) [ 844.859534] protocol 88fb is buggy, dev hsr_slave_0 [ 844.864672] protocol 88fb is buggy, dev hsr_slave_1 14:49:25 executing program 1: r0 = socket(0x200000000000011, 0x803, 0x1000000080081) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:49:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xa5a) 14:49:25 executing program 5: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/i\x87v\xf2\xbb2\x18\xd9\xfa2k@\x8dd\xa24/vs/na', 0x2, 0x0) [ 845.099540] protocol 88fb is buggy, dev hsr_slave_0 [ 845.104814] protocol 88fb is buggy, dev hsr_slave_1 14:49:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 14:49:25 executing program 1: r0 = socket(0x200000000000011, 0x803, 0x1000000080081) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:49:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xa5a) 14:49:25 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) lsetxattr$security_selinux(0x0, &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) mkdir(&(0x7f0000000080)='./file1/file0\x00', 0x0) 14:49:25 executing program 5: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:25 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$clear(0x7, r0) 14:49:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 14:49:25 executing program 3: keyctl$read(0xc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xa8ac551d44cf926c) 14:49:26 executing program 1: r0 = socket(0x200000000000011, 0x803, 0x1000000080081) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:49:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:26 executing program 1: r0 = socket(0x200000000000011, 0x803, 0x1000000080081) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 845.659547] protocol 88fb is buggy, dev hsr_slave_0 [ 845.664747] protocol 88fb is buggy, dev hsr_slave_1 14:49:26 executing program 3: keyctl$read(0xc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xa8ac551d44cf926c) 14:49:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 14:49:26 executing program 5: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:26 executing program 3: keyctl$read(0xc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xa8ac551d44cf926c) 14:49:26 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:26 executing program 1: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:26 executing program 3: keyctl$read(0xc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xa8ac551d44cf926c) 14:49:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00004f5ff8)='./file0\x00', &(0x7f00000e1000)='ramfs\x00', 0x8409, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 14:49:26 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:26 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000240)={@local, @link_local, [{}], {@generic={0x6558}}}, 0x0) 14:49:26 executing program 5: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:27 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000240)={@local, @link_local, [{}], {@generic={0x6558}}}, 0x0) 14:49:27 executing program 1: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:27 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000240)={@local, @link_local, [{}], {@generic={0x6558}}}, 0x0) 14:49:27 executing program 2: syz_emit_ethernet(0x12, &(0x7f0000000240)={@local, @link_local, [{}], {@generic={0x6558}}}, 0x0) 14:49:27 executing program 5: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:27 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) [ 847.001163] audit: type=1800 audit(1554994167.520:240): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16674 res=0 14:49:27 executing program 1: io_setup(0x81, 0x0) io_getevents(0x0, 0x200, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000180)=""/13) ioctl(r1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000140)={0x0, 0x1}) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) syz_genetlink_get_family_id$ipvs(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x80010, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregset(0x4205, r5, 0x200, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 14:49:27 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:28 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) 14:49:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x255}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 14:49:28 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) 14:49:28 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'lo\x00', @ifru_addrs=@nfc}) 14:49:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0xf0ffffff7f0000) 14:49:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) 14:49:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x255}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 14:49:28 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'lo\x00', @ifru_addrs=@nfc}) 14:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0xf0ffffff7f0000) 14:49:29 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) 14:49:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'lo\x00', @ifru_addrs=@nfc}) 14:49:29 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:29 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r1, 0x0, 0x0, 0x10000101) 14:49:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 14:49:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={'lo\x00', @ifru_addrs=@nfc}) 14:49:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x255}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 14:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0xf0ffffff7f0000) 14:49:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096) 14:49:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) [ 849.259558] net_ratelimit: 20 callbacks suppressed [ 849.259567] protocol 88fb is buggy, dev hsr_slave_0 [ 849.269717] protocol 88fb is buggy, dev hsr_slave_1 14:49:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0xf0ffffff7f0000) 14:49:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x255}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 14:49:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 14:49:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 14:49:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/rfkill\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802a501039c853e"], 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 14:49:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096) 14:49:30 executing program 4: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000), 0x138f}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 14:49:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 14:49:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) [ 849.819559] protocol 88fb is buggy, dev hsr_slave_0 [ 849.824855] protocol 88fb is buggy, dev hsr_slave_1 [ 849.830100] protocol 88fb is buggy, dev hsr_slave_0 [ 849.835305] protocol 88fb is buggy, dev hsr_slave_1 14:49:30 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/rfkill\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802a501039c853e"], 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 14:49:30 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) 14:49:30 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) unlink(&(0x7f0000000080)='./file0\x00') 14:49:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xae41, &(0x7f0000000000)) 14:49:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096) 14:49:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/rfkill\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802a501039c853e"], 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 14:49:30 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:30 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101006, 0x0) r1 = memfd_create(&(0x7f00000000c0)='/dev/rfkill\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="3f1802a501039c853e"], 0x9) sendfile(r0, r1, &(0x7f0000000000), 0x7fffffffffffffff) 14:49:30 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:30 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2}) [ 850.309522] protocol 88fb is buggy, dev hsr_slave_0 [ 850.314682] protocol 88fb is buggy, dev hsr_slave_1 14:49:30 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:30 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2000002, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f00003fc000/0xc00000)=nil, 0xc00000, &(0x7f0000002280)=""/4096) 14:49:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:31 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2}) 14:49:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xae41, &(0x7f0000000000)) 14:49:31 executing program 4: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:31 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x408002000006008, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fdatasync(r0) 14:49:31 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2}) [ 850.779529] protocol 88fb is buggy, dev hsr_slave_0 [ 850.784677] protocol 88fb is buggy, dev hsr_slave_1 14:49:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xae41, &(0x7f0000000000)) 14:49:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:49:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000000180)=';', 0x0}, 0x18) 14:49:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8023e, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x4, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "df00e4", "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"}}, 0x110) 14:49:31 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x2}) 14:49:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:49:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8023e, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x4, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "df00e4", "e2adce45d2fbc46780c1dce9e2ebd6b08106cf6c87395a217820aa5262c2fa9c8ecef16ce0e66538926fd380b7de4c273e3aeac3ff62718d536307e4cb4429699d4bc10286cd0722a8312407000000000000000822fedcba00c93eeaa1ecb910d470fe465a5542e47abb81f0e2539f36c2b82ed1f9281a13bb9baf168eb7f64223e9c8d2afa22052f6bd2c7981f30a7abecca6ca81d00fc098366efbd321964a2af3148975fca5c3eb3e8c336daf52426585318737562a3453b3bcf861ccbc6d99e537520d08b977935a9cc39d000000009648c60e2d72858b62c76adff71d7513ab8fbd41ec482293136ddeea959469e5be538718d4f2a69300dfed9f8fd300"}}, 0x110) 14:49:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT(r1, 0xae41, &(0x7f0000000000)) 14:49:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:49:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000000180)=';', 0x0}, 0x18) 14:49:31 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8023e, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x4, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "df00e4", "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"}}, 0x110) 14:49:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:49:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000000180)=';', 0x0}, 0x18) 14:49:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8023e, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000380)={0x4, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "df00e4", "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"}}, 0x110) 14:49:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40026102, 0x0) 14:49:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0x9, 0x4000000000080, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r0, &(0x7f0000fc5000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000000180)=';', 0x0}, 0x18) 14:49:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000703003e08"], 0x14) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 14:49:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40026102, 0x0) 14:49:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @dev, [], 0x70, 0xe0, 0x128}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2f0) 14:49:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 14:49:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40026102, 0x0) 14:49:32 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 14:49:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @dev, [], 0x70, 0xe0, 0x128}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2f0) 14:49:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000703003e08"], 0x14) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 14:49:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000200)='t') 14:49:32 executing program 4: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40026102, 0x0) 14:49:32 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 14:49:32 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000200)='t') 14:49:32 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @dev, [], 0x70, 0xe0, 0x128}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2f0) 14:49:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x47010, r0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f00000008c0)) connect$inet(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x40200, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r3, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000000)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x7c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000440)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xe8, 0x0, &(0x7f00000005c0)="9ac4d3fa3370c54ca6a1c485b535d9f0a463086df894d3916b6e6bf3b5c1da81054005eb378dd144ab7db8700ea40ed3dbafa638618d1575a46e55795b3c4f550df9e72d8308240ed9c7e48ee0f65a57acfb1fa8f9ce107345c5f672842786643cc1e17f91f765ec3c16fc48f2fd256e6451f682f41250a2fcbc461d104358a5ddb820f39e2162922bdc3640f57b8d06a58ab80f9458d8203b0d8f8660030449c197397703ea735e767ad6d8cc2614722dda233ea01a3624333027770b6ba1b0bd10fec9ade47cd47c095073c6e498b64e81978cbaffa17607a31f9ca33a09bc106a1db6fe799759"}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) 14:49:32 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000703003e08"], 0x14) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 14:49:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r1, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000600)=0x2, 0x4) sendto$inet(r1, &(0x7f0000000040)=';', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:49:32 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 14:49:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000200)='t') 14:49:33 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x2, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'yam0\x00', 'veth1_to_bridge\x00', 'ipddp0\x00', 'teql0\x00', @dev, [], @dev, [], 0x70, 0xe0, 0x128}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xc0}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x2f0) 14:49:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)="4263bcb8f7d1e6d6f57fb7496b9f6a6253b38c65d774bc6750e007d35ad9bd9e29e40e48b26ff36b6482df761b859c2c4aa06950f034214aaedc94b75aa3f109463513021335257ed4c1dc96a63f842caede481a4a10ccbf5ec87270c5ff84d5132fa53fea18ee268eed1bd88783c0132065a4fc0507a05fc5d543", 0x7b, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r1, r0}, &(0x7f00000004c0)=""/83, 0xffffffaa, 0x0) 14:49:33 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000703003e08"], 0x14) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 14:49:33 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 14:49:33 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000200)='t') 14:49:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet6_opts(r0, 0x29, 0x33, 0x0, &(0x7f0000000100)=0xa4ffffff) 14:49:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)="4263bcb8f7d1e6d6f57fb7496b9f6a6253b38c65d774bc6750e007d35ad9bd9e29e40e48b26ff36b6482df761b859c2c4aa06950f034214aaedc94b75aa3f109463513021335257ed4c1dc96a63f842caede481a4a10ccbf5ec87270c5ff84d5132fa53fea18ee268eed1bd88783c0132065a4fc0507a05fc5d543", 0x7b, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r1, r0}, &(0x7f00000004c0)=""/83, 0xffffffaa, 0x0) 14:49:33 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mkdir(&(0x7f0000000080)='./file1/file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") lsetxattr$security_smack_entry(&(0x7f0000000180)='./file1\x00', &(0x7f0000000300)='security.SMACK64\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f00000001c0)='./file0/file0\x00') 14:49:33 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000013000)="5500000018007f09b72d1cb2a4a280930206000400a843096c2623692500160021001005f44b043fa16a34c2681473000800000048a3c72803c56b7b31afdc13380000000000000004f75afb83de448db23231c43a", 0x55}], 0x1}, 0x0) 14:49:33 executing program 4: syz_mount_image$hfs(&(0x7f0000000480)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@uid={'uid'}}, {@umask={'umask', 0x3d, 0xffffffff}}]}) 14:49:33 executing program 5: keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0xffb6, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0xffffca88}}}}}, 0x0) [ 853.114604] hfs: umask requires a value [ 853.131950] hfs: unable to parse mount options 14:49:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:33 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000013000)="5500000018007f09b72d1cb2a4a280930206000400a843096c2623692500160021001005f44b043fa16a34c2681473000800000048a3c72803c56b7b31afdc13380000000000000004f75afb83de448db23231c43a", 0x55}], 0x1}, 0x0) 14:49:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet6_opts(r0, 0x29, 0x33, 0x0, &(0x7f0000000100)=0xa4ffffff) [ 853.187299] hfs: umask requires a value [ 853.192191] hfs: unable to parse mount options 14:49:33 executing program 4: syz_mount_image$hfs(&(0x7f0000000480)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@uid={'uid'}}, {@umask={'umask', 0x3d, 0xffffffff}}]}) 14:49:33 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000013000)="5500000018007f09b72d1cb2a4a280930206000400a843096c2623692500160021001005f44b043fa16a34c2681473000800000048a3c72803c56b7b31afdc13380000000000000004f75afb83de448db23231c43a", 0x55}], 0x1}, 0x0) [ 853.391674] binder_transaction: 4 callbacks suppressed [ 853.391712] binder: 18202:18215 transaction failed 29189/-22, size 24-8 line 2855 14:49:33 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) 14:49:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet6_opts(r0, 0x29, 0x33, 0x0, &(0x7f0000000100)=0xa4ffffff) [ 853.542515] hfs: umask requires a value [ 853.564501] hfs: unable to parse mount options 14:49:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)="4263bcb8f7d1e6d6f57fb7496b9f6a6253b38c65d774bc6750e007d35ad9bd9e29e40e48b26ff36b6482df761b859c2c4aa06950f034214aaedc94b75aa3f109463513021335257ed4c1dc96a63f842caede481a4a10ccbf5ec87270c5ff84d5132fa53fea18ee268eed1bd88783c0132065a4fc0507a05fc5d543", 0x7b, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r1, r0}, &(0x7f00000004c0)=""/83, 0xffffffaa, 0x0) 14:49:34 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000013000)="5500000018007f09b72d1cb2a4a280930206000400a843096c2623692500160021001005f44b043fa16a34c2681473000800000048a3c72803c56b7b31afdc13380000000000000004f75afb83de448db23231c43a", 0x55}], 0x1}, 0x0) 14:49:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:34 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) 14:49:34 executing program 4: syz_mount_image$hfs(&(0x7f0000000480)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@uid={'uid'}}, {@umask={'umask', 0x3d, 0xffffffff}}]}) 14:49:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") getsockopt$inet6_opts(r0, 0x29, 0x33, 0x0, &(0x7f0000000100)=0xa4ffffff) 14:49:34 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) [ 854.003935] binder: 18358:18362 transaction failed 29189/-22, size 24-8 line 2855 [ 854.031878] hfs: umask requires a value [ 854.035909] hfs: unable to parse mount options 14:49:34 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:34 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:34 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000000)) 14:49:34 executing program 4: syz_mount_image$hfs(&(0x7f0000000480)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@uid={'uid'}}, {@umask={'umask', 0x3d, 0xffffffff}}]}) [ 854.297060] binder: 18384:18386 transaction failed 29189/-22, size 24-8 line 2855 [ 854.311848] binder: 18380:18383 transaction failed 29189/-22, size 24-8 line 2855 [ 854.335970] binder: 18379:18385 transaction failed 29189/-22, size 24-8 line 2855 [ 854.413010] hfs: umask requires a value [ 854.444046] hfs: unable to parse mount options [ 854.459539] net_ratelimit: 20 callbacks suppressed [ 854.459547] protocol 88fb is buggy, dev hsr_slave_0 [ 854.469680] protocol 88fb is buggy, dev hsr_slave_1 14:49:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000200)="4263bcb8f7d1e6d6f57fb7496b9f6a6253b38c65d774bc6750e007d35ad9bd9e29e40e48b26ff36b6482df761b859c2c4aa06950f034214aaedc94b75aa3f109463513021335257ed4c1dc96a63f842caede481a4a10ccbf5ec87270c5ff84d5132fa53fea18ee268eed1bd88783c0132065a4fc0507a05fc5d543", 0x7b, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r1, r0}, &(0x7f00000004c0)=""/83, 0xffffffaa, 0x0) 14:49:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 854.939516] protocol 88fb is buggy, dev hsr_slave_0 [ 854.945181] protocol 88fb is buggy, dev hsr_slave_1 [ 854.985514] binder: 18401:18405 transaction failed 29189/-22, size 24-8 line 2855 [ 854.995802] binder: 18403:18406 transaction failed 29189/-22, size 24-8 line 2855 [ 855.005117] binder: 18399:18404 transaction failed 29189/-22, size 24-8 line 2855 [ 855.025748] binder: 18402:18410 transaction failed 29189/-22, size 24-8 line 2855 14:49:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0x14, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1}]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0xb7}}, 0x0) 14:49:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 855.048625] binder: 18400:18409 transaction failed 29189/-22, size 24-8 line 2855 14:49:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 855.197201] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 14:49:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) [ 855.259517] protocol 88fb is buggy, dev hsr_slave_0 [ 855.264638] protocol 88fb is buggy, dev hsr_slave_1 [ 855.499553] protocol 88fb is buggy, dev hsr_slave_0 [ 855.504702] protocol 88fb is buggy, dev hsr_slave_1 14:49:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0x14, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1}]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0xb7}}, 0x0) 14:49:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:36 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000190001000700fd686fa2f8bc0200000000000000271d859408000f0001030000", 0x24}], 0x1}, 0x0) 14:49:36 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x59616d61, 0xf, 0x0) 14:49:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) 14:49:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xfff, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x3c) 14:49:36 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x59616d61, 0xf, 0x0) 14:49:36 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000190001000700fd686fa2f8bc0200000000000000271d859408000f0001030000", 0x24}], 0x1}, 0x0) 14:49:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) nanosleep(0x0, &(0x7f0000000480)) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x0, 0x2}, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x766, 0xb) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000400)={0x8, 0x40, 0xfffffffffffffffb}) write$P9_RLOCK(r5, &(0x7f0000000280)={0x8, 0x35, 0x0, 0x1}, 0x8) setxattr$security_smack_entry(0x0, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@ipv4={[], [], @loopback}, 0x3, 0x1, 0x1, 0x0, 0x61b, 0x7}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f00000004c0)=0xc) sched_setparam(r6, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) [ 855.963791] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 14:49:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0x14, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1}]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0xb7}}, 0x0) [ 856.059525] protocol 88fb is buggy, dev hsr_slave_0 [ 856.064658] protocol 88fb is buggy, dev hsr_slave_1 14:49:36 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x59616d61, 0xf, 0x0) 14:49:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xfff, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x3c) 14:49:36 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000190001000700fd686fa2f8bc0200000000000000271d859408000f0001030000", 0x24}], 0x1}, 0x0) 14:49:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) nanosleep(0x0, &(0x7f0000000480)) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x0, 0x2}, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x766, 0xb) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000400)={0x8, 0x40, 0xfffffffffffffffb}) write$P9_RLOCK(r5, &(0x7f0000000280)={0x8, 0x35, 0x0, 0x1}, 0x8) setxattr$security_smack_entry(0x0, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@ipv4={[], [], @loopback}, 0x3, 0x1, 0x1, 0x0, 0x61b, 0x7}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f00000004c0)=0xc) sched_setparam(r6, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) [ 856.185258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 14:49:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=@newlink={0x5c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0x14, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x7, @mcast1}]}}}, @IFLA_BROADCAST={0xc, 0x3, @local}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0xb7}}, 0x0) 14:49:36 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="24000000190001000700fd686fa2f8bc0200000000000000271d859408000f0001030000", 0x24}], 0x1}, 0x0) 14:49:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xfff, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x3c) 14:49:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) nanosleep(0x0, &(0x7f0000000480)) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x0, 0x2}, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x766, 0xb) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000400)={0x8, 0x40, 0xfffffffffffffffb}) write$P9_RLOCK(r5, &(0x7f0000000280)={0x8, 0x35, 0x0, 0x1}, 0x8) setxattr$security_smack_entry(0x0, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@ipv4={[], [], @loopback}, 0x3, 0x1, 0x1, 0x0, 0x61b, 0x7}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f00000004c0)=0xc) sched_setparam(r6, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 14:49:36 executing program 3: prctl$PR_SET_MM_MAP_SIZE(0x59616d61, 0xf, 0x0) [ 856.478388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 14:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) nanosleep(0x0, &(0x7f0000000480)) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x0, 0x2}, 0x0) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup2(r4, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x766, 0xb) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000400)={0x8, 0x40, 0xfffffffffffffffb}) write$P9_RLOCK(r5, &(0x7f0000000280)={0x8, 0x35, 0x0, 0x1}, 0x8) setxattr$security_smack_entry(0x0, &(0x7f0000000140)='security.SMACK64MMAP\x00', 0x0, 0x0, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000540)={@ipv4={[], [], @loopback}, 0x3, 0x1, 0x1, 0x0, 0x61b, 0x7}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f00000004c0)=0xc) sched_setparam(r6, &(0x7f0000000600)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) 14:49:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xfff, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x3c) 14:49:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0xc43}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xf004}}) 14:49:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/234) 14:49:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(0xffffffffffffffff, 0xc0186419, &(0x7f0000000b00)={0x7, &(0x7f0000000580)=""/123, &(0x7f0000000a40)=[{0x1, 0x84, 0x0, &(0x7f0000000600)=""/132}, {0x9, 0x3d, 0x3, &(0x7f00000006c0)=""/61}, {0x0, 0x0, 0x101, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0xef, 0x6, &(0x7f0000000840)=""/239}, {0x4a9a, 0xa2, 0x1, &(0x7f0000000940)=""/162}, {0x7ff, 0x0, 0x5, 0x0}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x1c5) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3990, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) times(&(0x7f0000000d00)) ioctl$RTC_AIE_ON(r1, 0x7001) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x2) 14:49:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001) io_setup(0x8, &(0x7f0000000300)=0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000140)={0x0, 0x6}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000140), 0x2}]) 14:49:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0xc43}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xf004}}) 14:49:38 executing program 5: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000ab2fe2)=""/30, &(0x7f0000000000)=0x3de) 14:49:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/\x00'], 0x2) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) 14:49:38 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 14:49:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0xc43}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xf004}}) [ 858.450545] IPVS: ftp: loaded support on port[0] = 21 14:49:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 14:49:39 executing program 5: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000ab2fe2)=""/30, &(0x7f0000000000)=0x3de) 14:49:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:39 executing program 5: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000ab2fe2)=""/30, &(0x7f0000000000)=0x3de) 14:49:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 14:49:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x0, 0xc43}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xf004}}) 14:49:39 executing program 5: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000ab2fe2)=""/30, &(0x7f0000000000)=0x3de) 14:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 14:49:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n\x01\x00\x00\x00y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x16\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03L\x10wz0dtF\xfbn9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\t\x00B\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='vmnet0bdev\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000000c0)) 14:49:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 14:49:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000000000010, 0x20000000802, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}}, 0x0) write(r1, &(0x7f0000000080)="240000001a0025f00018009300edfc0e800300000000af00000000000800010048050006", 0x24) 14:49:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 14:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n\x01\x00\x00\x00y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x16\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03L\x10wz0dtF\xfbn9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\t\x00B\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='vmnet0bdev\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000000c0)) [ 859.660378] net_ratelimit: 20 callbacks suppressed [ 859.660387] protocol 88fb is buggy, dev hsr_slave_0 [ 859.671358] protocol 88fb is buggy, dev hsr_slave_1 14:49:40 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x40090) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lstat(0x0, &(0x7f0000000340)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000006c0)='fuse\x00', 0x2000, &(0x7f0000000b80)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read'}}], [{@measure='measure'}]}}) 14:49:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 14:49:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n\x01\x00\x00\x00y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x16\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03L\x10wz0dtF\xfbn9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\t\x00B\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='vmnet0bdev\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000000c0)) 14:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x100000000000019, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) open(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvmmsg(r0, 0x0, 0xfffffe87, 0x0, 0x0) 14:49:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n\x01\x00\x00\x00y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x16\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03L\x10wz0dtF\xfbn9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\t\x00B\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='vmnet0bdev\x00'}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc020660b, &(0x7f00000000c0)) 14:49:40 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x40}, {0x6}]}) 14:49:40 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev}}}, 0x90) 14:49:40 executing program 0: socket(0x2000000000000021, 0x0, 0x2) [ 860.221116] protocol 88fb is buggy, dev hsr_slave_0 [ 860.226673] protocol 88fb is buggy, dev hsr_slave_1 [ 860.232674] protocol 88fb is buggy, dev hsr_slave_0 [ 860.238649] protocol 88fb is buggy, dev hsr_slave_1 14:49:40 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev}}}, 0x90) 14:49:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000280)={0x7a, 0x0, [0x175], [0xc1]}) 14:49:41 executing program 0: socket(0x2000000000000021, 0x0, 0x2) 14:49:41 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 14:49:41 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:41 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev}}}, 0x90) [ 860.699526] protocol 88fb is buggy, dev hsr_slave_0 [ 860.704724] protocol 88fb is buggy, dev hsr_slave_1 14:49:41 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:41 executing program 0: socket(0x2000000000000021, 0x0, 0x2) 14:49:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:41 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 14:49:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000f7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x227c, 0x400000000000003e) 14:49:41 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @dev}}}, 0x90) 14:49:41 executing program 0: socket(0x2000000000000021, 0x0, 0x2) 14:49:41 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 14:49:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000f7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x227c, 0x400000000000003e) 14:49:41 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) [ 861.179540] protocol 88fb is buggy, dev hsr_slave_0 [ 861.184693] protocol 88fb is buggy, dev hsr_slave_1 14:49:41 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYRES16], 0xffffff1f) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000008, 0x0) 14:49:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="c6e66a4e2a75", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x6, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) 14:49:41 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000f7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x227c, 0x400000000000003e) 14:49:41 executing program 5: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000000c0)) 14:49:42 executing program 0: futex(&(0x7f000036bffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x32317d08) 14:49:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'XatYt\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, 0x0, &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x0, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x128, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x10, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) 14:49:42 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240), 0xfffffffffffffe69) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x8c04, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) pread64(r0, 0x0, 0x2ec, 0x0) 14:49:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000f7aff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x227c, 0x400000000000003e) 14:49:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="c6e66a4e2a75", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x6, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) 14:49:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000dd00)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 14:49:42 executing program 0: futex(&(0x7f000036bffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x32317d08) 14:49:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'XatYt\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, 0x0, &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x0, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x128, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x10, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) 14:49:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008183ad5de087185082cf0124b0eba06ec400002339a00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000012dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac000000}}], 0x1, 0x0, 0x0) 14:49:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="c6e66a4e2a75", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x6, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) 14:49:42 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'XatYt\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, 0x0, &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x0, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x128, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x10, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) 14:49:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000dd00)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 14:49:42 executing program 0: futex(&(0x7f000036bffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x32317d08) 14:49:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@local, @random="c6e66a4e2a75", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x6, 0x0, @empty, @empty, {[], @gre}}}}}, 0x0) 14:49:42 executing program 0: futex(&(0x7f000036bffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x32317d08) 14:49:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000dd00)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 14:49:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@nat={'XatYt\x00\x00\x00\x00\x03\xe0\x01\x00', 0x19, 0x3, 0x3e0, [0x20001600, 0x0, 0x0, 0x200018d8, 0x20001908], 0x0, 0x0, &(0x7f0000001600)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x1b, 0x0, 0x0, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0x128, 0x198, 0x1d0, [@statistic={'statistic\x00', 0x18}, @ip6={'ip6\x00', 0x50, {{@local, @dev}}}]}, [@snat={'snat\x00', 0x10, {{@dev}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'ip6gretap0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x458) 14:49:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) statfs(&(0x7f0000000000)='.\x00', &(0x7f0000001340)=""/199) 14:49:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f000000dd00)={&(0x7f0000000180), 0xc, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 14:49:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8}, @IFA_BROADCAST={0x8}]}, 0x28}}, 0x0) 14:49:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 1: syz_mount_image$bfs(&(0x7f00000003c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="cefaad1b00dc", 0x6}], 0x0, 0x0) 14:49:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4102}}, 0x1c}}, 0x0) 14:49:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4102}}, 0x1c}}, 0x0) 14:49:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) 14:49:44 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) 14:49:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000140)=0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xdf1b) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:49:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4102}}, 0x1c}}, 0x0) 14:49:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) 14:49:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0x4102}}, 0x1c}}, 0x0) 14:49:44 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x8001a0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 14:49:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x1c4) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000180), 0x4) 14:49:44 executing program 0: mlockall(0x6) 14:49:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) 14:49:44 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000380)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2180, 0xffffffffffffffff) 14:49:44 executing program 4: socketpair$unix(0x1, 0x4000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2b}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:49:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x48, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'ifb0\x00'}, @IFA_CACHEINFO={0x14}]}, 0x48}}, 0x0) 14:49:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic}) [ 864.859534] net_ratelimit: 20 callbacks suppressed [ 864.859542] protocol 88fb is buggy, dev hsr_slave_0 [ 864.869704] protocol 88fb is buggy, dev hsr_slave_1 14:49:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbd\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2}}) 14:49:45 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) 14:49:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000001780)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001280)=""/210, 0xd2) getdents(r1, &(0x7f0000000280)=""/4096, 0x82f) 14:49:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) 14:49:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x5411, 0x70a000) 14:49:45 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000001440)=ANY=[], 0xffffff16) recvmmsg(r1, &(0x7f0000008cc0)=[{{0x0, 0xfffffffffffffe06, &(0x7f0000003a40)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x5c}}], 0x1, 0x0, 0x0) [ 865.339539] protocol 88fb is buggy, dev hsr_slave_0 [ 865.344708] protocol 88fb is buggy, dev hsr_slave_1 14:49:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 14:49:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x800000001, @dev}, 0x6, {0x2, 0x0, @multicast1}, '\x00\b\a\x00\x00\x04\x00\xa0\xb2,X+\xf3\xae\xd1}'}) 14:49:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) [ 865.495732] ALSA: seq fatal error: cannot create timer (-19) 14:49:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 14:49:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x800000001, @dev}, 0x6, {0x2, 0x0, @multicast1}, '\x00\b\a\x00\x00\x04\x00\xa0\xb2,X+\xf3\xae\xd1}'}) 14:49:46 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) [ 865.659577] protocol 88fb is buggy, dev hsr_slave_0 [ 865.664728] protocol 88fb is buggy, dev hsr_slave_1 14:49:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbd\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2}}) 14:49:46 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) 14:49:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) 14:49:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 14:49:46 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) 14:49:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x800000001, @dev}, 0x6, {0x2, 0x0, @multicast1}, '\x00\b\a\x00\x00\x04\x00\xa0\xb2,X+\xf3\xae\xd1}'}) 14:49:46 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) 14:49:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) [ 865.899530] protocol 88fb is buggy, dev hsr_slave_0 [ 865.904868] protocol 88fb is buggy, dev hsr_slave_1 14:49:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 14:49:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000200)={{0x2, 0x0, @dev}, {0x800000001, @dev}, 0x6, {0x2, 0x0, @multicast1}, '\x00\b\a\x00\x00\x04\x00\xa0\xb2,X+\xf3\xae\xd1}'}) 14:49:46 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) [ 866.040216] ALSA: seq fatal error: cannot create timer (-19) 14:49:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) 14:49:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbd\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2}}) 14:49:46 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000340)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$smack_current(r1, &(0x7f0000000280)='!\x00', 0x2) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000240)=0x6d44, 0x4) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") sendto$packet(r1, &(0x7f0000000140)='8', 0x1, 0x0, 0x0, 0x0) 14:49:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) 14:49:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x3a) [ 866.322411] ALSA: seq fatal error: cannot create timer (-19) 14:49:46 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)) 14:49:46 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 14:49:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) 14:49:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c12a41d88b070") r1 = syz_open_dev$sndseq(&(0x7f000087bff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=\xbd\x00\x00\x00\x00\x00\x00\x00\x80\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00002f8000)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2}}) [ 866.459534] protocol 88fb is buggy, dev hsr_slave_0 [ 866.464853] protocol 88fb is buggy, dev hsr_slave_1 14:49:47 executing program 5: r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) dup2(r0, r2) 14:49:47 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)) 14:49:47 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 14:49:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x800443d3, 0x0) 14:49:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x3a) 14:49:47 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)) 14:49:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) [ 866.692564] ALSA: seq fatal error: cannot create timer (-19) 14:49:47 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 14:49:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f00000000c0)) 14:49:47 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000000)) rt_sigtimedwait(&(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x0, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x8803, 0x0) 14:49:47 executing program 3: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)) 14:49:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x3a) 14:49:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:47 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 14:49:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x3a) 14:49:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f00000000c0)) 14:49:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:47 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x3, &(0x7f0000000100)) 14:49:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:48 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x0) 14:49:48 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f00000000c0)) 14:49:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r0, 0x80047437, 0x0) 14:49:48 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:49:48 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x0) 14:49:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae93, &(0x7f00000000c0)) 14:49:48 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x4020565a, &(0x7f0000000040)={0x0, 0x15000000}) 14:49:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) 14:49:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 868.146961] Unknown ioctl 1075883590 [ 868.196033] Unknown ioctl 1075883590 14:49:48 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x0) [ 868.238238] Unknown ioctl 1075883590 [ 868.258085] Unknown ioctl 1075883590 [ 868.281073] Unknown ioctl 1075883590 [ 868.290262] Unknown ioctl 1075883590 [ 868.294695] Unknown ioctl 1075883590 [ 868.298807] Unknown ioctl 1075883590 14:49:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) 14:49:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) [ 868.339766] Unknown ioctl 1075883590 [ 868.343561] Unknown ioctl 1075883590 [ 868.347298] Unknown ioctl 1075883590 14:49:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) 14:49:48 executing program 0: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)='c', 0x1}], 0x1}, 0x0) [ 868.451357] Unknown ioctl 1075883590 [ 868.489823] Unknown ioctl 1075883590 [ 868.494539] Unknown ioctl 1075883590 [ 868.494551] Unknown ioctl 1075883590 [ 868.530622] Unknown ioctl 1075883590 [ 868.549810] Unknown ioctl 1075883590 [ 868.560476] Unknown ioctl 1075883590 14:49:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) [ 868.578696] Unknown ioctl 1075883590 [ 868.599067] Unknown ioctl 1075883590 [ 868.625678] Unknown ioctl 1075883590 [ 868.637720] Unknown ioctl 1075883590 [ 868.706834] Unknown ioctl 1075883590 [ 868.737528] Unknown ioctl 1075883590 [ 868.755685] Unknown ioctl 1075883590 14:49:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:49:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) 14:49:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) 14:49:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a8430891000000390008000a000500000000001900a30705000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:49:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) [ 869.022267] Unknown ioctl 1075883590 [ 869.029143] Unknown ioctl 1075883590 [ 869.047896] Unknown ioctl 1075883590 [ 869.085798] Unknown ioctl 1075883590 [ 869.120563] Unknown ioctl 1075883590 [ 869.124456] Unknown ioctl 1075883590 [ 869.147777] Unknown ioctl 1075883590 [ 869.155573] Unknown ioctl 1075883590 [ 869.164473] Unknown ioctl 1075883590 [ 869.168960] Unknown ioctl 1075883590 [ 869.176596] Unknown ioctl 1075883590 [ 869.186554] Unknown ioctl 1075883590 [ 869.193663] Unknown ioctl 1075883590 [ 869.198206] Unknown ioctl 1075883590 [ 869.207084] Unknown ioctl 1075883590 [ 869.215018] Unknown ioctl 1075883590 14:49:49 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 14:49:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a8430891000000390008000a000500000000001900a30705000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:49:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) 14:49:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @dev}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x40003b, 0x4) 14:49:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) write$UHID_DESTROY(r2, &(0x7f0000000200), 0xffffff77) poll(&(0x7f0000000080)=[{r2}], 0x1, 0x0) [ 869.219869] Unknown ioctl 1075883590 [ 869.223714] Unknown ioctl 1075883590 [ 869.227577] Unknown ioctl 1075883590 [ 869.232584] Unknown ioctl 1075883590 [ 869.236448] Unknown ioctl 1075883590 [ 869.240380] Unknown ioctl 1075883590 [ 869.244225] Unknown ioctl 1075883590 [ 869.248059] Unknown ioctl 1075883590 [ 869.252949] Unknown ioctl 1075883590 14:49:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:49:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:49 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a8430891000000390008000a000500000000001900a30705000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:49:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3]}) 14:49:50 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 14:49:50 executing program 2: modify_ldt$write(0x1, &(0x7f0000000140), 0x10) modify_ldt$read(0x0, &(0x7f0000002f2a)=""/214, 0xd6) 14:49:50 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fbdb72d1cb2a4a280930a06000000a8430891000000390008000a000500000000001900a30705000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:49:50 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 14:49:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001fc4)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 14:49:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:50 executing program 2: modify_ldt$write(0x1, &(0x7f0000000140), 0x10) modify_ldt$read(0x0, &(0x7f0000002f2a)=""/214, 0xd6) 14:49:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:49:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:50 executing program 1: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x18071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9) 14:49:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001fc4)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 14:49:50 executing program 2: modify_ldt$write(0x1, &(0x7f0000000140), 0x10) modify_ldt$read(0x0, &(0x7f0000002f2a)=""/214, 0xd6) [ 870.029950] Unknown ioctl 1075883590 14:49:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 870.052903] Unknown ioctl 1075883590 [ 870.069620] net_ratelimit: 24 callbacks suppressed [ 870.069629] protocol 88fb is buggy, dev hsr_slave_0 [ 870.079840] protocol 88fb is buggy, dev hsr_slave_1 [ 870.086458] Unknown ioctl 1075883590 [ 870.090566] Unknown ioctl 1075883590 14:49:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 870.114759] Unknown ioctl 1075883590 [ 870.118678] Unknown ioctl 1075883590 [ 870.125871] Unknown ioctl 1075883590 [ 870.135213] Unknown ioctl 1075883590 14:49:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 870.163424] Unknown ioctl 1075883590 14:49:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001fc4)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 870.199047] Unknown ioctl 1075883590 [ 870.227376] Unknown ioctl 1075883590 [ 870.279249] Unknown ioctl 1075883590 [ 870.292322] Unknown ioctl 1075883590 14:49:50 executing program 2: modify_ldt$write(0x1, &(0x7f0000000140), 0x10) modify_ldt$read(0x0, &(0x7f0000002f2a)=""/214, 0xd6) [ 870.321891] Unknown ioctl 1075883590 [ 870.335487] Unknown ioctl 1075883590 14:49:50 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001fc4)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) [ 870.365808] Unknown ioctl 1075883590 [ 870.381738] Unknown ioctl 1075883590 [ 870.409756] Unknown ioctl 1075883590 [ 870.436537] Unknown ioctl 1075883590 [ 870.449761] Unknown ioctl 1075883590 [ 870.465897] Unknown ioctl 1075883590 14:49:51 executing program 2: msgsnd(0x0, &(0x7f0000c40ff8), 0x8, 0x0) [ 870.491069] Unknown ioctl 1075883590 [ 870.523141] Unknown ioctl 1075883590 [ 870.558174] Unknown ioctl 1075883590 [ 870.566141] Unknown ioctl 1075883590 [ 870.619549] protocol 88fb is buggy, dev hsr_slave_0 [ 870.624706] protocol 88fb is buggy, dev hsr_slave_1 [ 870.629918] protocol 88fb is buggy, dev hsr_slave_0 [ 870.635126] protocol 88fb is buggy, dev hsr_slave_1 14:49:51 executing program 2: msgsnd(0x0, &(0x7f0000c40ff8), 0x8, 0x0) 14:49:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x3, 0x0, 0xb, 0x1}]}, &(0x7f0000000240)='GP)g\xa4\x05\xbb\xb3\x13(Z\xa1\x01\x19\xb8\xeb^\x82\x89\xb6Q\xc6\x12\xc6\x127B\xfc\nAV\xc6\x80O\xa7VU\xe353j1\xaa\xf6\x11Y\xb87D\xbb\x87\xe9=\x15\x96g\xf5+\xf36[\xda\x02~\x82cj\xaf\x95\xfbK%-.j\xf2f\xa5\x9d.\xfa\xac\xe9\xdc@\x1dr\x13\n\x82\xb7\x01\x88\xd6[\x80\x84q\xd8\x11\xe4+\xfbe~]\x7fm\xa13\xd2\xdb\xc3X\xf2[\xcc5~\r\x94\x17\xbd\xf900[\xde\xb7P\x04E\xeev\xd9\xce\na\xd4\x8ble\xe8-\xb8\xd5\xf5;=q\xe2\xfa\xc1\xb20[\x81\xe1\v\x9aH', 0x800a, 0x1000, &(0x7f0000000940)=""/4096}, 0x48) 14:49:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) [ 870.841494] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:51 executing program 2: msgsnd(0x0, &(0x7f0000c40ff8), 0x8, 0x0) 14:49:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x3, 0x0, 0xb, 0x1}]}, &(0x7f0000000240)='GP)g\xa4\x05\xbb\xb3\x13(Z\xa1\x01\x19\xb8\xeb^\x82\x89\xb6Q\xc6\x12\xc6\x127B\xfc\nAV\xc6\x80O\xa7VU\xe353j1\xaa\xf6\x11Y\xb87D\xbb\x87\xe9=\x15\x96g\xf5+\xf36[\xda\x02~\x82cj\xaf\x95\xfbK%-.j\xf2f\xa5\x9d.\xfa\xac\xe9\xdc@\x1dr\x13\n\x82\xb7\x01\x88\xd6[\x80\x84q\xd8\x11\xe4+\xfbe~]\x7fm\xa13\xd2\xdb\xc3X\xf2[\xcc5~\r\x94\x17\xbd\xf900[\xde\xb7P\x04E\xeev\xd9\xce\na\xd4\x8ble\xe8-\xb8\xd5\xf5;=q\xe2\xfa\xc1\xb20[\x81\xe1\v\x9aH', 0x800a, 0x1000, &(0x7f0000000940)=""/4096}, 0x48) [ 870.885080] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 870.920162] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 14:49:51 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80003) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000580)=""/218) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) 14:49:51 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x0, 0x0}, 0x30) [ 871.100368] protocol 88fb is buggy, dev hsr_slave_0 [ 871.105925] protocol 88fb is buggy, dev hsr_slave_1 [ 871.185171] IPVS: ftp: loaded support on port[0] = 21 14:49:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x3, 0x0, 0xb, 0x1}]}, &(0x7f0000000240)='GP)g\xa4\x05\xbb\xb3\x13(Z\xa1\x01\x19\xb8\xeb^\x82\x89\xb6Q\xc6\x12\xc6\x127B\xfc\nAV\xc6\x80O\xa7VU\xe353j1\xaa\xf6\x11Y\xb87D\xbb\x87\xe9=\x15\x96g\xf5+\xf36[\xda\x02~\x82cj\xaf\x95\xfbK%-.j\xf2f\xa5\x9d.\xfa\xac\xe9\xdc@\x1dr\x13\n\x82\xb7\x01\x88\xd6[\x80\x84q\xd8\x11\xe4+\xfbe~]\x7fm\xa13\xd2\xdb\xc3X\xf2[\xcc5~\r\x94\x17\xbd\xf900[\xde\xb7P\x04E\xeev\xd9\xce\na\xd4\x8ble\xe8-\xb8\xd5\xf5;=q\xe2\xfa\xc1\xb20[\x81\xe1\v\x9aH', 0x800a, 0x1000, &(0x7f0000000940)=""/4096}, 0x48) 14:49:51 executing program 2: msgsnd(0x0, &(0x7f0000c40ff8), 0x8, 0x0) 14:49:51 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 14:49:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) 14:49:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) [ 871.630042] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 871.642509] protocol 88fb is buggy, dev hsr_slave_0 [ 871.647611] protocol 88fb is buggy, dev hsr_slave_1 14:49:52 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80003) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000580)=""/218) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) 14:49:52 executing program 1: mkdir(&(0x7f0000000380)='.\x02', 0x0) 14:49:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000519fa8)=@framed={{}, [@ldst={0x3, 0x0, 0xb, 0x1}]}, &(0x7f0000000240)='GP)g\xa4\x05\xbb\xb3\x13(Z\xa1\x01\x19\xb8\xeb^\x82\x89\xb6Q\xc6\x12\xc6\x127B\xfc\nAV\xc6\x80O\xa7VU\xe353j1\xaa\xf6\x11Y\xb87D\xbb\x87\xe9=\x15\x96g\xf5+\xf36[\xda\x02~\x82cj\xaf\x95\xfbK%-.j\xf2f\xa5\x9d.\xfa\xac\xe9\xdc@\x1dr\x13\n\x82\xb7\x01\x88\xd6[\x80\x84q\xd8\x11\xe4+\xfbe~]\x7fm\xa13\xd2\xdb\xc3X\xf2[\xcc5~\r\x94\x17\xbd\xf900[\xde\xb7P\x04E\xeev\xd9\xce\na\xd4\x8ble\xe8-\xb8\xd5\xf5;=q\xe2\xfa\xc1\xb20[\x81\xe1\v\x9aH', 0x800a, 0x1000, &(0x7f0000000940)=""/4096}, 0x48) 14:49:52 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x0, 0x0}, 0x30) [ 871.851536] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 872.002229] IPVS: ftp: loaded support on port[0] = 21 14:49:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) 14:49:52 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) ioctl$TCFLSH(r1, 0x541b, 0x70a000) 14:49:52 executing program 1: mkdir(&(0x7f0000000380)='.\x02', 0x0) 14:49:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) [ 872.164904] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 14:49:52 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x0, 0x0}, 0x30) [ 872.453013] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 14:49:52 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net////\x00', 0x400610002, 0x0) 14:49:53 executing program 1: mkdir(&(0x7f0000000380)='.\x02', 0x0) 14:49:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80003) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000580)=""/218) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) 14:49:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, 0x0) 14:49:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) 14:49:53 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net////\x00', 0x400610002, 0x0) 14:49:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20070401000000000000000c0002000300000003eac5010c0004000a00fdff20010000"], 0x2c}}, 0x0) [ 872.737094] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 872.881486] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 872.884070] IPVS: ftp: loaded support on port[0] = 21 [ 872.902762] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 872.965901] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 14:49:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 14:49:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, 0x0) 14:49:53 executing program 1: mkdir(&(0x7f0000000380)='.\x02', 0x0) 14:49:53 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net////\x00', 0x400610002, 0x0) 14:49:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000000100)=""/144, &(0x7f000000effc)=0x90) 14:49:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 14:49:53 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff43) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80003) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000580)=""/218) sched_setattr(0x0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) unshare(0x40000000) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40) 14:49:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, 0x0) 14:49:54 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net////\x00', 0x400610002, 0x0) [ 873.650774] IPVS: ftp: loaded support on port[0] = 21 14:49:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000000100)=""/144, &(0x7f000000effc)=0x90) 14:49:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, 0x0) 14:49:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:49:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000000100)=""/144, &(0x7f000000effc)=0x90) 14:49:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x3) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 14:49:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}}, &(0x7f00000000c0)='G\xff3\x00', 0x2, 0x99, &(0x7f0000000000)=""/153}, 0x48) 14:49:54 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 14:49:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x61, &(0x7f0000000100)=""/144, &(0x7f000000effc)=0x90) 14:49:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 14:49:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) 14:49:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 14:49:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}}, &(0x7f00000000c0)='G\xff3\x00', 0x2, 0x99, &(0x7f0000000000)=""/153}, 0x48) 14:49:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") semctl$IPC_STAT(0x0, 0x0, 0x14, 0x0) 14:49:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 14:49:55 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) 14:49:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}}, &(0x7f00000000c0)='G\xff3\x00', 0x2, 0x99, &(0x7f0000000000)=""/153}, 0x48) 14:49:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x1000000000000090, 0x0, [{0xc0000102}]}) 14:49:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 14:49:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 14:49:55 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) read(r1, 0x0, 0x10000005e) tkill(r0, 0x800000015) 14:49:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000dbc000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x3, 0xffffffb5}}, &(0x7f00000000c0)='G\xff3\x00', 0x2, 0x99, &(0x7f0000000000)=""/153}, 0x48) 14:49:55 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 14:49:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 14:49:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x1000000000000090, 0x0, [{0xc0000102}]}) 14:49:55 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) [ 875.259542] net_ratelimit: 20 callbacks suppressed [ 875.259550] protocol 88fb is buggy, dev hsr_slave_0 [ 875.269757] protocol 88fb is buggy, dev hsr_slave_1 14:49:55 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) 14:49:55 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f10ffc)=0x3f, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000e00000)=0x3f, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 14:49:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000000)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xe) fcntl$setstatus(r1, 0x4, 0x427ff) 14:49:55 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x81}) 14:49:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x1000000000000090, 0x0, [{0xc0000102}]}) 14:49:56 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) 14:49:56 executing program 1: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r1) 14:49:56 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) 14:49:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x81}) 14:49:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000140)={0x1000000000000090, 0x0, [{0xc0000102}]}) [ 875.739535] protocol 88fb is buggy, dev hsr_slave_0 [ 875.744673] protocol 88fb is buggy, dev hsr_slave_1 14:49:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 14:49:56 executing program 5: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) 14:49:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x81}) 14:49:56 executing program 0: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x1044, 0x0) [ 876.059527] protocol 88fb is buggy, dev hsr_slave_0 [ 876.064670] protocol 88fb is buggy, dev hsr_slave_1 14:49:56 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) 14:49:56 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f00000000c0)) 14:49:56 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x81}) 14:49:56 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:49:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 14:49:56 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:56 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 14:49:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f00000000c0)) 14:49:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b34, &(0x7f0000000000)='wlan0\x00\xd3\xeb\'\xe4\xd5\xd1s\b\x8c\xba\x00\x00\x00 \x00\x00\x00\x02h\x00\x02\x00 \x1cs\n\xcc]\xfb\xe9i]\xb9\xfc\xae\xd03\x00\x00\x00\x00\x00\x00\x00\b\xb4\x8f\x03\x00\x00\xf6L\x00\x00\xd5\x98\xba\xc4n\xd4\xf3(eq]\x812\xc3\x8e\x88\x00\x00\x00\x00\x00\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd') 14:49:57 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 14:49:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f00000000c0)) 14:49:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) [ 876.779760] protocol 88fb is buggy, dev hsr_slave_0 [ 876.784919] protocol 88fb is buggy, dev hsr_slave_1 [ 876.859523] protocol 88fb is buggy, dev hsr_slave_0 [ 876.864801] protocol 88fb is buggy, dev hsr_slave_1 14:49:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:49:57 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockname$ax25(r0, 0x0, &(0x7f00000000c0)) 14:49:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000008c0)) 14:49:57 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x5}], 0x18}], 0x3ad, 0x0) 14:49:57 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:57 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x9, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x20000008) 14:49:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:49:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000070000000600000001000000000000000000000000000000ff000000000000000000000000000000070000800200000001000000260c0000030000004000000008000000000000000000000000000000010000000800000002"]) 14:49:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x5}], 0x18}], 0x3ad, 0x0) 14:49:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x9, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x20000008) 14:49:58 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0x44, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 14:49:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:58 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x5}], 0x18}], 0x3ad, 0x0) 14:49:58 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x9, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x20000008) 14:49:58 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000d1c000)=@assoc_value, &(0x7f0000645000)=0x8) 14:49:58 executing program 3: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:49:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:59 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') exit(0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 14:49:59 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$alg(r0, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)=[@assoc={0x18, 0x29, 0x5}], 0x18}], 0x3ad, 0x0) 14:49:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000d1c000)=@assoc_value, &(0x7f0000645000)=0x8) 14:49:59 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x4008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac1414e0}]}, &(0x7f0000000080)=0x10) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x9, &(0x7f0000000000)={r1}, &(0x7f00000000c0)=0x20000008) 14:49:59 executing program 0: perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:49:59 executing program 3: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:49:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000d1c000)=@assoc_value, &(0x7f0000645000)=0x8) 14:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000), 0x2cd) 14:49:59 executing program 0: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:49:59 executing program 3: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000), 0x2cd) 14:49:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000d1c000)=@assoc_value, &(0x7f0000645000)=0x8) 14:50:00 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 14:50:00 executing program 0: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_PREFSRC={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) 14:50:00 executing program 3: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:50:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x28, r1, 0x201, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 14:50:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000), 0x2cd) 14:50:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x3, &(0x7f0000000000), 0x2cd) 14:50:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 14:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_PREFSRC={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) 14:50:00 executing program 0: io_setup(0x66, &(0x7f0000000040)) io_setup(0x7ff, &(0x7f0000000080)) io_setup(0x310, &(0x7f00000000c0)) io_setup(0x7, &(0x7f0000000100)) io_setup(0x81, &(0x7f0000000180)) 14:50:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x28, r1, 0x201, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 14:50:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000640)) 14:50:00 executing program 2: clone(0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xc1000006, 0x0) 14:50:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_PREFSRC={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) 14:50:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x28, r1, 0x201, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 14:50:00 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:50:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000640)) 14:50:00 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 14:50:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev}, @RTA_PREFSRC={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x0) 14:50:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000640)) 14:50:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x28, r1, 0x201, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 14:50:01 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 14:50:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0xa, 0x4) 14:50:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:50:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000640)) 14:50:01 executing program 4: socketpair(0x1e, 0x0, 0x3, &(0x7f0000000280)) [ 880.939738] net_ratelimit: 20 callbacks suppressed [ 880.939747] protocol 88fb is buggy, dev hsr_slave_0 [ 880.950077] protocol 88fb is buggy, dev hsr_slave_1 14:50:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0xa, 0x4) 14:50:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:50:01 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f00000024c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 14:50:01 executing program 4: socketpair(0x1e, 0x0, 0x3, &(0x7f0000000280)) [ 881.020741] protocol 88fb is buggy, dev hsr_slave_0 [ 881.026909] protocol 88fb is buggy, dev hsr_slave_1 [ 881.033491] protocol 88fb is buggy, dev hsr_slave_0 [ 881.040209] protocol 88fb is buggy, dev hsr_slave_1 14:50:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='2bs\x00', 0x4) 14:50:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 14:50:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0xa, 0x4) 14:50:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 14:50:01 executing program 4: socketpair(0x1e, 0x0, 0x3, &(0x7f0000000280)) [ 881.499573] protocol 88fb is buggy, dev hsr_slave_0 [ 881.504804] protocol 88fb is buggy, dev hsr_slave_1 14:50:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000)=0xa, 0x4) 14:50:02 executing program 4: socketpair(0x1e, 0x0, 0x3, &(0x7f0000000280)) 14:50:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2, @remote, @broadcast}, 0xc) 14:50:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 14:50:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) fanotify_init(0x201, 0x0) truncate(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') 14:50:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) [ 881.979546] protocol 88fb is buggy, dev hsr_slave_0 [ 881.984860] protocol 88fb is buggy, dev hsr_slave_1 14:50:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2, @remote, @broadcast}, 0xc) 14:50:02 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 14:50:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr=0x800}, @in], 0x30) 14:50:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2, @remote, @broadcast}, 0xc) 14:50:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x29, 0xffffff9c}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) 14:50:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr=0x800}, @in], 0x30) 14:50:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000c26000)={@multicast2, @remote, @broadcast}, 0xc) 14:50:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:03 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr=0x800}, @in], 0x30) 14:50:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 14:50:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)=@ipv6_getnetconf={0x14, 0x42, 0x305}, 0x14}}, 0x0) [ 883.481920] Started in network mode [ 883.524877] Own node identity , cluster identity 4711 14:50:04 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001000)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x0, @rand_addr=0x800}, @in], 0x30) [ 883.570957] Failed to set node id, please configure manually [ 883.645955] Enabling of bearer rejected, failed to enable media 14:50:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0xa7339b2c) 14:50:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:04 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 14:50:04 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0xa7339b2c) 14:50:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 884.416825] Started in network mode 14:50:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x4, "d31dae1f"}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:50:05 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0xa7339b2c) [ 884.465737] Own node identity , cluster identity 4711 [ 884.479061] Failed to set node id, please configure manually [ 884.571061] Enabling of bearer rejected, failed to enable media 14:50:05 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00006de000)=""/50, 0xa7339b2c) 14:50:05 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 14:50:05 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:05 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) [ 884.979987] Started in network mode 14:50:05 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x2, 0x0, 0x0, {[], 0x20080000}}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) [ 885.060497] Own node identity , cluster identity 4711 [ 885.147389] Failed to set node id, please configure manually [ 885.214861] Enabling of bearer rejected, failed to enable media 14:50:05 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:05 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:05 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x2, 0x0, 0x0, {[], 0x20080000}}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 14:50:06 executing program 4: timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 14:50:06 executing program 4: timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 14:50:06 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 14:50:06 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}, @icmp=@address_reply}}}}, 0x0) recvmmsg(r0, &(0x7f0000003f00)=[{{&(0x7f00000002c0)=@nfc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) 14:50:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0x2, 0x0, 0x0, @dev}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) 14:50:06 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x2, 0x0, 0x0, {[], 0x20080000}}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 14:50:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0xf, 0x2}, 0x10}}, 0x0) 14:50:06 executing program 1: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x2, 0x0, 0x0, {[], 0x20080000}}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 14:50:06 executing program 4: timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 14:50:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0xf, 0x2}, 0x10}}, 0x0) 14:50:06 executing program 5: sendto$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000100), 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) [ 885.885339] Started in network mode [ 885.896083] Own node identity , cluster identity 4711 [ 885.907465] Failed to set node id, please configure manually [ 885.978798] Enabling of bearer rejected, failed to enable media 14:50:06 executing program 1: openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:50:06 executing program 4: timer_create(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 14:50:06 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 14:50:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0xf, 0x2}, 0x10}}, 0x0) [ 886.139527] net_ratelimit: 22 callbacks suppressed [ 886.139536] protocol 88fb is buggy, dev hsr_slave_0 [ 886.149728] protocol 88fb is buggy, dev hsr_slave_1 14:50:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x19, &(0x7f0000000080), 0x4) 14:50:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='cgroup.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 14:50:06 executing program 5: sendto$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000100), 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 14:50:06 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 14:50:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="18000000020001000000be8c4bff8c88580000110203000008000000000000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0) 14:50:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0xf, 0x2}, 0x10}}, 0x0) [ 886.459550] protocol 88fb is buggy, dev hsr_slave_0 [ 886.464680] protocol 88fb is buggy, dev hsr_slave_1 14:50:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="18000000020001000000be8c4bff8c88580000110203000008000000000000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0) 14:50:07 executing program 5: sendto$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000100), 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 14:50:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0xa5) sendmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, 0x0}}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0}}], 0x2, 0x0) 14:50:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='cgroup.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 14:50:07 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) 14:50:07 executing program 0: uname(0x0) 14:50:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="18000000020001000000be8c4bff8c88580000110203000008000000000000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0) 14:50:07 executing program 5: sendto$packet(0xffffffffffffffff, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000100), 0x14) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 14:50:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140), 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000080)=0x54) 14:50:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000c00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0) 14:50:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='cgroup.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 14:50:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="18000000020001000000be8c4bff8c88580000110203000008000000000000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0) 14:50:07 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000c00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0) 14:50:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0xa5) sendmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, 0x0}}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0}}], 0x2, 0x0) 14:50:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:50:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='cgroup.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 887.179726] protocol 88fb is buggy, dev hsr_slave_0 [ 887.184856] protocol 88fb is buggy, dev hsr_slave_1 14:50:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000c00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0) [ 887.259551] protocol 88fb is buggy, dev hsr_slave_0 [ 887.264715] protocol 88fb is buggy, dev hsr_slave_1 [ 887.269932] protocol 88fb is buggy, dev hsr_slave_0 [ 887.275024] protocol 88fb is buggy, dev hsr_slave_1 14:50:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "97d96b2f"}, 0x0, 0x0, @planes=0x0, 0x4}) 14:50:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) 14:50:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0xa5) sendmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, 0x0}}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0}}], 0x2, 0x0) 14:50:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000c00000010000340140000000000000037153e370000000060000000d1bd", 0x2e}], 0x1}, 0x0) 14:50:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) 14:50:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='bridge0\x00', 0xa5) sendmmsg(r0, &(0x7f0000004e40)=[{{&(0x7f0000000080)=@ethernet={0x0, @dev}, 0x80, 0x0}}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, 0x0}}], 0x2, 0x0) 14:50:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "97d96b2f"}, 0x0, 0x0, @planes=0x0, 0x4}) 14:50:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) 14:50:08 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCNRDECOBS(r0, 0x5411) 14:50:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "97d96b2f"}, 0x0, 0x0, @planes=0x0, 0x4}) 14:50:08 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) 14:50:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:08 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000100)) 14:50:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 14:50:08 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0xa, 0x4, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "97d96b2f"}, 0x0, 0x0, @planes=0x0, 0x4}) 14:50:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:08 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 14:50:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xf00}}) 14:50:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 14:50:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xf00}}) 14:50:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 14:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 14:50:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r0) 14:50:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xf00}}) 14:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 14:50:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacs\x00q\x00\x00\xa4\xcb\x00\x00\x00\x00\x8b\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) close(r0) 14:50:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x2, 0x0, 0xf00}}) 14:50:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 889.170541] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}}, 0x90) 14:50:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) 14:50:09 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) 14:50:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000088b000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000000)=""/48, 0x30) getdents64(r0, &(0x7f0000749f33)=""/205, 0xcd) 14:50:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:10 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) [ 890.213650] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) 14:50:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) 14:50:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) [ 890.824229] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:11 executing program 0: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) splice(r1, 0x0, r0, 0x0, 0x10001, 0x0) 14:50:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@dev}, 0x14) r1 = socket$inet(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7ffffff7}}, 0x80, 0x0}, 0x0) 14:50:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 14:50:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8637, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='I'], 0x1) write$cgroup_type(r3, &(0x7f00000002c0)='threaded\x00', 0xd0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) [ 891.270538] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:11 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) [ 891.339728] net_ratelimit: 18 callbacks suppressed [ 891.339738] protocol 88fb is buggy, dev hsr_slave_0 [ 891.350929] protocol 88fb is buggy, dev hsr_slave_1 14:50:11 executing program 1: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f00000000c0), 0x4024000002) 14:50:11 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000e00060000071a80000001cc", 0x10) [ 891.419541] protocol 88fb is buggy, dev hsr_slave_0 [ 891.424827] protocol 88fb is buggy, dev hsr_slave_1 [ 891.430038] protocol 88fb is buggy, dev hsr_slave_0 [ 891.435131] protocol 88fb is buggy, dev hsr_slave_1 14:50:12 executing program 1: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f00000000c0), 0x4024000002) 14:50:12 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 14:50:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000e00060000071a80000001cc", 0x10) 14:50:12 executing program 1: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f00000000c0), 0x4024000002) 14:50:12 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 14:50:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 891.899585] protocol 88fb is buggy, dev hsr_slave_0 [ 891.904787] protocol 88fb is buggy, dev hsr_slave_1 [ 891.964326] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:12 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 14:50:12 executing program 1: futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f00000000c0), 0x4024000002) [ 892.377743] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 892.387972] protocol 88fb is buggy, dev hsr_slave_0 [ 892.388807] protocol 88fb is buggy, dev hsr_slave_1 14:50:12 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000220005000000c187185095cf0400b0eba0b4d65c0000000051894d5d1dac00"/46, 0x2e}], 0x1}, 0x0) 14:50:12 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000e00060000071a80000001cc", 0x10) 14:50:12 executing program 2: r0 = socket(0x10, 0x2000000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 14:50:12 executing program 1: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f00000008c0)) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000000)=[{r3, 0x4}], 0x1, 0x0, 0x0, 0x7c) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0xb0, 0x0, &(0x7f0000000500)=[@exit_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x10, 0x0, &(0x7f0000000400)=[0x38, 0x38]}, 0x7f}}, @enter_looper, @enter_looper, @free_buffer, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f00000004c0)=[0x0, 0x18, 0x28, 0x18, 0x68, 0x28, 0x0]}}, @decrefs={0x40046307, 0x4}], 0x74, 0x0, &(0x7f00000005c0)="9ac4d3fa3370c54ca6a1c485b535d9f0a463086df894d3916b6e6bf3b5c1da81054005eb378dd144ab7db8700ea40ed3dbafa638618d1575a46e55795b3c4f550df9e72d8308240ed9c7e48ee0f65a57acfb1fa8f9ce107345c5f672842786643cc1e17f91f765ec3c16fc48f2fd256e6451f682"}) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c000000090000000100", 0x1a, 0x1400}], 0x0, 0x0) 14:50:12 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x4305, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, 0x0) 14:50:13 executing program 2: r0 = socket(0x10, 0x2000000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 14:50:13 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000d52ff0)="010000000e00060000071a80000001cc", 0x10) 14:50:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) [ 892.787440] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:13 executing program 2: r0 = socket(0x10, 0x2000000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 14:50:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:13 executing program 2: r0 = socket(0x10, 0x2000000000802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 14:50:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf32(r0, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x668) 14:50:13 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:13 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff004}, {0x6}]}, 0x10) 14:50:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) 14:50:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 14:50:14 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000000000000000000003000000070000000000000006000000000000000000000000000000ffffffffc98b0000faffffff0000000001000080450b0000030000008ef000000700ff"]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 894.176172] 9pnet_virtio: no channels available for device 127.0.0.1 14:50:14 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x14083, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0x1a9a, &(0x7f00000000c0)='veth1_to_team\x00', 0x8b}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00004e7000)={0x2, 0x229, 0x20000000cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='cpu&5\n\n\n\x00\x00\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00'}, 0x0) 14:50:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="390000001300090469000000810000000700004003000000450001070000001419001a000400020d070000000200000000000000000003e400", 0x39}], 0x1) 14:50:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) 14:50:14 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:15 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="390000001300090469000000810000000700004003000000450001070000001419001a000400020d070000000200000000000000000003e400", 0x39}], 0x1) 14:50:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) [ 894.555438] 9pnet_virtio: no channels available for device 127.0.0.1 14:50:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 14:50:15 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) 14:50:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="390000001300090469000000810000000700004003000000450001070000001419001a000400020d070000000200000000000000000003e400", 0x39}], 0x1) 14:50:15 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) 14:50:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 14:50:15 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 14:50:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001000)="390000001300090469000000810000000700004003000000450001070000001419001a000400020d070000000200000000000000000003e400", 0x39}], 0x1) 14:50:15 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 894.923056] 9pnet_virtio: no channels available for device 127.0.0.1 14:50:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 14:50:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) 14:50:15 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_rdma(&(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, 0x0) 14:50:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) 14:50:15 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 14:50:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 14:50:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) 14:50:15 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) [ 895.297026] 9pnet_virtio: no channels available for device 127.0.0.1 [ 895.322356] audit: type=1800 audit(1554994215.840:241): pid=1450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17383 res=0 14:50:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) 14:50:15 executing program 1: socketpair$unix(0x1, 0x200000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_read_part_table(0x100000, 0x1, &(0x7f0000002380)=[{&(0x7f0000000380)="6de4a1a83d5ac7620d40430929fa5d797a04cff7b7dd74ae7712cd187b5fd34cf46547a677c5b510b559ddb23006e03b4f028b5df67f12b6cace3268209e8ed557455682", 0x44}]) 14:50:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)) 14:50:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@init={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 14:50:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x400000000078, 0x0, 0xffffffffffffff9c}, 0x3c) 14:50:16 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000080)) 14:50:16 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) 14:50:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)) 14:50:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@init={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 14:50:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000002340)=""/4096, 0x11e5}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:50:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000300)="5500000018007f5300fe01b2a4a280930a600000ffa84306910000003900070035000c0006ffffffffffffff00000000000000dc1338d54400009b84136ef75afb83de0000001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:50:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x400000000078, 0x0, 0xffffffffffffff9c}, 0x3c) 14:50:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)) 14:50:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@init={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 14:50:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r0, r1, 0x0, 0x10000) 14:50:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x400000000078, 0x0, 0xffffffffffffff9c}, 0x3c) 14:50:16 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000139ff0)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@init={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 14:50:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000300)="5500000018007f5300fe01b2a4a280930a600000ffa84306910000003900070035000c0006ffffffffffffff00000000000000dc1338d54400009b84136ef75afb83de0000001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:50:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)) 14:50:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x400000000078, 0x0, 0xffffffffffffff9c}, 0x3c) 14:50:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) [ 896.539512] net_ratelimit: 22 callbacks suppressed [ 896.539521] protocol 88fb is buggy, dev hsr_slave_0 [ 896.549707] protocol 88fb is buggy, dev hsr_slave_1 [ 896.613729] audit: type=1800 audit(1554994217.130:242): pid=1826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17393 res=0 14:50:17 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000002340)=""/4096, 0x11e5}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:50:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000300)="5500000018007f5300fe01b2a4a280930a600000ffa84306910000003900070035000c0006ffffffffffffff00000000000000dc1338d54400009b84136ef75afb83de0000001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:50:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) 14:50:17 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 14:50:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) ftruncate(r1, 0x10000) r2 = open(&(0x7f0000000080)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = open(&(0x7f0000005a40)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) sendfile(r1, r3, 0x0, 0x8000fffffffe) ftruncate(r2, 0x0) [ 896.859520] protocol 88fb is buggy, dev hsr_slave_0 [ 896.864728] protocol 88fb is buggy, dev hsr_slave_1 [ 896.928298] audit: type=1800 audit(1554994217.440:243): pid=1936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=17392 res=0 14:50:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000300)="5500000018007f5300fe01b2a4a280930a600000ffa84306910000003900070035000c0006ffffffffffffff00000000000000dc1338d54400009b84136ef75afb83de0000001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:50:17 executing program 1: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) 14:50:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) 14:50:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100081000008912, &(0x7f00000000c0)="0adc1f123c40a41d88b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007021dfffd946f610500020000001f00000200000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 897.454835] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) [ 897.581601] protocol 88fb is buggy, dev hsr_slave_0 [ 897.587600] protocol 88fb is buggy, dev hsr_slave_1 [ 897.659547] protocol 88fb is buggy, dev hsr_slave_0 [ 897.664797] protocol 88fb is buggy, dev hsr_slave_1 [ 897.669987] protocol 88fb is buggy, dev hsr_slave_0 [ 897.675093] protocol 88fb is buggy, dev hsr_slave_1 14:50:18 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) [ 897.901036] audit: type=1800 audit(1554994218.420:244): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=17390 res=0 14:50:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000002340)=""/4096, 0x11e5}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:50:18 executing program 1: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:18 executing program 2: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 14:50:18 executing program 2: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:19 executing program 1: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:19 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x2c840, 0x0) 14:50:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100081000008912, &(0x7f00000000c0)="0adc1f123c40a41d88b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007021dfffd946f610500020000001f00000200000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 14:50:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000002340)=""/4096, 0x11e5}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xfc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x20000000000004}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 14:50:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x1000000000009) [ 898.717559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100081000008912, &(0x7f00000000c0)="0adc1f123c40a41d88b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007021dfffd946f610500020000001f00000200000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 14:50:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x105802, 0x0) write$9p(r0, &(0x7f0000000800)="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", 0x600) sendfile(r0, r1, 0x0, 0x10000) 14:50:19 executing program 2: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) [ 899.042086] audit: type=1800 audit(1554994219.560:245): pid=2409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16597 res=0 [ 899.104174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:19 executing program 1: timerfd_create(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$kcm(0x2, 0x1, 0x84) setregid(0x0, r0) listen(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) 14:50:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, 0x0, 0x1a, 0xfd36}, 0x20) 14:50:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100081000008912, &(0x7f00000000c0)="0adc1f123c40a41d88b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000210007021dfffd946f610500020000001f00000200000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 14:50:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:50:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100300, 0x10000) [ 899.395943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 899.419061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:50:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, 0x0, 0x1a, 0xfd36}, 0x20) 14:50:20 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0xfffffffffffffffa}) 14:50:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 14:50:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x31, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) 14:50:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, 0x0, 0x1a, 0xfd36}, 0x20) 14:50:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:50:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 14:50:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100300, 0x10000) 14:50:20 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) 14:50:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, 0x0, 0x1a, 0xfd36}, 0x20) [ 899.880749] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:50:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 14:50:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100300, 0x10000) 14:50:20 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0xfffffffffffffffa}) 14:50:20 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1, 0x0) 14:50:20 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlink(&(0x7f0000000000)='./file0\x00') [ 900.129025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 14:50:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa283000c200a0009000100031d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 14:50:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r0, r0, &(0x7f0000000000)=0x100300, 0x10000) 14:50:20 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1, 0x0) 14:50:20 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0xfffffffffffffffa}) 14:50:20 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000c7fdc)="24000000210025f0071c0165ff0ffc0e020020000000000000e1000c0700020000000005", 0x24) [ 900.365490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00006ed000), &(0x7f00000000c0)=0x4) 14:50:21 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x3a9, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="d9", 0x1}], 0x1}, 0x0) 14:50:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x6, 0xffff}) 14:50:21 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0xfffffffffffffffa}) 14:50:21 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1, 0x0) 14:50:21 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000c7fdc)="24000000210025f0071c0165ff0ffc0e020020000000000000e1000c0700020000000005", 0x24) 14:50:21 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x6, 0xffff}) 14:50:21 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:21 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1, 0x0) 14:50:21 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000c7fdc)="24000000210025f0071c0165ff0ffc0e020020000000000000e1000c0700020000000005", 0x24) 14:50:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x6, 0xffff}) 14:50:21 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000080)={0x0, 0x6, 0xffff}) 14:50:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000400, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) 14:50:22 executing program 2: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f00000c7fdc)="24000000210025f0071c0165ff0ffc0e020020000000000000e1000c0700020000000005", 0x24) 14:50:22 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 14:50:22 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:22 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:22 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) [ 901.739762] net_ratelimit: 18 callbacks suppressed [ 901.739771] protocol 88fb is buggy, dev hsr_slave_0 [ 901.750065] protocol 88fb is buggy, dev hsr_slave_1 14:50:22 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 14:50:22 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) [ 901.819546] protocol 88fb is buggy, dev hsr_slave_0 [ 901.824921] protocol 88fb is buggy, dev hsr_slave_1 [ 901.830203] protocol 88fb is buggy, dev hsr_slave_0 [ 901.835369] protocol 88fb is buggy, dev hsr_slave_1 14:50:22 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 14:50:22 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d0348d700000000007faa62f9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360cdee022e37161246323ee9c82c705b90a64adab9fef5fde72abb6373deffc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed008d464caeedf840d001fe92b0", 0xce) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0xd}, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 14:50:22 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:22 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x4924924924925ac, 0x48040) 14:50:22 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) [ 902.299567] protocol 88fb is buggy, dev hsr_slave_0 [ 902.304753] protocol 88fb is buggy, dev hsr_slave_1 14:50:22 executing program 0: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:23 executing program 5: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:23 executing program 2: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:50:23 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:23 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r1, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x48, 0x1}}, 0x14) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 902.779597] protocol 88fb is buggy, dev hsr_slave_0 [ 902.784801] protocol 88fb is buggy, dev hsr_slave_1 14:50:23 executing program 5: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:23 executing program 1: r0 = memfd_create(&(0x7f0000ed5ff2)='self+eth1\xa4pp1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) 14:50:23 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 14:50:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:50:23 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 14:50:23 executing program 4: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) [ 903.088587] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 903.130615] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 903.146723] CPU: 0 PID: 4204 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 903.153632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.163016] Call Trace: [ 903.165782] dump_stack+0x172/0x1f0 [ 903.169552] warn_alloc.cold+0x7b/0x173 [ 903.173570] ? zone_watermark_ok_safe+0x260/0x260 [ 903.178524] ? lock_downgrade+0x810/0x810 [ 903.182833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.188451] ? avc_has_perm+0x404/0x610 [ 903.192535] __vmalloc_node_range+0x484/0x790 [ 903.197124] ? sel_write_load+0x1de/0x470 [ 903.201304] vmalloc+0x6b/0x90 [ 903.204522] ? sel_write_load+0x1de/0x470 [ 903.208696] sel_write_load+0x1de/0x470 [ 903.212806] __vfs_write+0x116/0x820 [ 903.216552] ? sel_make_policy_nodes+0x1520/0x1520 [ 903.222996] ? kernel_read+0x120/0x120 [ 903.226910] ? __lock_is_held+0xb6/0x140 [ 903.231108] ? rcu_read_lock_sched_held+0x110/0x130 [ 903.236155] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 903.240940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 903.246501] ? __sb_start_write+0x1ac/0x360 [ 903.250861] vfs_write+0x20c/0x560 [ 903.254426] ksys_write+0xea/0x1f0 [ 903.257994] ? __ia32_sys_read+0xb0/0xb0 [ 903.262119] ? do_syscall_64+0x26/0x610 [ 903.266196] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.271597] ? do_syscall_64+0x26/0x610 [ 903.275599] __x64_sys_write+0x73/0xb0 [ 903.279508] do_syscall_64+0x103/0x610 [ 903.283436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.288651] RIP: 0033:0x458c29 [ 903.291863] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 903.310784] RSP: 002b:00007f1bc695ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 903.318528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 903.325826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 903.333554] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 903.340845] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bc695f6d4 [ 903.348131] R13: 00000000004c85a0 R14: 00000000004de9c8 R15: 00000000ffffffff 14:50:23 executing program 5: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/65, 0x41) 14:50:24 executing program 1: r0 = memfd_create(&(0x7f0000ed5ff2)='self+eth1\xa4pp1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) [ 903.509039] Mem-Info: [ 903.521795] active_anon:141158 inactive_anon:292 isolated_anon:0 [ 903.521795] active_file:14707 inactive_file:41032 isolated_file:0 [ 903.521795] unevictable:0 dirty:32 writeback:0 unstable:0 [ 903.521795] slab_reclaimable:16520 slab_unreclaimable:115476 [ 903.521795] mapped:58942 shmem:365 pagetables:5310 bounce:0 [ 903.521795] free:1187604 free_pcp:558 free_cma:0 14:50:24 executing program 1: r0 = memfd_create(&(0x7f0000ed5ff2)='self+eth1\xa4pp1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) [ 903.779793] Node 0 active_anon:564688kB inactive_anon:1168kB active_file:58688kB inactive_file:164128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235768kB dirty:228kB writeback:0kB shmem:1460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 374784kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 14:50:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 903.810590] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 903.840192] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 903.907152] lowmem_reserve[]: 0 2555 2557 2557 14:50:24 executing program 1: r0 = memfd_create(&(0x7f0000ed5ff2)='self+eth1\xa4pp1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) 14:50:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:50:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c}, 0x1c}}, 0x0) io_setup(0x800000100000001, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140)='1', 0x1}]) [ 903.974680] Node 0 DMA32 free:959996kB min:36248kB low:45308kB high:54368kB active_anon:558504kB inactive_anon:1168kB active_file:58688kB inactive_file:164128kB unevictable:0kB writepending:128kB present:3129332kB managed:2619972kB mlocked:0kB kernel_stack:13024kB pagetables:21240kB bounce:0kB free_pcp:2156kB local_pcp:720kB free_cma:0kB [ 904.014064] lowmem_reserve[]: 0 0 2 2 [ 904.019312] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 14:50:24 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 14:50:24 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x1000000000000, &(0x7f0000000000), 0x8) [ 904.139764] lowmem_reserve[]: 0 0 0 0 14:50:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) [ 904.165330] Node 1 Normal free:3783356kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 904.349845] lowmem_reserve[]: 0 0 0 0 [ 904.353954] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 904.418405] Node 0 DMA32: 1300*4kB (UME) 713*8kB (UME) 462*16kB (UME) 602*32kB (UME) 132*64kB (UE) 38*128kB (UE) 15*256kB (UM) 35*512kB (UM) 18*1024kB (UM) 6*2048kB (UM) 208*4096kB (UM) = 955320kB [ 904.467796] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 904.489905] Node 1 Normal: 59*4kB (UE) 204*8kB (UE) 275*16kB (UE) 52*32kB (UME) 15*64kB (UME) 12*128kB (UE) 6*256kB (UME) 2*512kB (M) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3783356kB [ 904.516836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.526403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.535515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 904.544903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 904.554026] 56108 total pagecache pages [ 904.558335] 0 pages in swap cache 14:50:25 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 14:50:25 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x17, 0x0, 0x0, 0x0, r0) 14:50:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 14:50:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000b03000), 0xfc4e) [ 904.572352] Swap cache stats: add 0, delete 0, find 0/0 [ 904.577797] Free swap = 0kB [ 904.581465] Total swap = 0kB [ 904.584556] 1965979 pages RAM [ 904.587681] 0 pages HighMem/MovableOnly [ 904.591766] 338856 pages reserved [ 904.595234] 0 pages cma reserved 14:50:25 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x17, 0x0, 0x0, 0x0, r0) 14:50:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 14:50:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000b03000), 0xfc4e) [ 904.673625] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 904.706282] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 904.717022] CPU: 0 PID: 4952 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 904.723907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.733278] Call Trace: [ 904.735991] dump_stack+0x172/0x1f0 [ 904.739696] warn_alloc.cold+0x7b/0x173 [ 904.743666] ? zone_watermark_ok_safe+0x260/0x260 [ 904.748512] ? lock_downgrade+0x810/0x810 [ 904.752726] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.758285] ? avc_has_perm+0x404/0x610 [ 904.762276] __vmalloc_node_range+0x484/0x790 [ 904.766795] ? sel_write_load+0x1de/0x470 [ 904.770946] vmalloc+0x6b/0x90 [ 904.774141] ? sel_write_load+0x1de/0x470 [ 904.778298] sel_write_load+0x1de/0x470 [ 904.782294] __vfs_write+0x116/0x820 [ 904.786014] ? sel_make_policy_nodes+0x1520/0x1520 [ 904.790947] ? kernel_read+0x120/0x120 [ 904.794832] ? __lock_is_held+0xb6/0x140 [ 904.798916] ? rcu_read_lock_sched_held+0x110/0x130 [ 904.803959] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 904.808740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 904.814300] ? __sb_start_write+0x1ac/0x360 [ 904.818659] vfs_write+0x20c/0x560 [ 904.822226] ksys_write+0xea/0x1f0 [ 904.825875] ? __ia32_sys_read+0xb0/0xb0 [ 904.829961] ? do_syscall_64+0x26/0x610 [ 904.833964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.839350] ? do_syscall_64+0x26/0x610 [ 904.843367] __x64_sys_write+0x73/0xb0 [ 904.847257] do_syscall_64+0x103/0x610 [ 904.851161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.856351] RIP: 0033:0x458c29 [ 904.859560] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.878490] RSP: 002b:00007f1bc695ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 904.886210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 904.893567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 904.900847] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 904.908153] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bc695f6d4 [ 904.915432] R13: 00000000004c85a0 R14: 00000000004de9c8 R15: 00000000ffffffff [ 904.925083] Mem-Info: [ 904.927869] active_anon:140657 inactive_anon:291 isolated_anon:0 [ 904.927869] active_file:14707 inactive_file:41037 isolated_file:0 [ 904.927869] unevictable:0 dirty:57 writeback:1 unstable:0 [ 904.927869] slab_reclaimable:16511 slab_unreclaimable:114868 [ 904.927869] mapped:58942 shmem:365 pagetables:5297 bounce:0 [ 904.927869] free:1188851 free_pcp:496 free_cma:0 14:50:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 14:50:25 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) [ 904.962835] Node 0 active_anon:556328kB inactive_anon:1164kB active_file:58688kB inactive_file:164148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235768kB dirty:228kB writeback:4kB shmem:1460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 904.992243] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 14:50:25 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x17, 0x0, 0x0, 0x0, r0) 14:50:25 executing program 4: keyctl$get_security(0x11, 0x0, 0x0, 0x0) [ 905.097617] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 14:50:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000b03000), 0xfc4e) [ 905.279323] lowmem_reserve[]: 0 2555 2557 2557 [ 905.286993] Node 0 DMA32 free:955584kB min:36248kB low:45308kB high:54368kB active_anon:562640kB inactive_anon:1164kB active_file:58688kB inactive_file:164148kB unevictable:0kB writepending:380kB present:3129332kB managed:2619972kB mlocked:0kB kernel_stack:13056kB pagetables:21336kB bounce:0kB free_pcp:1944kB local_pcp:1268kB free_cma:0kB [ 905.396095] lowmem_reserve[]: 0 0 2 2 [ 905.400770] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 905.427733] lowmem_reserve[]: 0 0 0 0 [ 905.443679] Node 1 Normal free:3783356kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 905.494714] lowmem_reserve[]: 0 0 0 0 [ 905.499313] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 905.518110] Node 0 DMA32: 1315*4kB (UME) 803*8kB (UME) 466*16kB (UME) 603*32kB (UME) 130*64kB (UE) 40*128kB (UE) 16*256kB (UM) 35*512kB (UM) 18*1024kB (UM) 4*2048kB (UM) 209*4096kB (UM) = 956580kB [ 905.545502] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 905.564031] Node 1 Normal: 59*4kB (UE) 204*8kB (UE) 275*16kB (UE) 52*32kB (UME) 15*64kB (UME) 12*128kB (UE) 6*256kB (UME) 2*512kB (M) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3783356kB [ 905.588744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 905.598513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 905.615262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 905.625771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 905.640710] 56115 total pagecache pages 14:50:26 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 14:50:26 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000280)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x17, 0x0, 0x0, 0x0, r0) 14:50:26 executing program 4: keyctl$get_security(0x11, 0x0, 0x0, 0x0) 14:50:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000b03000), 0xfc4e) [ 905.645286] 0 pages in swap cache [ 905.649199] Swap cache stats: add 0, delete 0, find 0/0 [ 905.662145] Free swap = 0kB [ 905.665745] Total swap = 0kB [ 905.674191] 1965979 pages RAM [ 905.678192] 0 pages HighMem/MovableOnly [ 905.685022] 338856 pages reserved [ 905.689328] 0 pages cma reserved 14:50:26 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) tkill(r0, 0x1004000000016) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 14:50:26 executing program 4: keyctl$get_security(0x11, 0x0, 0x0, 0x0) 14:50:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000580)=0x1, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000001200)="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", 0x6c1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x6}, 0x4) io_setup(0x4, &(0x7f00000001c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000180)="df", 0x1}]) [ 905.796104] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 905.830669] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 905.836615] CPU: 1 PID: 4987 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 905.843471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.843485] Call Trace: [ 905.843512] dump_stack+0x172/0x1f0 [ 905.843538] warn_alloc.cold+0x7b/0x173 [ 905.843575] ? zone_watermark_ok_safe+0x260/0x260 [ 905.867984] ? lock_downgrade+0x810/0x810 [ 905.872177] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.877739] ? avc_has_perm+0x404/0x610 [ 905.881741] __vmalloc_node_range+0x484/0x790 [ 905.886264] ? sel_write_load+0x1de/0x470 [ 905.890425] vmalloc+0x6b/0x90 [ 905.890442] ? sel_write_load+0x1de/0x470 [ 905.890457] sel_write_load+0x1de/0x470 [ 905.890476] __vfs_write+0x116/0x820 [ 905.890491] ? sel_make_policy_nodes+0x1520/0x1520 [ 905.890508] ? kernel_read+0x120/0x120 [ 905.897864] ? __lock_is_held+0xb6/0x140 [ 905.897894] ? rcu_read_lock_sched_held+0x110/0x130 [ 905.897909] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 905.897925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 905.897940] ? __sb_start_write+0x1ac/0x360 [ 905.897957] vfs_write+0x20c/0x560 [ 905.897977] ksys_write+0xea/0x1f0 [ 905.897992] ? __ia32_sys_read+0xb0/0xb0 [ 905.898009] ? do_syscall_64+0x26/0x610 [ 905.898025] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 905.898044] ? do_syscall_64+0x26/0x610 [ 905.910701] __x64_sys_write+0x73/0xb0 [ 905.910723] do_syscall_64+0x103/0x610 [ 905.910745] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 905.910756] RIP: 0033:0x458c29 [ 905.910772] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.910780] RSP: 002b:00007f1bc695ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 905.910795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 905.910803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 905.910810] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 905.910818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bc695f6d4 [ 905.910825] R13: 00000000004c85a0 R14: 00000000004de9c8 R15: 00000000ffffffff [ 905.936888] Mem-Info: 14:50:26 executing program 2: msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) 14:50:26 executing program 4: keyctl$get_security(0x11, 0x0, 0x0, 0x0) 14:50:26 executing program 5: madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 14:50:26 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 14:50:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) [ 906.148701] active_anon:139608 inactive_anon:292 isolated_anon:0 [ 906.148701] active_file:14707 inactive_file:41045 isolated_file:0 [ 906.148701] unevictable:0 dirty:86 writeback:6 unstable:0 [ 906.148701] slab_reclaimable:16515 slab_unreclaimable:114608 [ 906.148701] mapped:58942 shmem:365 pagetables:5247 bounce:0 [ 906.148701] free:1190181 free_pcp:535 free_cma:0 [ 906.194693] Node 0 active_anon:556296kB inactive_anon:1168kB active_file:58688kB inactive_file:164180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235768kB dirty:344kB writeback:24kB shmem:1460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 372736kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 906.232598] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 906.336446] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.374031] lowmem_reserve[]: 0 2555 2557 2557 [ 906.375227] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 906.379647] Node 0 DMA32 free:955348kB min:36248kB low:45308kB high:54368kB active_anon:560676kB inactive_anon:1168kB active_file:58688kB inactive_file:164180kB unevictable:0kB writepending:368kB present:3129332kB managed:2619972kB mlocked:0kB kernel_stack:13088kB pagetables:21432kB bounce:0kB free_pcp:1772kB local_pcp:1208kB free_cma:0kB [ 906.430749] lowmem_reserve[]: 0 0 2 2 [ 906.438374] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.473586] lowmem_reserve[]: 0 0 0 0 [ 906.478415] Node 1 Normal free:3783356kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.524544] lowmem_reserve[]: 0 0 0 0 [ 906.529226] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 906.544794] Node 0 DMA32: 1250*4kB (UME) 722*8kB (UME) 493*16kB (UME) 530*32kB (UME) 134*64kB (UE) 41*128kB (UE) 16*256kB (UM) 35*512kB (UM) 18*1024kB (UM) 4*2048kB (UM) 210*4096kB (UM) = 958248kB [ 906.563346] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 906.576123] Node 1 Normal: 59*4kB (UE) 204*8kB (UE) 275*16kB (UE) 52*32kB (UME) 15*64kB (UME) 12*128kB (UE) 6*256kB (UME) 2*512kB (M) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3783356kB [ 906.602689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.617147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.626295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 14:50:27 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 14:50:27 executing program 4: socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 14:50:27 executing program 5: madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) 14:50:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:27 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 906.635954] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.645074] 56124 total pagecache pages [ 906.650962] 0 pages in swap cache [ 906.655076] Swap cache stats: add 0, delete 0, find 0/0 [ 906.660950] Free swap = 0kB [ 906.664633] Total swap = 0kB [ 906.668004] 1965979 pages RAM [ 906.672130] 0 pages HighMem/MovableOnly [ 906.677220] 338856 pages reserved [ 906.681438] 0 pages cma reserved [ 906.726847] input input34: cannot allocate more than FF_MAX_EFFECTS effects 14:50:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:27 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 906.791874] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 906.815537] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 906.822420] CPU: 0 PID: 5428 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 906.829299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.838699] Call Trace: [ 906.841320] dump_stack+0x172/0x1f0 [ 906.845049] warn_alloc.cold+0x7b/0x173 [ 906.849021] ? zone_watermark_ok_safe+0x260/0x260 [ 906.853860] ? lock_downgrade+0x810/0x810 [ 906.858029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 906.863569] ? avc_has_perm+0x404/0x610 [ 906.867558] __vmalloc_node_range+0x484/0x790 [ 906.872053] ? sel_write_load+0x1de/0x470 [ 906.876203] vmalloc+0x6b/0x90 [ 906.879387] ? sel_write_load+0x1de/0x470 [ 906.883653] sel_write_load+0x1de/0x470 [ 906.887621] __vfs_write+0x116/0x820 [ 906.891334] ? sel_make_policy_nodes+0x1520/0x1520 [ 906.896271] ? kernel_read+0x120/0x120 [ 906.900164] ? __lock_is_held+0xb6/0x140 [ 906.904228] ? rcu_read_lock_sched_held+0x110/0x130 [ 906.909246] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 906.914002] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 906.919539] ? __sb_start_write+0x1ac/0x360 [ 906.923859] vfs_write+0x20c/0x560 [ 906.927402] ksys_write+0xea/0x1f0 [ 906.930957] ? __ia32_sys_read+0xb0/0xb0 [ 906.935013] ? do_syscall_64+0x26/0x610 [ 906.938978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.944331] ? do_syscall_64+0x26/0x610 [ 906.948299] __x64_sys_write+0x73/0xb0 [ 906.952181] do_syscall_64+0x103/0x610 [ 906.956068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 906.961254] RIP: 0033:0x458c29 [ 906.964439] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.983353] RSP: 002b:00007f1bc695ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 906.991086] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 906.998369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 907.005666] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 907.012945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bc695f6d4 [ 907.020242] R13: 00000000004c85a0 R14: 00000000004de9c8 R15: 00000000ffffffff [ 907.029692] net_ratelimit: 22 callbacks suppressed [ 907.029701] protocol 88fb is buggy, dev hsr_slave_0 [ 907.031094] Mem-Info: 14:50:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), 0x8) 14:50:27 executing program 5: madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) [ 907.034815] protocol 88fb is buggy, dev hsr_slave_1 [ 907.049528] active_anon:139071 inactive_anon:291 isolated_anon:0 [ 907.049528] active_file:14707 inactive_file:41053 isolated_file:0 [ 907.049528] unevictable:0 dirty:97 writeback:0 unstable:0 [ 907.049528] slab_reclaimable:16521 slab_unreclaimable:114892 [ 907.049528] mapped:58944 shmem:365 pagetables:5224 bounce:0 [ 907.049528] free:1189316 free_pcp:487 free_cma:0 [ 907.084970] Node 0 active_anon:556284kB inactive_anon:1164kB active_file:58688kB inactive_file:164212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:235776kB dirty:388kB writeback:0kB shmem:1460kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 370688kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 907.160896] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 14:50:27 executing program 5: madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) [ 907.235585] input input35: cannot allocate more than FF_MAX_EFFECTS effects [ 907.259509] protocol 88fb is buggy, dev hsr_slave_0 [ 907.264729] protocol 88fb is buggy, dev hsr_slave_1 14:50:27 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x86) [ 907.294182] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.362456] lowmem_reserve[]: 0 2555 2557 2557 [ 907.368884] Node 0 DMA32 free:949640kB min:36248kB low:45308kB high:54368kB active_anon:558388kB inactive_anon:1164kB active_file:58688kB inactive_file:164212kB unevictable:0kB writepending:384kB present:3129332kB managed:2619972kB mlocked:0kB kernel_stack:13024kB pagetables:21340kB bounce:0kB free_pcp:2312kB local_pcp:1196kB free_cma:0kB [ 907.424022] lowmem_reserve[]: 0 0 2 2 [ 907.430229] Node 0 Normal free:12kB min:32kB low:40kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2428kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.496899] lowmem_reserve[]: 0 0 0 0 [ 907.519551] Node 1 Normal free:3783356kB min:53608kB low:67008kB high:80408kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.562966] lowmem_reserve[]: 0 0 0 0 [ 907.585252] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 907.601591] Node 0 DMA32: 1213*4kB (UME) 575*8kB (UME) 498*16kB (UME) 311*32kB (UME) 137*64kB (UE) 42*128kB (UE) 16*256kB (UM) 36*512kB (UM) 18*1024kB (UM) 3*2048kB (U) 211*4096kB (UM) = 952876kB [ 907.619991] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 907.632636] Node 1 Normal: 59*4kB (UE) 204*8kB (UE) 275*16kB (UE) 52*32kB (UME) 15*64kB (UME) 12*128kB (UE) 6*256kB (UME) 2*512kB (M) 4*1024kB (UM) 1*2048kB (E) 919*4096kB (M) = 3783356kB [ 907.650005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.659001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 907.667831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.676928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 14:50:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(0x0, 0xffffffffffffff60, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xdf1b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x1000000000054}, 0x98) 14:50:28 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:28 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 14:50:28 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000236fe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 907.686728] 56133 total pagecache pages [ 907.690931] 0 pages in swap cache [ 907.694474] Swap cache stats: add 0, delete 0, find 0/0 [ 907.700023] Free swap = 0kB [ 907.703172] Total swap = 0kB [ 907.706288] 1965979 pages RAM [ 907.709686] 0 pages HighMem/MovableOnly [ 907.713938] 338856 pages reserved [ 907.717480] 0 pages cma reserved [ 907.794270] input input36: cannot allocate more than FF_MAX_EFFECTS effects 14:50:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, ':#'}}, 0x23) sendto$inet(r0, &(0x7f0000000100), 0xfffffe8a, 0x2000000008040, 0x0, 0x0) 14:50:28 executing program 3: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "c7875d158d9e59a7"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7d3) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = socket$inet6(0xa, 0x3, 0xcf) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 907.979516] protocol 88fb is buggy, dev hsr_slave_0 [ 907.984768] protocol 88fb is buggy, dev hsr_slave_1 14:50:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e30df05250d3", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 14:50:28 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:28 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000236fe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 908.061702] protocol 88fb is buggy, dev hsr_slave_0 [ 908.067153] protocol 88fb is buggy, dev hsr_slave_1 [ 908.073444] protocol 88fb is buggy, dev hsr_slave_0 [ 908.079478] protocol 88fb is buggy, dev hsr_slave_1 14:50:28 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:28 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCAX25DELFWD(r0, 0x890b, 0x0) 14:50:28 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:28 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e30df05250d3", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 14:50:28 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:28 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000236fe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 14:50:28 executing program 3: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "c7875d158d9e59a7"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7d3) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = socket$inet6(0xa, 0x3, 0xcf) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 14:50:29 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e30df05250d3", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 14:50:29 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCAX25DELFWD(r0, 0x890b, 0x0) 14:50:29 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000236fe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 14:50:29 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xff, 0x41) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)='-', 0x1}], 0x1) 14:50:29 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e30df05250d3", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) 14:50:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCAX25DELFWD(r0, 0x890b, 0x0) 14:50:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp}) 14:50:29 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0xfb, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0cdc1f123c12a41d88b070") ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000200)={0x1d, r2}, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@can={{}, 0x0, 0x0, 0x0, 0x0, "e96b4b8fdd5fd9b1"}, 0x10}}, 0x0) 14:50:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 14:50:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp}) 14:50:29 executing program 3: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "c7875d158d9e59a7"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7d3) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = socket$inet6(0xa, 0x3, 0xcf) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 14:50:29 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) ioctl$SIOCAX25DELFWD(r0, 0x890b, 0x0) 14:50:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@rodir='rodir'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@utf8='utf8=1'}, {@fat=@usefree='usefree'}], [{@fowner_lt={'fowner<'}}]}) [ 909.026508] device lo left promiscuous mode 14:50:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp}) 14:50:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x19cf, &(0x7f00000003c0)=0x0) close(r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) io_submit(r1, 0x400001c3, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) close(r2) 14:50:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x3, @pix_mp}) 14:50:29 executing program 4: clock_adjtime(0xa, 0x0) 14:50:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffff85}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) read(r0, &(0x7f00000000c0)=""/19, 0x1b43d048) 14:50:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) 14:50:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 14:50:30 executing program 4: clock_adjtime(0xa, 0x0) 14:50:30 executing program 3: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)={0x0, @aes256, 0x0, "c7875d158d9e59a7"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x7d3) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r0 = socket$inet6(0xa, 0x3, 0xcf) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 14:50:30 executing program 1: mknod(&(0x7f000086c000)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x880, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) 14:50:30 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='io.bfq.weight\x00', 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000640)=@can, 0x80, &(0x7f0000001940)=[{&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/186, 0xba}, {&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/78, 0x4e}], 0x5, &(0x7f0000002580)=""/4096, 0x1000}, 0x40012020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x8, 0x400}, 0x0, 0x0, &(0x7f0000001a80)={0xffffffff, 0x4, 0xfe4, 0x100000000}, &(0x7f0000000480)=0x7580000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x401}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)=r3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_int(r0, &(0x7f0000000200)='io.max\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x80, 0x12) 14:50:30 executing program 4: clock_adjtime(0xa, 0x0) [ 910.088084] device lo entered promiscuous mode 14:50:30 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x232) dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffd47, 0x0, 0x0, 0x0) 14:50:30 executing program 4: clock_adjtime(0xa, 0x0) 14:50:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 910.498130] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 910.520933] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 910.531009] CPU: 1 PID: 6308 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 910.537929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.547328] Call Trace: [ 910.549944] dump_stack+0x172/0x1f0 [ 910.553686] dump_header+0x15e/0x929 [ 910.557437] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 910.562652] ? ___ratelimit+0x60/0x595 [ 910.566630] ? do_raw_spin_unlock+0x57/0x270 [ 910.571086] oom_kill_process.cold+0x10/0x6f5 [ 910.575620] ? task_will_free_mem+0x139/0x6e0 [ 910.580153] out_of_memory+0x936/0x12d0 [ 910.580184] ? retint_kernel+0x2d/0x2d [ 910.580204] ? oom_killer_disable+0x280/0x280 [ 910.580303] mem_cgroup_out_of_memory+0x1d2/0x240 [ 910.580324] ? memcg_event_wake+0x230/0x230 [ 910.588226] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 910.607103] ? cgroup_file_notify+0x140/0x1b0 [ 910.611719] memory_max_write+0x169/0x300 [ 910.615925] ? mem_cgroup_write+0x360/0x360 [ 910.620283] ? lock_acquire+0x1ea/0x3f0 [ 910.624310] cgroup_file_write+0x245/0x7a0 [ 910.628594] ? mem_cgroup_write+0x360/0x360 [ 910.632954] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 910.637949] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 910.642990] kernfs_fop_write+0x2ba/0x480 [ 910.647180] __vfs_write+0x116/0x820 [ 910.650920] ? kernfs_fop_open+0xd90/0xd90 [ 910.655186] ? kernel_read+0x120/0x120 [ 910.659095] ? __lock_is_held+0xb6/0x140 [ 910.663195] ? rcu_read_lock_sched_held+0x110/0x130 [ 910.668239] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 910.673022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 910.678598] ? __sb_start_write+0x1ac/0x360 [ 910.682943] vfs_write+0x20c/0x560 [ 910.686508] ksys_write+0xea/0x1f0 [ 910.690077] ? __ia32_sys_read+0xb0/0xb0 [ 910.694168] __x64_sys_write+0x73/0xb0 [ 910.698079] do_syscall_64+0x103/0x610 [ 910.701994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.707212] RIP: 0033:0x458c29 [ 910.710428] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.729350] RSP: 002b:00007f45ef785c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 910.737091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 14:50:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, 0x0) 14:50:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000480)={@multicast1, @loopback}, 0xc) [ 910.744386] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 910.751688] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 910.759070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45ef7866d4 [ 910.766367] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 910.795157] Task in /syz5 killed as a result of limit of /syz5 [ 910.808292] memory: usage 75572kB, limit 0kB, failcnt 0 [ 910.825272] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.845010] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.857506] Memory cgroup stats for /syz5: cache:192KB rss:58360KB rss_huge:55296KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:58332KB inactive_file:0KB active_file:0KB unevictable:0KB [ 910.884880] Memory cgroup out of memory: Kill process 18078 (syz-executor.5) score 9564000 or sacrifice child [ 910.897011] Killed process 18078 (syz-executor.5) total-vm:72848kB, anon-rss:2224kB, file-rss:35884kB, shmem-rss:0kB [ 910.944642] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 910.956524] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 910.962924] CPU: 1 PID: 6296 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 910.969793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.979177] Call Trace: [ 910.981789] dump_stack+0x172/0x1f0 [ 910.985447] dump_header+0x15e/0x929 [ 910.989183] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 910.994309] ? ___ratelimit+0x60/0x595 [ 910.998263] ? do_raw_spin_unlock+0x57/0x270 [ 911.002712] oom_kill_process.cold+0x10/0x6f5 [ 911.007248] ? task_will_free_mem+0x139/0x6e0 [ 911.011783] out_of_memory+0x936/0x12d0 [ 911.015804] ? oom_killer_disable+0x280/0x280 [ 911.020327] ? find_held_lock+0x35/0x130 [ 911.024448] mem_cgroup_out_of_memory+0x1d2/0x240 [ 911.029316] ? memcg_event_wake+0x230/0x230 [ 911.029423] ? do_raw_spin_unlock+0x57/0x270 [ 911.029440] ? _raw_spin_unlock+0x2d/0x50 [ 911.029458] try_charge+0x1028/0x15b0 [ 911.029472] ? find_held_lock+0x35/0x130 [ 911.029493] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 911.029591] ? kasan_check_read+0x11/0x20 [ 911.029613] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 911.038564] mem_cgroup_try_charge+0x24d/0x5e0 [ 911.069215] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 911.074185] __handle_mm_fault+0x1e55/0x3f80 [ 911.078636] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 911.083514] ? find_held_lock+0x35/0x130 [ 911.087616] ? handle_mm_fault+0x322/0xb30 [ 911.091923] ? kasan_check_read+0x11/0x20 [ 911.096105] handle_mm_fault+0x43f/0xb30 [ 911.096212] __do_page_fault+0x62a/0xe90 [ 911.096237] ? vmalloc_fault+0x770/0x770 [ 911.096282] ? trace_hardirqs_off_caller+0x65/0x220 [ 911.096305] ? trace_hardirqs_on_caller+0x6a/0x220 [ 911.118470] ? page_fault+0x8/0x30 [ 911.118494] do_page_fault+0x71/0x581 [ 911.118509] ? page_fault+0x8/0x30 [ 911.118524] page_fault+0x1e/0x30 [ 911.118535] RIP: 0033:0x41063f [ 911.118550] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 911.118557] RSP: 002b:00007ffd31d85990 EFLAGS: 00010206 [ 911.118570] RAX: 00007f45ef745000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 911.118578] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 911.118585] RBP: 00007ffd31d85a70 R08: ffffffffffffffff R09: 0000000000000000 [ 911.118593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd31d85b50 [ 911.118601] R13: 00007f45ef765700 R14: 0000000000000004 R15: 000000000073bfac [ 911.139200] Task in [ 911.166838] /syz5 [ 911.248283] killed as a result of limit of /syz5 [ 911.260865] memory: usage 73172kB, limit 0kB, failcnt 9 [ 911.266284] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.280562] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.286776] Memory cgroup stats for [ 911.287001] /syz5: cache:192KB rss:56140KB rss_huge:53248KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 911.336808] Memory cgroup out of memory: Kill process 18229 (syz-executor.5) score 9563000 or sacrifice child [ 911.348725] Killed process 18229 (syz-executor.5) total-vm:72848kB, anon-rss:2224kB, file-rss:35876kB, shmem-rss:0kB [ 911.361946] oom_reaper: reaped process 18229 (syz-executor.5), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 911.370598] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 911.394067] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 911.400859] CPU: 1 PID: 6296 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 911.407729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.417091] Call Trace: [ 911.419702] dump_stack+0x172/0x1f0 [ 911.419723] dump_header+0x15e/0x929 [ 911.419739] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 911.419755] ? ___ratelimit+0x60/0x595 [ 911.419769] ? do_raw_spin_unlock+0x57/0x270 [ 911.419786] oom_kill_process.cold+0x10/0x6f5 [ 911.419805] ? task_will_free_mem+0x139/0x6e0 [ 911.419828] out_of_memory+0x936/0x12d0 [ 911.419847] ? lock_downgrade+0x810/0x810 [ 911.419865] ? oom_killer_disable+0x280/0x280 [ 911.419883] ? find_held_lock+0x35/0x130 [ 911.466397] mem_cgroup_out_of_memory+0x1d2/0x240 [ 911.471274] ? memcg_event_wake+0x230/0x230 [ 911.475611] ? do_raw_spin_unlock+0x57/0x270 [ 911.480031] ? _raw_spin_unlock+0x2d/0x50 [ 911.484195] try_charge+0x1028/0x15b0 [ 911.487989] ? find_held_lock+0x35/0x130 [ 911.492061] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 911.496910] ? kasan_check_read+0x11/0x20 [ 911.501068] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 911.505920] mem_cgroup_try_charge+0x24d/0x5e0 [ 911.510526] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 911.515468] __handle_mm_fault+0x1e55/0x3f80 [ 911.519886] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 911.524731] ? find_held_lock+0x35/0x130 [ 911.528780] ? handle_mm_fault+0x322/0xb30 [ 911.533014] ? kasan_check_read+0x11/0x20 [ 911.537162] handle_mm_fault+0x43f/0xb30 [ 911.541270] __do_page_fault+0x62a/0xe90 [ 911.545363] ? vmalloc_fault+0x770/0x770 [ 911.549437] ? trace_hardirqs_off_caller+0x65/0x220 [ 911.554464] ? trace_hardirqs_on_caller+0x6a/0x220 [ 911.559395] ? page_fault+0x8/0x30 [ 911.562969] do_page_fault+0x71/0x581 [ 911.566862] ? page_fault+0x8/0x30 [ 911.570412] page_fault+0x1e/0x30 [ 911.573876] RIP: 0033:0x41063f [ 911.577074] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 911.595987] RSP: 002b:00007ffd31d85990 EFLAGS: 00010206 [ 911.601356] RAX: 00007f45ef745000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 911.608632] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 911.615894] RBP: 00007ffd31d85a70 R08: ffffffffffffffff R09: 0000000000000000 [ 911.623189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd31d85b50 [ 911.630722] R13: 00007f45ef765700 R14: 0000000000000004 R15: 000000000073bfac [ 911.638762] Task in /syz5 killed as a result of limit of /syz5 [ 911.644896] memory: usage 70660kB, limit 0kB, failcnt 15 [ 911.650455] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.657216] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 911.663536] Memory cgroup stats for /syz5: cache:192KB rss:53956KB rss_huge:51200KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:53976KB inactive_file:0KB active_file:0KB unevictable:0KB [ 911.684567] Memory cgroup out of memory: Kill process 18011 (syz-executor.5) score 9561000 or sacrifice child [ 911.695101] Killed process 18011 (syz-executor.5) total-vm:72848kB, anon-rss:2224kB, file-rss:35876kB, shmem-rss:0kB [ 911.707487] oom_reaper: reaped process 18011 (syz-executor.5), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 911.717287] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 911.734757] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 911.740678] CPU: 1 PID: 6308 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 911.747539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.756916] Call Trace: [ 911.759520] dump_stack+0x172/0x1f0 [ 911.763197] dump_header+0x15e/0x929 [ 911.766914] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 911.772035] ? ___ratelimit+0x60/0x595 [ 911.775936] ? do_raw_spin_unlock+0x57/0x270 [ 911.780439] oom_kill_process.cold+0x10/0x6f5 [ 911.784977] ? task_will_free_mem+0x139/0x6e0 [ 911.789498] out_of_memory+0x936/0x12d0 [ 911.793694] ? oom_killer_disable+0x280/0x280 [ 911.798481] ? cgroup_file_notify+0x140/0x1b0 [ 911.802987] mem_cgroup_out_of_memory+0x1d2/0x240 [ 911.807851] ? memcg_event_wake+0x230/0x230 [ 911.812201] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 911.817321] ? cgroup_file_notify+0x140/0x1b0 [ 911.821843] memory_max_write+0x169/0x300 [ 911.826017] ? mem_cgroup_write+0x360/0x360 [ 911.830357] ? lock_acquire+0x1ea/0x3f0 [ 911.834457] cgroup_file_write+0x245/0x7a0 [ 911.838713] ? mem_cgroup_write+0x360/0x360 [ 911.843060] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 911.848001] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 911.852959] kernfs_fop_write+0x2ba/0x480 [ 911.857127] __vfs_write+0x116/0x820 [ 911.860851] ? kernfs_fop_open+0xd90/0xd90 [ 911.865110] ? kernel_read+0x120/0x120 [ 911.869007] ? __lock_is_held+0xb6/0x140 [ 911.873107] ? rcu_read_lock_sched_held+0x110/0x130 [ 911.878143] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 911.882931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 911.888488] ? __sb_start_write+0x1ac/0x360 [ 911.892834] vfs_write+0x20c/0x560 [ 911.896386] ksys_write+0xea/0x1f0 [ 911.899923] ? __ia32_sys_read+0xb0/0xb0 [ 911.903979] __x64_sys_write+0x73/0xb0 [ 911.907952] do_syscall_64+0x103/0x610 [ 911.911849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 911.917051] RIP: 0033:0x458c29 [ 911.920236] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.939137] RSP: 002b:00007f45ef785c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 911.946853] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 911.954125] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 911.961404] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 911.968670] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45ef7866d4 [ 911.975955] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 911.983647] Task in /syz5 killed as a result of limit of /syz5 [ 911.989800] memory: usage 68300kB, limit 0kB, failcnt 21 [ 911.995272] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.002134] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.008296] Memory cgroup stats for /syz5: cache:192KB rss:51784KB rss_huge:49152KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51804KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.029554] Memory cgroup out of memory: Kill process 17912 (syz-executor.5) score 9558000 or sacrifice child [ 912.039844] Killed process 17912 (syz-executor.5) total-vm:72716kB, anon-rss:2216kB, file-rss:35876kB, shmem-rss:0kB [ 912.051961] oom_reaper: reaped process 17912 (syz-executor.5), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 912.062732] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 912.074173] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 912.079696] CPU: 1 PID: 6308 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 912.086555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.095936] Call Trace: [ 912.098546] dump_stack+0x172/0x1f0 [ 912.102209] dump_header+0x15e/0x929 [ 912.105950] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.111115] ? ___ratelimit+0x60/0x595 [ 912.115030] ? do_raw_spin_unlock+0x57/0x270 [ 912.119467] oom_kill_process.cold+0x10/0x6f5 [ 912.123998] ? task_will_free_mem+0x139/0x6e0 [ 912.128530] out_of_memory+0x936/0x12d0 [ 912.132537] ? oom_killer_disable+0x280/0x280 [ 912.137056] ? cgroup_file_notify+0x140/0x1b0 [ 912.141590] mem_cgroup_out_of_memory+0x1d2/0x240 [ 912.146464] ? memcg_event_wake+0x230/0x230 [ 912.150813] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 912.155946] ? cgroup_file_notify+0x140/0x1b0 [ 912.160472] memory_max_write+0x169/0x300 [ 912.164644] ? mem_cgroup_write+0x360/0x360 [ 912.168982] ? lock_acquire+0x1ea/0x3f0 [ 912.172981] cgroup_file_write+0x245/0x7a0 [ 912.177233] ? mem_cgroup_write+0x360/0x360 [ 912.181572] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 912.186529] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 912.191483] kernfs_fop_write+0x2ba/0x480 [ 912.195659] __vfs_write+0x116/0x820 [ 912.199399] ? kernfs_fop_open+0xd90/0xd90 [ 912.203650] ? kernel_read+0x120/0x120 [ 912.207555] ? __lock_is_held+0xb6/0x140 [ 912.211651] ? rcu_read_lock_sched_held+0x110/0x130 [ 912.216695] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 912.221475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 912.227036] ? __sb_start_write+0x1ac/0x360 [ 912.231381] vfs_write+0x20c/0x560 [ 912.234964] ksys_write+0xea/0x1f0 [ 912.238520] ? __ia32_sys_read+0xb0/0xb0 [ 912.242616] __x64_sys_write+0x73/0xb0 [ 912.246532] do_syscall_64+0x103/0x610 [ 912.250446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.255650] RIP: 0033:0x458c29 [ 912.258877] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.277796] RSP: 002b:00007f45ef785c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 912.285523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 912.292809] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 912.300094] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 912.307380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45ef7866d4 [ 912.314755] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 912.322537] Task in /syz5 killed as a result of limit of /syz5 [ 912.329627] net_ratelimit: 19 callbacks suppressed [ 912.329635] protocol 88fb is buggy, dev hsr_slave_0 [ 912.330105] memory: usage 65960kB, limit 0kB, failcnt 21 [ 912.335241] protocol 88fb is buggy, dev hsr_slave_1 [ 912.340132] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.345975] protocol 88fb is buggy, dev hsr_slave_0 [ 912.350872] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.357703] protocol 88fb is buggy, dev hsr_slave_1 [ 912.362719] Memory cgroup stats for [ 912.369016] protocol 88fb is buggy, dev hsr_slave_0 [ 912.373982] /syz5 [ 912.377771] protocol 88fb is buggy, dev hsr_slave_1 [ 912.390261] : cache:192KB rss:49668KB rss_huge:47104KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:49640KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.408718] Memory cgroup out of memory: Kill process 17954 (syz-executor.5) score 9552000 or sacrifice child [ 912.419386] Killed process 17954 (syz-executor.5) total-vm:72716kB, anon-rss:2216kB, file-rss:35860kB, shmem-rss:0kB [ 912.431839] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 912.447333] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 912.453018] CPU: 0 PID: 6296 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 912.459875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.469270] Call Trace: [ 912.471855] dump_stack+0x172/0x1f0 [ 912.475486] dump_header+0x15e/0x929 [ 912.479203] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.484298] ? ___ratelimit+0x60/0x595 [ 912.488196] ? do_raw_spin_unlock+0x57/0x270 [ 912.492601] oom_kill_process.cold+0x10/0x6f5 [ 912.497110] ? task_will_free_mem+0x139/0x6e0 [ 912.501599] out_of_memory+0x936/0x12d0 [ 912.505571] ? oom_killer_disable+0x280/0x280 [ 912.510058] ? find_held_lock+0x35/0x130 [ 912.514117] mem_cgroup_out_of_memory+0x1d2/0x240 [ 912.518949] ? memcg_event_wake+0x230/0x230 [ 912.523265] ? do_raw_spin_unlock+0x57/0x270 [ 912.527668] ? _raw_spin_unlock+0x2d/0x50 [ 912.531827] try_charge+0x1028/0x15b0 [ 912.535625] ? find_held_lock+0x35/0x130 [ 912.539801] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 912.544681] ? kasan_check_read+0x11/0x20 [ 912.548915] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 912.553782] mem_cgroup_try_charge+0x24d/0x5e0 [ 912.558375] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 912.563299] __handle_mm_fault+0x1e55/0x3f80 [ 912.567723] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 912.572564] ? find_held_lock+0x35/0x130 [ 912.576628] ? handle_mm_fault+0x322/0xb30 [ 912.580898] ? kasan_check_read+0x11/0x20 [ 912.585062] handle_mm_fault+0x43f/0xb30 [ 912.589128] __do_page_fault+0x62a/0xe90 [ 912.593196] ? vmalloc_fault+0x770/0x770 [ 912.597252] ? trace_hardirqs_off_caller+0x65/0x220 [ 912.602292] ? trace_hardirqs_on_caller+0x6a/0x220 [ 912.607328] ? page_fault+0x8/0x30 [ 912.610892] do_page_fault+0x71/0x581 [ 912.614689] ? page_fault+0x8/0x30 [ 912.618228] page_fault+0x1e/0x30 [ 912.621694] RIP: 0033:0x41063f [ 912.624894] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 912.643800] RSP: 002b:00007ffd31d85990 EFLAGS: 00010206 [ 912.649171] RAX: 00007f45ef745000 RBX: 0000000000020000 RCX: 0000000000458c7a [ 912.656439] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 912.663716] RBP: 00007ffd31d85a70 R08: ffffffffffffffff R09: 0000000000000000 [ 912.671008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd31d85b50 [ 912.678303] R13: 00007f45ef765700 R14: 0000000000000004 R15: 000000000073bfac [ 912.688048] Task in /syz5 killed as a result of limit of /syz5 [ 912.694327] memory: usage 63596kB, limit 0kB, failcnt 21 [ 912.700275] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.707197] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 912.713534] Memory cgroup stats for /syz5: cache:192KB rss:47524KB rss_huge:45056KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47464KB inactive_file:0KB active_file:0KB unevictable:0KB [ 912.734706] Memory cgroup out of memory: Kill process 19175 (syz-executor.5) score 9541000 or sacrifice child [ 912.745027] Killed process 19175 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35832kB, shmem-rss:0kB [ 912.760924] oom_reaper: reaped process 19175 (syz-executor.5), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 912.780260] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 912.797209] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 912.804177] CPU: 1 PID: 6308 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 912.811036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.820406] Call Trace: [ 912.823011] dump_stack+0x172/0x1f0 [ 912.826646] dump_header+0x15e/0x929 [ 912.830366] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 912.835478] ? ___ratelimit+0x60/0x595 [ 912.839370] ? do_raw_spin_unlock+0x57/0x270 [ 912.843792] oom_kill_process.cold+0x10/0x6f5 [ 912.848323] ? task_will_free_mem+0x139/0x6e0 [ 912.852825] out_of_memory+0x936/0x12d0 [ 912.856996] ? oom_killer_disable+0x280/0x280 [ 912.861499] ? cgroup_file_notify+0x140/0x1b0 [ 912.865993] mem_cgroup_out_of_memory+0x1d2/0x240 [ 912.870854] ? memcg_event_wake+0x230/0x230 [ 912.875208] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 912.880387] ? cgroup_file_notify+0x140/0x1b0 [ 912.884894] memory_max_write+0x169/0x300 [ 912.889047] ? mem_cgroup_write+0x360/0x360 [ 912.893362] ? lock_acquire+0x1ea/0x3f0 [ 912.897336] cgroup_file_write+0x245/0x7a0 [ 912.901576] ? mem_cgroup_write+0x360/0x360 [ 912.905902] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 912.910838] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 912.915979] kernfs_fop_write+0x2ba/0x480 [ 912.920131] __vfs_write+0x116/0x820 [ 912.923839] ? kernfs_fop_open+0xd90/0xd90 [ 912.928066] ? kernel_read+0x120/0x120 [ 912.931955] ? __lock_is_held+0xb6/0x140 [ 912.936037] ? rcu_read_lock_sched_held+0x110/0x130 [ 912.941084] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 912.945866] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 912.951420] ? __sb_start_write+0x1ac/0x360 [ 912.955764] vfs_write+0x20c/0x560 [ 912.959308] ksys_write+0xea/0x1f0 [ 912.962847] ? __ia32_sys_read+0xb0/0xb0 [ 912.966921] __x64_sys_write+0x73/0xb0 [ 912.971071] do_syscall_64+0x103/0x610 [ 912.974959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 912.980146] RIP: 0033:0x458c29 [ 912.983359] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.002254] RSP: 002b:00007f45ef785c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.009980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 913.017255] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 913.024535] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 913.031810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f45ef7866d4 [ 913.039077] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 913.046858] protocol 88fb is buggy, dev hsr_slave_0 [ 913.052046] protocol 88fb is buggy, dev hsr_slave_1 [ 913.057778] Task in /syz5 killed as a result of limit of /syz5 [ 913.064104] memory: usage 61292kB, limit 0kB, failcnt 106 [ 913.069784] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.076573] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.082881] Memory cgroup stats for /syz5: cache:192KB rss:45364KB rss_huge:43008KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:45324KB inactive_file:0KB active_file:0KB unevictable:0KB 14:50:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x101001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000000003, 0xa) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 14:50:33 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1a0}]) 14:50:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000480)={@multicast1, @loopback}, 0xc) 14:50:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, 0x0) 14:50:33 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x232) dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffd47, 0x0, 0x0, 0x0) [ 913.103935] Memory cgroup out of memory: Kill process 28518 (syz-executor.5) score 9541000 or sacrifice child [ 913.114377] Killed process 28522 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 913.208012] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 913.212833] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 14:50:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000480)={@multicast1, @loopback}, 0xc) [ 913.259508] protocol 88fb is buggy, dev hsr_slave_0 [ 913.314322] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 913.322012] CPU: 1 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 913.322121] device lo left promiscuous mode [ 913.329475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.329575] Call Trace: [ 913.329601] dump_stack+0x172/0x1f0 [ 913.329624] dump_header+0x15e/0x929 [ 913.329643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 913.329659] ? ___ratelimit+0x60/0x595 [ 913.329672] ? do_raw_spin_unlock+0x57/0x270 [ 913.329690] oom_kill_process.cold+0x10/0x6f5 [ 913.329707] ? task_will_free_mem+0x139/0x6e0 [ 913.329721] ? find_held_lock+0x35/0x130 [ 913.329741] out_of_memory+0x936/0x12d0 [ 913.329759] ? lock_downgrade+0x810/0x810 [ 913.329775] ? oom_killer_disable+0x280/0x280 [ 913.329787] ? find_held_lock+0x35/0x130 [ 913.329812] mem_cgroup_out_of_memory+0x1d2/0x240 [ 913.329828] ? memcg_event_wake+0x230/0x230 [ 913.329847] ? do_raw_spin_unlock+0x57/0x270 [ 913.329864] ? _raw_spin_unlock+0x2d/0x50 [ 913.329883] try_charge+0x1028/0x15b0 [ 913.329898] ? find_held_lock+0x35/0x130 [ 913.329923] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 913.329941] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 913.329958] ? find_held_lock+0x35/0x130 [ 913.329975] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 913.330004] memcg_kmem_charge_memcg+0x7c/0x130 [ 913.330021] ? memcg_kmem_put_cache+0xb0/0xb0 [ 913.330042] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 913.330063] memcg_kmem_charge+0x136/0x300 [ 913.330082] __alloc_pages_nodemask+0x3c6/0x760 [ 913.330102] ? __alloc_pages_slowpath+0x2870/0x2870 [ 913.343837] ? lockdep_hardirqs_on+0x415/0x5d0 [ 913.343855] ? trace_hardirqs_on+0x67/0x230 [ 913.343869] ? kasan_check_read+0x11/0x20 [ 913.343952] copy_process.part.0+0x3e0/0x7970 [ 913.343976] ? mark_held_locks+0x100/0x100 [ 913.353924] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 913.353951] ? __might_fault+0x12b/0x1e0 [ 913.500058] ? __cleanup_sighand+0x70/0x70 [ 913.504322] ? lock_downgrade+0x810/0x810 [ 913.508515] _do_fork+0x257/0xfe0 [ 913.512007] ? fork_idle+0x1d0/0x1d0 [ 913.515751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 913.520533] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 913.525324] ? do_syscall_64+0x26/0x610 [ 913.529320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.534704] ? do_syscall_64+0x26/0x610 [ 913.538705] __x64_sys_clone+0xbf/0x150 [ 913.542705] do_syscall_64+0x103/0x610 [ 913.546619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.551815] RIP: 0033:0x4571fa [ 913.555110] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 913.574033] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 913.581766] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 913.589082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 913.596462] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 913.604157] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 14:50:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, 0x0) 14:50:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 913.611460] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 14:50:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x38, 0x0, 0x0) [ 913.889755] Task in /syz5 killed as a result of limit of /syz5 [ 913.895995] memory: usage 55848kB, limit 0kB, failcnt 114 [ 913.902352] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.909858] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.916807] Memory cgroup stats for /syz5: cache:192KB rss:41172KB rss_huge:38912KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41076KB inactive_file:0KB active_file:0KB unevictable:0KB 14:50:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 913.939212] Memory cgroup out of memory: Kill process 28518 (syz-executor.5) score 9541000 or sacrifice child [ 913.966111] Killed process 28518 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35832kB, shmem-rss:0kB 14:50:34 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x232) dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffd47, 0x0, 0x0, 0x0) [ 914.182873] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 914.195718] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 914.201352] CPU: 0 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 914.208423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.217799] Call Trace: [ 914.220437] dump_stack+0x172/0x1f0 [ 914.224093] dump_header+0x15e/0x929 [ 914.227836] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 914.232964] ? ___ratelimit+0x60/0x595 [ 914.236875] ? do_raw_spin_unlock+0x57/0x270 [ 914.241318] oom_kill_process.cold+0x10/0x6f5 [ 914.245855] ? task_will_free_mem+0x139/0x6e0 [ 914.250379] ? find_held_lock+0x35/0x130 [ 914.254482] out_of_memory+0x936/0x12d0 [ 914.258608] ? lock_downgrade+0x810/0x810 [ 914.262817] ? oom_killer_disable+0x280/0x280 [ 914.267335] ? find_held_lock+0x35/0x130 [ 914.271425] mem_cgroup_out_of_memory+0x1d2/0x240 [ 914.276293] ? memcg_event_wake+0x230/0x230 [ 914.280644] ? do_raw_spin_unlock+0x57/0x270 [ 914.285081] ? _raw_spin_unlock+0x2d/0x50 [ 914.289259] try_charge+0x1028/0x15b0 [ 914.293084] ? find_held_lock+0x35/0x130 [ 914.297182] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 914.302075] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 914.306975] ? find_held_lock+0x35/0x130 [ 914.311092] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 914.315982] memcg_kmem_charge_memcg+0x7c/0x130 [ 914.320709] ? memcg_kmem_put_cache+0xb0/0xb0 [ 914.325267] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 914.330879] memcg_kmem_charge+0x136/0x300 [ 914.335169] __alloc_pages_nodemask+0x3c6/0x760 [ 914.339873] ? __alloc_pages_slowpath+0x2870/0x2870 [ 914.344924] ? lockdep_hardirqs_on+0x415/0x5d0 [ 914.349534] ? trace_hardirqs_on+0x67/0x230 [ 914.353887] ? kasan_check_read+0x11/0x20 [ 914.358073] copy_process.part.0+0x3e0/0x7970 [ 914.362614] ? mark_held_locks+0x100/0x100 [ 914.366875] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 914.371596] ? __might_fault+0x12b/0x1e0 [ 914.376039] ? __cleanup_sighand+0x70/0x70 [ 914.380298] ? lock_downgrade+0x810/0x810 [ 914.384486] _do_fork+0x257/0xfe0 [ 914.387987] ? fork_idle+0x1d0/0x1d0 [ 914.391740] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.396527] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 914.401342] ? do_syscall_64+0x26/0x610 [ 914.405342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 914.410734] ? do_syscall_64+0x26/0x610 [ 914.414735] __x64_sys_clone+0xbf/0x150 [ 914.418737] do_syscall_64+0x103/0x610 [ 914.422665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 914.427969] RIP: 0033:0x4571fa [ 914.431193] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 914.450125] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 914.458301] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 914.465620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 914.472944] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 914.480266] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 914.487596] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 914.782335] Task in /syz5 killed as a result of limit of /syz5 [ 914.788518] memory: usage 52712kB, limit 0kB, failcnt 120 [ 914.802046] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 914.809334] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 914.825755] Memory cgroup stats for /syz5: cache:192KB rss:38948KB rss_huge:36864KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38924KB inactive_file:0KB active_file:0KB unevictable:0KB [ 914.852232] Memory cgroup out of memory: Kill process 20764 (syz-executor.5) score 9539000 or sacrifice child [ 914.865747] Killed process 20767 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 914.890207] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 914.902859] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 914.908727] CPU: 0 PID: 7135 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 914.915614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.915621] Call Trace: [ 914.915644] dump_stack+0x172/0x1f0 [ 914.915674] dump_header+0x15e/0x929 [ 914.915696] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 914.940130] ? ___ratelimit+0x60/0x595 [ 914.940148] ? do_raw_spin_unlock+0x57/0x270 [ 914.940169] oom_kill_process.cold+0x10/0x6f5 [ 914.940189] ? task_will_free_mem+0x139/0x6e0 [ 914.940211] out_of_memory+0x936/0x12d0 [ 914.940233] ? oom_killer_disable+0x280/0x280 [ 914.940258] mem_cgroup_out_of_memory+0x1d2/0x240 [ 914.940278] ? memcg_event_wake+0x230/0x230 [ 914.975216] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 914.980347] ? cgroup_file_notify+0x140/0x1b0 [ 914.984862] memory_max_write+0x169/0x300 [ 914.989026] ? retint_kernel+0x2d/0x2d [ 914.992936] ? mem_cgroup_write+0x360/0x360 [ 914.997261] ? mem_cgroup_write+0x360/0x360 [ 915.001599] cgroup_file_write+0x245/0x7a0 [ 915.005884] ? mem_cgroup_write+0x360/0x360 [ 915.010214] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 915.015160] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 915.020092] kernfs_fop_write+0x2ba/0x480 [ 915.024232] __vfs_write+0x116/0x820 [ 915.027988] ? kernfs_fop_open+0xd90/0xd90 [ 915.032225] ? kernel_read+0x120/0x120 [ 915.036115] ? __lock_is_held+0xb6/0x140 [ 915.040178] ? rcu_read_lock_sched_held+0x110/0x130 [ 915.045244] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 915.050023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 915.055596] ? __sb_start_write+0x1ac/0x360 [ 915.059948] vfs_write+0x20c/0x560 [ 915.063505] ksys_write+0xea/0x1f0 [ 915.067038] ? __ia32_sys_read+0xb0/0xb0 [ 915.071113] __x64_sys_write+0x73/0xb0 [ 915.075024] do_syscall_64+0x103/0x610 [ 915.078920] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.084100] RIP: 0033:0x458c29 [ 915.087290] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.106199] RSP: 002b:00007f4a9a4dcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 915.113914] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 915.121189] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 915.128464] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 915.135740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a9a4dd6d4 [ 915.143013] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 915.151485] Task in /syz2 killed as a result of limit of /syz2 [ 915.157622] memory: usage 99720kB, limit 0kB, failcnt 0 [ 915.163221] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.170302] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.176594] Memory cgroup stats for /syz2: cache:136KB rss:81172KB rss_huge:77824KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:81180KB inactive_file:0KB active_file:8KB unevictable:0KB [ 915.197728] Memory cgroup out of memory: Kill process 8838 (syz-executor.2) score 9798000 or sacrifice child [ 915.208007] Killed process 8838 (syz-executor.2) total-vm:72704kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 915.222870] oom_reaper: reaped process 8838 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 915.233678] Memory cgroup out of memory: Kill process 20764 (syz-executor.5) score 9539000 or sacrifice child [ 915.244308] Killed process 20764 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35824kB, shmem-rss:0kB [ 915.271381] Memory cgroup out of memory: Kill process 8554 (syz-executor.1) score 9800000 or sacrifice child [ 915.283470] Killed process 8554 (syz-executor.1) total-vm:72584kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB [ 915.302030] Memory cgroup out of memory: Kill process 28811 (syz-executor.5) score 9539000 or sacrifice child [ 915.305780] oom_reaper: reaped process 8554 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 915.329131] Killed process 28811 (syz-executor.5) total-vm:72584kB, anon-rss:2208kB, file-rss:35816kB, shmem-rss:0kB [ 915.361232] Memory cgroup out of memory: Kill process 8630 (syz-executor.1) score 9799000 or sacrifice child [ 915.373459] Killed process 8630 (syz-executor.1) total-vm:72704kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB [ 915.379223] oom_reaper: reaped process 28811 (syz-executor.5), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 915.403793] Memory cgroup out of memory: Kill process 8719 (syz-executor.1) score 9799000 or sacrifice child [ 915.420156] Killed process 8719 (syz-executor.1) total-vm:72704kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB [ 915.444332] Memory cgroup out of memory: Kill process 8912 (syz-executor.2) score 9798000 or sacrifice child [ 915.463203] Killed process 8912 (syz-executor.2) total-vm:72704kB, anon-rss:4248kB, file-rss:34816kB, shmem-rss:0kB [ 915.482186] oom_reaper: reaped process 8912 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 915.492788] Memory cgroup out of memory: Kill process 19076 (syz-executor.5) score 9536000 or sacrifice child [ 915.513837] Killed process 19076 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 915.545418] oom_kill_process: 7 callbacks suppressed [ 915.545438] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 915.562948] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 915.568374] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 915.575217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.584631] Call Trace: [ 915.587221] dump_stack+0x172/0x1f0 [ 915.590873] dump_header+0x15e/0x929 [ 915.594591] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 915.599717] ? ___ratelimit+0x60/0x595 [ 915.603700] oom_kill_process.cold+0x10/0x6f5 [ 915.608207] ? task_will_free_mem+0x139/0x6e0 [ 915.612726] out_of_memory+0x936/0x12d0 [ 915.616710] ? oom_killer_disable+0x280/0x280 [ 915.621195] ? find_held_lock+0x35/0x130 [ 915.625253] mem_cgroup_out_of_memory+0x1d2/0x240 [ 915.630209] ? memcg_event_wake+0x230/0x230 [ 915.634526] ? do_raw_spin_unlock+0x57/0x270 [ 915.638943] ? _raw_spin_unlock+0x2d/0x50 [ 915.643088] try_charge+0x1028/0x15b0 [ 915.646884] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 915.651720] ? rcu_read_lock_sched_held+0x110/0x130 [ 915.656738] ? __alloc_pages_nodemask+0x63e/0x760 [ 915.661672] ? do_raw_spin_unlock+0x57/0x270 [ 915.666098] memcg_kmem_charge_memcg+0x7c/0x130 [ 915.670771] ? memcg_kmem_put_cache+0xb0/0xb0 [ 915.675280] ? cache_grow_begin+0x59a/0x8c0 [ 915.679597] ? lockdep_hardirqs_on+0x415/0x5d0 [ 915.684187] ? trace_hardirqs_on+0x67/0x230 [ 915.688499] cache_grow_begin+0x25f/0x8c0 [ 915.692641] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 915.698206] ? __cpuset_node_allowed+0x136/0x540 [ 915.702979] fallback_alloc+0x1fd/0x2d0 [ 915.706966] ____cache_alloc_node+0x1be/0x1e0 [ 915.711490] kmem_cache_alloc+0x1f3/0x700 [ 915.715744] ? inet_create+0x2f4/0xe10 [ 915.719827] sk_prot_alloc+0x67/0x2e0 [ 915.723646] ? lock_downgrade+0x810/0x810 [ 915.727796] sk_alloc+0x39/0xf70 [ 915.731163] inet_create+0x36a/0xe10 [ 915.734872] __sock_create+0x3e6/0x750 [ 915.738748] __sys_socket+0x103/0x220 [ 915.742552] ? move_addr_to_kernel+0x80/0x80 [ 915.746948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 915.751701] ? do_syscall_64+0x26/0x610 [ 915.755665] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.761025] ? do_syscall_64+0x26/0x610 [ 915.771213] __x64_sys_socket+0x73/0xb0 [ 915.775221] do_syscall_64+0x103/0x610 [ 915.779116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.784329] RIP: 0033:0x45b797 [ 915.787623] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.806533] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 915.814251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 915.821520] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 915.828986] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 915.836277] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 915.843549] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 915.851753] Task in /syz1 killed as a result of limit of /syz1 [ 915.861891] memory: usage 78720kB, limit 0kB, failcnt 32 [ 915.867398] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.874275] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.880558] Memory cgroup stats for /syz1: cache:68KB rss:60396KB rss_huge:57344KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60260KB inactive_file:0KB active_file:0KB unevictable:0KB [ 915.901717] Memory cgroup out of memory: Kill process 8524 (syz-executor.1) score 9797000 or sacrifice child [ 915.911859] Killed process 8524 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 915.925363] oom_reaper: reaped process 8524 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 915.936104] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 915.949866] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 915.955292] CPU: 1 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 915.962183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.971583] Call Trace: [ 915.971610] dump_stack+0x172/0x1f0 [ 915.971629] dump_header+0x15e/0x929 [ 915.971645] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 915.971661] ? ___ratelimit+0x60/0x595 [ 915.971675] ? do_raw_spin_unlock+0x57/0x270 [ 915.971693] oom_kill_process.cold+0x10/0x6f5 [ 915.971712] ? task_will_free_mem+0x139/0x6e0 [ 915.977969] out_of_memory+0x936/0x12d0 [ 916.008051] ? oom_killer_disable+0x280/0x280 [ 916.012545] ? find_held_lock+0x35/0x130 [ 916.016612] mem_cgroup_out_of_memory+0x1d2/0x240 [ 916.021575] ? memcg_event_wake+0x230/0x230 [ 916.025903] ? do_raw_spin_unlock+0x57/0x270 [ 916.030309] ? _raw_spin_unlock+0x2d/0x50 [ 916.034459] try_charge+0x1028/0x15b0 [ 916.038851] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 916.043702] ? rcu_read_lock_sched_held+0x110/0x130 [ 916.048722] ? __alloc_pages_nodemask+0x63e/0x760 [ 916.053566] ? do_raw_spin_unlock+0x57/0x270 [ 916.058007] memcg_kmem_charge_memcg+0x7c/0x130 [ 916.062699] ? memcg_kmem_put_cache+0xb0/0xb0 [ 916.068441] ? cache_grow_begin+0x59a/0x8c0 [ 916.072771] ? lockdep_hardirqs_on+0x415/0x5d0 [ 916.077437] ? trace_hardirqs_on+0x67/0x230 [ 916.081756] cache_grow_begin+0x25f/0x8c0 [ 916.085913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 916.091458] ? __cpuset_node_allowed+0x136/0x540 [ 916.096308] fallback_alloc+0x1fd/0x2d0 [ 916.100287] ____cache_alloc_node+0x1be/0x1e0 [ 916.104788] kmem_cache_alloc+0x1f3/0x700 [ 916.109007] ? inet6_create+0x2ea/0xf80 [ 916.113004] sk_prot_alloc+0x67/0x2e0 [ 916.116803] ? lock_downgrade+0x810/0x810 [ 916.120959] sk_alloc+0x39/0xf70 [ 916.124328] inet6_create+0x360/0xf80 [ 916.128234] __sock_create+0x3e6/0x750 [ 916.132121] __sys_socket+0x103/0x220 [ 916.135919] ? move_addr_to_kernel+0x80/0x80 [ 916.140330] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 916.145089] ? do_syscall_64+0x26/0x610 [ 916.149063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.154621] ? do_syscall_64+0x26/0x610 [ 916.158613] __x64_sys_socket+0x73/0xb0 [ 916.162597] do_syscall_64+0x103/0x610 [ 916.166492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.171684] RIP: 0033:0x45b797 [ 916.174875] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.194832] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 916.207069] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 916.214337] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 916.221607] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 916.228903] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 916.236217] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 916.244035] Task in /syz2 killed as a result of limit of /syz2 [ 916.250174] memory: usage 88488kB, limit 0kB, failcnt 18 [ 916.255645] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.262769] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.268953] Memory cgroup stats for /syz2: cache:136KB rss:70716KB rss_huge:67584KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:70592KB inactive_file:4KB active_file:4KB unevictable:0KB [ 916.289804] Memory cgroup out of memory: Kill process 8584 (syz-executor.2) score 9796000 or sacrifice child [ 916.299929] Killed process 8584 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 916.313354] oom_reaper: reaped process 8584 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 916.317815] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 916.338860] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 916.345238] CPU: 0 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 916.352186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.361701] Call Trace: [ 916.364391] dump_stack+0x172/0x1f0 [ 916.368089] dump_header+0x15e/0x929 [ 916.371855] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 916.376969] ? ___ratelimit+0x60/0x595 [ 916.380869] ? do_raw_spin_unlock+0x57/0x270 [ 916.385301] oom_kill_process.cold+0x10/0x6f5 [ 916.389823] ? task_will_free_mem+0x139/0x6e0 [ 916.394345] out_of_memory+0x936/0x12d0 [ 916.398359] ? oom_killer_disable+0x280/0x280 [ 916.402879] ? find_held_lock+0x35/0x130 [ 916.406962] mem_cgroup_out_of_memory+0x1d2/0x240 [ 916.411814] ? memcg_event_wake+0x230/0x230 [ 916.416149] ? do_raw_spin_unlock+0x57/0x270 [ 916.420591] ? _raw_spin_unlock+0x2d/0x50 [ 916.424864] try_charge+0x1028/0x15b0 [ 916.428680] ? find_held_lock+0x35/0x130 [ 916.432776] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 916.437634] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 916.442496] ? find_held_lock+0x35/0x130 [ 916.446573] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 916.451433] memcg_kmem_charge_memcg+0x7c/0x130 [ 916.456139] ? memcg_kmem_put_cache+0xb0/0xb0 [ 916.460668] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 916.465544] memcg_kmem_charge+0x136/0x300 [ 916.469813] __alloc_pages_nodemask+0x3c6/0x760 [ 916.474519] ? __alloc_pages_slowpath+0x2870/0x2870 [ 916.479560] ? lockdep_hardirqs_on+0x415/0x5d0 [ 916.484169] ? trace_hardirqs_on+0x67/0x230 [ 916.488514] ? kasan_check_read+0x11/0x20 [ 916.492700] copy_process.part.0+0x3e0/0x7970 [ 916.497232] ? mark_held_locks+0x100/0x100 [ 916.501489] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 916.506178] ? __might_fault+0x12b/0x1e0 [ 916.510265] ? __cleanup_sighand+0x70/0x70 [ 916.514522] ? lock_downgrade+0x810/0x810 [ 916.518717] _do_fork+0x257/0xfe0 [ 916.522198] ? fork_idle+0x1d0/0x1d0 [ 916.525940] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 916.530729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 916.535492] ? do_syscall_64+0x26/0x610 [ 916.539481] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.544883] ? do_syscall_64+0x26/0x610 [ 916.548869] __x64_sys_clone+0xbf/0x150 [ 916.552856] do_syscall_64+0x103/0x610 [ 916.556810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.562024] RIP: 0033:0x4571fa [ 916.565247] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 916.584254] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 916.591967] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 916.599238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 916.606505] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 916.613884] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 916.621168] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 916.630569] Task in /syz5 killed as a result of limit of /syz5 [ 916.637334] memory: usage 46716kB, limit 0kB, failcnt 144 [ 916.643113] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.650070] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 916.656224] Memory cgroup stats for /syz5: cache:192KB rss:34664KB rss_huge:32768KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34536KB inactive_file:0KB active_file:0KB unevictable:0KB [ 916.677370] Memory cgroup out of memory: Kill process 28679 (syz-executor.5) score 9536000 or sacrifice child [ 916.687744] Killed process 28679 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 916.700890] oom_reaper: reaped process 28679 (syz-executor.5), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 916.711571] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 916.724007] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 916.729910] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 916.736778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.746148] Call Trace: [ 916.748745] dump_stack+0x172/0x1f0 [ 916.752382] dump_header+0x15e/0x929 [ 916.756105] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 916.761220] ? ___ratelimit+0x60/0x595 [ 916.765117] ? do_raw_spin_unlock+0x57/0x270 [ 916.769554] oom_kill_process.cold+0x10/0x6f5 [ 916.774231] ? task_will_free_mem+0x139/0x6e0 [ 916.778793] out_of_memory+0x936/0x12d0 [ 916.782796] ? oom_killer_disable+0x280/0x280 [ 916.787312] ? find_held_lock+0x35/0x130 [ 916.791401] mem_cgroup_out_of_memory+0x1d2/0x240 [ 916.796270] ? memcg_event_wake+0x230/0x230 [ 916.800641] ? do_raw_spin_unlock+0x57/0x270 [ 916.805142] ? _raw_spin_unlock+0x2d/0x50 [ 916.809311] try_charge+0x1028/0x15b0 [ 916.813182] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 916.818053] ? rcu_read_lock_sched_held+0x110/0x130 [ 916.823070] ? __alloc_pages_nodemask+0x63e/0x760 [ 916.827931] ? do_raw_spin_unlock+0x57/0x270 [ 916.832386] memcg_kmem_charge_memcg+0x7c/0x130 [ 916.837062] ? memcg_kmem_put_cache+0xb0/0xb0 [ 916.841552] ? cache_grow_begin+0x59a/0x8c0 [ 916.845882] ? lockdep_hardirqs_on+0x415/0x5d0 [ 916.850466] ? trace_hardirqs_on+0x67/0x230 [ 916.854806] cache_grow_begin+0x25f/0x8c0 [ 916.858956] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 916.864493] ? __cpuset_node_allowed+0x136/0x540 [ 916.869246] fallback_alloc+0x1fd/0x2d0 [ 916.873217] ____cache_alloc_node+0x1be/0x1e0 [ 916.877708] kmem_cache_alloc+0x1f3/0x700 [ 916.881850] ? inet_create+0x2f4/0xe10 [ 916.885755] sk_prot_alloc+0x67/0x2e0 [ 916.889549] ? lock_downgrade+0x810/0x810 [ 916.893694] sk_alloc+0x39/0xf70 [ 916.897054] inet_create+0x36a/0xe10 [ 916.900767] __sock_create+0x3e6/0x750 [ 916.904671] __sys_socket+0x103/0x220 [ 916.908468] ? move_addr_to_kernel+0x80/0x80 [ 916.912871] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 916.917625] ? do_syscall_64+0x26/0x610 [ 916.921593] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.926951] ? do_syscall_64+0x26/0x610 [ 916.930923] __x64_sys_socket+0x73/0xb0 [ 916.934895] do_syscall_64+0x103/0x610 [ 916.938795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 916.943998] RIP: 0033:0x45b797 [ 916.947191] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.966100] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 916.973808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 916.981074] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 916.988342] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 916.995630] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 917.002900] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 917.010403] Task in /syz1 killed as a result of limit of /syz1 [ 917.016466] memory: usage 74328kB, limit 0kB, failcnt 80 [ 917.022018] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.028787] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.035027] Memory cgroup stats for /syz1: cache:68KB rss:56108KB rss_huge:53248KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56032KB inactive_file:0KB active_file:0KB unevictable:0KB [ 917.055962] Memory cgroup out of memory: Kill process 8594 (syz-executor.1) score 9797000 or sacrifice child [ 917.066082] Killed process 8594 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 917.079488] oom_reaper: reaped process 8594 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 917.086574] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 917.108753] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 917.114365] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 917.121221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.121227] Call Trace: [ 917.121248] dump_stack+0x172/0x1f0 [ 917.121267] dump_header+0x15e/0x929 [ 917.121284] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 917.121299] ? ___ratelimit+0x60/0x595 [ 917.121312] ? do_raw_spin_unlock+0x57/0x270 [ 917.121329] oom_kill_process.cold+0x10/0x6f5 [ 917.121348] ? task_will_free_mem+0x139/0x6e0 [ 917.121361] ? find_held_lock+0x35/0x130 [ 917.121380] out_of_memory+0x936/0x12d0 [ 917.121397] ? lock_downgrade+0x810/0x810 [ 917.121414] ? oom_killer_disable+0x280/0x280 [ 917.121427] ? find_held_lock+0x35/0x130 [ 917.121453] mem_cgroup_out_of_memory+0x1d2/0x240 [ 917.121467] ? memcg_event_wake+0x230/0x230 [ 917.121485] ? do_raw_spin_unlock+0x57/0x270 [ 917.121506] ? _raw_spin_unlock+0x2d/0x50 [ 917.133494] try_charge+0x1028/0x15b0 [ 917.205366] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 917.210235] ? rcu_read_lock_sched_held+0x110/0x130 [ 917.215271] ? __alloc_pages_nodemask+0x63e/0x760 [ 917.221339] ? do_raw_spin_unlock+0x57/0x270 [ 917.225771] memcg_kmem_charge_memcg+0x7c/0x130 [ 917.230459] ? memcg_kmem_put_cache+0xb0/0xb0 [ 917.234971] ? cache_grow_begin+0x59a/0x8c0 [ 917.239315] ? lockdep_hardirqs_on+0x415/0x5d0 [ 917.243917] ? trace_hardirqs_on+0x67/0x230 [ 917.248284] cache_grow_begin+0x25f/0x8c0 [ 917.252453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 917.258008] ? __cpuset_node_allowed+0x136/0x540 [ 917.262782] fallback_alloc+0x1fd/0x2d0 [ 917.266776] ____cache_alloc_node+0x1be/0x1e0 [ 917.271289] kmem_cache_alloc+0x1f3/0x700 [ 917.275451] ? inet_create+0x2f4/0xe10 [ 917.279373] sk_prot_alloc+0x67/0x2e0 [ 917.283201] ? lock_downgrade+0x810/0x810 [ 917.287377] sk_alloc+0x39/0xf70 [ 917.290765] inet_create+0x36a/0xe10 [ 917.294509] __sock_create+0x3e6/0x750 [ 917.298442] __sys_socket+0x103/0x220 [ 917.302266] ? move_addr_to_kernel+0x80/0x80 [ 917.306703] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.311484] ? do_syscall_64+0x26/0x610 [ 917.315485] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.320878] ? do_syscall_64+0x26/0x610 [ 917.324882] __x64_sys_socket+0x73/0xb0 [ 917.328879] do_syscall_64+0x103/0x610 [ 917.332794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.338008] RIP: 0033:0x45b797 [ 917.341221] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.360134] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 917.367898] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 917.375194] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 917.382483] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 917.389780] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 917.397065] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 917.404748] net_ratelimit: 22 callbacks suppressed [ 917.404761] protocol 88fb is buggy, dev hsr_slave_0 [ 917.414871] protocol 88fb is buggy, dev hsr_slave_1 [ 917.420110] protocol 88fb is buggy, dev hsr_slave_0 [ 917.425181] protocol 88fb is buggy, dev hsr_slave_1 [ 917.430569] Task in /syz1 killed as a result of limit of /syz1 [ 917.436698] memory: usage 69936kB, limit 0kB, failcnt 86 [ 917.442595] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.449627] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.455872] Memory cgroup stats for /syz1: cache:68KB rss:51928KB rss_huge:49152KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51804KB inactive_file:0KB active_file:0KB unevictable:0KB [ 917.477708] Memory cgroup out of memory: Kill process 8657 (syz-executor.1) score 9797000 or sacrifice child [ 917.488028] Killed process 8657 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 917.499290] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 917.501713] oom_reaper: reaped process 8657 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 917.514685] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 917.527009] CPU: 0 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 917.533859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.543246] Call Trace: [ 917.545870] dump_stack+0x172/0x1f0 [ 917.549510] dump_header+0x15e/0x929 [ 917.553223] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 917.558330] ? ___ratelimit+0x60/0x595 [ 917.562219] ? do_raw_spin_unlock+0x57/0x270 [ 917.566632] oom_kill_process.cold+0x10/0x6f5 [ 917.571146] ? task_will_free_mem+0x139/0x6e0 [ 917.575641] out_of_memory+0x936/0x12d0 [ 917.579677] ? oom_killer_disable+0x280/0x280 [ 917.584185] ? find_held_lock+0x35/0x130 [ 917.588254] mem_cgroup_out_of_memory+0x1d2/0x240 [ 917.593106] ? memcg_event_wake+0x230/0x230 [ 917.597426] ? do_raw_spin_unlock+0x57/0x270 [ 917.601839] ? _raw_spin_unlock+0x2d/0x50 [ 917.605992] try_charge+0x1028/0x15b0 [ 917.609807] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 917.614650] ? rcu_read_lock_sched_held+0x110/0x130 [ 917.619692] ? __alloc_pages_nodemask+0x63e/0x760 [ 917.624550] ? do_raw_spin_unlock+0x57/0x270 [ 917.628963] memcg_kmem_charge_memcg+0x7c/0x130 [ 917.633734] ? memcg_kmem_put_cache+0xb0/0xb0 [ 917.638234] ? cache_grow_begin+0x59a/0x8c0 [ 917.642561] ? lockdep_hardirqs_on+0x415/0x5d0 [ 917.647178] ? trace_hardirqs_on+0x67/0x230 [ 917.651520] cache_grow_begin+0x25f/0x8c0 [ 917.655672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 917.661218] ? __cpuset_node_allowed+0x136/0x540 [ 917.665984] fallback_alloc+0x1fd/0x2d0 [ 917.669961] ____cache_alloc_node+0x1be/0x1e0 [ 917.674447] kmem_cache_alloc+0x1f3/0x700 [ 917.678599] ? inet6_create+0x2ea/0xf80 [ 917.682580] sk_prot_alloc+0x67/0x2e0 [ 917.686381] ? lock_downgrade+0x810/0x810 [ 917.690534] sk_alloc+0x39/0xf70 [ 917.693908] inet6_create+0x360/0xf80 [ 917.697699] __sock_create+0x3e6/0x750 [ 917.701588] __sys_socket+0x103/0x220 [ 917.705388] ? move_addr_to_kernel+0x80/0x80 [ 917.709786] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 917.714546] ? do_syscall_64+0x26/0x610 [ 917.718509] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.723878] ? do_syscall_64+0x26/0x610 [ 917.727860] __x64_sys_socket+0x73/0xb0 [ 917.731836] do_syscall_64+0x103/0x610 [ 917.735722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.740918] RIP: 0033:0x45b797 [ 917.744117] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.763035] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 917.770774] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 917.778038] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 917.785301] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 917.792573] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 917.799851] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 917.808166] Task in /syz2 killed as a result of limit of /syz2 [ 917.815823] memory: usage 84092kB, limit 0kB, failcnt 25 [ 917.824329] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.831233] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 917.837384] Memory cgroup stats for /syz2: cache:136KB rss:66484KB rss_huge:63488KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:66368KB inactive_file:4KB active_file:0KB unevictable:0KB [ 917.858221] Memory cgroup out of memory: Kill process 8615 (syz-executor.2) score 9796000 or sacrifice child [ 917.868380] Killed process 8615 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 917.882232] oom_reaper: reaped process 8615 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 917.886892] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 917.899606] protocol 88fb is buggy, dev hsr_slave_0 [ 917.909809] protocol 88fb is buggy, dev hsr_slave_1 [ 917.915097] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 917.920626] CPU: 1 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 917.927476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.927482] Call Trace: [ 917.927502] dump_stack+0x172/0x1f0 [ 917.927523] dump_header+0x15e/0x929 [ 917.927540] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 917.927557] ? ___ratelimit+0x60/0x595 [ 917.927571] ? do_raw_spin_unlock+0x57/0x270 [ 917.927590] oom_kill_process.cold+0x10/0x6f5 [ 917.943183] ? task_will_free_mem+0x139/0x6e0 [ 917.969225] ? find_held_lock+0x35/0x130 [ 917.973287] out_of_memory+0x936/0x12d0 [ 917.977263] ? lock_downgrade+0x810/0x810 [ 917.981414] ? oom_killer_disable+0x280/0x280 [ 917.985921] ? find_held_lock+0x35/0x130 [ 917.990001] mem_cgroup_out_of_memory+0x1d2/0x240 [ 917.994858] ? memcg_event_wake+0x230/0x230 [ 917.999191] ? do_raw_spin_unlock+0x57/0x270 [ 918.003604] ? _raw_spin_unlock+0x2d/0x50 [ 918.007769] try_charge+0x1028/0x15b0 [ 918.011598] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 918.016459] ? rcu_read_lock_sched_held+0x110/0x130 [ 918.021477] ? __alloc_pages_nodemask+0x63e/0x760 [ 918.026333] ? do_raw_spin_unlock+0x57/0x270 [ 918.030782] memcg_kmem_charge_memcg+0x7c/0x130 [ 918.035514] ? memcg_kmem_put_cache+0xb0/0xb0 [ 918.040027] ? cache_grow_begin+0x59a/0x8c0 [ 918.044369] ? lockdep_hardirqs_on+0x415/0x5d0 [ 918.048956] ? trace_hardirqs_on+0x67/0x230 [ 918.053381] cache_grow_begin+0x25f/0x8c0 [ 918.057549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 918.063094] ? __cpuset_node_allowed+0x136/0x540 [ 918.067862] fallback_alloc+0x1fd/0x2d0 [ 918.071841] ____cache_alloc_node+0x1be/0x1e0 [ 918.076343] kmem_cache_alloc+0x1f3/0x700 [ 918.080497] ? inet6_create+0x2ea/0xf80 [ 918.084575] sk_prot_alloc+0x67/0x2e0 [ 918.088380] ? lock_downgrade+0x810/0x810 [ 918.092544] sk_alloc+0x39/0xf70 [ 918.095931] inet6_create+0x360/0xf80 [ 918.099735] __sock_create+0x3e6/0x750 [ 918.103647] __sys_socket+0x103/0x220 [ 918.107467] ? move_addr_to_kernel+0x80/0x80 [ 918.111889] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.116647] ? do_syscall_64+0x26/0x610 [ 918.120625] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.125988] ? do_syscall_64+0x26/0x610 [ 918.129959] __x64_sys_socket+0x73/0xb0 [ 918.133954] do_syscall_64+0x103/0x610 [ 918.137847] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.143033] RIP: 0033:0x45b797 [ 918.146403] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.165328] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 918.173057] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 918.180429] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 918.187699] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 918.194970] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 918.202239] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 918.209804] Task in /syz2 killed as a result of limit of /syz2 [ 918.215904] memory: usage 79704kB, limit 0kB, failcnt 31 [ 918.223361] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.235068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.241320] Memory cgroup stats for /syz2: cache:136KB rss:62260KB rss_huge:59392KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:62144KB inactive_file:4KB active_file:0KB unevictable:0KB [ 918.262115] Memory cgroup out of memory: Kill process 8629 (syz-executor.2) score 9796000 or sacrifice child [ 918.272297] Killed process 8629 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 918.285766] oom_reaper: reaped process 8629 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 918.287597] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 918.309273] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 918.315063] CPU: 0 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 918.322008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.332180] Call Trace: [ 918.334791] dump_stack+0x172/0x1f0 [ 918.338436] dump_header+0x15e/0x929 [ 918.342165] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 918.347283] ? ___ratelimit+0x60/0x595 [ 918.351184] ? do_raw_spin_unlock+0x57/0x270 [ 918.355615] oom_kill_process.cold+0x10/0x6f5 [ 918.360117] ? task_will_free_mem+0x139/0x6e0 [ 918.364640] out_of_memory+0x936/0x12d0 [ 918.368640] ? oom_killer_disable+0x280/0x280 [ 918.373155] ? find_held_lock+0x35/0x130 [ 918.377242] mem_cgroup_out_of_memory+0x1d2/0x240 [ 918.382136] ? memcg_event_wake+0x230/0x230 [ 918.386499] ? do_raw_spin_unlock+0x57/0x270 [ 918.390929] ? _raw_spin_unlock+0x2d/0x50 [ 918.395186] try_charge+0x1028/0x15b0 [ 918.398990] ? find_held_lock+0x35/0x130 [ 918.403075] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 918.407925] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 918.412783] ? find_held_lock+0x35/0x130 [ 918.416856] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 918.421716] memcg_kmem_charge_memcg+0x7c/0x130 [ 918.426390] ? memcg_kmem_put_cache+0xb0/0xb0 [ 918.430901] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 918.435759] memcg_kmem_charge+0x136/0x300 [ 918.439996] __alloc_pages_nodemask+0x3c6/0x760 [ 918.444673] ? __alloc_pages_slowpath+0x2870/0x2870 [ 918.449715] ? lockdep_hardirqs_on+0x415/0x5d0 [ 918.454330] ? trace_hardirqs_on+0x67/0x230 [ 918.458667] ? kasan_check_read+0x11/0x20 [ 918.462827] copy_process.part.0+0x3e0/0x7970 [ 918.467330] ? mark_held_locks+0x100/0x100 [ 918.471582] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 918.476294] ? __might_fault+0x12b/0x1e0 [ 918.480364] ? __cleanup_sighand+0x70/0x70 [ 918.484601] ? lock_downgrade+0x810/0x810 [ 918.488762] _do_fork+0x257/0xfe0 [ 918.492232] ? fork_idle+0x1d0/0x1d0 [ 918.495962] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.500726] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.505547] ? do_syscall_64+0x26/0x610 [ 918.509531] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.514921] ? do_syscall_64+0x26/0x610 [ 918.518911] __x64_sys_clone+0xbf/0x150 [ 918.522883] do_syscall_64+0x103/0x610 [ 918.526780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.532052] RIP: 0033:0x4571fa [ 918.535255] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 918.554422] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 918.563189] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 918.570467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 918.577749] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 918.585108] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 918.592384] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 918.601060] Task in /syz5 killed as a result of limit of /syz5 [ 918.607949] memory: usage 44364kB, limit 0kB, failcnt 186 [ 918.613968] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.620911] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.627092] Memory cgroup stats for /syz5: cache:192KB rss:32520KB rss_huge:30720KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32392KB inactive_file:0KB active_file:0KB unevictable:0KB [ 918.650288] Memory cgroup out of memory: Kill process 19084 (syz-executor.5) score 9535000 or sacrifice child [ 918.660841] Killed process 19084 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 918.672867] oom_reaper: reaped process 19084 (syz-executor.5), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 918.683646] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 918.699523] protocol 88fb is buggy, dev hsr_slave_0 [ 918.701642] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 918.704677] protocol 88fb is buggy, dev hsr_slave_1 [ 918.713029] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 918.715265] protocol 88fb is buggy, dev hsr_slave_0 [ 918.721986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.721993] Call Trace: [ 918.722018] dump_stack+0x172/0x1f0 [ 918.722037] dump_header+0x15e/0x929 [ 918.722054] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 918.722071] ? ___ratelimit+0x60/0x595 [ 918.722091] ? do_raw_spin_unlock+0x57/0x270 [ 918.727210] protocol 88fb is buggy, dev hsr_slave_1 [ 918.736531] oom_kill_process.cold+0x10/0x6f5 [ 918.736553] ? task_will_free_mem+0x139/0x6e0 [ 918.736579] out_of_memory+0x936/0x12d0 [ 918.778041] ? oom_killer_disable+0x280/0x280 [ 918.782547] ? find_held_lock+0x35/0x130 [ 918.786635] mem_cgroup_out_of_memory+0x1d2/0x240 [ 918.791478] ? memcg_event_wake+0x230/0x230 [ 918.795814] ? do_raw_spin_unlock+0x57/0x270 [ 918.800229] ? _raw_spin_unlock+0x2d/0x50 [ 918.804374] try_charge+0x1028/0x15b0 [ 918.808277] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 918.813507] ? rcu_read_lock_sched_held+0x110/0x130 [ 918.818526] ? __alloc_pages_nodemask+0x63e/0x760 [ 918.823370] ? do_raw_spin_unlock+0x57/0x270 [ 918.827801] memcg_kmem_charge_memcg+0x7c/0x130 [ 918.832478] ? memcg_kmem_put_cache+0xb0/0xb0 [ 918.836999] ? cache_grow_begin+0x59a/0x8c0 [ 918.841330] ? lockdep_hardirqs_on+0x415/0x5d0 [ 918.845922] ? trace_hardirqs_on+0x67/0x230 [ 918.850248] cache_grow_begin+0x25f/0x8c0 [ 918.854402] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 918.859942] ? __cpuset_node_allowed+0x136/0x540 [ 918.864726] fallback_alloc+0x1fd/0x2d0 [ 918.868698] ____cache_alloc_node+0x1be/0x1e0 [ 918.873198] kmem_cache_alloc+0x1f3/0x700 [ 918.877341] ? inet_create+0x2f4/0xe10 [ 918.881221] sk_prot_alloc+0x67/0x2e0 [ 918.885035] ? lock_downgrade+0x810/0x810 [ 918.889188] sk_alloc+0x39/0xf70 [ 918.892547] inet_create+0x36a/0xe10 [ 918.896257] __sock_create+0x3e6/0x750 [ 918.900139] __sys_socket+0x103/0x220 [ 918.903934] ? move_addr_to_kernel+0x80/0x80 [ 918.908328] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 918.913072] ? do_syscall_64+0x26/0x610 [ 918.917041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.922420] ? do_syscall_64+0x26/0x610 [ 918.926487] __x64_sys_socket+0x73/0xb0 [ 918.930459] do_syscall_64+0x103/0x610 [ 918.934346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 918.939527] RIP: 0033:0x45b797 [ 918.942709] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.961634] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 918.969366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 918.976639] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 918.983907] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 918.991185] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 918.998454] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 919.006903] Task in /syz1 killed as a result of limit of /syz1 [ 919.013870] memory: usage 65544kB, limit 0kB, failcnt 92 [ 919.019614] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.026499] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.032952] Memory cgroup stats for /syz1: cache:68KB rss:47736KB rss_huge:45056KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47576KB inactive_file:0KB active_file:0KB unevictable:0KB [ 919.054183] Memory cgroup out of memory: Kill process 8699 (syz-executor.1) score 9797000 or sacrifice child [ 919.064430] Killed process 8699 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 919.075738] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 919.078083] oom_reaper: reaped process 8699 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.089785] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 919.104503] CPU: 0 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 919.111375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.120745] Call Trace: [ 919.120769] dump_stack+0x172/0x1f0 [ 919.120789] dump_header+0x15e/0x929 [ 919.120805] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 919.120821] ? ___ratelimit+0x60/0x595 [ 919.120834] ? do_raw_spin_unlock+0x57/0x270 [ 919.120852] oom_kill_process.cold+0x10/0x6f5 [ 919.120872] ? task_will_free_mem+0x139/0x6e0 [ 919.120893] out_of_memory+0x936/0x12d0 [ 919.120914] ? oom_killer_disable+0x280/0x280 [ 919.120927] ? find_held_lock+0x35/0x130 [ 919.120951] mem_cgroup_out_of_memory+0x1d2/0x240 [ 919.130906] ? memcg_event_wake+0x230/0x230 [ 919.130927] ? do_raw_spin_unlock+0x57/0x270 [ 919.130942] ? _raw_spin_unlock+0x2d/0x50 [ 919.130960] try_charge+0x1028/0x15b0 [ 919.130982] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 919.131002] ? rcu_read_lock_sched_held+0x110/0x130 [ 919.131021] ? __alloc_pages_nodemask+0x63e/0x760 [ 919.202228] ? do_raw_spin_unlock+0x57/0x270 [ 919.206655] memcg_kmem_charge_memcg+0x7c/0x130 [ 919.211331] ? memcg_kmem_put_cache+0xb0/0xb0 [ 919.215826] ? cache_grow_begin+0x59a/0x8c0 [ 919.220185] ? lockdep_hardirqs_on+0x415/0x5d0 [ 919.224799] ? trace_hardirqs_on+0x67/0x230 [ 919.229162] cache_grow_begin+0x25f/0x8c0 [ 919.233347] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 919.238894] ? __cpuset_node_allowed+0x136/0x540 [ 919.243671] fallback_alloc+0x1fd/0x2d0 [ 919.247669] ____cache_alloc_node+0x1be/0x1e0 [ 919.252190] kmem_cache_alloc+0x1f3/0x700 [ 919.256340] ? inet6_create+0x2ea/0xf80 [ 919.260329] sk_prot_alloc+0x67/0x2e0 [ 919.264150] ? lock_downgrade+0x810/0x810 [ 919.268323] sk_alloc+0x39/0xf70 [ 919.271706] inet6_create+0x360/0xf80 [ 919.275532] __sock_create+0x3e6/0x750 [ 919.279448] __sys_socket+0x103/0x220 [ 919.283272] ? move_addr_to_kernel+0x80/0x80 [ 919.287698] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 919.292456] ? do_syscall_64+0x26/0x610 [ 919.296431] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.301807] ? do_syscall_64+0x26/0x610 [ 919.305799] __x64_sys_socket+0x73/0xb0 [ 919.309784] do_syscall_64+0x103/0x610 [ 919.313690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.318908] RIP: 0033:0x45b797 [ 919.322111] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.341115] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 919.348838] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 919.356104] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 919.363381] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 919.370695] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 919.377965] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 919.387244] Task in /syz2 killed as a result of limit of /syz2 [ 919.394139] memory: usage 75308kB, limit 0kB, failcnt 37 [ 919.400081] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.406967] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.413299] Memory cgroup stats for /syz2: cache:136KB rss:58036KB rss_huge:55296KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:57920KB inactive_file:4KB active_file:0KB unevictable:0KB [ 919.434250] Memory cgroup out of memory: Kill process 8680 (syz-executor.2) score 9796000 or sacrifice child [ 919.444530] Killed process 8680 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 919.458665] oom_reaper: reaped process 8680 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.469308] Memory cgroup out of memory: Kill process 28671 (syz-executor.5) score 9534000 or sacrifice child [ 919.480070] Killed process 28671 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 919.491835] Memory cgroup out of memory: Kill process 8773 (syz-executor.1) score 9797000 or sacrifice child [ 919.505320] Killed process 8773 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 919.544507] Memory cgroup out of memory: Kill process 8796 (syz-executor.1) score 9797000 or sacrifice child [ 919.558014] Killed process 8796 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 919.575566] Memory cgroup out of memory: Kill process 8707 (syz-executor.2) score 9796000 or sacrifice child [ 919.588821] Killed process 8707 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 919.611072] Memory cgroup out of memory: Kill process 8723 (syz-executor.2) score 9796000 or sacrifice child [ 919.621616] Killed process 8723 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 919.635481] Memory cgroup out of memory: Kill process 28804 (syz-executor.5) score 9534000 or sacrifice child [ 919.636108] oom_reaper: reaped process 8723 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.648616] Killed process 28804 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 919.670552] Memory cgroup out of memory: Kill process 8850 (syz-executor.1) score 9797000 or sacrifice child [ 919.691426] Killed process 8850 (syz-executor.1) total-vm:72572kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 919.696854] oom_reaper: reaped process 28804 (syz-executor.5), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 919.714624] Memory cgroup out of memory: Kill process 18088 (syz-executor.1) score 9565000 or sacrifice child [ 919.725543] Killed process 18088 (syz-executor.1) total-vm:72848kB, anon-rss:2232kB, file-rss:35880kB, shmem-rss:0kB [ 919.737253] oom_reaper: reaped process 18088 (syz-executor.1), now anon-rss:0kB, file-rss:34920kB, shmem-rss:0kB [ 919.748085] Memory cgroup out of memory: Kill process 8759 (syz-executor.2) score 9796000 or sacrifice child [ 919.760704] Killed process 8759 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 919.774552] oom_reaper: reaped process 8759 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.785353] Memory cgroup out of memory: Kill process 20704 (syz-executor.5) score 9532000 or sacrifice child [ 919.798802] Killed process 20708 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 919.810863] oom_reaper: reaped process 20708 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.827267] Memory cgroup out of memory: Kill process 20704 (syz-executor.5) score 9532000 or sacrifice child [ 919.848344] Killed process 20704 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 919.861283] oom_reaper: reaped process 20704 (syz-executor.5), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 919.867716] Memory cgroup out of memory: Kill process 11231 (syz-executor.1) score 9547000 or sacrifice child [ 919.886643] Killed process 11231 (syz-executor.1) total-vm:72452kB, anon-rss:2200kB, file-rss:35860kB, shmem-rss:0kB [ 919.898501] oom_reaper: reaped process 11231 (syz-executor.1), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 919.900998] Memory cgroup out of memory: Kill process 18020 (syz-executor.1) score 9545000 or sacrifice child [ 919.925850] Killed process 18020 (syz-executor.1) total-vm:72716kB, anon-rss:2224kB, file-rss:35824kB, shmem-rss:0kB [ 919.938524] oom_reaper: reaped process 18020 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 919.946995] Memory cgroup out of memory: Kill process 8778 (syz-executor.2) score 9796000 or sacrifice child [ 919.964757] Killed process 8778 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 919.976676] oom_reaper: reaped process 8778 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 919.978200] Memory cgroup out of memory: Kill process 28486 (syz-executor.5) score 9287000 or sacrifice child [ 920.004132] Killed process 28486 (syz-executor.5) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 920.017379] Memory cgroup out of memory: Kill process 18001 (syz-executor.1) score 9542000 or sacrifice child [ 920.018184] oom_reaper: reaped process 28486 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.033260] Killed process 18001 (syz-executor.1) total-vm:72584kB, anon-rss:2216kB, file-rss:35820kB, shmem-rss:0kB [ 920.068388] Memory cgroup out of memory: Kill process 19176 (syz-executor.1) score 9542000 or sacrifice child [ 920.078887] Killed process 19176 (syz-executor.1) total-vm:72584kB, anon-rss:2216kB, file-rss:35820kB, shmem-rss:0kB [ 920.091123] Memory cgroup out of memory: Kill process 8812 (syz-executor.2) score 9796000 or sacrifice child [ 920.096589] oom_reaper: reaped process 19176 (syz-executor.1), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 920.103259] Killed process 8812 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 920.141478] Memory cgroup out of memory: Kill process 8875 (syz-executor.2) score 9796000 or sacrifice child [ 920.156002] Killed process 8875 (syz-executor.2) total-vm:72572kB, anon-rss:4240kB, file-rss:34816kB, shmem-rss:0kB [ 920.168699] oom_reaper: reaped process 8875 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.170766] Memory cgroup out of memory: Kill process 28982 (syz-executor.5) score 9287000 or sacrifice child [ 920.189474] Killed process 28982 (syz-executor.5) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 920.216813] Memory cgroup out of memory: Kill process 20753 (syz-executor.1) score 9540000 or sacrifice child [ 920.219619] oom_reaper: reaped process 28982 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.229126] Killed process 20759 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 920.263576] Memory cgroup out of memory: Kill process 17910 (syz-executor.2) score 9559000 or sacrifice child [ 920.274041] Killed process 17910 (syz-executor.2) total-vm:72848kB, anon-rss:2212kB, file-rss:35884kB, shmem-rss:0kB [ 920.285766] Memory cgroup out of memory: Kill process 29168 (syz-executor.5) score 9287000 or sacrifice child [ 920.286983] oom_reaper: reaped process 17910 (syz-executor.2), now anon-rss:0kB, file-rss:34924kB, shmem-rss:0kB [ 920.298146] Killed process 29168 (syz-executor.5) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 920.328190] Memory cgroup out of memory: Kill process 20734 (syz-executor.5) score 9285000 or sacrifice child [ 920.338733] Killed process 20734 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 920.350703] oom_reaper: reaped process 20734 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.365910] Memory cgroup out of memory: Kill process 20753 (syz-executor.1) score 9540000 or sacrifice child [ 920.376451] Killed process 20753 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:35824kB, shmem-rss:0kB [ 920.396877] oom_reaper: reaped process 20753 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 920.407650] Memory cgroup out of memory: Kill process 17957 (syz-executor.2) score 9557000 or sacrifice child [ 920.422001] Killed process 17957 (syz-executor.2) total-vm:72848kB, anon-rss:2212kB, file-rss:35876kB, shmem-rss:0kB [ 920.435229] Memory cgroup out of memory: Kill process 20819 (syz-executor.5) score 9285000 or sacrifice child [ 920.445753] Killed process 20819 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 920.458747] Memory cgroup out of memory: Kill process 22191 (syz-executor.5) score 9285000 or sacrifice child [ 920.473912] Killed process 22191 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 920.485495] oom_reaper: reaped process 22191 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.485504] Memory cgroup out of memory: Kill process 20809 (syz-executor.1) score 9540000 or sacrifice child [ 920.485574] Killed process 20809 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:35824kB, shmem-rss:0kB [ 920.519935] Memory cgroup out of memory: Kill process 11176 (syz-executor.2) score 9547000 or sacrifice child [ 920.524702] oom_reaper: reaped process 20809 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 920.532429] Killed process 11176 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:35860kB, shmem-rss:0kB [ 920.553055] oom_kill_process: 30 callbacks suppressed [ 920.553074] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 920.573438] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 920.579125] CPU: 1 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 920.586094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.595479] Call Trace: [ 920.598086] dump_stack+0x172/0x1f0 [ 920.601736] dump_header+0x15e/0x929 [ 920.605473] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 920.610601] ? ___ratelimit+0x60/0x595 [ 920.614532] oom_kill_process.cold+0x10/0x6f5 [ 920.619052] ? task_will_free_mem+0x139/0x6e0 [ 920.623558] out_of_memory+0x936/0x12d0 [ 920.627550] ? oom_killer_disable+0x280/0x280 [ 920.632041] ? find_held_lock+0x35/0x130 [ 920.636151] mem_cgroup_out_of_memory+0x1d2/0x240 [ 920.641010] ? memcg_event_wake+0x230/0x230 [ 920.645388] ? do_raw_spin_unlock+0x57/0x270 [ 920.649794] ? _raw_spin_unlock+0x2d/0x50 [ 920.653939] try_charge+0x1028/0x15b0 [ 920.657754] ? find_held_lock+0x35/0x130 [ 920.661815] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 920.666670] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 920.671522] ? find_held_lock+0x35/0x130 [ 920.675596] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 920.680468] memcg_kmem_charge_memcg+0x7c/0x130 [ 920.685142] ? memcg_kmem_put_cache+0xb0/0xb0 [ 920.689658] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 920.694514] memcg_kmem_charge+0x136/0x300 [ 920.699377] __alloc_pages_nodemask+0x3c6/0x760 [ 920.704049] ? __alloc_pages_slowpath+0x2870/0x2870 [ 920.709154] ? lockdep_hardirqs_on+0x415/0x5d0 [ 920.713757] ? trace_hardirqs_on+0x67/0x230 [ 920.718167] ? kasan_check_read+0x11/0x20 [ 920.722320] copy_process.part.0+0x3e0/0x7970 [ 920.726814] ? mark_held_locks+0x100/0x100 [ 920.731062] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 920.735738] ? __might_fault+0x12b/0x1e0 [ 920.739794] ? __cleanup_sighand+0x70/0x70 [ 920.744022] ? lock_downgrade+0x810/0x810 [ 920.748282] _do_fork+0x257/0xfe0 [ 920.751751] ? fork_idle+0x1d0/0x1d0 [ 920.755466] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.760237] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 920.765004] ? do_syscall_64+0x26/0x610 [ 920.768980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.774340] ? do_syscall_64+0x26/0x610 [ 920.778334] __x64_sys_clone+0xbf/0x150 [ 920.782311] do_syscall_64+0x103/0x610 [ 920.786215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 920.791404] RIP: 0033:0x4571fa [ 920.794594] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 920.813515] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 920.821239] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 920.828506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 920.835774] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 920.843043] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 920.850312] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 920.857975] Task in /syz5 killed as a result of limit of /syz5 [ 920.864164] memory: usage 20108kB, limit 0kB, failcnt 252 [ 920.869858] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 920.876623] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 920.882877] Memory cgroup stats for /syz5: cache:192KB rss:10892KB rss_huge:10240KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10860KB inactive_file:0KB active_file:0KB unevictable:0KB [ 920.903846] Memory cgroup out of memory: Kill process 22311 (syz-executor.5) score 9285000 or sacrifice child [ 920.914078] Killed process 22311 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 920.925299] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 920.926904] oom_reaper: reaped process 22311 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 920.939141] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 920.954140] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 920.961013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 920.970379] Call Trace: [ 920.972985] dump_stack+0x172/0x1f0 [ 920.976637] dump_header+0x15e/0x929 [ 920.980385] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 920.985512] ? ___ratelimit+0x60/0x595 [ 920.989413] ? do_raw_spin_unlock+0x57/0x270 [ 920.993841] oom_kill_process.cold+0x10/0x6f5 [ 920.998337] ? task_will_free_mem+0x139/0x6e0 [ 921.002836] out_of_memory+0x936/0x12d0 [ 921.006805] ? oom_killer_disable+0x280/0x280 [ 921.011290] ? find_held_lock+0x35/0x130 [ 921.015348] mem_cgroup_out_of_memory+0x1d2/0x240 [ 921.020189] ? memcg_event_wake+0x230/0x230 [ 921.024516] ? do_raw_spin_unlock+0x57/0x270 [ 921.028922] ? _raw_spin_unlock+0x2d/0x50 [ 921.033072] try_charge+0x1028/0x15b0 [ 921.036886] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.041726] ? rcu_read_lock_sched_held+0x110/0x130 [ 921.046756] ? __alloc_pages_nodemask+0x63e/0x760 [ 921.051597] ? do_raw_spin_unlock+0x57/0x270 [ 921.056020] memcg_kmem_charge_memcg+0x7c/0x130 [ 921.060713] ? memcg_kmem_put_cache+0xb0/0xb0 [ 921.065245] ? cache_grow_begin+0x59a/0x8c0 [ 921.069603] ? lockdep_hardirqs_on+0x415/0x5d0 [ 921.074485] ? trace_hardirqs_on+0x67/0x230 [ 921.078923] cache_grow_begin+0x25f/0x8c0 [ 921.083082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 921.088641] ? __cpuset_node_allowed+0x136/0x540 [ 921.093425] fallback_alloc+0x1fd/0x2d0 [ 921.097411] ____cache_alloc_node+0x1be/0x1e0 [ 921.101931] kmem_cache_alloc+0x1f3/0x700 [ 921.106088] ? inet_create+0x2f4/0xe10 [ 921.110000] sk_prot_alloc+0x67/0x2e0 [ 921.113806] ? lock_downgrade+0x810/0x810 [ 921.117980] sk_alloc+0x39/0xf70 [ 921.121379] inet_create+0x36a/0xe10 [ 921.125114] __sock_create+0x3e6/0x750 [ 921.129027] __sys_socket+0x103/0x220 [ 921.132839] ? move_addr_to_kernel+0x80/0x80 [ 921.137423] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.142232] ? do_syscall_64+0x26/0x610 [ 921.146227] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.151595] ? do_syscall_64+0x26/0x610 [ 921.155596] __x64_sys_socket+0x73/0xb0 [ 921.159579] do_syscall_64+0x103/0x610 [ 921.163491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.168685] RIP: 0033:0x45b797 [ 921.171882] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.190799] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 921.198597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 921.205900] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 921.213445] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 921.220711] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 921.228003] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 921.235515] Task in /syz1 killed as a result of limit of /syz1 [ 921.241679] memory: usage 30592kB, limit 0kB, failcnt 224 [ 921.247246] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.254130] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.260392] Memory cgroup stats for /syz1: cache:68KB rss:15540KB rss_huge:14336KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15504KB inactive_file:0KB active_file:0KB unevictable:0KB [ 921.281391] Memory cgroup out of memory: Kill process 20782 (syz-executor.1) score 9538000 or sacrifice child [ 921.291779] Killed process 20789 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 921.302973] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 921.303889] oom_reaper: reaped process 20789 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 921.316845] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 921.331409] CPU: 1 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 921.338265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.347622] Call Trace: [ 921.350211] dump_stack+0x172/0x1f0 [ 921.353833] dump_header+0x15e/0x929 [ 921.357540] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 921.362644] ? ___ratelimit+0x60/0x595 [ 921.366525] ? do_raw_spin_unlock+0x57/0x270 [ 921.370944] oom_kill_process.cold+0x10/0x6f5 [ 921.375455] ? task_will_free_mem+0x139/0x6e0 [ 921.379952] out_of_memory+0x936/0x12d0 [ 921.383938] ? oom_killer_disable+0x280/0x280 [ 921.388439] ? find_held_lock+0x35/0x130 [ 921.392504] mem_cgroup_out_of_memory+0x1d2/0x240 [ 921.397343] ? memcg_event_wake+0x230/0x230 [ 921.401694] ? do_raw_spin_unlock+0x57/0x270 [ 921.406107] ? _raw_spin_unlock+0x2d/0x50 [ 921.410261] try_charge+0x1028/0x15b0 [ 921.414072] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.418920] ? rcu_read_lock_sched_held+0x110/0x130 [ 921.423937] ? __alloc_pages_nodemask+0x63e/0x760 [ 921.428796] ? do_raw_spin_unlock+0x57/0x270 [ 921.433214] memcg_kmem_charge_memcg+0x7c/0x130 [ 921.437951] ? memcg_kmem_put_cache+0xb0/0xb0 [ 921.442463] ? cache_grow_begin+0x59a/0x8c0 [ 921.446787] ? lockdep_hardirqs_on+0x415/0x5d0 [ 921.451377] ? trace_hardirqs_on+0x67/0x230 [ 921.455699] cache_grow_begin+0x25f/0x8c0 [ 921.459863] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 921.465402] ? __cpuset_node_allowed+0x136/0x540 [ 921.470157] fallback_alloc+0x1fd/0x2d0 [ 921.474135] ____cache_alloc_node+0x1be/0x1e0 [ 921.478632] kmem_cache_alloc+0x1f3/0x700 [ 921.482868] ? inet6_create+0x2ea/0xf80 [ 921.486844] sk_prot_alloc+0x67/0x2e0 [ 921.490728] ? lock_downgrade+0x810/0x810 [ 921.494877] sk_alloc+0x39/0xf70 [ 921.498243] inet6_create+0x360/0xf80 [ 921.502047] __sock_create+0x3e6/0x750 [ 921.505956] __sys_socket+0x103/0x220 [ 921.509761] ? move_addr_to_kernel+0x80/0x80 [ 921.514190] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.518952] ? do_syscall_64+0x26/0x610 [ 921.522924] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.528285] ? do_syscall_64+0x26/0x610 [ 921.532259] __x64_sys_socket+0x73/0xb0 [ 921.536245] do_syscall_64+0x103/0x610 [ 921.540137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.545325] RIP: 0033:0x45b797 [ 921.548507] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.567405] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 921.575114] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 921.582384] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 921.589660] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 921.596948] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 921.604305] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 921.614401] Task in /syz2 killed as a result of limit of /syz2 [ 921.624091] memory: usage 37416kB, limit 0kB, failcnt 139 [ 921.629862] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.636764] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.643132] Memory cgroup stats for /syz2: cache:136KB rss:21952KB rss_huge:20480KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21892KB inactive_file:4KB active_file:0KB unevictable:0KB [ 921.664050] Memory cgroup out of memory: Kill process 11155 (syz-executor.2) score 9543000 or sacrifice child [ 921.674455] Killed process 11155 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35852kB, shmem-rss:0kB [ 921.687055] oom_reaper: reaped process 11155 (syz-executor.2), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 921.691795] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 921.715897] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 921.721459] CPU: 1 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 921.728401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.737766] Call Trace: [ 921.740356] dump_stack+0x172/0x1f0 [ 921.744595] dump_header+0x15e/0x929 [ 921.748408] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 921.753565] ? ___ratelimit+0x60/0x595 [ 921.757468] ? do_raw_spin_unlock+0x57/0x270 [ 921.761967] oom_kill_process.cold+0x10/0x6f5 [ 921.766471] ? task_will_free_mem+0x139/0x6e0 [ 921.770987] out_of_memory+0x936/0x12d0 [ 921.775018] ? oom_killer_disable+0x280/0x280 [ 921.779527] ? find_held_lock+0x35/0x130 [ 921.783603] mem_cgroup_out_of_memory+0x1d2/0x240 [ 921.788447] ? memcg_event_wake+0x230/0x230 [ 921.792785] ? do_raw_spin_unlock+0x57/0x270 [ 921.797217] ? _raw_spin_unlock+0x2d/0x50 [ 921.801385] try_charge+0x1028/0x15b0 [ 921.805217] ? find_held_lock+0x35/0x130 [ 921.809297] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.814153] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 921.819032] ? find_held_lock+0x35/0x130 [ 921.823115] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 921.827987] memcg_kmem_charge_memcg+0x7c/0x130 [ 921.832685] ? memcg_kmem_put_cache+0xb0/0xb0 [ 921.837209] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 921.842054] memcg_kmem_charge+0x136/0x300 [ 921.846299] __alloc_pages_nodemask+0x3c6/0x760 [ 921.850982] ? __alloc_pages_slowpath+0x2870/0x2870 [ 921.856017] ? lockdep_hardirqs_on+0x415/0x5d0 [ 921.860611] ? trace_hardirqs_on+0x67/0x230 [ 921.864932] ? kasan_check_read+0x11/0x20 [ 921.869093] copy_process.part.0+0x3e0/0x7970 [ 921.873592] ? mark_held_locks+0x100/0x100 [ 921.877876] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 921.882574] ? __might_fault+0x12b/0x1e0 [ 921.886638] ? __cleanup_sighand+0x70/0x70 [ 921.890897] ? lock_downgrade+0x810/0x810 [ 921.895047] _do_fork+0x257/0xfe0 [ 921.898497] ? fork_idle+0x1d0/0x1d0 [ 921.902210] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.906963] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.911729] ? do_syscall_64+0x26/0x610 [ 921.915704] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.921087] ? do_syscall_64+0x26/0x610 [ 921.925062] __x64_sys_clone+0xbf/0x150 [ 921.929060] do_syscall_64+0x103/0x610 [ 921.932969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.938153] RIP: 0033:0x4571fa [ 921.941351] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 921.960268] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 921.967978] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 921.975335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 921.982625] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 921.989895] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 921.997165] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 922.005700] Task in /syz5 killed as a result of limit of /syz5 [ 922.012959] memory: usage 17780kB, limit 0kB, failcnt 258 [ 922.018529] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.027371] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.034329] Memory cgroup stats for /syz5: cache:192KB rss:8748KB rss_huge:8192KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8716KB inactive_file:0KB active_file:0KB unevictable:0KB [ 922.055249] Memory cgroup out of memory: Kill process 22436 (syz-executor.5) score 9285000 or sacrifice child [ 922.065599] Killed process 22436 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 922.077766] oom_reaper: reaped process 22436 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 922.079397] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 922.103315] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 922.109350] CPU: 0 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 922.116230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.125613] Call Trace: [ 922.128218] dump_stack+0x172/0x1f0 [ 922.131851] dump_header+0x15e/0x929 [ 922.135620] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 922.140731] ? ___ratelimit+0x60/0x595 [ 922.144640] ? do_raw_spin_unlock+0x57/0x270 [ 922.149254] oom_kill_process.cold+0x10/0x6f5 [ 922.153757] ? task_will_free_mem+0x139/0x6e0 [ 922.158255] out_of_memory+0x936/0x12d0 [ 922.162234] ? oom_killer_disable+0x280/0x280 [ 922.166756] ? find_held_lock+0x35/0x130 [ 922.170822] mem_cgroup_out_of_memory+0x1d2/0x240 [ 922.175658] ? memcg_event_wake+0x230/0x230 [ 922.180000] ? do_raw_spin_unlock+0x57/0x270 [ 922.184422] ? _raw_spin_unlock+0x2d/0x50 [ 922.188566] try_charge+0x1028/0x15b0 [ 922.192371] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 922.197237] ? rcu_read_lock_sched_held+0x110/0x130 [ 922.202288] ? __alloc_pages_nodemask+0x63e/0x760 [ 922.207135] ? do_raw_spin_unlock+0x57/0x270 [ 922.211558] memcg_kmem_charge_memcg+0x7c/0x130 [ 922.216238] ? memcg_kmem_put_cache+0xb0/0xb0 [ 922.220764] ? cache_grow_begin+0x59a/0x8c0 [ 922.234063] ? lockdep_hardirqs_on+0x415/0x5d0 [ 922.238654] ? trace_hardirqs_on+0x67/0x230 [ 922.243010] cache_grow_begin+0x25f/0x8c0 [ 922.247158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 922.252728] ? __cpuset_node_allowed+0x136/0x540 [ 922.257487] fallback_alloc+0x1fd/0x2d0 [ 922.261460] ____cache_alloc_node+0x1be/0x1e0 [ 922.265966] kmem_cache_alloc+0x1f3/0x700 [ 922.270119] ? inet_create+0x2f4/0xe10 [ 922.274026] sk_prot_alloc+0x67/0x2e0 [ 922.277824] ? lock_downgrade+0x810/0x810 [ 922.281964] sk_alloc+0x39/0xf70 [ 922.285324] inet_create+0x36a/0xe10 [ 922.289029] __sock_create+0x3e6/0x750 [ 922.292913] __sys_socket+0x103/0x220 [ 922.296705] ? move_addr_to_kernel+0x80/0x80 [ 922.301111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.305870] ? do_syscall_64+0x26/0x610 [ 922.309845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.315230] ? do_syscall_64+0x26/0x610 [ 922.319250] __x64_sys_socket+0x73/0xb0 [ 922.323242] do_syscall_64+0x103/0x610 [ 922.328239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.333437] RIP: 0033:0x45b797 [ 922.336628] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.355639] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 922.363365] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 922.370634] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 922.377918] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 922.385194] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 922.392464] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 922.401334] Task in /syz1 killed as a result of limit of /syz1 [ 922.407492] memory: usage 30368kB, limit 0kB, failcnt 230 [ 922.413787] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.420862] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.427342] Memory cgroup stats for /syz1: cache:68KB rss:15540KB rss_huge:14336KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15448KB inactive_file:0KB active_file:0KB unevictable:0KB [ 922.448602] Memory cgroup out of memory: Kill process 20782 (syz-executor.1) score 9538000 or sacrifice child [ 922.459093] Killed process 20782 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:35816kB, shmem-rss:0kB [ 922.471520] oom_reaper: reaped process 20782 (syz-executor.1), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 922.479355] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 922.500127] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 922.505597] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 922.512482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.521851] Call Trace: [ 922.524449] dump_stack+0x172/0x1f0 [ 922.528086] dump_header+0x15e/0x929 [ 922.532127] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 922.537274] ? ___ratelimit+0x60/0x595 [ 922.541155] ? do_raw_spin_unlock+0x57/0x270 [ 922.545570] oom_kill_process.cold+0x10/0x6f5 [ 922.550066] ? task_will_free_mem+0x139/0x6e0 [ 922.554563] ? find_held_lock+0x35/0x130 [ 922.558629] out_of_memory+0x936/0x12d0 [ 922.562597] ? lock_downgrade+0x810/0x810 [ 922.566751] ? oom_killer_disable+0x280/0x280 [ 922.571244] ? find_held_lock+0x35/0x130 [ 922.575328] mem_cgroup_out_of_memory+0x1d2/0x240 [ 922.580196] ? memcg_event_wake+0x230/0x230 [ 922.584522] ? do_raw_spin_unlock+0x57/0x270 [ 922.588935] ? _raw_spin_unlock+0x2d/0x50 [ 922.593084] try_charge+0x1028/0x15b0 [ 922.596938] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 922.601785] ? rcu_read_lock_sched_held+0x110/0x130 [ 922.606814] ? __alloc_pages_nodemask+0x63e/0x760 [ 922.611650] ? do_raw_spin_unlock+0x57/0x270 [ 922.616058] memcg_kmem_charge_memcg+0x7c/0x130 [ 922.620716] ? memcg_kmem_put_cache+0xb0/0xb0 [ 922.625201] ? cache_grow_begin+0x59a/0x8c0 [ 922.629517] ? lockdep_hardirqs_on+0x415/0x5d0 [ 922.634090] ? trace_hardirqs_on+0x67/0x230 [ 922.638399] cache_grow_begin+0x25f/0x8c0 [ 922.642541] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 922.648068] ? __cpuset_node_allowed+0x136/0x540 [ 922.652813] fallback_alloc+0x1fd/0x2d0 [ 922.656792] ____cache_alloc_node+0x1be/0x1e0 [ 922.661280] kmem_cache_alloc+0x1f3/0x700 [ 922.665415] ? inet_create+0x2f4/0xe10 [ 922.669292] sk_prot_alloc+0x67/0x2e0 [ 922.673081] ? lock_downgrade+0x810/0x810 [ 922.677218] sk_alloc+0x39/0xf70 [ 922.680577] inet_create+0x36a/0xe10 [ 922.684282] __sock_create+0x3e6/0x750 [ 922.688156] __sys_socket+0x103/0x220 [ 922.692048] ? move_addr_to_kernel+0x80/0x80 [ 922.696479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.701261] ? do_syscall_64+0x26/0x610 [ 922.705249] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.710626] ? do_syscall_64+0x26/0x610 [ 922.714622] __x64_sys_socket+0x73/0xb0 [ 922.718615] do_syscall_64+0x103/0x610 [ 922.722521] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.727702] RIP: 0033:0x45b797 [ 922.730885] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.749778] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 922.757503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 922.764798] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 922.772068] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 922.779334] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 922.786616] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 922.795418] Task in /syz1 killed as a result of limit of /syz1 [ 922.803361] memory: usage 28012kB, limit 0kB, failcnt 236 [ 922.809033] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.816245] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.822674] Memory cgroup stats for /syz1: cache:68KB rss:13316KB rss_huge:12288KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13276KB inactive_file:0KB active_file:0KB unevictable:0KB [ 922.843770] Memory cgroup out of memory: Kill process 14069 (syz-executor.1) score 9287000 or sacrifice child [ 922.854105] Killed process 14069 (syz-executor.1) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 922.865181] net_ratelimit: 20 callbacks suppressed [ 922.865189] protocol 88fb is buggy, dev hsr_slave_0 [ 922.865258] protocol 88fb is buggy, dev hsr_slave_1 [ 922.865364] protocol 88fb is buggy, dev hsr_slave_0 [ 922.865418] protocol 88fb is buggy, dev hsr_slave_1 [ 922.865540] protocol 88fb is buggy, dev hsr_slave_0 [ 922.865595] protocol 88fb is buggy, dev hsr_slave_1 [ 922.902173] oom_reaper: reaped process 14069 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 922.908213] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 922.926654] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 922.932950] CPU: 0 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 922.939800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.949158] Call Trace: [ 922.951762] dump_stack+0x172/0x1f0 [ 922.955431] dump_header+0x15e/0x929 [ 922.959136] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 922.964243] ? ___ratelimit+0x60/0x595 [ 922.968137] ? do_raw_spin_unlock+0x57/0x270 [ 922.972566] oom_kill_process.cold+0x10/0x6f5 [ 922.977093] ? task_will_free_mem+0x139/0x6e0 [ 922.981620] out_of_memory+0x936/0x12d0 [ 922.985616] ? oom_killer_disable+0x280/0x280 [ 922.990115] ? find_held_lock+0x35/0x130 [ 922.994191] mem_cgroup_out_of_memory+0x1d2/0x240 [ 922.999044] ? memcg_event_wake+0x230/0x230 [ 923.003385] ? do_raw_spin_unlock+0x57/0x270 [ 923.007889] ? _raw_spin_unlock+0x2d/0x50 [ 923.012036] try_charge+0x1028/0x15b0 [ 923.015841] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 923.020702] ? rcu_read_lock_sched_held+0x110/0x130 [ 923.025725] ? __alloc_pages_nodemask+0x63e/0x760 [ 923.030578] ? do_raw_spin_unlock+0x57/0x270 [ 923.035011] memcg_kmem_charge_memcg+0x7c/0x130 [ 923.039723] ? memcg_kmem_put_cache+0xb0/0xb0 [ 923.044225] ? cache_grow_begin+0x59a/0x8c0 [ 923.048543] ? lockdep_hardirqs_on+0x415/0x5d0 [ 923.053147] ? trace_hardirqs_on+0x67/0x230 [ 923.057485] cache_grow_begin+0x25f/0x8c0 [ 923.061645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 923.067199] ? __cpuset_node_allowed+0x136/0x540 [ 923.071958] fallback_alloc+0x1fd/0x2d0 [ 923.075932] ____cache_alloc_node+0x1be/0x1e0 [ 923.080440] kmem_cache_alloc+0x1f3/0x700 [ 923.084611] ? inet6_create+0x2ea/0xf80 [ 923.088584] sk_prot_alloc+0x67/0x2e0 [ 923.092377] ? lock_downgrade+0x810/0x810 [ 923.096521] sk_alloc+0x39/0xf70 [ 923.099894] inet6_create+0x360/0xf80 [ 923.103702] __sock_create+0x3e6/0x750 [ 923.107596] __sys_socket+0x103/0x220 [ 923.111407] ? move_addr_to_kernel+0x80/0x80 [ 923.115831] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.120594] ? do_syscall_64+0x26/0x610 [ 923.124602] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.130076] ? do_syscall_64+0x26/0x610 [ 923.134062] __x64_sys_socket+0x73/0xb0 [ 923.138048] do_syscall_64+0x103/0x610 [ 923.141948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.147142] RIP: 0033:0x45b797 [ 923.150338] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.169260] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 923.176970] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 923.184342] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 923.191608] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 923.198889] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 923.206166] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 923.214588] Task in /syz2 killed as a result of limit of /syz2 [ 923.223881] memory: usage 35088kB, limit 0kB, failcnt 145 [ 923.230055] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.236980] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.243329] Memory cgroup stats for /syz2: cache:136KB rss:19800KB rss_huge:18432KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19748KB inactive_file:4KB active_file:0KB unevictable:0KB [ 923.274437] Memory cgroup out of memory: Kill process 11213 (syz-executor.2) score 9540000 or sacrifice child [ 923.284819] Killed process 11213 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35840kB, shmem-rss:0kB [ 923.297216] oom_reaper: reaped process 11213 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 923.305268] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 923.325828] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 923.332729] CPU: 1 PID: 7966 Comm: syz-executor.2 Not tainted 4.19.34 #2 [ 923.339623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.348977] Call Trace: [ 923.351563] dump_stack+0x172/0x1f0 [ 923.355221] dump_header+0x15e/0x929 [ 923.358939] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 923.364045] ? ___ratelimit+0x60/0x595 [ 923.367978] ? do_raw_spin_unlock+0x57/0x270 [ 923.372429] oom_kill_process.cold+0x10/0x6f5 [ 923.376949] ? task_will_free_mem+0x139/0x6e0 [ 923.381449] ? find_held_lock+0x35/0x130 [ 923.385542] out_of_memory+0x936/0x12d0 [ 923.389646] ? lock_downgrade+0x810/0x810 [ 923.393823] ? oom_killer_disable+0x280/0x280 [ 923.398325] ? find_held_lock+0x35/0x130 [ 923.402403] mem_cgroup_out_of_memory+0x1d2/0x240 [ 923.407253] ? memcg_event_wake+0x230/0x230 [ 923.411583] ? do_raw_spin_unlock+0x57/0x270 [ 923.416000] ? _raw_spin_unlock+0x2d/0x50 [ 923.420177] try_charge+0x1028/0x15b0 [ 923.424111] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 923.428968] ? rcu_read_lock_sched_held+0x110/0x130 [ 923.434019] ? __alloc_pages_nodemask+0x63e/0x760 [ 923.438880] ? do_raw_spin_unlock+0x57/0x270 [ 923.443313] memcg_kmem_charge_memcg+0x7c/0x130 [ 923.447989] ? memcg_kmem_put_cache+0xb0/0xb0 [ 923.452485] ? cache_grow_begin+0x59a/0x8c0 [ 923.456806] ? lockdep_hardirqs_on+0x415/0x5d0 [ 923.461392] ? trace_hardirqs_on+0x67/0x230 [ 923.465715] cache_grow_begin+0x25f/0x8c0 [ 923.469885] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 923.475422] ? __cpuset_node_allowed+0x136/0x540 [ 923.480183] fallback_alloc+0x1fd/0x2d0 [ 923.484169] ____cache_alloc_node+0x1be/0x1e0 [ 923.488782] kmem_cache_alloc+0x1f3/0x700 [ 923.492961] ? inet6_create+0x2ea/0xf80 [ 923.496967] sk_prot_alloc+0x67/0x2e0 [ 923.500771] ? lock_downgrade+0x810/0x810 [ 923.504938] sk_alloc+0x39/0xf70 [ 923.508310] inet6_create+0x360/0xf80 [ 923.512113] __sock_create+0x3e6/0x750 [ 923.516001] __sys_socket+0x103/0x220 [ 923.519802] ? move_addr_to_kernel+0x80/0x80 [ 923.524209] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.528982] ? do_syscall_64+0x26/0x610 [ 923.532955] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.538501] ? do_syscall_64+0x26/0x610 [ 923.542480] __x64_sys_socket+0x73/0xb0 [ 923.546456] do_syscall_64+0x103/0x610 [ 923.550362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.555547] RIP: 0033:0x45b797 [ 923.558734] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 923.578707] RSP: 002b:00007ffe7f6ca288 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 923.586417] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 923.593690] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 923.600960] RBP: 0000000000007ccb R08: 0000000000006000 R09: 0000000000004000 [ 923.608232] R10: 00007ffe7f6ca3b0 R11: 0000000000000246 R12: 0000000000000000 [ 923.615501] R13: 00007ffe7f6caa50 R14: 0000000000000029 R15: 00007ffe7f6caa60 [ 923.624058] Task in /syz2 killed as a result of limit of /syz2 [ 923.633225] memory: usage 32604kB, limit 0kB, failcnt 152 [ 923.638893] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.645938] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 923.652361] Memory cgroup stats for /syz2: cache:136KB rss:17640KB rss_huge:16384KB shmem:4KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17584KB inactive_file:0KB active_file:0KB unevictable:0KB [ 923.659594] protocol 88fb is buggy, dev hsr_slave_0 [ 923.673307] Memory cgroup out of memory: Kill process 18027 (syz-executor.2) score 9540000 or sacrifice child [ 923.678249] protocol 88fb is buggy, dev hsr_slave_1 [ 923.688727] Killed process 18027 (syz-executor.2) total-vm:72716kB, anon-rss:2204kB, file-rss:35824kB, shmem-rss:0kB [ 923.693841] protocol 88fb is buggy, dev hsr_slave_0 [ 923.706543] oom_reaper: reaped process 18027 (syz-executor.2), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 923.710008] protocol 88fb is buggy, dev hsr_slave_1 [ 923.720458] syz-executor.5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 923.740258] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 923.745863] CPU: 0 PID: 12073 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 923.752811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 923.762255] Call Trace: [ 923.764862] dump_stack+0x172/0x1f0 [ 923.768501] dump_header+0x15e/0x929 [ 923.772235] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 923.777357] ? ___ratelimit+0x60/0x595 [ 923.781255] ? do_raw_spin_unlock+0x57/0x270 [ 923.785688] oom_kill_process.cold+0x10/0x6f5 [ 923.790212] ? task_will_free_mem+0x139/0x6e0 [ 923.794719] out_of_memory+0x936/0x12d0 [ 923.798699] ? oom_killer_disable+0x280/0x280 [ 923.803192] ? find_held_lock+0x35/0x130 [ 923.807258] mem_cgroup_out_of_memory+0x1d2/0x240 [ 923.812124] ? memcg_event_wake+0x230/0x230 [ 923.816485] ? do_raw_spin_unlock+0x57/0x270 [ 923.820918] ? _raw_spin_unlock+0x2d/0x50 [ 923.825101] try_charge+0x1028/0x15b0 [ 923.828912] ? find_held_lock+0x35/0x130 [ 923.832988] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 923.837924] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 923.842772] ? find_held_lock+0x35/0x130 [ 923.846841] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 923.851739] memcg_kmem_charge_memcg+0x7c/0x130 [ 923.856426] ? memcg_kmem_put_cache+0xb0/0xb0 [ 923.860941] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 923.865798] memcg_kmem_charge+0x136/0x300 [ 923.870046] __alloc_pages_nodemask+0x3c6/0x760 [ 923.874744] ? __alloc_pages_slowpath+0x2870/0x2870 [ 923.879784] ? lockdep_hardirqs_on+0x415/0x5d0 [ 923.884384] ? trace_hardirqs_on+0x67/0x230 [ 923.888711] ? kasan_check_read+0x11/0x20 [ 923.892861] copy_process.part.0+0x3e0/0x7970 [ 923.897358] ? mark_held_locks+0x100/0x100 [ 923.901601] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 923.906280] ? __might_fault+0x12b/0x1e0 [ 923.910361] ? __cleanup_sighand+0x70/0x70 [ 923.914611] ? lock_downgrade+0x810/0x810 [ 923.918793] _do_fork+0x257/0xfe0 [ 923.922267] ? fork_idle+0x1d0/0x1d0 [ 923.925998] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.930764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 923.935534] ? do_syscall_64+0x26/0x610 [ 923.939518] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.944894] ? do_syscall_64+0x26/0x610 [ 923.948879] __x64_sys_clone+0xbf/0x150 [ 923.952863] do_syscall_64+0x103/0x610 [ 923.956783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 923.961977] RIP: 0033:0x4571fa [ 923.965176] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 923.984102] RSP: 002b:00007ffd31d85bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 923.991850] RAX: ffffffffffffffda RBX: 00007ffd31d85bd0 RCX: 00000000004571fa [ 923.999130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 924.006407] RBP: 00007ffd31d85c10 R08: 0000000000000001 R09: 0000000001a80940 [ 924.013696] R10: 0000000001a80c10 R11: 0000000000000246 R12: 0000000000000001 [ 924.021021] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd31d85c60 [ 924.029802] Task in /syz5 killed as a result of limit of /syz5 [ 924.035982] memory: usage 15288kB, limit 0kB, failcnt 264 [ 924.041757] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.048637] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.055016] Memory cgroup stats for /syz5: cache:192KB rss:6584KB rss_huge:6144KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6548KB inactive_file:0KB active_file:0KB unevictable:0KB [ 924.075837] Memory cgroup out of memory: Kill process 28549 (syz-executor.5) score 9285000 or sacrifice child [ 924.086155] Killed process 28549 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 924.098434] oom_reaper: reaped process 28549 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 924.108995] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 924.121394] syz-executor.1 cpuset=syz1 mems_allowed=0-1 [ 924.127579] CPU: 1 PID: 7964 Comm: syz-executor.1 Not tainted 4.19.34 #2 [ 924.134446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.143999] Call Trace: [ 924.146661] dump_stack+0x172/0x1f0 [ 924.150321] dump_header+0x15e/0x929 [ 924.154032] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 924.159220] ? ___ratelimit+0x60/0x595 [ 924.163101] ? do_raw_spin_unlock+0x57/0x270 [ 924.167518] oom_kill_process.cold+0x10/0x6f5 [ 924.172021] ? task_will_free_mem+0x139/0x6e0 [ 924.176534] out_of_memory+0x936/0x12d0 [ 924.180532] ? oom_killer_disable+0x280/0x280 [ 924.185024] ? find_held_lock+0x35/0x130 [ 924.189096] mem_cgroup_out_of_memory+0x1d2/0x240 [ 924.194028] ? memcg_event_wake+0x230/0x230 [ 924.198399] ? do_raw_spin_unlock+0x57/0x270 [ 924.202809] ? _raw_spin_unlock+0x2d/0x50 [ 924.206961] try_charge+0x1028/0x15b0 [ 924.210781] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 924.216063] ? rcu_read_lock_sched_held+0x110/0x130 [ 924.221532] ? __alloc_pages_nodemask+0x63e/0x760 [ 924.235431] ? do_raw_spin_unlock+0x57/0x270 [ 924.239882] memcg_kmem_charge_memcg+0x7c/0x130 [ 924.244592] ? memcg_kmem_put_cache+0xb0/0xb0 [ 924.249202] ? cache_grow_begin+0x59a/0x8c0 [ 924.253519] ? lockdep_hardirqs_on+0x415/0x5d0 [ 924.258099] ? trace_hardirqs_on+0x67/0x230 [ 924.262415] cache_grow_begin+0x25f/0x8c0 [ 924.266554] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 924.272092] ? __cpuset_node_allowed+0x136/0x540 [ 924.276857] fallback_alloc+0x1fd/0x2d0 [ 924.280836] ____cache_alloc_node+0x1be/0x1e0 [ 924.285346] kmem_cache_alloc+0x1f3/0x700 [ 924.289496] ? inet_create+0x2f4/0xe10 [ 924.293398] sk_prot_alloc+0x67/0x2e0 [ 924.297190] ? lock_downgrade+0x810/0x810 [ 924.301333] sk_alloc+0x39/0xf70 [ 924.304697] inet_create+0x36a/0xe10 [ 924.308408] __sock_create+0x3e6/0x750 [ 924.312291] __sys_socket+0x103/0x220 [ 924.316083] ? move_addr_to_kernel+0x80/0x80 [ 924.320489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.325239] ? do_syscall_64+0x26/0x610 [ 924.329207] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.335822] ? do_syscall_64+0x26/0x610 [ 924.339819] __x64_sys_socket+0x73/0xb0 [ 924.343793] do_syscall_64+0x103/0x610 [ 924.347674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.352851] RIP: 0033:0x45b797 [ 924.356032] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.374929] RSP: 002b:00007fff3f8b0158 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 924.382632] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 924.389913] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 924.397213] RBP: 000000000000082e R08: 0000000000000000 R09: 000000000000000a [ 924.404482] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 924.411755] R13: 00007fff3f8b0870 R14: 00000000000df0fa R15: 00007fff3f8b0880 [ 924.419682] Task in /syz1 killed as a result of limit of /syz1 [ 924.425762] memory: usage 25572kB, limit 0kB, failcnt 242 [ 924.431392] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.438683] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.444920] Memory cgroup stats for /syz1: cache:68KB rss:11172KB rss_huge:10240KB shmem:28KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:11136KB inactive_file:0KB active_file:0KB unevictable:0KB [ 924.466986] Memory cgroup out of memory: Kill process 14099 (syz-executor.1) score 9287000 or sacrifice child [ 924.477212] Killed process 14099 (syz-executor.1) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 924.489123] oom_reaper: reaped process 14099 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 924.499736] Memory cgroup out of memory: Kill process 20760 (syz-executor.2) score 9537000 or sacrifice child [ 924.517013] Killed process 20760 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35828kB, shmem-rss:0kB [ 924.528614] Memory cgroup out of memory: Kill process 495 (syz-executor.5) score 9285000 or sacrifice child [ 924.529228] oom_reaper: reaped process 20760 (syz-executor.2), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 924.547093] Killed process 495 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 924.569219] Memory cgroup out of memory: Kill process 22059 (syz-executor.1) score 9286000 or sacrifice child [ 924.580104] Killed process 22059 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 924.603270] Memory cgroup out of memory: Kill process 20725 (syz-executor.2) score 9535000 or sacrifice child [ 924.619917] Killed process 20725 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35820kB, shmem-rss:0kB [ 924.631253] Memory cgroup out of memory: Kill process 645 (syz-executor.5) score 9285000 or sacrifice child [ 924.649070] Killed process 645 (syz-executor.5) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 924.668153] Memory cgroup out of memory: Kill process 22117 (syz-executor.1) score 9286000 or sacrifice child [ 924.685230] Killed process 22117 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 924.697733] oom_reaper: reaped process 22117 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 924.698636] Memory cgroup out of memory: Kill process 20739 (syz-executor.2) score 9531000 or sacrifice child [ 924.726680] Killed process 20739 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:35804kB, shmem-rss:0kB [ 924.738422] oom_reaper: reaped process 20739 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 924.742468] Memory cgroup out of memory: Kill process 14001 (syz-executor.2) score 9284000 or sacrifice child [ 924.759126] Killed process 14001 (syz-executor.2) total-vm:72584kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 924.784029] Memory cgroup out of memory: Kill process 12073 (syz-executor.5) score 8986000 or sacrifice child [ 924.794485] Killed process 12073 (syz-executor.5) total-vm:72320kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 924.806097] oom_reaper: reaped process 12073 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 924.806231] Memory cgroup out of memory: Kill process 14043 (syz-executor.2) score 9282000 or sacrifice child [ 924.827491] Killed process 14043 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 924.846656] Memory cgroup out of memory: Kill process 22166 (syz-executor.1) score 9286000 or sacrifice child [ 924.857325] Killed process 22166 (syz-executor.1) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 924.880223] Memory cgroup out of memory: Kill process 14075 (syz-executor.2) score 9282000 or sacrifice child [ 924.890498] Killed process 14075 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 924.907148] oom_reaper: reaped process 14075 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 924.920965] Memory cgroup out of memory: Kill process 14150 (syz-executor.1) score 9284000 or sacrifice child [ 924.936690] Killed process 14150 (syz-executor.1) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 924.955869] Memory cgroup out of memory: Kill process 14104 (syz-executor.2) score 9282000 or sacrifice child [ 924.977673] Killed process 14104 (syz-executor.2) total-vm:72452kB, anon-rss:2188kB, file-rss:34816kB, shmem-rss:0kB [ 924.989828] Memory cgroup out of memory: Kill process 7964 (syz-executor.1) score 8987000 or sacrifice child [ 924.990634] oom_reaper: reaped process 14104 (syz-executor.2), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 925.002374] Killed process 14057 (syz-executor.1) total-vm:72452kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 925.044329] Memory cgroup out of memory: Kill process 7966 (syz-executor.2) score 8985000 or sacrifice child [ 925.045652] oom_reaper: reaped process 14057 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 925.074722] Killed process 13975 (syz-executor.2) total-vm:72452kB, anon-rss:140kB, file-rss:34816kB, shmem-rss:0kB [ 925.086419] Memory cgroup out of memory: Kill process 7964 (syz-executor.1) score 8987000 or sacrifice child [ 925.112759] Killed process 14091 (syz-executor.1) total-vm:72452kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 925.145478] Memory cgroup out of memory: Kill process 7966 (syz-executor.2) score 8985000 or sacrifice child [ 925.157793] Killed process 14032 (syz-executor.2) total-vm:72452kB, anon-rss:140kB, file-rss:34816kB, shmem-rss:0kB [ 925.221112] Memory cgroup out of memory: Kill process 7964 (syz-executor.1) score 8987000 or sacrifice child [ 925.234179] Killed process 14133 (syz-executor.1) total-vm:72452kB, anon-rss:152kB, file-rss:34816kB, shmem-rss:0kB [ 925.280292] Memory cgroup out of memory: Kill process 7966 (syz-executor.2) score 8985000 or sacrifice child [ 925.299807] Killed process 14067 (syz-executor.2) total-vm:72452kB, anon-rss:140kB, file-rss:34816kB, shmem-rss:0kB 14:50:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:45 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x3, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000480)={@multicast1, @loopback}, 0xc) 14:50:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:50:45 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x232) dup3(0xffffffffffffffff, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffd47, 0x0, 0x0, 0x0) [ 925.344075] Memory cgroup out of memory: Kill process 7964 (syz-executor.1) score 8987000 or sacrifice child [ 925.362352] Killed process 7964 (syz-executor.1) total-vm:72320kB, anon-rss:116kB, file-rss:35712kB, shmem-rss:0kB [ 925.395110] Memory cgroup out of memory: Kill process 7966 (syz-executor.2) score 8985000 or sacrifice child [ 925.409977] Killed process 14083 (syz-executor.2) total-vm:72452kB, anon-rss:140kB, file-rss:34816kB, shmem-rss:0kB 14:50:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 925.450140] Memory cgroup out of memory: Kill process 7966 (syz-executor.2) score 8985000 or sacrifice child [ 925.534654] Killed process 7966 (syz-executor.2) total-vm:72320kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB 14:50:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 925.653296] oom_reaper: reaped process 7966 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 925.865227] oom_kill_process: 23 callbacks suppressed [ 925.865299] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 925.886976] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 925.896940] CPU: 0 PID: 7150 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 925.903841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.913225] Call Trace: [ 925.915845] dump_stack+0x172/0x1f0 [ 925.919499] dump_header+0x15e/0x929 [ 925.923238] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 925.928372] ? ___ratelimit+0x60/0x595 [ 925.932468] oom_kill_process.cold+0x10/0x6f5 [ 925.937013] out_of_memory+0x936/0x12d0 [ 925.941024] ? oom_killer_disable+0x280/0x280 [ 925.945577] mem_cgroup_out_of_memory+0x1d2/0x240 [ 925.950451] ? memcg_event_wake+0x230/0x230 [ 925.954805] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 925.959938] ? cgroup_file_notify+0x140/0x1b0 [ 925.964983] memory_max_write+0x169/0x300 [ 925.969186] ? mem_cgroup_write+0x360/0x360 [ 925.973536] ? cgroup_file_write+0x85/0x7a0 [ 925.977899] cgroup_file_write+0x245/0x7a0 [ 925.982158] ? mem_cgroup_write+0x360/0x360 [ 925.986508] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 925.991483] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 925.996446] kernfs_fop_write+0x2ba/0x480 [ 926.000623] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.005424] __vfs_write+0x116/0x820 [ 926.009167] ? retint_kernel+0x2d/0x2d [ 926.013095] ? kernfs_fop_open+0xd90/0xd90 [ 926.017363] ? kernel_read+0x120/0x120 [ 926.021373] ? __lock_is_held+0xb6/0x140 [ 926.025485] ? rcu_read_lock_sched_held+0x110/0x130 [ 926.030541] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 926.035434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 926.041006] ? __sb_start_write+0x1ac/0x360 [ 926.045364] vfs_write+0x20c/0x560 [ 926.048938] ksys_write+0xea/0x1f0 [ 926.052505] ? __ia32_sys_read+0xb0/0xb0 [ 926.056610] __x64_sys_write+0x73/0xb0 [ 926.060528] ? do_syscall_64+0x5b/0x610 [ 926.064540] do_syscall_64+0x103/0x610 [ 926.068471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.073691] RIP: 0033:0x458c29 [ 926.076910] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.095830] RSP: 002b:00007f1bc695ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 926.103583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 926.110881] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 926.118181] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 926.125479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bc695f6d4 [ 926.132778] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 926.203126] Task in /syz0 killed as a result of limit of /syz0 [ 926.215773] memory: usage 70820kB, limit 0kB, failcnt 0 [ 926.251587] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.278335] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 14:50:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 926.304218] Memory cgroup stats for /syz0: cache:164KB rss:54148KB rss_huge:51200KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54136KB inactive_file:20KB active_file:0KB unevictable:0KB [ 926.363285] Memory cgroup out of memory: Kill process 18069 (syz-executor.0) score 9564000 or sacrifice child 14:50:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 926.421316] Killed process 18069 (syz-executor.0) total-vm:72848kB, anon-rss:2228kB, file-rss:35880kB, shmem-rss:0kB 14:50:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 926.549883] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 926.609016] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 926.633694] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 926.641644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.651032] Call Trace: [ 926.653649] dump_stack+0x172/0x1f0 [ 926.657309] dump_header+0x15e/0x929 [ 926.661048] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 926.666193] ? ___ratelimit+0x60/0x595 [ 926.670108] ? do_raw_spin_unlock+0x57/0x270 [ 926.674551] oom_kill_process.cold+0x10/0x6f5 [ 926.679187] ? task_will_free_mem+0x139/0x6e0 [ 926.683732] out_of_memory+0x936/0x12d0 [ 926.687761] ? oom_killer_disable+0x280/0x280 [ 926.692288] ? find_held_lock+0x35/0x130 [ 926.696390] mem_cgroup_out_of_memory+0x1d2/0x240 [ 926.701266] ? memcg_event_wake+0x230/0x230 [ 926.705632] ? do_raw_spin_unlock+0x57/0x270 [ 926.710074] ? _raw_spin_unlock+0x2d/0x50 [ 926.714254] try_charge+0x1028/0x15b0 [ 926.718082] ? find_held_lock+0x35/0x130 [ 926.722186] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 926.727052] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 926.731917] ? find_held_lock+0x35/0x130 [ 926.736024] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 926.740910] memcg_kmem_charge_memcg+0x7c/0x130 [ 926.745627] ? memcg_kmem_put_cache+0xb0/0xb0 [ 926.750158] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 926.755051] memcg_kmem_charge+0x136/0x300 [ 926.759321] __alloc_pages_nodemask+0x3c6/0x760 [ 926.764025] ? __alloc_pages_slowpath+0x2870/0x2870 [ 926.769075] ? lockdep_hardirqs_on+0x415/0x5d0 [ 926.773685] ? trace_hardirqs_on+0x67/0x230 [ 926.778030] ? kasan_check_read+0x11/0x20 [ 926.782235] copy_process.part.0+0x3e0/0x7970 [ 926.786770] ? mark_held_locks+0x100/0x100 [ 926.791030] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 926.795727] ? __might_fault+0x12b/0x1e0 [ 926.799819] ? __cleanup_sighand+0x70/0x70 [ 926.804076] ? lock_downgrade+0x810/0x810 [ 926.808286] _do_fork+0x257/0xfe0 [ 926.811765] ? fork_idle+0x1d0/0x1d0 [ 926.815505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.820288] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.825069] ? do_syscall_64+0x26/0x610 [ 926.829070] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.834495] ? do_syscall_64+0x26/0x610 [ 926.839030] __x64_sys_clone+0xbf/0x150 [ 926.843043] do_syscall_64+0x103/0x610 [ 926.846952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.852140] RIP: 0033:0x4571fa [ 926.855338] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 926.874327] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 926.882038] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 926.889317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 926.896619] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 926.903898] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 926.911215] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 926.919160] Task in /syz4 killed as a result of limit of /syz4 [ 926.926769] memory: usage 107728kB, limit 0kB, failcnt 16 [ 926.932581] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.939358] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.939367] Memory cgroup stats for /syz4: cache:96KB rss:77112KB rss_huge:73728KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:76988KB inactive_file:4KB active_file:0KB unevictable:0KB [ 926.966792] Memory cgroup out of memory: Kill process 8662 (syz-executor.4) score 9799000 or sacrifice child [ 926.966871] Killed process 8662 (syz-executor.4) total-vm:72836kB, anon-rss:4252kB, file-rss:34816kB, shmem-rss:0kB [ 926.980098] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 927.006463] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 927.014645] CPU: 1 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 927.021611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.021618] Call Trace: [ 927.021638] dump_stack+0x172/0x1f0 [ 927.021660] dump_header+0x15e/0x929 [ 927.021688] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 927.033670] ? ___ratelimit+0x60/0x595 [ 927.033688] ? do_raw_spin_unlock+0x57/0x270 [ 927.033710] oom_kill_process.cold+0x10/0x6f5 [ 927.033729] ? task_will_free_mem+0x139/0x6e0 [ 927.033751] out_of_memory+0x936/0x12d0 [ 927.033775] ? oom_killer_disable+0x280/0x280 [ 927.033790] ? find_held_lock+0x35/0x130 [ 927.033816] mem_cgroup_out_of_memory+0x1d2/0x240 [ 927.033831] ? memcg_event_wake+0x230/0x230 [ 927.033849] ? do_raw_spin_unlock+0x57/0x270 [ 927.041249] ? _raw_spin_unlock+0x2d/0x50 [ 927.041272] try_charge+0x1028/0x15b0 [ 927.041295] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.041318] ? rcu_read_lock_sched_held+0x110/0x130 [ 927.041332] ? __alloc_pages_nodemask+0x63e/0x760 [ 927.041344] ? do_raw_spin_unlock+0x57/0x270 [ 927.041366] memcg_kmem_charge_memcg+0x7c/0x130 [ 927.041381] ? memcg_kmem_put_cache+0xb0/0xb0 [ 927.041392] ? cache_grow_begin+0x59a/0x8c0 [ 927.041408] ? lockdep_hardirqs_on+0x415/0x5d0 [ 927.041425] ? trace_hardirqs_on+0x67/0x230 [ 927.041442] cache_grow_begin+0x25f/0x8c0 [ 927.050481] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 927.059407] ? __cpuset_node_allowed+0x136/0x540 [ 927.059427] fallback_alloc+0x1fd/0x2d0 [ 927.059447] ____cache_alloc_node+0x1be/0x1e0 [ 927.059464] kmem_cache_alloc+0x1f3/0x700 [ 927.059479] ? inet6_create+0x2ea/0xf80 [ 927.059500] sk_prot_alloc+0x67/0x2e0 [ 927.059515] ? lock_downgrade+0x810/0x810 [ 927.059532] sk_alloc+0x39/0xf70 [ 927.059550] inet6_create+0x360/0xf80 [ 927.059583] __sock_create+0x3e6/0x750 [ 927.059605] __sys_socket+0x103/0x220 [ 927.068102] ? move_addr_to_kernel+0x80/0x80 [ 927.068120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.068134] ? do_syscall_64+0x26/0x610 [ 927.068148] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.068160] ? do_syscall_64+0x26/0x610 [ 927.068187] __x64_sys_socket+0x73/0xb0 [ 927.068202] do_syscall_64+0x103/0x610 [ 927.068219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.068237] RIP: 0033:0x45b797 [ 927.076799] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.076808] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 927.076825] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 927.076832] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 927.076841] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 927.076855] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 927.086036] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 927.086506] Task in [ 927.098854] /syz0 [ 927.110628] killed as a result of limit of [ 927.123521] /syz0 [ 927.145706] memory: usage 66092kB, limit 0kB, failcnt 28 [ 927.156058] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.169613] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.196430] Memory cgroup stats for [ 927.263787] /syz0 [ 927.278795] audit: type=1400 audit(1554994247.780:246): avc: denied { map } for pid=7161 comm="syz-executor.5" path="/root/syz-executor.5" dev="sda1" ino=16483 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 927.286492] : [ 927.305834] cache:164KB [ 927.319556] audit: type=1400 audit(1554994247.830:247): avc: denied { map } for pid=7161 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1071 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 927.324831] rss:49952KB [ 927.363364] rss_huge:47104KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:49828KB inactive_file:8KB active_file:4KB unevictable:0KB 14:50:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 927.412456] Memory cgroup out of memory: Kill process 17986 (syz-executor.0) score 9559000 or sacrifice child [ 927.422756] Killed process 17986 (syz-executor.0) total-vm:72716kB, anon-rss:2220kB, file-rss:35880kB, shmem-rss:0kB [ 927.465676] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 927.490198] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 927.495641] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 927.502487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.502493] Call Trace: [ 927.502515] dump_stack+0x172/0x1f0 [ 927.502535] dump_header+0x15e/0x929 [ 927.502552] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 927.502579] ? ___ratelimit+0x60/0x595 [ 927.502593] ? do_raw_spin_unlock+0x57/0x270 [ 927.502612] oom_kill_process.cold+0x10/0x6f5 [ 927.502630] ? task_will_free_mem+0x139/0x6e0 [ 927.502651] out_of_memory+0x936/0x12d0 [ 927.502671] ? oom_killer_disable+0x280/0x280 [ 927.502685] ? find_held_lock+0x35/0x130 [ 927.502710] mem_cgroup_out_of_memory+0x1d2/0x240 [ 927.502724] ? memcg_event_wake+0x230/0x230 [ 927.502743] ? do_raw_spin_unlock+0x57/0x270 [ 927.502759] ? _raw_spin_unlock+0x2d/0x50 [ 927.502784] try_charge+0x1028/0x15b0 [ 927.535594] ? find_held_lock+0x35/0x130 [ 927.535623] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.535638] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 927.535654] ? find_held_lock+0x35/0x130 [ 927.535673] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 927.544697] memcg_kmem_charge_memcg+0x7c/0x130 [ 927.544714] ? memcg_kmem_put_cache+0xb0/0xb0 [ 927.544734] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 927.544753] memcg_kmem_charge+0x136/0x300 [ 927.544772] __alloc_pages_nodemask+0x3c6/0x760 [ 927.544790] ? __alloc_pages_slowpath+0x2870/0x2870 [ 927.544812] ? lockdep_hardirqs_on+0x415/0x5d0 [ 927.544834] ? trace_hardirqs_on+0x67/0x230 [ 927.553401] ? kasan_check_read+0x11/0x20 [ 927.553423] copy_process.part.0+0x3e0/0x7970 [ 927.553445] ? mark_held_locks+0x100/0x100 [ 927.553458] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 927.553477] ? __might_fault+0x12b/0x1e0 [ 927.553498] ? __cleanup_sighand+0x70/0x70 [ 927.553516] ? lock_downgrade+0x810/0x810 [ 927.553544] _do_fork+0x257/0xfe0 [ 927.553562] ? fork_idle+0x1d0/0x1d0 [ 927.553598] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.562587] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 927.562602] ? do_syscall_64+0x26/0x610 [ 927.562617] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.562630] ? do_syscall_64+0x26/0x610 [ 927.562648] __x64_sys_clone+0xbf/0x150 [ 927.562666] do_syscall_64+0x103/0x610 [ 927.562684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.562695] RIP: 0033:0x4571fa [ 927.562709] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 927.562717] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 927.571449] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 927.571458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 927.571466] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 927.571474] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 927.571483] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 927.589554] Task in [ 927.617358] /syz4 [ 927.626019] killed as a result of limit of [ 927.640092] /syz4 [ 927.640164] memory: usage 103324kB, limit 0kB, failcnt 22 [ 927.640188] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.648837] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.648846] Memory cgroup stats for /syz4: cache:96KB rss:72836KB rss_huge:69632KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:72748KB inactive_file:4KB active_file:0KB unevictable:0KB [ 927.670901] Memory cgroup out of memory: Kill process 8724 (syz-executor.4) score 9797000 or sacrifice child [ 927.670979] Killed process 8724 (syz-executor.4) total-vm:72704kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB [ 927.680230] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 927.717716] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 927.869119] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 927.876058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.885677] Call Trace: [ 927.888280] dump_stack+0x172/0x1f0 [ 927.891943] dump_header+0x15e/0x929 [ 927.895668] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 927.900783] ? ___ratelimit+0x60/0x595 [ 927.904675] ? do_raw_spin_unlock+0x57/0x270 [ 927.909099] oom_kill_process.cold+0x10/0x6f5 [ 927.913618] ? task_will_free_mem+0x139/0x6e0 [ 927.918130] out_of_memory+0x936/0x12d0 [ 927.922124] ? oom_killer_disable+0x280/0x280 [ 927.926634] ? find_held_lock+0x35/0x130 [ 927.930718] mem_cgroup_out_of_memory+0x1d2/0x240 [ 927.935604] ? memcg_event_wake+0x230/0x230 [ 927.939948] ? do_raw_spin_unlock+0x57/0x270 [ 927.944373] ? _raw_spin_unlock+0x2d/0x50 [ 927.948543] try_charge+0x1028/0x15b0 [ 927.952375] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.957240] ? rcu_read_lock_sched_held+0x110/0x130 [ 927.962267] ? __alloc_pages_nodemask+0x63e/0x760 [ 927.967129] ? do_raw_spin_unlock+0x57/0x270 [ 927.971562] memcg_kmem_charge_memcg+0x7c/0x130 [ 927.976258] ? memcg_kmem_put_cache+0xb0/0xb0 [ 927.980766] ? cache_grow_begin+0x59a/0x8c0 [ 927.985121] ? lockdep_hardirqs_on+0x415/0x5d0 [ 927.989727] ? trace_hardirqs_on+0x67/0x230 [ 927.994063] cache_grow_begin+0x25f/0x8c0 [ 927.998234] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 928.003791] ? __cpuset_node_allowed+0x136/0x540 [ 928.008589] fallback_alloc+0x1fd/0x2d0 [ 928.012598] ____cache_alloc_node+0x1be/0x1e0 [ 928.017127] kmem_cache_alloc+0x1f3/0x700 [ 928.021291] ? inet_create+0x2f4/0xe10 [ 928.025202] sk_prot_alloc+0x67/0x2e0 [ 928.029012] ? lock_downgrade+0x810/0x810 [ 928.033255] sk_alloc+0x39/0xf70 [ 928.036630] inet_create+0x36a/0xe10 [ 928.040353] __sock_create+0x3e6/0x750 [ 928.044252] __sys_socket+0x103/0x220 [ 928.048064] ? move_addr_to_kernel+0x80/0x80 [ 928.052484] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.057244] ? do_syscall_64+0x26/0x610 [ 928.061218] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.066602] ? do_syscall_64+0x26/0x610 [ 928.070595] __x64_sys_socket+0x73/0xb0 [ 928.074587] do_syscall_64+0x103/0x610 [ 928.078487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.083684] RIP: 0033:0x45b797 [ 928.086880] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.105794] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 928.113525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 928.120806] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 928.128082] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 928.135358] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 928.142643] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 928.157205] Task in /syz3 killed as a result of limit of /syz3 [ 928.164129] memory: usage 79132kB, limit 0kB, failcnt 12 [ 928.176405] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.183445] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.196284] Memory cgroup stats for /syz3: cache:108KB rss:54312KB rss_huge:51200KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54284KB inactive_file:4KB active_file:4KB unevictable:0KB [ 928.239510] Memory cgroup out of memory: Kill process 18063 (syz-executor.3) score 9562000 or sacrifice child [ 928.249912] Killed process 18063 (syz-executor.3) total-vm:72848kB, anon-rss:2224kB, file-rss:35876kB, shmem-rss:0kB [ 928.306245] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 928.329739] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 928.335319] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 928.342354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.351720] Call Trace: [ 928.354322] dump_stack+0x172/0x1f0 [ 928.357964] dump_header+0x15e/0x929 [ 928.361697] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 928.366823] ? ___ratelimit+0x60/0x595 [ 928.370732] ? do_raw_spin_unlock+0x57/0x270 [ 928.375165] oom_kill_process.cold+0x10/0x6f5 [ 928.379694] ? task_will_free_mem+0x139/0x6e0 [ 928.384221] out_of_memory+0x936/0x12d0 [ 928.388226] ? oom_killer_disable+0x280/0x280 [ 928.392737] ? find_held_lock+0x35/0x130 [ 928.396825] mem_cgroup_out_of_memory+0x1d2/0x240 [ 928.401779] ? memcg_event_wake+0x230/0x230 [ 928.406119] ? do_raw_spin_unlock+0x57/0x270 [ 928.410540] ? _raw_spin_unlock+0x2d/0x50 [ 928.414715] try_charge+0x1028/0x15b0 [ 928.418540] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 928.423414] ? rcu_read_lock_sched_held+0x110/0x130 [ 928.428441] ? __alloc_pages_nodemask+0x63e/0x760 [ 928.433303] ? do_raw_spin_unlock+0x57/0x270 [ 928.437752] memcg_kmem_charge_memcg+0x7c/0x130 [ 928.442439] ? memcg_kmem_put_cache+0xb0/0xb0 [ 928.446953] ? cache_grow_begin+0x59a/0x8c0 [ 928.451289] ? lockdep_hardirqs_on+0x415/0x5d0 [ 928.455888] ? trace_hardirqs_on+0x67/0x230 [ 928.460226] cache_grow_begin+0x25f/0x8c0 [ 928.464383] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 928.469924] ? __cpuset_node_allowed+0x136/0x540 [ 928.474695] fallback_alloc+0x1fd/0x2d0 [ 928.478676] ____cache_alloc_node+0x1be/0x1e0 [ 928.483163] kmem_cache_alloc+0x1f3/0x700 [ 928.487317] ? inet6_create+0x2ea/0xf80 [ 928.491306] sk_prot_alloc+0x67/0x2e0 [ 928.495128] ? lock_downgrade+0x810/0x810 [ 928.499284] sk_alloc+0x39/0xf70 [ 928.502650] inet6_create+0x360/0xf80 [ 928.506446] __sock_create+0x3e6/0x750 [ 928.510337] __sys_socket+0x103/0x220 [ 928.514143] ? move_addr_to_kernel+0x80/0x80 [ 928.518550] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.523296] ? do_syscall_64+0x26/0x610 [ 928.527263] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.532643] ? do_syscall_64+0x26/0x610 [ 928.536644] __x64_sys_socket+0x73/0xb0 [ 928.539549] net_ratelimit: 25 callbacks suppressed [ 928.539557] protocol 88fb is buggy, dev hsr_slave_0 [ 928.540642] do_syscall_64+0x103/0x610 [ 928.545658] protocol 88fb is buggy, dev hsr_slave_1 [ 928.550629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.550641] RIP: 0033:0x45b797 [ 928.550655] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 928.550662] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 928.550683] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 928.550690] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 928.550703] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 928.616373] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 928.624420] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 928.632628] Task in /syz0 killed as a result of limit of /syz0 [ 928.638669] memory: usage 63656kB, limit 0kB, failcnt 35 [ 928.675598] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.682815] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 928.689661] Memory cgroup stats for /syz0: cache:164KB rss:47756KB rss_huge:45056KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47632KB inactive_file:4KB active_file:0KB unevictable:0KB [ 928.711344] Memory cgroup out of memory: Kill process 28917 (syz-executor.0) score 9543000 or sacrifice child [ 928.723627] Killed process 28972 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 928.752724] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 928.767804] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 928.774275] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 928.781153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 928.790514] Call Trace: [ 928.793116] dump_stack+0x172/0x1f0 [ 928.796754] dump_header+0x15e/0x929 [ 928.800478] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 928.805603] ? ___ratelimit+0x60/0x595 [ 928.809499] ? do_raw_spin_unlock+0x57/0x270 [ 928.813928] oom_kill_process.cold+0x10/0x6f5 [ 928.818442] ? task_will_free_mem+0x139/0x6e0 [ 928.822957] out_of_memory+0x936/0x12d0 [ 928.826948] ? oom_killer_disable+0x280/0x280 [ 928.831455] ? find_held_lock+0x35/0x130 [ 928.835537] mem_cgroup_out_of_memory+0x1d2/0x240 [ 928.840397] ? memcg_event_wake+0x230/0x230 [ 928.844738] ? do_raw_spin_unlock+0x57/0x270 [ 928.849159] ? _raw_spin_unlock+0x2d/0x50 [ 928.853514] try_charge+0x1028/0x15b0 [ 928.857324] ? find_held_lock+0x35/0x130 [ 928.861405] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 928.866257] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 928.871112] ? find_held_lock+0x35/0x130 [ 928.875186] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 928.880050] memcg_kmem_charge_memcg+0x7c/0x130 [ 928.884735] ? memcg_kmem_put_cache+0xb0/0xb0 [ 928.889243] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 928.894101] memcg_kmem_charge+0x136/0x300 [ 928.898350] __alloc_pages_nodemask+0x3c6/0x760 [ 928.903030] ? __alloc_pages_slowpath+0x2870/0x2870 [ 928.908060] ? lockdep_hardirqs_on+0x415/0x5d0 [ 928.912672] ? trace_hardirqs_on+0x67/0x230 [ 928.917013] ? kasan_check_read+0x11/0x20 [ 928.921184] copy_process.part.0+0x3e0/0x7970 [ 928.925708] ? mark_held_locks+0x100/0x100 [ 928.930044] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 928.934743] ? __might_fault+0x12b/0x1e0 [ 928.938829] ? __cleanup_sighand+0x70/0x70 [ 928.943078] ? lock_downgrade+0x810/0x810 [ 928.947252] _do_fork+0x257/0xfe0 [ 928.950723] ? fork_idle+0x1d0/0x1d0 [ 928.954459] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.959227] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 928.964003] ? do_syscall_64+0x26/0x610 [ 928.968000] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.973383] ? do_syscall_64+0x26/0x610 [ 928.977378] __x64_sys_clone+0xbf/0x150 [ 928.981385] do_syscall_64+0x103/0x610 [ 928.985292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 928.990501] RIP: 0033:0x4571fa [ 928.993711] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 929.012646] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 929.020410] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 929.027701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 929.034989] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 929.042449] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 929.049756] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 929.059120] Task in /syz4 killed as a result of limit of /syz4 [ 929.065927] memory: usage 98888kB, limit 0kB, failcnt 29 [ 929.072143] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.079204] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.079213] Memory cgroup stats for /syz4: cache:96KB rss:68596KB rss_huge:65536KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68516KB inactive_file:0KB active_file:0KB unevictable:0KB [ 929.107184] protocol 88fb is buggy, dev hsr_slave_0 [ 929.112424] protocol 88fb is buggy, dev hsr_slave_1 [ 929.117701] protocol 88fb is buggy, dev hsr_slave_0 [ 929.122860] protocol 88fb is buggy, dev hsr_slave_1 [ 929.128013] protocol 88fb is buggy, dev hsr_slave_0 [ 929.133185] protocol 88fb is buggy, dev hsr_slave_1 [ 929.139310] Memory cgroup out of memory: Kill process 8858 (syz-executor.4) score 9797000 or sacrifice child [ 929.145458] IPVS: ftp: loaded support on port[0] = 21 [ 929.150621] Killed process 8858 (syz-executor.4) total-vm:72704kB, anon-rss:4244kB, file-rss:34816kB, shmem-rss:0kB 14:50:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 929.171936] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 929.194895] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 929.205368] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 929.212724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.223628] Call Trace: [ 929.226240] dump_stack+0x172/0x1f0 [ 929.229889] dump_header+0x15e/0x929 [ 929.233625] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 929.238757] ? ___ratelimit+0x60/0x595 [ 929.242675] ? do_raw_spin_unlock+0x57/0x270 [ 929.247122] oom_kill_process.cold+0x10/0x6f5 [ 929.251650] ? task_will_free_mem+0x139/0x6e0 [ 929.256192] out_of_memory+0x936/0x12d0 [ 929.260221] ? oom_killer_disable+0x280/0x280 [ 929.264762] ? find_held_lock+0x35/0x130 [ 929.268853] mem_cgroup_out_of_memory+0x1d2/0x240 [ 929.273727] ? memcg_event_wake+0x230/0x230 [ 929.278082] ? do_raw_spin_unlock+0x57/0x270 [ 929.282524] ? _raw_spin_unlock+0x2d/0x50 [ 929.286712] try_charge+0x1028/0x15b0 [ 929.290549] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 929.295434] ? rcu_read_lock_sched_held+0x110/0x130 [ 929.300476] ? __alloc_pages_nodemask+0x63e/0x760 [ 929.305344] ? do_raw_spin_unlock+0x57/0x270 [ 929.309786] memcg_kmem_charge_memcg+0x7c/0x130 [ 929.314518] ? memcg_kmem_put_cache+0xb0/0xb0 [ 929.319729] ? cache_grow_begin+0x59a/0x8c0 [ 929.324076] ? lockdep_hardirqs_on+0x415/0x5d0 [ 929.328691] ? trace_hardirqs_on+0x67/0x230 [ 929.333042] cache_grow_begin+0x25f/0x8c0 [ 929.337354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 929.342919] ? __cpuset_node_allowed+0x136/0x540 [ 929.347710] fallback_alloc+0x1fd/0x2d0 [ 929.351714] ____cache_alloc_node+0x1be/0x1e0 [ 929.356232] kmem_cache_alloc+0x1f3/0x700 [ 929.360410] ? inet_create+0x2f4/0xe10 [ 929.364329] sk_prot_alloc+0x67/0x2e0 [ 929.368153] ? lock_downgrade+0x810/0x810 [ 929.372325] sk_alloc+0x39/0xf70 [ 929.375718] inet_create+0x36a/0xe10 [ 929.379488] __sock_create+0x3e6/0x750 [ 929.383409] __sys_socket+0x103/0x220 [ 929.387239] ? move_addr_to_kernel+0x80/0x80 [ 929.391673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.396451] ? do_syscall_64+0x26/0x610 [ 929.400453] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.405842] ? do_syscall_64+0x26/0x610 [ 929.409842] __x64_sys_socket+0x73/0xb0 [ 929.413847] do_syscall_64+0x103/0x610 [ 929.417769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.422983] RIP: 0033:0x45b797 [ 929.426195] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.445118] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 929.452847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 929.460134] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 929.467422] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 929.474712] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 929.481997] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 929.514199] Task in /syz3 killed as a result of limit of /syz3 [ 929.522017] memory: usage 76692kB, limit 0kB, failcnt 18 [ 929.527879] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.541887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.548704] Memory cgroup stats for /syz3: cache:108KB rss:52108KB rss_huge:49152KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52108KB inactive_file:4KB active_file:4KB unevictable:0KB [ 929.576821] Memory cgroup out of memory: Kill process 17984 (syz-executor.3) score 9560000 or sacrifice child [ 929.587815] Killed process 17984 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:35896kB, shmem-rss:0kB [ 929.606634] oom_reaper: reaped process 17984 (syz-executor.3), now anon-rss:0kB, file-rss:34936kB, shmem-rss:0kB [ 929.618077] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 929.640372] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 929.646385] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 929.653327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.662695] Call Trace: [ 929.665301] dump_stack+0x172/0x1f0 [ 929.669043] dump_header+0x15e/0x929 [ 929.672781] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 929.677908] ? ___ratelimit+0x60/0x595 [ 929.681820] ? do_raw_spin_unlock+0x57/0x270 [ 929.686257] oom_kill_process.cold+0x10/0x6f5 14:50:50 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "d7b3d850ee296e57"}}, 0x48}}, 0x0) [ 929.690777] ? task_will_free_mem+0x139/0x6e0 [ 929.695299] out_of_memory+0x936/0x12d0 [ 929.699300] ? oom_killer_disable+0x280/0x280 [ 929.703808] ? find_held_lock+0x35/0x130 [ 929.707893] mem_cgroup_out_of_memory+0x1d2/0x240 [ 929.712750] ? memcg_event_wake+0x230/0x230 [ 929.717088] ? do_raw_spin_unlock+0x57/0x270 [ 929.721493] ? _raw_spin_unlock+0x2d/0x50 [ 929.725721] try_charge+0x1028/0x15b0 [ 929.729527] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 929.734377] ? rcu_read_lock_sched_held+0x110/0x130 [ 929.739385] ? __alloc_pages_nodemask+0x63e/0x760 [ 929.744234] ? do_raw_spin_unlock+0x57/0x270 [ 929.748664] memcg_kmem_charge_memcg+0x7c/0x130 [ 929.753375] ? memcg_kmem_put_cache+0xb0/0xb0 [ 929.757893] ? cache_grow_begin+0x59a/0x8c0 [ 929.762220] ? lockdep_hardirqs_on+0x415/0x5d0 [ 929.766811] ? trace_hardirqs_on+0x67/0x230 [ 929.771144] cache_grow_begin+0x25f/0x8c0 [ 929.775289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 929.780822] ? __cpuset_node_allowed+0x136/0x540 [ 929.785581] fallback_alloc+0x1fd/0x2d0 [ 929.789569] ____cache_alloc_node+0x1be/0x1e0 [ 929.794091] kmem_cache_alloc+0x1f3/0x700 [ 929.798245] ? inet6_create+0x2ea/0xf80 [ 929.802216] sk_prot_alloc+0x67/0x2e0 [ 929.806018] ? lock_downgrade+0x810/0x810 [ 929.810158] sk_alloc+0x39/0xf70 [ 929.813519] inet6_create+0x360/0xf80 [ 929.817324] __sock_create+0x3e6/0x750 [ 929.821208] __sys_socket+0x103/0x220 [ 929.825007] ? move_addr_to_kernel+0x80/0x80 [ 929.829419] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.834185] ? do_syscall_64+0x26/0x610 [ 929.838176] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.843543] ? do_syscall_64+0x26/0x610 [ 929.847519] __x64_sys_socket+0x73/0xb0 [ 929.851486] do_syscall_64+0x103/0x610 [ 929.855395] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.860584] RIP: 0033:0x45b797 [ 929.863765] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.882661] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 929.890370] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 929.897638] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 929.899548] protocol 88fb is buggy, dev hsr_slave_0 [ 929.904929] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 929.910157] protocol 88fb is buggy, dev hsr_slave_1 [ 929.917315] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 929.929611] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 929.938838] Task in /syz0 killed as a result of limit of /syz0 [ 929.944990] memory: usage 61336kB, limit 0kB, failcnt 41 [ 929.950700] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.957472] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 929.963879] Memory cgroup stats for /syz0: cache:164KB rss:45552KB rss_huge:43008KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:45504KB inactive_file:4KB active_file:0KB unevictable:0KB [ 929.985257] Memory cgroup out of memory: Kill process 28917 (syz-executor.0) score 9543000 or sacrifice child [ 929.995639] Killed process 28917 (syz-executor.0) total-vm:72584kB, anon-rss:2216kB, file-rss:35824kB, shmem-rss:0kB [ 930.028100] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 930.043086] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 930.048690] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 930.055556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.064933] Call Trace: [ 930.064959] dump_stack+0x172/0x1f0 [ 930.064980] dump_header+0x15e/0x929 [ 930.065000] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 930.080025] ? ___ratelimit+0x60/0x595 [ 930.080040] ? do_raw_spin_unlock+0x57/0x270 [ 930.080060] oom_kill_process.cold+0x10/0x6f5 [ 930.080079] ? task_will_free_mem+0x139/0x6e0 [ 930.080099] out_of_memory+0x936/0x12d0 [ 930.080120] ? oom_killer_disable+0x280/0x280 [ 930.080135] ? find_held_lock+0x35/0x130 [ 930.080159] mem_cgroup_out_of_memory+0x1d2/0x240 [ 930.080173] ? memcg_event_wake+0x230/0x230 [ 930.080189] ? do_raw_spin_unlock+0x57/0x270 [ 930.080205] ? _raw_spin_unlock+0x2d/0x50 [ 930.080223] try_charge+0x1028/0x15b0 [ 930.088553] ? find_held_lock+0x35/0x130 [ 930.110070] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 930.110086] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 930.110103] ? find_held_lock+0x35/0x130 [ 930.110118] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 930.110145] memcg_kmem_charge_memcg+0x7c/0x130 [ 930.110162] ? memcg_kmem_put_cache+0xb0/0xb0 [ 930.110180] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 930.110198] memcg_kmem_charge+0x136/0x300 [ 930.110216] __alloc_pages_nodemask+0x3c6/0x760 [ 930.123798] ? __alloc_pages_slowpath+0x2870/0x2870 [ 930.131739] ? lockdep_hardirqs_on+0x415/0x5d0 [ 930.131756] ? trace_hardirqs_on+0x67/0x230 [ 930.131768] ? kasan_check_read+0x11/0x20 [ 930.131788] copy_process.part.0+0x3e0/0x7970 [ 930.131807] ? mark_held_locks+0x100/0x100 [ 930.131820] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 930.131839] ? __might_fault+0x12b/0x1e0 [ 930.131862] ? __cleanup_sighand+0x70/0x70 [ 930.131886] ? lock_downgrade+0x810/0x810 [ 930.145751] _do_fork+0x257/0xfe0 [ 930.154641] ? fork_idle+0x1d0/0x1d0 [ 930.163811] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.163825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 930.163838] ? do_syscall_64+0x26/0x610 [ 930.163853] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.163865] ? do_syscall_64+0x26/0x610 [ 930.163883] __x64_sys_clone+0xbf/0x150 [ 930.163900] do_syscall_64+0x103/0x610 [ 930.163919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.163930] RIP: 0033:0x4571fa [ 930.163945] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 930.163952] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 930.163967] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 930.163980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 930.177725] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 930.187315] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 930.200278] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 930.202290] Task in [ 930.209592] /syz4 14:50:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 930.223514] killed as a result of limit of /syz4 [ 930.370128] memory: usage 94476kB, limit 0kB, failcnt 35 [ 930.375646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.389963] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.396176] Memory cgroup stats for /syz4: cache:96KB rss:64376KB rss_huge:61440KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:64296KB inactive_file:0KB active_file:0KB unevictable:0KB 14:50:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) [ 930.460925] Memory cgroup out of memory: Kill process 8589 (syz-executor.4) score 9795000 or sacrifice child [ 930.473636] Killed process 8589 (syz-executor.4) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB [ 930.537183] Memory cgroup out of memory: Kill process 17904 (syz-executor.3) score 9558000 or sacrifice child [ 930.552768] Killed process 17904 (syz-executor.3) total-vm:72716kB, anon-rss:2216kB, file-rss:35876kB, shmem-rss:0kB [ 930.565982] oom_reaper: reaped process 17904 (syz-executor.3), now anon-rss:0kB, file-rss:34916kB, shmem-rss:0kB [ 930.578869] Memory cgroup out of memory: Kill process 28332 (syz-executor.0) score 9541000 or sacrifice child [ 930.610805] Killed process 28442 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB [ 930.634037] oom_reaper: reaped process 28442 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 930.652235] Memory cgroup out of memory: Kill process 8688 (syz-executor.4) score 9795000 or sacrifice child [ 930.672322] Killed process 8688 (syz-executor.4) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB [ 930.691369] oom_reaper: reaped process 8688 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 930.709299] Memory cgroup out of memory: Kill process 19139 (syz-executor.3) score 9546000 or sacrifice child [ 930.739737] Killed process 19139 (syz-executor.3) total-vm:72584kB, anon-rss:2208kB, file-rss:35848kB, shmem-rss:0kB [ 930.753640] oom_reaper: reaped process 19139 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 930.763085] Memory cgroup out of memory: Kill process 17955 (syz-executor.3) score 9544000 or sacrifice child [ 930.775489] Killed process 17955 (syz-executor.3) total-vm:72584kB, anon-rss:2208kB, file-rss:35840kB, shmem-rss:0kB [ 930.794234] Memory cgroup out of memory: Kill process 28332 (syz-executor.0) score 9541000 or sacrifice child [ 930.823650] Killed process 28400 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 930.850396] Memory cgroup out of memory: Kill process 28332 (syz-executor.0) score 9541000 or sacrifice child [ 930.868118] Killed process 28332 (syz-executor.0) total-vm:72716kB, anon-rss:2224kB, file-rss:35808kB, shmem-rss:0kB [ 930.888647] oom_reaper: reaped process 28332 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 930.905816] oom_kill_process: 7 callbacks suppressed [ 930.905836] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 930.934937] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 930.941287] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 930.948160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.957537] Call Trace: [ 930.960155] dump_stack+0x172/0x1f0 [ 930.963812] dump_header+0x15e/0x929 [ 930.967554] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 930.972698] ? ___ratelimit+0x60/0x595 [ 930.976628] oom_kill_process.cold+0x10/0x6f5 [ 930.981154] ? task_will_free_mem+0x139/0x6e0 [ 930.985690] out_of_memory+0x936/0x12d0 [ 930.989701] ? oom_killer_disable+0x280/0x280 [ 930.994215] ? find_held_lock+0x35/0x130 [ 930.998343] mem_cgroup_out_of_memory+0x1d2/0x240 [ 931.003297] ? memcg_event_wake+0x230/0x230 [ 931.007651] ? do_raw_spin_unlock+0x57/0x270 [ 931.012167] ? _raw_spin_unlock+0x2d/0x50 [ 931.016339] try_charge+0x1028/0x15b0 [ 931.020157] ? find_held_lock+0x35/0x130 [ 931.024257] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.029122] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.033985] ? find_held_lock+0x35/0x130 [ 931.038071] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.042957] memcg_kmem_charge_memcg+0x7c/0x130 [ 931.047665] ? memcg_kmem_put_cache+0xb0/0xb0 [ 931.052195] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 931.057060] memcg_kmem_charge+0x136/0x300 [ 931.061299] __alloc_pages_nodemask+0x3c6/0x760 [ 931.065967] ? __alloc_pages_slowpath+0x2870/0x2870 [ 931.070986] ? lockdep_hardirqs_on+0x415/0x5d0 [ 931.075569] ? trace_hardirqs_on+0x67/0x230 [ 931.079897] ? kasan_check_read+0x11/0x20 [ 931.084046] copy_process.part.0+0x3e0/0x7970 [ 931.088543] ? mark_held_locks+0x100/0x100 [ 931.092783] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 931.097475] ? __might_fault+0x12b/0x1e0 [ 931.101545] ? __cleanup_sighand+0x70/0x70 [ 931.105788] ? lock_downgrade+0x810/0x810 [ 931.110142] _do_fork+0x257/0xfe0 [ 931.113632] ? fork_idle+0x1d0/0x1d0 [ 931.117366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.122125] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.126884] ? do_syscall_64+0x26/0x610 [ 931.130873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.136241] ? do_syscall_64+0x26/0x610 [ 931.140309] __x64_sys_clone+0xbf/0x150 [ 931.144290] do_syscall_64+0x103/0x610 [ 931.148193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.153385] RIP: 0033:0x4571fa [ 931.156605] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 931.175515] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 931.183226] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 931.190496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 931.197779] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 931.205066] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 931.212341] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 931.223468] Task in /syz4 killed as a result of limit of /syz4 [ 931.229831] memory: usage 85700kB, limit 0kB, failcnt 47 [ 931.237649] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.244759] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.251123] Memory cgroup stats for /syz4: cache:96KB rss:55948KB rss_huge:53248KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:55860KB inactive_file:0KB active_file:0KB unevictable:0KB [ 931.272220] Memory cgroup out of memory: Kill process 8749 (syz-executor.4) score 9795000 or sacrifice child [ 931.272289] Killed process 8749 (syz-executor.4) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB [ 931.274956] oom_reaper: reaped process 8749 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 931.295342] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 931.316996] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 931.322794] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 931.329665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.339064] Call Trace: [ 931.341681] dump_stack+0x172/0x1f0 [ 931.345340] dump_header+0x15e/0x929 [ 931.349077] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 931.354211] ? ___ratelimit+0x60/0x595 [ 931.358127] ? do_raw_spin_unlock+0x57/0x270 [ 931.362568] oom_kill_process.cold+0x10/0x6f5 [ 931.367107] ? task_will_free_mem+0x139/0x6e0 [ 931.371800] ? find_held_lock+0x35/0x130 [ 931.375876] out_of_memory+0x936/0x12d0 [ 931.379861] ? lock_downgrade+0x810/0x810 [ 931.379880] ? oom_killer_disable+0x280/0x280 [ 931.379892] ? find_held_lock+0x35/0x130 [ 931.379915] mem_cgroup_out_of_memory+0x1d2/0x240 [ 931.379928] ? memcg_event_wake+0x230/0x230 [ 931.379946] ? do_raw_spin_unlock+0x57/0x270 [ 931.379962] ? _raw_spin_unlock+0x2d/0x50 [ 931.379981] try_charge+0x1028/0x15b0 [ 931.379995] ? find_held_lock+0x35/0x130 [ 931.380018] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.380036] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.418430] ? find_held_lock+0x35/0x130 [ 931.432206] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 931.437086] memcg_kmem_charge_memcg+0x7c/0x130 [ 931.441785] ? memcg_kmem_put_cache+0xb0/0xb0 [ 931.441804] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 931.441821] memcg_kmem_charge+0x136/0x300 [ 931.441837] __alloc_pages_nodemask+0x3c6/0x760 [ 931.441854] ? __alloc_pages_slowpath+0x2870/0x2870 [ 931.441874] ? lockdep_hardirqs_on+0x415/0x5d0 [ 931.441891] ? trace_hardirqs_on+0x67/0x230 [ 931.441909] ? kasan_check_read+0x11/0x20 [ 931.469775] copy_process.part.0+0x3e0/0x7970 [ 931.478273] ? mark_held_locks+0x100/0x100 [ 931.487016] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 931.491887] ? __might_fault+0x12b/0x1e0 [ 931.495978] ? __cleanup_sighand+0x70/0x70 [ 931.500242] ? lock_downgrade+0x810/0x810 [ 931.504419] _do_fork+0x257/0xfe0 [ 931.507899] ? fork_idle+0x1d0/0x1d0 [ 931.511643] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.516424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 931.521230] ? do_syscall_64+0x26/0x610 [ 931.525221] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.530614] ? do_syscall_64+0x26/0x610 [ 931.534611] __x64_sys_clone+0xbf/0x150 [ 931.538609] do_syscall_64+0x103/0x610 [ 931.542520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.547731] RIP: 0033:0x4571fa [ 931.550935] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 931.569849] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 931.577587] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 931.584888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 931.592172] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 931.599453] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 931.606750] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 931.658240] Task in /syz4 killed as a result of limit of /syz4 [ 931.665845] memory: usage 81332kB, limit 0kB, failcnt 53 [ 931.676513] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.684996] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.696108] Memory cgroup stats for /syz4: cache:96KB rss:51720KB rss_huge:49152KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51648KB inactive_file:0KB active_file:0KB unevictable:0KB [ 931.723398] Memory cgroup out of memory: Kill process 8780 (syz-executor.4) score 9795000 or sacrifice child [ 931.736345] Killed process 8780 (syz-executor.4) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB [ 931.778902] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 931.800863] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 931.816112] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 931.823102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.832469] Call Trace: [ 931.835079] dump_stack+0x172/0x1f0 [ 931.838729] dump_header+0x15e/0x929 [ 931.842457] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 931.847580] ? ___ratelimit+0x60/0x595 [ 931.851483] ? do_raw_spin_unlock+0x57/0x270 [ 931.855914] oom_kill_process.cold+0x10/0x6f5 [ 931.860445] ? task_will_free_mem+0x139/0x6e0 [ 931.864959] out_of_memory+0x936/0x12d0 [ 931.868954] ? oom_killer_disable+0x280/0x280 [ 931.873472] ? find_held_lock+0x35/0x130 [ 931.877562] mem_cgroup_out_of_memory+0x1d2/0x240 [ 931.882446] ? memcg_event_wake+0x230/0x230 [ 931.886806] ? do_raw_spin_unlock+0x57/0x270 [ 931.891253] ? _raw_spin_unlock+0x2d/0x50 [ 931.895426] try_charge+0x1028/0x15b0 [ 931.899252] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.904119] ? rcu_read_lock_sched_held+0x110/0x130 [ 931.909156] ? __alloc_pages_nodemask+0x63e/0x760 [ 931.914018] ? do_raw_spin_unlock+0x57/0x270 [ 931.918469] memcg_kmem_charge_memcg+0x7c/0x130 [ 931.923160] ? memcg_kmem_put_cache+0xb0/0xb0 [ 931.927673] ? cache_grow_begin+0x59a/0x8c0 [ 931.932013] ? lockdep_hardirqs_on+0x415/0x5d0 [ 931.936624] ? trace_hardirqs_on+0x67/0x230 [ 931.940964] cache_grow_begin+0x25f/0x8c0 [ 931.945137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 931.950700] ? __cpuset_node_allowed+0x136/0x540 [ 931.955496] fallback_alloc+0x1fd/0x2d0 [ 931.959519] ____cache_alloc_node+0x1be/0x1e0 [ 931.964033] kmem_cache_alloc+0x1f3/0x700 [ 931.968213] ? inet_create+0x2f4/0xe10 [ 931.972112] sk_prot_alloc+0x67/0x2e0 [ 931.976260] ? lock_downgrade+0x810/0x810 [ 931.980402] sk_alloc+0x39/0xf70 [ 931.983767] inet_create+0x36a/0xe10 [ 931.987502] __sock_create+0x3e6/0x750 [ 931.991401] __sys_socket+0x103/0x220 [ 931.995217] ? move_addr_to_kernel+0x80/0x80 [ 931.999639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.004419] ? do_syscall_64+0x26/0x610 [ 932.008419] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.013884] ? do_syscall_64+0x26/0x610 [ 932.017897] __x64_sys_socket+0x73/0xb0 [ 932.021880] do_syscall_64+0x103/0x610 [ 932.026032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.031217] RIP: 0033:0x45b797 [ 932.034411] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.053313] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 932.061022] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 932.068290] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 932.075558] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 932.082952] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 932.090226] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 932.099194] Task in /syz3 killed as a result of limit of /syz3 [ 932.105316] memory: usage 66544kB, limit 0kB, failcnt 42 [ 932.110922] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.117711] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.117724] Memory cgroup stats for /syz3: cache:108KB rss:43492KB rss_huge:40960KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43440KB inactive_file:4KB active_file:4KB unevictable:0KB [ 932.145416] Memory cgroup out of memory: Kill process 19119 (syz-executor.3) score 9543000 or sacrifice child [ 932.145509] Killed process 19119 (syz-executor.3) total-vm:72584kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 932.176042] IPVS: ftp: loaded support on port[0] = 21 [ 932.183594] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 932.202043] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 932.207549] CPU: 1 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 932.214498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.214505] Call Trace: [ 932.214526] dump_stack+0x172/0x1f0 [ 932.214561] dump_header+0x15e/0x929 [ 932.214592] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 932.230383] ? ___ratelimit+0x60/0x595 [ 932.239216] ? do_raw_spin_unlock+0x57/0x270 [ 932.239239] oom_kill_process.cold+0x10/0x6f5 [ 932.239258] ? task_will_free_mem+0x139/0x6e0 [ 932.239278] out_of_memory+0x936/0x12d0 [ 932.239299] ? oom_killer_disable+0x280/0x280 [ 932.239319] ? find_held_lock+0x35/0x130 [ 932.247639] mem_cgroup_out_of_memory+0x1d2/0x240 [ 932.247655] ? memcg_event_wake+0x230/0x230 [ 932.247675] ? do_raw_spin_unlock+0x57/0x270 [ 932.247693] ? _raw_spin_unlock+0x2d/0x50 [ 932.247712] try_charge+0x1028/0x15b0 [ 932.247736] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.247758] ? rcu_read_lock_sched_held+0x110/0x130 [ 932.256775] ? __alloc_pages_nodemask+0x63e/0x760 [ 932.256789] ? do_raw_spin_unlock+0x57/0x270 [ 932.256813] memcg_kmem_charge_memcg+0x7c/0x130 [ 932.256829] ? memcg_kmem_put_cache+0xb0/0xb0 [ 932.256840] ? cache_grow_begin+0x59a/0x8c0 [ 932.256856] ? lockdep_hardirqs_on+0x415/0x5d0 [ 932.256876] ? trace_hardirqs_on+0x67/0x230 [ 932.265354] cache_grow_begin+0x25f/0x8c0 [ 932.265375] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 932.265391] ? __cpuset_node_allowed+0x136/0x540 [ 932.265409] fallback_alloc+0x1fd/0x2d0 [ 932.265430] ____cache_alloc_node+0x1be/0x1e0 [ 932.265449] kmem_cache_alloc+0x1f3/0x700 [ 932.265463] ? inet6_create+0x2ea/0xf80 [ 932.265485] sk_prot_alloc+0x67/0x2e0 [ 932.265504] ? lock_downgrade+0x810/0x810 [ 932.274449] sk_alloc+0x39/0xf70 [ 932.274470] inet6_create+0x360/0xf80 [ 932.274488] __sock_create+0x3e6/0x750 [ 932.274507] __sys_socket+0x103/0x220 [ 932.274520] ? move_addr_to_kernel+0x80/0x80 [ 932.274535] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.274556] ? do_syscall_64+0x26/0x610 [ 932.283331] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.283347] ? do_syscall_64+0x26/0x610 [ 932.283367] __x64_sys_socket+0x73/0xb0 [ 932.283384] do_syscall_64+0x103/0x610 [ 932.283407] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.291548] RIP: 0033:0x45b797 [ 932.291564] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.291581] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 932.291596] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 932.291604] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 932.291611] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 932.291619] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 932.291626] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 932.292256] Task in [ 932.307450] /syz0 [ 932.316266] killed as a result of limit of [ 932.329554] /syz0 [ 932.338253] memory: usage 53380kB, limit 0kB, failcnt 65 [ 932.348144] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.354513] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.354521] Memory cgroup stats for /syz0: cache:164KB rss:39052KB rss_huge:36864KB shmem:68KB [ 932.368973] mapped_file:132KB [ 932.375506] dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39012KB inactive_file:4KB active_file:0KB unevictable:0KB [ 932.395165] Memory cgroup out of memory: Kill process 28459 (syz-executor.0) score 9541000 or sacrifice child [ 932.395255] Killed process 28462 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 932.592657] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 932.608557] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 932.614477] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 932.621342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.621348] Call Trace: [ 932.621371] dump_stack+0x172/0x1f0 [ 932.621392] dump_header+0x15e/0x929 [ 932.621408] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 932.621424] ? ___ratelimit+0x60/0x595 [ 932.621436] ? do_raw_spin_unlock+0x57/0x270 [ 932.621453] oom_kill_process.cold+0x10/0x6f5 [ 932.621470] ? task_will_free_mem+0x139/0x6e0 [ 932.621491] out_of_memory+0x936/0x12d0 [ 932.621511] ? oom_killer_disable+0x280/0x280 [ 932.621524] ? find_held_lock+0x35/0x130 [ 932.621547] mem_cgroup_out_of_memory+0x1d2/0x240 [ 932.621561] ? memcg_event_wake+0x230/0x230 [ 932.621595] ? do_raw_spin_unlock+0x57/0x270 [ 932.621610] ? _raw_spin_unlock+0x2d/0x50 [ 932.621629] try_charge+0x1028/0x15b0 [ 932.621642] ? find_held_lock+0x35/0x130 [ 932.621665] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.621679] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 932.621693] ? find_held_lock+0x35/0x130 [ 932.621709] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 932.621737] memcg_kmem_charge_memcg+0x7c/0x130 [ 932.621757] ? memcg_kmem_put_cache+0xb0/0xb0 [ 932.634475] IPVS: ftp: loaded support on port[0] = 21 [ 932.637401] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 932.646236] memcg_kmem_charge+0x136/0x300 [ 932.659026] __alloc_pages_nodemask+0x3c6/0x760 [ 932.667500] ? __alloc_pages_slowpath+0x2870/0x2870 [ 932.676067] ? lockdep_hardirqs_on+0x415/0x5d0 [ 932.685244] ? trace_hardirqs_on+0x67/0x230 [ 932.693815] ? kasan_check_read+0x11/0x20 [ 932.701697] copy_process.part.0+0x3e0/0x7970 [ 932.701719] ? mark_held_locks+0x100/0x100 [ 932.701733] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 932.701752] ? __might_fault+0x12b/0x1e0 [ 932.711723] ? __cleanup_sighand+0x70/0x70 [ 932.711742] ? lock_downgrade+0x810/0x810 [ 932.711768] _do_fork+0x257/0xfe0 [ 932.720674] ? fork_idle+0x1d0/0x1d0 [ 932.720698] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.720712] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.720730] ? do_syscall_64+0x26/0x610 [ 932.729903] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.729918] ? do_syscall_64+0x26/0x610 [ 932.729937] __x64_sys_clone+0xbf/0x150 [ 932.729955] do_syscall_64+0x103/0x610 [ 932.740013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.740026] RIP: 0033:0x4571fa [ 932.740041] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 932.740055] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 [ 932.748950] ORIG_RAX: 0000000000000038 [ 932.748965] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 932.758559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 932.758581] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 932.767063] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 932.767076] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 932.777907] Task in [ 932.797408] /syz4 [ 932.805728] killed as a result of limit of [ 932.819643] /syz4 [ 932.840116] memory: usage 76784kB, limit 0kB, failcnt 59 [ 932.868978] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.883828] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.898267] Memory cgroup stats for [ 932.907966] /syz4 [ 932.914717] : [ 932.922054] cache:96KB [ 932.938890] rss:47500KB rss_huge:45056KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47436KB inactive_file:0KB active_file:0KB unevictable:0KB [ 932.963470] Memory cgroup out of memory: Kill process 8814 (syz-executor.4) score 9795000 or sacrifice child [ 932.973841] Killed process 8814 (syz-executor.4) total-vm:72572kB, anon-rss:4236kB, file-rss:34816kB, shmem-rss:0kB [ 932.986946] oom_reaper: reaped process 8814 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 932.997771] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 933.010163] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 933.015904] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 933.022857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.032224] Call Trace: [ 933.032251] dump_stack+0x172/0x1f0 [ 933.038568] dump_header+0x15e/0x929 [ 933.042316] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 933.047436] ? ___ratelimit+0x60/0x595 [ 933.051332] ? do_raw_spin_unlock+0x57/0x270 [ 933.055744] oom_kill_process.cold+0x10/0x6f5 [ 933.060273] ? task_will_free_mem+0x139/0x6e0 [ 933.064783] out_of_memory+0x936/0x12d0 [ 933.068768] ? oom_killer_disable+0x280/0x280 [ 933.073260] ? find_held_lock+0x35/0x130 [ 933.077341] mem_cgroup_out_of_memory+0x1d2/0x240 [ 933.082186] ? memcg_event_wake+0x230/0x230 [ 933.086525] ? do_raw_spin_unlock+0x57/0x270 [ 933.090936] ? _raw_spin_unlock+0x2d/0x50 [ 933.095082] try_charge+0x1028/0x15b0 [ 933.098897] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.103741] ? rcu_read_lock_sched_held+0x110/0x130 [ 933.108761] ? __alloc_pages_nodemask+0x63e/0x760 [ 933.113600] ? do_raw_spin_unlock+0x57/0x270 [ 933.118005] memcg_kmem_charge_memcg+0x7c/0x130 [ 933.122671] ? memcg_kmem_put_cache+0xb0/0xb0 [ 933.127250] ? cache_grow_begin+0x59a/0x8c0 [ 933.131598] ? lockdep_hardirqs_on+0x415/0x5d0 [ 933.136201] ? trace_hardirqs_on+0x67/0x230 [ 933.140533] cache_grow_begin+0x25f/0x8c0 [ 933.144711] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 933.150246] ? __cpuset_node_allowed+0x136/0x540 [ 933.154999] fallback_alloc+0x1fd/0x2d0 [ 933.158986] ____cache_alloc_node+0x1be/0x1e0 [ 933.163476] kmem_cache_alloc+0x1f3/0x700 [ 933.167628] ? inet_create+0x2f4/0xe10 [ 933.171511] sk_prot_alloc+0x67/0x2e0 [ 933.175328] ? lock_downgrade+0x810/0x810 [ 933.179486] sk_alloc+0x39/0xf70 [ 933.182852] inet_create+0x36a/0xe10 [ 933.186590] __sock_create+0x3e6/0x750 [ 933.190500] __sys_socket+0x103/0x220 [ 933.194316] ? move_addr_to_kernel+0x80/0x80 [ 933.198722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.203476] ? do_syscall_64+0x26/0x610 [ 933.207535] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.212914] ? do_syscall_64+0x26/0x610 [ 933.216904] __x64_sys_socket+0x73/0xb0 [ 933.222283] do_syscall_64+0x103/0x610 [ 933.226218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.231412] RIP: 0033:0x45b797 [ 933.234608] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.253611] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 933.261345] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 933.268623] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 933.275894] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 933.283200] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 933.290474] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 933.299765] Task in /syz3 killed as a result of limit of /syz3 [ 933.306229] memory: usage 64124kB, limit 0kB, failcnt 48 [ 933.311811] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.318592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.325107] Memory cgroup stats for /syz3: cache:108KB rss:41332KB rss_huge:38912KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41280KB inactive_file:4KB active_file:4KB unevictable:0KB [ 933.346889] Memory cgroup out of memory: Kill process 28460 (syz-executor.3) score 9542000 or sacrifice child [ 933.358092] Killed process 28460 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35828kB, shmem-rss:0kB [ 933.380332] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 933.401875] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 933.410672] CPU: 1 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 933.417710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.427181] Call Trace: [ 933.429788] dump_stack+0x172/0x1f0 [ 933.433441] dump_header+0x15e/0x929 [ 933.437261] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 933.442589] ? ___ratelimit+0x60/0x595 [ 933.446499] ? do_raw_spin_unlock+0x57/0x270 [ 933.450935] oom_kill_process.cold+0x10/0x6f5 [ 933.455473] ? task_will_free_mem+0x139/0x6e0 [ 933.460039] out_of_memory+0x936/0x12d0 [ 933.464043] ? oom_killer_disable+0x280/0x280 [ 933.468556] ? find_held_lock+0x35/0x130 [ 933.472661] mem_cgroup_out_of_memory+0x1d2/0x240 [ 933.477520] ? memcg_event_wake+0x230/0x230 [ 933.481860] ? do_raw_spin_unlock+0x57/0x270 [ 933.486282] ? _raw_spin_unlock+0x2d/0x50 [ 933.490545] try_charge+0x1028/0x15b0 [ 933.494373] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.499236] ? rcu_read_lock_sched_held+0x110/0x130 [ 933.504263] ? __alloc_pages_nodemask+0x63e/0x760 [ 933.509120] ? do_raw_spin_unlock+0x57/0x270 [ 933.513551] memcg_kmem_charge_memcg+0x7c/0x130 [ 933.518683] ? memcg_kmem_put_cache+0xb0/0xb0 [ 933.523194] ? cache_grow_begin+0x59a/0x8c0 [ 933.527528] ? lockdep_hardirqs_on+0x415/0x5d0 [ 933.532128] ? trace_hardirqs_on+0x67/0x230 [ 933.536459] cache_grow_begin+0x25f/0x8c0 [ 933.540617] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 933.546193] ? __cpuset_node_allowed+0x136/0x540 [ 933.550957] fallback_alloc+0x1fd/0x2d0 [ 933.554950] ____cache_alloc_node+0x1be/0x1e0 [ 933.559465] kmem_cache_alloc+0x1f3/0x700 [ 933.563616] ? inet6_create+0x2ea/0xf80 [ 933.567637] sk_prot_alloc+0x67/0x2e0 [ 933.571461] ? lock_downgrade+0x810/0x810 [ 933.575623] sk_alloc+0x39/0xf70 [ 933.578997] inet6_create+0x360/0xf80 [ 933.582798] __sock_create+0x3e6/0x750 [ 933.586688] __sys_socket+0x103/0x220 [ 933.590491] ? move_addr_to_kernel+0x80/0x80 [ 933.594903] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.599688] ? do_syscall_64+0x26/0x610 [ 933.603670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.609043] ? do_syscall_64+0x26/0x610 [ 933.613020] __x64_sys_socket+0x73/0xb0 [ 933.617013] do_syscall_64+0x103/0x610 [ 933.620936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.626149] RIP: 0033:0x45b797 [ 933.629356] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.648879] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 933.656592] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 933.663867] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 933.671133] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 933.678399] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 933.685675] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 933.694132] Task in /syz0 killed as a result of limit of /syz0 [ 933.705198] memory: usage 51052kB, limit 0kB, failcnt 71 [ 933.710816] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.717621] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.723859] Memory cgroup stats for /syz0: cache:164KB rss:36972KB rss_huge:34816KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36932KB inactive_file:4KB active_file:0KB unevictable:0KB [ 933.723969] Memory cgroup out of memory: Kill process 28459 (syz-executor.0) score 9541000 or sacrifice child [ 933.724042] Killed process 28459 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:35824kB, shmem-rss:0kB [ 933.759825] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 933.779216] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 933.785237] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 933.792098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.801460] Call Trace: [ 933.801483] dump_stack+0x172/0x1f0 [ 933.801503] dump_header+0x15e/0x929 [ 933.801519] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 933.801536] ? ___ratelimit+0x60/0x595 [ 933.801556] ? do_raw_spin_unlock+0x57/0x270 [ 933.807798] oom_kill_process.cold+0x10/0x6f5 [ 933.820525] ? task_will_free_mem+0x139/0x6e0 [ 933.829448] out_of_memory+0x936/0x12d0 [ 933.829471] ? oom_killer_disable+0x280/0x280 [ 933.829485] ? find_held_lock+0x35/0x130 [ 933.829509] mem_cgroup_out_of_memory+0x1d2/0x240 [ 933.838007] ? memcg_event_wake+0x230/0x230 [ 933.846570] ? do_raw_spin_unlock+0x57/0x270 [ 933.855804] ? _raw_spin_unlock+0x2d/0x50 [ 933.864358] try_charge+0x1028/0x15b0 [ 933.868188] ? find_held_lock+0x35/0x130 [ 933.872270] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.872284] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.872299] ? find_held_lock+0x35/0x130 [ 933.872319] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 933.882054] memcg_kmem_charge_memcg+0x7c/0x130 [ 933.882071] ? memcg_kmem_put_cache+0xb0/0xb0 [ 933.882094] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 933.891113] memcg_kmem_charge+0x136/0x300 [ 933.891131] __alloc_pages_nodemask+0x3c6/0x760 [ 933.891147] ? __alloc_pages_slowpath+0x2870/0x2870 [ 933.891168] ? lockdep_hardirqs_on+0x415/0x5d0 [ 933.900361] ? trace_hardirqs_on+0x67/0x230 [ 933.900374] ? kasan_check_read+0x11/0x20 [ 933.900394] copy_process.part.0+0x3e0/0x7970 [ 933.900416] ? mark_held_locks+0x100/0x100 [ 933.909505] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 933.909524] ? __might_fault+0x12b/0x1e0 [ 933.909547] ? __cleanup_sighand+0x70/0x70 [ 933.909567] ? lock_downgrade+0x810/0x810 [ 933.919275] _do_fork+0x257/0xfe0 [ 933.928167] ? fork_idle+0x1d0/0x1d0 [ 933.936837] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.945750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.954069] ? do_syscall_64+0x26/0x610 [ 933.961658] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.961672] ? do_syscall_64+0x26/0x610 [ 933.961691] __x64_sys_clone+0xbf/0x150 [ 933.961709] do_syscall_64+0x103/0x610 [ 933.961727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.970199] RIP: 0033:0x4571fa [ 933.970214] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 933.970221] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 933.970234] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 933.970242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 933.970256] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 933.979093] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 933.979107] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 933.990011] Task in [ 934.024280] /syz4 [ 934.046813] killed as a result of limit of [ 934.061622] /syz4 [ 934.080473] memory: usage 72396kB, limit 0kB, failcnt 65 [ 934.086166] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.095358] chnl_net:caif_netlink_parms(): no params data found [ 934.099109] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.108510] Memory cgroup stats for /syz4: cache:96KB rss:43244KB rss_huge:40960KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43212KB inactive_file:0KB active_file:0KB unevictable:0KB [ 934.135952] Memory cgroup out of memory: Kill process 8619 (syz-executor.4) score 9793000 or sacrifice child [ 934.146167] net_ratelimit: 22 callbacks suppressed [ 934.146184] protocol 88fb is buggy, dev hsr_slave_0 [ 934.146253] protocol 88fb is buggy, dev hsr_slave_1 [ 934.146364] protocol 88fb is buggy, dev hsr_slave_0 [ 934.146424] protocol 88fb is buggy, dev hsr_slave_1 [ 934.172706] Killed process 8619 (syz-executor.4) total-vm:72440kB, anon-rss:4228kB, file-rss:34816kB, shmem-rss:0kB [ 934.205638] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 934.227598] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 934.234243] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 934.241219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.250600] Call Trace: [ 934.253214] dump_stack+0x172/0x1f0 [ 934.256878] dump_header+0x15e/0x929 [ 934.260882] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 934.266012] ? ___ratelimit+0x60/0x595 [ 934.269922] ? do_raw_spin_unlock+0x57/0x270 [ 934.274353] oom_kill_process.cold+0x10/0x6f5 [ 934.278868] ? task_will_free_mem+0x139/0x6e0 [ 934.283386] out_of_memory+0x936/0x12d0 [ 934.287386] ? oom_killer_disable+0x280/0x280 [ 934.291897] ? find_held_lock+0x35/0x130 [ 934.295982] mem_cgroup_out_of_memory+0x1d2/0x240 [ 934.300836] ? memcg_event_wake+0x230/0x230 [ 934.305173] ? do_raw_spin_unlock+0x57/0x270 [ 934.309605] ? _raw_spin_unlock+0x2d/0x50 [ 934.313773] try_charge+0x1028/0x15b0 [ 934.317614] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 934.322489] ? rcu_read_lock_sched_held+0x110/0x130 [ 934.328253] ? __alloc_pages_nodemask+0x63e/0x760 [ 934.333096] ? do_raw_spin_unlock+0x57/0x270 [ 934.337597] memcg_kmem_charge_memcg+0x7c/0x130 [ 934.342270] ? memcg_kmem_put_cache+0xb0/0xb0 [ 934.346762] ? cache_grow_begin+0x59a/0x8c0 [ 934.351083] ? lockdep_hardirqs_on+0x415/0x5d0 [ 934.355718] ? trace_hardirqs_on+0x67/0x230 [ 934.360044] cache_grow_begin+0x25f/0x8c0 [ 934.364203] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 934.369760] ? __cpuset_node_allowed+0x136/0x540 [ 934.374530] fallback_alloc+0x1fd/0x2d0 [ 934.378506] ____cache_alloc_node+0x1be/0x1e0 [ 934.383007] kmem_cache_alloc+0x1f3/0x700 [ 934.387151] ? inet_create+0x2f4/0xe10 [ 934.391040] sk_prot_alloc+0x67/0x2e0 [ 934.394851] ? lock_downgrade+0x810/0x810 [ 934.399277] sk_alloc+0x39/0xf70 [ 934.402648] inet_create+0x36a/0xe10 [ 934.406365] __sock_create+0x3e6/0x750 [ 934.410254] __sys_socket+0x103/0x220 [ 934.414050] ? move_addr_to_kernel+0x80/0x80 [ 934.418463] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 934.423215] ? do_syscall_64+0x26/0x610 [ 934.427201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.432565] ? do_syscall_64+0x26/0x610 [ 934.436552] __x64_sys_socket+0x73/0xb0 [ 934.440534] do_syscall_64+0x103/0x610 [ 934.444442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.449718] RIP: 0033:0x45b797 [ 934.452907] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 934.471805] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 934.479519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 934.486794] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 934.494079] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 934.501366] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 934.508656] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 934.516973] Task in /syz3 killed as a result of limit of /syz3 [ 934.524368] memory: usage 61812kB, limit 0kB, failcnt 54 [ 934.534036] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.543276] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.553800] Memory cgroup stats for /syz3: cache:108KB rss:39200KB rss_huge:36864KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39152KB inactive_file:4KB active_file:4KB unevictable:0KB [ 934.581716] Memory cgroup out of memory: Kill process 28799 (syz-executor.3) score 9542000 or sacrifice child [ 934.594914] Killed process 28808 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 934.637033] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 934.654834] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 934.664471] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 934.671439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 934.680829] Call Trace: [ 934.683440] dump_stack+0x172/0x1f0 [ 934.687088] dump_header+0x15e/0x929 [ 934.690822] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 934.695946] ? ___ratelimit+0x60/0x595 [ 934.699855] ? do_raw_spin_unlock+0x57/0x270 [ 934.704284] oom_kill_process.cold+0x10/0x6f5 [ 934.708808] ? task_will_free_mem+0x139/0x6e0 [ 934.713349] out_of_memory+0x936/0x12d0 [ 934.717355] ? oom_killer_disable+0x280/0x280 [ 934.721893] ? find_held_lock+0x35/0x130 [ 934.726001] mem_cgroup_out_of_memory+0x1d2/0x240 [ 934.730867] ? memcg_event_wake+0x230/0x230 [ 934.735219] ? do_raw_spin_unlock+0x57/0x270 [ 934.739661] ? _raw_spin_unlock+0x2d/0x50 [ 934.743847] try_charge+0x1028/0x15b0 [ 934.747694] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 934.752582] ? rcu_read_lock_sched_held+0x110/0x130 [ 934.757632] ? __alloc_pages_nodemask+0x63e/0x760 [ 934.762500] ? do_raw_spin_unlock+0x57/0x270 [ 934.766988] memcg_kmem_charge_memcg+0x7c/0x130 [ 934.771700] ? memcg_kmem_put_cache+0xb0/0xb0 [ 934.776220] ? cache_grow_begin+0x59a/0x8c0 [ 934.779572] protocol 88fb is buggy, dev hsr_slave_0 [ 934.780565] ? lockdep_hardirqs_on+0x415/0x5d0 [ 934.785675] protocol 88fb is buggy, dev hsr_slave_1 [ 934.790206] ? trace_hardirqs_on+0x67/0x230 [ 934.790224] cache_grow_begin+0x25f/0x8c0 [ 934.790242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 934.790256] ? __cpuset_node_allowed+0x136/0x540 [ 934.790271] fallback_alloc+0x1fd/0x2d0 [ 934.790294] ____cache_alloc_node+0x1be/0x1e0 [ 934.822754] kmem_cache_alloc+0x1f3/0x700 [ 934.826929] ? inet6_create+0x2ea/0xf80 [ 934.830926] sk_prot_alloc+0x67/0x2e0 [ 934.834720] ? lock_downgrade+0x810/0x810 [ 934.838879] sk_alloc+0x39/0xf70 [ 934.842242] inet6_create+0x360/0xf80 [ 934.846035] __sock_create+0x3e6/0x750 [ 934.849919] __sys_socket+0x103/0x220 [ 934.853716] ? move_addr_to_kernel+0x80/0x80 [ 934.858131] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 934.862909] ? do_syscall_64+0x26/0x610 [ 934.866873] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.872252] ? do_syscall_64+0x26/0x610 [ 934.876225] __x64_sys_socket+0x73/0xb0 [ 934.880223] do_syscall_64+0x103/0x610 [ 934.884131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 934.889319] RIP: 0033:0x45b797 [ 934.892522] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 934.911506] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 934.919222] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 934.926506] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 934.933780] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 934.941048] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 934.948308] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 934.956307] Task in /syz0 killed as a result of limit of /syz0 [ 934.963935] memory: usage 48696kB, limit 0kB, failcnt 185 [ 934.974512] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.983344] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 934.994732] Memory cgroup stats for /syz0: cache:164KB rss:34800KB rss_huge:32768KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34776KB inactive_file:4KB active_file:0KB unevictable:0KB [ 935.029565] Memory cgroup out of memory: Kill process 28478 (syz-executor.0) score 9539000 or sacrifice child [ 935.047893] Killed process 28478 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:35816kB, shmem-rss:0kB [ 935.060520] oom_reaper: reaped process 28478 (syz-executor.0), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 935.078619] Memory cgroup out of memory: Kill process 18093 (syz-executor.4) score 9563000 or sacrifice child [ 935.089723] Killed process 18093 (syz-executor.4) total-vm:72848kB, anon-rss:2224kB, file-rss:35880kB, shmem-rss:0kB [ 935.101424] Memory cgroup out of memory: Kill process 28799 (syz-executor.3) score 9542000 or sacrifice child [ 935.110170] oom_reaper: reaped process 18093 (syz-executor.4), now anon-rss:0kB, file-rss:34920kB, shmem-rss:0kB [ 935.118887] Killed process 28799 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35828kB, shmem-rss:0kB [ 935.185643] Memory cgroup out of memory: Kill process 28543 (syz-executor.0) score 9539000 or sacrifice child [ 935.205755] Killed process 28543 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:35816kB, shmem-rss:0kB [ 935.252545] Memory cgroup out of memory: Kill process 17965 (syz-executor.4) score 9561000 or sacrifice child [ 935.263114] Killed process 17965 (syz-executor.4) total-vm:72848kB, anon-rss:2224kB, file-rss:35880kB, shmem-rss:0kB [ 935.293751] Memory cgroup out of memory: Kill process 19082 (syz-executor.3) score 9541000 or sacrifice child [ 935.311051] Killed process 19082 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:35836kB, shmem-rss:0kB [ 935.326954] Memory cgroup out of memory: Kill process 28493 (syz-executor.0) score 9537000 or sacrifice child [ 935.339516] protocol 88fb is buggy, dev hsr_slave_0 [ 935.344806] protocol 88fb is buggy, dev hsr_slave_1 [ 935.350118] protocol 88fb is buggy, dev hsr_slave_0 [ 935.355350] protocol 88fb is buggy, dev hsr_slave_1 [ 935.374110] Killed process 28493 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:35808kB, shmem-rss:0kB [ 935.390550] device bridge_slave_1 left promiscuous mode [ 935.390709] oom_reaper: reaped process 28493 (syz-executor.0), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 935.396332] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.414040] Memory cgroup out of memory: Kill process 11123 (syz-executor.4) score 9546000 or sacrifice child [ 935.425016] Killed process 11123 (syz-executor.4) total-vm:72452kB, anon-rss:2192kB, file-rss:35860kB, shmem-rss:0kB [ 935.452613] Memory cgroup out of memory: Kill process 18080 (syz-executor.4) score 9544000 or sacrifice child [ 935.463492] Killed process 18080 (syz-executor.4) total-vm:72716kB, anon-rss:2216kB, file-rss:35828kB, shmem-rss:0kB [ 935.475085] oom_reaper: reaped process 18080 (syz-executor.4), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 935.477639] Memory cgroup out of memory: Kill process 28520 (syz-executor.3) score 9540000 or sacrifice child [ 935.496769] device bridge_slave_0 left promiscuous mode [ 935.496798] Killed process 28537 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 935.513788] Memory cgroup out of memory: Kill process 15009 (syz-executor.0) score 9532000 or sacrifice child [ 935.519993] oom_reaper: reaped process 28537 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 935.526177] Killed process 15009 (syz-executor.0) total-vm:72584kB, anon-rss:2216kB, file-rss:35780kB, shmem-rss:0kB [ 935.545888] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.560588] Memory cgroup out of memory: Kill process 28550 (syz-executor.4) score 9544000 or sacrifice child [ 935.572917] Killed process 28550 (syz-executor.4) total-vm:72584kB, anon-rss:2208kB, file-rss:35836kB, shmem-rss:0kB [ 935.585985] Memory cgroup out of memory: Kill process 28520 (syz-executor.3) score 9540000 or sacrifice child [ 935.596432] Killed process 28520 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35820kB, shmem-rss:0kB [ 935.624504] Memory cgroup out of memory: Kill process 28793 (syz-executor.0) score 9289000 or sacrifice child [ 935.638681] Killed process 28793 (syz-executor.0) total-vm:72584kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 935.666075] Memory cgroup out of memory: Kill process 28878 (syz-executor.4) score 9542000 or sacrifice child [ 935.679004] Killed process 28928 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 935.690323] Memory cgroup out of memory: Kill process 28948 (syz-executor.3) score 9540000 or sacrifice child [ 935.691206] oom_reaper: reaped process 28928 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 935.709571] Killed process 29002 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 935.740844] Memory cgroup out of memory: Kill process 9160 (syz-executor.0) score 9289000 or sacrifice child [ 935.759532] Killed process 9160 (syz-executor.0) total-vm:72584kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 935.777036] Memory cgroup out of memory: Kill process 28878 (syz-executor.4) score 9542000 or sacrifice child [ 935.787407] Killed process 28878 (syz-executor.4) total-vm:72584kB, anon-rss:2208kB, file-rss:35828kB, shmem-rss:0kB [ 935.807138] Memory cgroup out of memory: Kill process 28948 (syz-executor.3) score 9540000 or sacrifice child [ 935.808367] oom_reaper: reaped process 28878 (syz-executor.4), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 935.820992] Killed process 28948 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35828kB, shmem-rss:0kB [ 935.869990] Memory cgroup out of memory: Kill process 22471 (syz-executor.0) score 9287000 or sacrifice child [ 935.888451] Killed process 22471 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 935.932102] oom_kill_process: 19 callbacks suppressed [ 935.932122] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 935.960850] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 935.966670] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 935.973537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.982914] Call Trace: [ 935.985537] dump_stack+0x172/0x1f0 [ 935.989208] dump_header+0x15e/0x929 [ 935.992949] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 935.998083] ? ___ratelimit+0x60/0x595 [ 936.002004] oom_kill_process.cold+0x10/0x6f5 [ 936.006537] ? task_will_free_mem+0x139/0x6e0 [ 936.011077] out_of_memory+0x936/0x12d0 [ 936.015087] ? oom_killer_disable+0x280/0x280 [ 936.019612] ? find_held_lock+0x35/0x130 [ 936.023711] mem_cgroup_out_of_memory+0x1d2/0x240 [ 936.028595] ? memcg_event_wake+0x230/0x230 [ 936.032952] ? do_raw_spin_unlock+0x57/0x270 [ 936.037472] ? _raw_spin_unlock+0x2d/0x50 [ 936.041648] try_charge+0x1028/0x15b0 [ 936.045468] ? find_held_lock+0x35/0x130 [ 936.049563] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 936.054622] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 936.059492] ? find_held_lock+0x35/0x130 [ 936.063588] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 936.068495] memcg_kmem_charge_memcg+0x7c/0x130 [ 936.073197] ? memcg_kmem_put_cache+0xb0/0xb0 [ 936.077723] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 936.082619] memcg_kmem_charge+0x136/0x300 [ 936.086886] __alloc_pages_nodemask+0x3c6/0x760 [ 936.091597] ? __alloc_pages_slowpath+0x2870/0x2870 [ 936.096649] ? lockdep_hardirqs_on+0x415/0x5d0 [ 936.101254] ? trace_hardirqs_on+0x67/0x230 [ 936.105602] ? kasan_check_read+0x11/0x20 [ 936.109779] copy_process.part.0+0x3e0/0x7970 [ 936.114393] ? mark_held_locks+0x100/0x100 [ 936.118647] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 936.123344] ? __might_fault+0x12b/0x1e0 [ 936.127432] ? __cleanup_sighand+0x70/0x70 [ 936.131693] ? lock_downgrade+0x810/0x810 [ 936.135874] _do_fork+0x257/0xfe0 [ 936.139346] ? fork_idle+0x1d0/0x1d0 [ 936.143085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.147859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.152654] ? do_syscall_64+0x26/0x610 [ 936.156654] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.162044] ? do_syscall_64+0x26/0x610 [ 936.166066] __x64_sys_clone+0xbf/0x150 [ 936.170070] do_syscall_64+0x103/0x610 [ 936.173987] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.179199] RIP: 0033:0x4571fa [ 936.182406] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 936.207466] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 936.215201] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 936.222497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 936.229784] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 936.237067] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 936.244349] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 936.260599] Task in /syz4 killed as a result of limit of /syz4 [ 936.266846] memory: usage 51156kB, limit 0kB, failcnt 113 [ 936.272689] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.280092] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.286421] Memory cgroup stats for /syz4: cache:96KB rss:23912KB rss_huge:22528KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23868KB inactive_file:0KB active_file:0KB unevictable:0KB [ 936.307509] Memory cgroup out of memory: Kill process 19177 (syz-executor.4) score 9540000 or sacrifice child [ 936.317911] Killed process 19177 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:35828kB, shmem-rss:0kB [ 936.359137] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 936.380507] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 936.386214] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 936.393165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.402710] Call Trace: [ 936.405321] dump_stack+0x172/0x1f0 [ 936.408977] dump_header+0x15e/0x929 [ 936.412717] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 936.417842] ? ___ratelimit+0x60/0x595 [ 936.421748] ? do_raw_spin_unlock+0x57/0x270 [ 936.426181] oom_kill_process.cold+0x10/0x6f5 [ 936.430726] ? task_will_free_mem+0x139/0x6e0 [ 936.435258] out_of_memory+0x936/0x12d0 [ 936.439456] ? oom_killer_disable+0x280/0x280 [ 936.443975] ? find_held_lock+0x35/0x130 [ 936.448068] mem_cgroup_out_of_memory+0x1d2/0x240 [ 936.452937] ? memcg_event_wake+0x230/0x230 [ 936.457293] ? do_raw_spin_unlock+0x57/0x270 [ 936.461731] ? _raw_spin_unlock+0x2d/0x50 [ 936.465902] try_charge+0x1028/0x15b0 [ 936.469729] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 936.474609] ? rcu_read_lock_sched_held+0x110/0x130 [ 936.479652] ? __alloc_pages_nodemask+0x63e/0x760 [ 936.484525] ? do_raw_spin_unlock+0x57/0x270 [ 936.488970] memcg_kmem_charge_memcg+0x7c/0x130 [ 936.493666] ? memcg_kmem_put_cache+0xb0/0xb0 [ 936.498190] ? cache_grow_begin+0x59a/0x8c0 [ 936.502630] ? lockdep_hardirqs_on+0x415/0x5d0 [ 936.507231] ? trace_hardirqs_on+0x67/0x230 [ 936.511575] cache_grow_begin+0x25f/0x8c0 [ 936.515756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 936.521310] ? __cpuset_node_allowed+0x136/0x540 [ 936.526083] fallback_alloc+0x1fd/0x2d0 [ 936.530082] ____cache_alloc_node+0x1be/0x1e0 [ 936.534610] kmem_cache_alloc+0x1f3/0x700 [ 936.538789] ? inet_create+0x2f4/0xe10 [ 936.542713] sk_prot_alloc+0x67/0x2e0 [ 936.546539] ? lock_downgrade+0x810/0x810 [ 936.550726] sk_alloc+0x39/0xf70 [ 936.554148] inet_create+0x36a/0xe10 [ 936.557892] __sock_create+0x3e6/0x750 [ 936.561808] __sys_socket+0x103/0x220 [ 936.565637] ? move_addr_to_kernel+0x80/0x80 [ 936.570073] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.574855] ? do_syscall_64+0x26/0x610 [ 936.578845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.584225] ? do_syscall_64+0x26/0x610 [ 936.588225] __x64_sys_socket+0x73/0xb0 [ 936.592219] do_syscall_64+0x103/0x610 [ 936.596130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.601327] RIP: 0033:0x45b797 [ 936.604538] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 936.623560] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 936.631298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 936.638668] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 936.645956] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 936.653243] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 936.660530] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 936.673914] Task in /syz3 killed as a result of limit of /syz3 [ 936.680203] memory: usage 49688kB, limit 0kB, failcnt 96 [ 936.685896] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.692865] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 936.699126] Memory cgroup stats for /syz3: cache:108KB rss:28368KB rss_huge:26624KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28248KB inactive_file:4KB active_file:4KB unevictable:0KB [ 936.720772] Memory cgroup out of memory: Kill process 8127 (syz-executor.3) score 9540000 or sacrifice child [ 936.731048] Killed process 8127 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35828kB, shmem-rss:0kB [ 936.758062] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 936.772261] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 936.777701] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 936.784815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.794206] Call Trace: [ 936.796814] dump_stack+0x172/0x1f0 [ 936.800470] dump_header+0x15e/0x929 [ 936.804207] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 936.809355] ? ___ratelimit+0x60/0x595 [ 936.813263] ? do_raw_spin_unlock+0x57/0x270 [ 936.817712] oom_kill_process.cold+0x10/0x6f5 [ 936.822240] ? task_will_free_mem+0x139/0x6e0 [ 936.826766] out_of_memory+0x936/0x12d0 [ 936.830772] ? oom_killer_disable+0x280/0x280 [ 936.835284] ? find_held_lock+0x35/0x130 [ 936.839376] mem_cgroup_out_of_memory+0x1d2/0x240 [ 936.844235] ? memcg_event_wake+0x230/0x230 [ 936.848569] ? do_raw_spin_unlock+0x57/0x270 [ 936.852999] ? _raw_spin_unlock+0x2d/0x50 [ 936.857166] try_charge+0x1028/0x15b0 [ 936.860996] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 936.865858] ? rcu_read_lock_sched_held+0x110/0x130 [ 936.870884] ? __alloc_pages_nodemask+0x63e/0x760 [ 936.875734] ? do_raw_spin_unlock+0x57/0x270 [ 936.880166] memcg_kmem_charge_memcg+0x7c/0x130 [ 936.884849] ? memcg_kmem_put_cache+0xb0/0xb0 [ 936.889353] ? cache_grow_begin+0x59a/0x8c0 [ 936.893690] ? lockdep_hardirqs_on+0x415/0x5d0 [ 936.898283] ? trace_hardirqs_on+0x67/0x230 [ 936.902621] cache_grow_begin+0x25f/0x8c0 [ 936.906788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 936.912339] ? __cpuset_node_allowed+0x136/0x540 [ 936.917110] fallback_alloc+0x1fd/0x2d0 [ 936.921099] ____cache_alloc_node+0x1be/0x1e0 [ 936.925612] kmem_cache_alloc+0x1f3/0x700 [ 936.929772] ? inet6_create+0x2ea/0xf80 [ 936.933765] sk_prot_alloc+0x67/0x2e0 [ 936.937590] ? lock_downgrade+0x810/0x810 [ 936.941888] sk_alloc+0x39/0xf70 [ 936.945495] inet6_create+0x360/0xf80 [ 936.949319] __sock_create+0x3e6/0x750 [ 936.953223] __sys_socket+0x103/0x220 [ 936.957033] ? move_addr_to_kernel+0x80/0x80 [ 936.961440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 936.966199] ? do_syscall_64+0x26/0x610 [ 936.970175] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.975573] ? do_syscall_64+0x26/0x610 [ 936.979562] __x64_sys_socket+0x73/0xb0 [ 936.983559] do_syscall_64+0x103/0x610 [ 936.987447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 936.992633] RIP: 0033:0x45b797 [ 936.995830] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.014742] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 937.022472] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 937.029746] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 937.037038] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 937.044305] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 937.051588] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 937.060062] Task in /syz0 killed as a result of limit of /syz0 [ 937.066087] memory: usage 32000kB, limit 0kB, failcnt 227 [ 937.071779] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.078716] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.085097] Memory cgroup stats for /syz0: cache:164KB rss:19712KB rss_huge:18432KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19676KB inactive_file:4KB active_file:0KB unevictable:0KB [ 937.106566] Memory cgroup out of memory: Kill process 22650 (syz-executor.0) score 9287000 or sacrifice child [ 937.116970] Killed process 22650 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 937.129104] oom_reaper: reaped process 22650 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 937.139970] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 937.154873] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 937.160477] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 937.167348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.176704] Call Trace: [ 937.179302] dump_stack+0x172/0x1f0 [ 937.182947] dump_header+0x15e/0x929 [ 937.186683] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 937.191800] ? ___ratelimit+0x60/0x595 [ 937.195697] ? do_raw_spin_unlock+0x57/0x270 [ 937.200122] oom_kill_process.cold+0x10/0x6f5 [ 937.204634] ? task_will_free_mem+0x139/0x6e0 [ 937.209163] out_of_memory+0x936/0x12d0 [ 937.213166] ? oom_killer_disable+0x280/0x280 [ 937.217691] ? find_held_lock+0x35/0x130 [ 937.223289] mem_cgroup_out_of_memory+0x1d2/0x240 [ 937.228154] ? memcg_event_wake+0x230/0x230 [ 937.232502] ? do_raw_spin_unlock+0x57/0x270 [ 937.236924] ? _raw_spin_unlock+0x2d/0x50 [ 937.241088] try_charge+0x1028/0x15b0 [ 937.244897] ? find_held_lock+0x35/0x130 [ 937.248974] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 937.253830] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.258689] ? find_held_lock+0x35/0x130 [ 937.262761] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 937.267629] memcg_kmem_charge_memcg+0x7c/0x130 [ 937.272315] ? memcg_kmem_put_cache+0xb0/0xb0 [ 937.276827] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 937.281698] memcg_kmem_charge+0x136/0x300 [ 937.285949] __alloc_pages_nodemask+0x3c6/0x760 [ 937.290640] ? __alloc_pages_slowpath+0x2870/0x2870 [ 937.295772] ? lockdep_hardirqs_on+0x415/0x5d0 [ 937.300375] ? trace_hardirqs_on+0x67/0x230 [ 937.304720] ? kasan_check_read+0x11/0x20 [ 937.308890] copy_process.part.0+0x3e0/0x7970 [ 937.313415] ? mark_held_locks+0x100/0x100 [ 937.317666] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 937.322387] ? __might_fault+0x12b/0x1e0 [ 937.326474] ? __cleanup_sighand+0x70/0x70 [ 937.330729] ? lock_downgrade+0x810/0x810 [ 937.334904] _do_fork+0x257/0xfe0 [ 937.338373] ? fork_idle+0x1d0/0x1d0 [ 937.342115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.346916] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.351693] ? do_syscall_64+0x26/0x610 [ 937.355689] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.361074] ? do_syscall_64+0x26/0x610 [ 937.365069] __x64_sys_clone+0xbf/0x150 [ 937.369065] do_syscall_64+0x103/0x610 [ 937.372979] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.378179] RIP: 0033:0x4571fa [ 937.381386] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 937.400474] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 937.408226] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 937.415517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 937.422798] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 937.430079] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 937.437381] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 937.446691] Task in /syz4 killed as a result of limit of /syz4 [ 937.460126] memory: usage 48684kB, limit 0kB, failcnt 119 [ 937.465788] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.478805] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.486204] Memory cgroup stats for /syz4: cache:96KB rss:21744KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21700KB inactive_file:0KB active_file:0KB unevictable:0KB [ 937.514731] Memory cgroup out of memory: Kill process 28676 (syz-executor.4) score 9539000 or sacrifice child [ 937.526139] Killed process 28682 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 937.567178] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 937.590713] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 937.596308] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 937.603257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.612628] Call Trace: [ 937.615235] dump_stack+0x172/0x1f0 [ 937.618877] dump_header+0x15e/0x929 [ 937.622614] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 937.627733] ? ___ratelimit+0x60/0x595 [ 937.631629] ? do_raw_spin_unlock+0x57/0x270 [ 937.636058] oom_kill_process.cold+0x10/0x6f5 [ 937.640586] ? task_will_free_mem+0x139/0x6e0 [ 937.645109] out_of_memory+0x936/0x12d0 [ 937.649175] ? oom_killer_disable+0x280/0x280 [ 937.653695] ? find_held_lock+0x35/0x130 [ 937.657789] mem_cgroup_out_of_memory+0x1d2/0x240 [ 937.662652] ? memcg_event_wake+0x230/0x230 [ 937.667008] ? do_raw_spin_unlock+0x57/0x270 [ 937.671438] ? _raw_spin_unlock+0x2d/0x50 [ 937.675619] try_charge+0x1028/0x15b0 [ 937.679445] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 937.684310] ? rcu_read_lock_sched_held+0x110/0x130 [ 937.689335] ? __alloc_pages_nodemask+0x63e/0x760 [ 937.694186] ? do_raw_spin_unlock+0x57/0x270 [ 937.698620] memcg_kmem_charge_memcg+0x7c/0x130 [ 937.703306] ? memcg_kmem_put_cache+0xb0/0xb0 [ 937.707815] ? cache_grow_begin+0x59a/0x8c0 [ 937.712162] ? lockdep_hardirqs_on+0x415/0x5d0 [ 937.716764] ? trace_hardirqs_on+0x67/0x230 [ 937.721102] cache_grow_begin+0x25f/0x8c0 [ 937.725261] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 937.730834] ? __cpuset_node_allowed+0x136/0x540 [ 937.735607] fallback_alloc+0x1fd/0x2d0 [ 937.739610] ____cache_alloc_node+0x1be/0x1e0 [ 937.744128] kmem_cache_alloc+0x1f3/0x700 [ 937.748290] ? inet_create+0x2f4/0xe10 [ 937.752202] sk_prot_alloc+0x67/0x2e0 [ 937.756020] ? lock_downgrade+0x810/0x810 [ 937.760274] sk_alloc+0x39/0xf70 [ 937.763656] inet_create+0x36a/0xe10 [ 937.767395] __sock_create+0x3e6/0x750 [ 937.771303] __sys_socket+0x103/0x220 [ 937.775117] ? move_addr_to_kernel+0x80/0x80 [ 937.779540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.784305] ? do_syscall_64+0x26/0x610 [ 937.788285] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.793694] ? do_syscall_64+0x26/0x610 [ 937.797690] __x64_sys_socket+0x73/0xb0 [ 937.801684] do_syscall_64+0x103/0x610 [ 937.805607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.811240] RIP: 0033:0x45b797 [ 937.814437] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.833350] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 937.841091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 937.848372] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 937.856087] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 937.863369] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 937.870645] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 937.888439] Task in /syz3 killed as a result of limit of /syz3 [ 937.894668] memory: usage 47376kB, limit 0kB, failcnt 102 [ 937.907593] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.914618] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.928059] Memory cgroup stats for /syz3: cache:108KB rss:26220KB rss_huge:24576KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26100KB inactive_file:4KB active_file:4KB unevictable:0KB [ 937.957296] Memory cgroup out of memory: Kill process 20781 (syz-executor.3) score 9539000 or sacrifice child [ 937.967708] Killed process 20785 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 938.008514] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 938.023653] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 938.029292] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 938.036244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.045616] Call Trace: [ 938.048220] dump_stack+0x172/0x1f0 [ 938.051868] dump_header+0x15e/0x929 [ 938.055603] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 938.060731] ? ___ratelimit+0x60/0x595 [ 938.064626] ? do_raw_spin_unlock+0x57/0x270 [ 938.069048] oom_kill_process.cold+0x10/0x6f5 [ 938.073559] ? task_will_free_mem+0x139/0x6e0 [ 938.078087] out_of_memory+0x936/0x12d0 [ 938.082084] ? oom_killer_disable+0x280/0x280 [ 938.086597] ? find_held_lock+0x35/0x130 [ 938.090686] mem_cgroup_out_of_memory+0x1d2/0x240 [ 938.095538] ? memcg_event_wake+0x230/0x230 [ 938.099875] ? do_raw_spin_unlock+0x57/0x270 [ 938.104302] ? _raw_spin_unlock+0x2d/0x50 [ 938.108463] try_charge+0x1028/0x15b0 [ 938.112284] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 938.117144] ? rcu_read_lock_sched_held+0x110/0x130 [ 938.122166] ? __alloc_pages_nodemask+0x63e/0x760 [ 938.127019] ? do_raw_spin_unlock+0x57/0x270 [ 938.131452] memcg_kmem_charge_memcg+0x7c/0x130 [ 938.136144] ? memcg_kmem_put_cache+0xb0/0xb0 [ 938.140656] ? cache_grow_begin+0x59a/0x8c0 [ 938.145002] ? lockdep_hardirqs_on+0x415/0x5d0 [ 938.149612] ? trace_hardirqs_on+0x67/0x230 [ 938.153950] cache_grow_begin+0x25f/0x8c0 [ 938.158113] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 938.163660] ? __cpuset_node_allowed+0x136/0x540 [ 938.168431] fallback_alloc+0x1fd/0x2d0 [ 938.172418] ____cache_alloc_node+0x1be/0x1e0 [ 938.176922] kmem_cache_alloc+0x1f3/0x700 [ 938.181085] ? inet6_create+0x2ea/0xf80 [ 938.185248] sk_prot_alloc+0x67/0x2e0 [ 938.189058] ? lock_downgrade+0x810/0x810 [ 938.193223] sk_alloc+0x39/0xf70 [ 938.196614] inet6_create+0x360/0xf80 [ 938.200435] __sock_create+0x3e6/0x750 [ 938.204338] __sys_socket+0x103/0x220 [ 938.208154] ? move_addr_to_kernel+0x80/0x80 [ 938.212591] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.217369] ? do_syscall_64+0x26/0x610 [ 938.231280] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.236671] ? do_syscall_64+0x26/0x610 [ 938.240681] __x64_sys_socket+0x73/0xb0 [ 938.244682] do_syscall_64+0x103/0x610 [ 938.248605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.253911] RIP: 0033:0x45b797 [ 938.257118] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 938.276035] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 938.283794] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 938.291096] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 938.298400] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 938.305696] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 938.312983] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 938.322707] Task in /syz0 killed as a result of limit of /syz0 [ 938.330394] memory: usage 29276kB, limit 0kB, failcnt 233 [ 938.336334] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.344001] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.350832] Memory cgroup stats for /syz0: cache:164KB rss:17560KB rss_huge:16384KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17532KB inactive_file:4KB active_file:0KB unevictable:0KB [ 938.372555] Memory cgroup out of memory: Kill process 22893 (syz-executor.0) score 9287000 or sacrifice child [ 938.383661] Killed process 22893 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 938.413451] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 938.428490] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 938.434767] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 938.441629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.450987] Call Trace: [ 938.453596] dump_stack+0x172/0x1f0 [ 938.457251] dump_header+0x15e/0x929 [ 938.460983] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 938.466125] ? ___ratelimit+0x60/0x595 [ 938.470033] ? do_raw_spin_unlock+0x57/0x270 [ 938.474475] oom_kill_process.cold+0x10/0x6f5 [ 938.478994] ? task_will_free_mem+0x139/0x6e0 [ 938.483518] out_of_memory+0x936/0x12d0 [ 938.487541] ? oom_killer_disable+0x280/0x280 [ 938.492049] ? find_held_lock+0x35/0x130 [ 938.496135] mem_cgroup_out_of_memory+0x1d2/0x240 [ 938.501003] ? memcg_event_wake+0x230/0x230 [ 938.505367] ? do_raw_spin_unlock+0x57/0x270 [ 938.509806] ? _raw_spin_unlock+0x2d/0x50 [ 938.513981] try_charge+0x1028/0x15b0 [ 938.517804] ? find_held_lock+0x35/0x130 [ 938.521898] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 938.526766] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 938.531642] ? find_held_lock+0x35/0x130 [ 938.535731] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 938.540614] memcg_kmem_charge_memcg+0x7c/0x130 [ 938.545360] ? memcg_kmem_put_cache+0xb0/0xb0 [ 938.549883] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 938.554764] memcg_kmem_charge+0x136/0x300 [ 938.559027] __alloc_pages_nodemask+0x3c6/0x760 [ 938.563735] ? __alloc_pages_slowpath+0x2870/0x2870 [ 938.568782] ? lockdep_hardirqs_on+0x415/0x5d0 [ 938.573391] ? trace_hardirqs_on+0x67/0x230 [ 938.577737] ? kasan_check_read+0x11/0x20 [ 938.581914] copy_process.part.0+0x3e0/0x7970 [ 938.586453] ? mark_held_locks+0x100/0x100 [ 938.590712] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 938.595410] ? __might_fault+0x12b/0x1e0 [ 938.599591] ? __cleanup_sighand+0x70/0x70 [ 938.603854] ? lock_downgrade+0x810/0x810 [ 938.608037] _do_fork+0x257/0xfe0 [ 938.611513] ? fork_idle+0x1d0/0x1d0 [ 938.615258] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.620038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 938.624819] ? do_syscall_64+0x26/0x610 [ 938.628831] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.634218] ? do_syscall_64+0x26/0x610 [ 938.638226] __x64_sys_clone+0xbf/0x150 [ 938.642239] do_syscall_64+0x103/0x610 [ 938.646150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 938.651357] RIP: 0033:0x4571fa [ 938.654569] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 938.673524] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 938.681277] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 938.688563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 938.695877] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 938.703161] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 938.710443] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 938.721823] Task in /syz4 killed as a result of limit of /syz4 [ 938.728650] memory: usage 48288kB, limit 0kB, failcnt 125 [ 938.734882] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.742483] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 938.748938] Memory cgroup stats for /syz4: cache:96KB rss:21744KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21636KB inactive_file:0KB active_file:0KB unevictable:0KB [ 938.770668] Memory cgroup out of memory: Kill process 28676 (syz-executor.4) score 9539000 or sacrifice child [ 938.781363] Killed process 28676 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:35824kB, shmem-rss:0kB [ 938.809955] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 938.824174] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 938.830506] CPU: 0 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 938.837560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.846938] Call Trace: [ 938.849551] dump_stack+0x172/0x1f0 [ 938.853214] dump_header+0x15e/0x929 [ 938.856958] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 938.862082] ? ___ratelimit+0x60/0x595 [ 938.865983] ? do_raw_spin_unlock+0x57/0x270 [ 938.870413] oom_kill_process.cold+0x10/0x6f5 [ 938.874936] ? task_will_free_mem+0x139/0x6e0 [ 938.879453] out_of_memory+0x936/0x12d0 [ 938.883458] ? oom_killer_disable+0x280/0x280 [ 938.887979] ? find_held_lock+0x35/0x130 [ 938.892069] mem_cgroup_out_of_memory+0x1d2/0x240 [ 938.896938] ? memcg_event_wake+0x230/0x230 [ 938.901284] ? do_raw_spin_unlock+0x57/0x270 [ 938.905709] ? _raw_spin_unlock+0x2d/0x50 [ 938.909880] try_charge+0x1028/0x15b0 [ 938.913709] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 938.918568] ? rcu_read_lock_sched_held+0x110/0x130 [ 938.923616] ? __alloc_pages_nodemask+0x63e/0x760 [ 938.928477] ? do_raw_spin_unlock+0x57/0x270 [ 938.932917] memcg_kmem_charge_memcg+0x7c/0x130 [ 938.937614] ? memcg_kmem_put_cache+0xb0/0xb0 [ 938.942131] ? cache_grow_begin+0x59a/0x8c0 [ 938.946470] ? lockdep_hardirqs_on+0x415/0x5d0 [ 938.951064] ? trace_hardirqs_on+0x67/0x230 [ 938.955402] cache_grow_begin+0x25f/0x8c0 [ 938.959568] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 938.965313] ? __cpuset_node_allowed+0x136/0x540 [ 938.970087] fallback_alloc+0x1fd/0x2d0 [ 938.974078] ____cache_alloc_node+0x1be/0x1e0 [ 938.978597] kmem_cache_alloc+0x1f3/0x700 [ 938.982759] ? inet_create+0x2f4/0xe10 [ 938.986692] sk_prot_alloc+0x67/0x2e0 [ 938.990508] ? lock_downgrade+0x810/0x810 [ 938.994670] sk_alloc+0x39/0xf70 [ 938.998060] inet_create+0x36a/0xe10 [ 939.001791] __sock_create+0x3e6/0x750 [ 939.005698] __sys_socket+0x103/0x220 [ 939.009509] ? move_addr_to_kernel+0x80/0x80 [ 939.014018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.018794] ? do_syscall_64+0x26/0x610 [ 939.022783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.028244] ? do_syscall_64+0x26/0x610 [ 939.032234] __x64_sys_socket+0x73/0xb0 [ 939.036228] do_syscall_64+0x103/0x610 [ 939.040132] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.045327] RIP: 0033:0x45b797 [ 939.048529] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.067444] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 939.075196] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 939.082497] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 939.089780] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 939.097079] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 939.104358] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 939.114193] Task in /syz3 killed as a result of limit of /syz3 [ 939.120762] memory: usage 47148kB, limit 0kB, failcnt 108 [ 939.127035] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.135091] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.142108] Memory cgroup stats for /syz3: cache:108KB rss:26220KB rss_huge:24576KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26032KB inactive_file:4KB active_file:4KB unevictable:0KB [ 939.164249] Memory cgroup out of memory: Kill process 20781 (syz-executor.3) score 9539000 or sacrifice child [ 939.175008] Killed process 20781 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:35828kB, shmem-rss:0kB [ 939.206264] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 939.222991] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 939.228821] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 939.235769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.245132] Call Trace: [ 939.247743] dump_stack+0x172/0x1f0 [ 939.251390] dump_header+0x15e/0x929 [ 939.255124] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 939.260243] ? ___ratelimit+0x60/0x595 [ 939.264138] ? do_raw_spin_unlock+0x57/0x270 [ 939.268564] oom_kill_process.cold+0x10/0x6f5 [ 939.273089] ? task_will_free_mem+0x139/0x6e0 [ 939.277611] out_of_memory+0x936/0x12d0 [ 939.281704] ? oom_killer_disable+0x280/0x280 [ 939.286230] ? find_held_lock+0x35/0x130 [ 939.290340] mem_cgroup_out_of_memory+0x1d2/0x240 [ 939.295199] ? memcg_event_wake+0x230/0x230 [ 939.299540] ? do_raw_spin_unlock+0x57/0x270 [ 939.303972] ? _raw_spin_unlock+0x2d/0x50 [ 939.308173] try_charge+0x1028/0x15b0 [ 939.312012] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.316886] ? rcu_read_lock_sched_held+0x110/0x130 [ 939.321943] ? __alloc_pages_nodemask+0x63e/0x760 [ 939.326801] ? do_raw_spin_unlock+0x57/0x270 [ 939.331263] memcg_kmem_charge_memcg+0x7c/0x130 [ 939.335967] ? memcg_kmem_put_cache+0xb0/0xb0 [ 939.340472] ? cache_grow_begin+0x59a/0x8c0 [ 939.344805] ? lockdep_hardirqs_on+0x415/0x5d0 [ 939.349397] ? trace_hardirqs_on+0x67/0x230 [ 939.353730] cache_grow_begin+0x25f/0x8c0 [ 939.357893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 939.363438] ? __cpuset_node_allowed+0x136/0x540 [ 939.368209] fallback_alloc+0x1fd/0x2d0 [ 939.372195] ____cache_alloc_node+0x1be/0x1e0 [ 939.376705] kmem_cache_alloc+0x1f3/0x700 [ 939.380947] ? inet6_create+0x2ea/0xf80 [ 939.384946] sk_prot_alloc+0x67/0x2e0 [ 939.388758] ? lock_downgrade+0x810/0x810 [ 939.392948] sk_alloc+0x39/0xf70 [ 939.396329] inet6_create+0x360/0xf80 [ 939.400176] __sock_create+0x3e6/0x750 [ 939.404073] __sys_socket+0x103/0x220 [ 939.407883] ? move_addr_to_kernel+0x80/0x80 [ 939.412302] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.417064] ? do_syscall_64+0x26/0x610 [ 939.421068] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.426446] ? do_syscall_64+0x26/0x610 [ 939.430446] __x64_sys_socket+0x73/0xb0 [ 939.434437] do_syscall_64+0x103/0x610 [ 939.438358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.443564] RIP: 0033:0x45b797 [ 939.446775] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.465699] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 939.473431] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 939.480728] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 939.488015] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 939.495301] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 939.502600] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 939.510241] net_ratelimit: 16 callbacks suppressed [ 939.510250] protocol 88fb is buggy, dev hsr_slave_0 [ 939.520333] protocol 88fb is buggy, dev hsr_slave_1 [ 939.525471] protocol 88fb is buggy, dev hsr_slave_0 [ 939.530597] protocol 88fb is buggy, dev hsr_slave_1 [ 939.535761] protocol 88fb is buggy, dev hsr_slave_0 [ 939.540895] protocol 88fb is buggy, dev hsr_slave_1 [ 939.548269] Task in /syz0 killed as a result of limit of /syz0 [ 939.555235] memory: usage 26916kB, limit 0kB, failcnt 239 [ 939.569081] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.576511] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.591641] Memory cgroup stats for /syz0: cache:164KB rss:15396KB rss_huge:14336KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15364KB inactive_file:4KB active_file:0KB unevictable:0KB [ 939.621365] Memory cgroup out of memory: Kill process 741 (syz-executor.0) score 9287000 or sacrifice child [ 939.637607] Killed process 741 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 939.658233] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 939.684713] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 939.696756] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 939.703634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.713001] Call Trace: [ 939.715619] dump_stack+0x172/0x1f0 [ 939.719278] dump_header+0x15e/0x929 [ 939.723015] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 939.728149] ? ___ratelimit+0x60/0x595 [ 939.732062] ? do_raw_spin_unlock+0x57/0x270 [ 939.736505] oom_kill_process.cold+0x10/0x6f5 [ 939.741028] ? task_will_free_mem+0x139/0x6e0 [ 939.745553] out_of_memory+0x936/0x12d0 [ 939.749565] ? oom_killer_disable+0x280/0x280 [ 939.754105] ? find_held_lock+0x35/0x130 [ 939.758228] mem_cgroup_out_of_memory+0x1d2/0x240 [ 939.763187] ? memcg_event_wake+0x230/0x230 [ 939.767542] ? do_raw_spin_unlock+0x57/0x270 [ 939.771985] ? _raw_spin_unlock+0x2d/0x50 [ 939.776159] try_charge+0x1028/0x15b0 [ 939.779974] ? find_held_lock+0x35/0x130 [ 939.784062] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.788929] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.793801] ? find_held_lock+0x35/0x130 [ 939.797890] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 939.802772] memcg_kmem_charge_memcg+0x7c/0x130 [ 939.807489] ? memcg_kmem_put_cache+0xb0/0xb0 [ 939.812015] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 939.816888] memcg_kmem_charge+0x136/0x300 [ 939.821256] __alloc_pages_nodemask+0x3c6/0x760 [ 939.825970] ? __alloc_pages_slowpath+0x2870/0x2870 [ 939.831016] ? lockdep_hardirqs_on+0x415/0x5d0 [ 939.835662] ? trace_hardirqs_on+0x67/0x230 [ 939.840008] ? kasan_check_read+0x11/0x20 [ 939.844189] copy_process.part.0+0x3e0/0x7970 [ 939.848723] ? mark_held_locks+0x100/0x100 [ 939.853002] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 939.857707] ? __might_fault+0x12b/0x1e0 [ 939.861829] ? __cleanup_sighand+0x70/0x70 [ 939.866095] ? lock_downgrade+0x810/0x810 [ 939.870284] _do_fork+0x257/0xfe0 [ 939.873769] ? fork_idle+0x1d0/0x1d0 [ 939.877510] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.882291] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 939.887075] ? do_syscall_64+0x26/0x610 [ 939.891075] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.896726] ? do_syscall_64+0x26/0x610 [ 939.900740] __x64_sys_clone+0xbf/0x150 [ 939.904746] do_syscall_64+0x103/0x610 [ 939.908663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.913887] RIP: 0033:0x4571fa [ 939.917100] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 939.936016] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 939.943754] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 939.951060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 939.958343] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 939.965634] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 939.972931] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 939.982842] Task in /syz4 killed as a result of limit of /syz4 [ 939.989771] memory: usage 45980kB, limit 0kB, failcnt 131 [ 939.995641] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.002948] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.009783] Memory cgroup stats for /syz4: cache:96KB rss:19532KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19492KB inactive_file:0KB active_file:0KB unevictable:0KB [ 940.031278] Memory cgroup out of memory: Kill process 28532 (syz-executor.4) score 9538000 or sacrifice child [ 940.042376] Killed process 28540 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 940.054056] Memory cgroup out of memory: Kill process 525 (syz-executor.3) score 9539000 or sacrifice child [ 940.067091] Killed process 701 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 940.096190] Memory cgroup out of memory: Kill process 888 (syz-executor.0) score 9287000 or sacrifice child [ 940.110062] Killed process 888 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.142339] Memory cgroup out of memory: Kill process 28532 (syz-executor.4) score 9538000 or sacrifice child [ 940.156283] Killed process 28532 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:35820kB, shmem-rss:0kB [ 940.168216] oom_reaper: reaped process 28532 (syz-executor.4), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 940.179271] Memory cgroup out of memory: Kill process 525 (syz-executor.3) score 9539000 or sacrifice child [ 940.192785] Killed process 525 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35824kB, shmem-rss:0kB [ 940.205823] oom_reaper: reaped process 525 (syz-executor.3), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 940.217350] Memory cgroup out of memory: Kill process 912 (syz-executor.0) score 9287000 or sacrifice child [ 940.236088] Killed process 912 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.258019] oom_reaper: reaped process 912 (syz-executor.0), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 940.267290] Memory cgroup out of memory: Kill process 9088 (syz-executor.0) score 9287000 or sacrifice child [ 940.278671] Killed process 9088 (syz-executor.0) total-vm:72452kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.360165] Memory cgroup out of memory: Kill process 22192 (syz-executor.4) score 9287000 or sacrifice child [ 940.382003] Killed process 22192 (syz-executor.4) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.433197] Memory cgroup out of memory: Kill process 8607 (syz-executor.3) score 9538000 or sacrifice child [ 940.443471] Killed process 8607 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35820kB, shmem-rss:0kB [ 940.455878] oom_reaper: reaped process 8607 (syz-executor.3), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 940.466704] Memory cgroup out of memory: Kill process 14092 (syz-executor.0) score 9284000 or sacrifice child [ 940.483308] Killed process 14092 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 940.515111] Memory cgroup out of memory: Kill process 28796 (syz-executor.4) score 9287000 or sacrifice child [ 940.539110] Killed process 28796 (syz-executor.4) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.561152] Memory cgroup out of memory: Kill process 1127 (syz-executor.3) score 9537000 or sacrifice child [ 940.562032] oom_reaper: reaped process 28796 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 940.578025] Killed process 1127 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:35816kB, shmem-rss:0kB [ 940.632686] Memory cgroup out of memory: Kill process 14119 (syz-executor.0) score 9284000 or sacrifice child [ 940.643251] Killed process 14119 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 940.672665] Memory cgroup out of memory: Kill process 29085 (syz-executor.4) score 9287000 or sacrifice child [ 940.685100] Killed process 29085 (syz-executor.4) total-vm:72584kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 940.713933] Memory cgroup out of memory: Kill process 19063 (syz-executor.3) score 9534000 or sacrifice child [ 940.731690] Killed process 19063 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 940.748502] oom_reaper: reaped process 19063 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 940.766399] Memory cgroup out of memory: Kill process 14159 (syz-executor.0) score 9284000 or sacrifice child [ 940.787548] Killed process 14159 (syz-executor.0) total-vm:72452kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 940.820731] Memory cgroup out of memory: Kill process 22313 (syz-executor.4) score 9285000 or sacrifice child [ 940.833512] Killed process 22313 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 940.862746] Memory cgroup out of memory: Kill process 20758 (syz-executor.3) score 9534000 or sacrifice child [ 940.879635] Killed process 20758 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 940.899799] oom_reaper: reaped process 20758 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 940.918961] Memory cgroup out of memory: Kill process 12178 (syz-executor.0) score 8988000 or sacrifice child [ 940.940372] Killed process 14063 (syz-executor.0) total-vm:72452kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 940.974109] oom_kill_process: 18 callbacks suppressed [ 940.974130] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 940.994890] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 941.001069] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 941.007929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.017638] Call Trace: [ 941.020246] dump_stack+0x172/0x1f0 [ 941.023903] dump_header+0x15e/0x929 [ 941.027637] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.032755] ? ___ratelimit+0x60/0x595 [ 941.036672] oom_kill_process.cold+0x10/0x6f5 [ 941.041194] ? task_will_free_mem+0x139/0x6e0 [ 941.045713] out_of_memory+0x936/0x12d0 [ 941.049736] ? oom_killer_disable+0x280/0x280 [ 941.054239] ? find_held_lock+0x35/0x130 [ 941.058329] mem_cgroup_out_of_memory+0x1d2/0x240 [ 941.063197] ? memcg_event_wake+0x230/0x230 [ 941.067544] ? do_raw_spin_unlock+0x57/0x270 [ 941.071982] ? _raw_spin_unlock+0x2d/0x50 [ 941.076152] try_charge+0x1028/0x15b0 [ 941.079973] ? find_held_lock+0x35/0x130 [ 941.084061] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 941.088923] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 941.093812] ? find_held_lock+0x35/0x130 [ 941.097895] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 941.102787] memcg_kmem_charge_memcg+0x7c/0x130 [ 941.107485] ? memcg_kmem_put_cache+0xb0/0xb0 [ 941.112007] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 941.116964] memcg_kmem_charge+0x136/0x300 [ 941.121228] __alloc_pages_nodemask+0x3c6/0x760 [ 941.125922] ? __alloc_pages_slowpath+0x2870/0x2870 [ 941.130963] ? lockdep_hardirqs_on+0x415/0x5d0 [ 941.135580] ? trace_hardirqs_on+0x67/0x230 [ 941.139939] ? kasan_check_read+0x11/0x20 [ 941.144137] copy_process.part.0+0x3e0/0x7970 [ 941.148689] ? mark_held_locks+0x100/0x100 [ 941.153046] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 941.158007] ? __might_fault+0x12b/0x1e0 [ 941.162105] ? __cleanup_sighand+0x70/0x70 [ 941.166365] ? lock_downgrade+0x810/0x810 [ 941.170546] _do_fork+0x257/0xfe0 [ 941.174374] ? fork_idle+0x1d0/0x1d0 [ 941.178213] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.182991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.187784] ? do_syscall_64+0x26/0x610 [ 941.191775] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.197150] ? do_syscall_64+0x26/0x610 [ 941.201158] __x64_sys_clone+0xbf/0x150 [ 941.205156] do_syscall_64+0x103/0x610 [ 941.209069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.214276] RIP: 0033:0x4571fa [ 941.217476] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 941.237360] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 941.245091] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 941.252392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 941.259676] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 941.266961] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 941.274241] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 941.283069] Task in /syz4 killed as a result of limit of /syz4 [ 941.289322] memory: usage 34240kB, limit 0kB, failcnt 167 [ 941.295842] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.303112] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.309936] Memory cgroup stats for /syz4: cache:96KB rss:8752KB rss_huge:8192KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8712KB inactive_file:0KB active_file:0KB unevictable:0KB [ 941.331015] Memory cgroup out of memory: Kill process 22544 (syz-executor.4) score 9285000 or sacrifice child [ 941.341906] Killed process 22544 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 941.370637] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 941.385636] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 941.391560] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 941.398516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.407880] Call Trace: [ 941.410488] dump_stack+0x172/0x1f0 [ 941.414148] dump_header+0x15e/0x929 [ 941.417977] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.423102] ? ___ratelimit+0x60/0x595 [ 941.427004] ? do_raw_spin_unlock+0x57/0x270 [ 941.431435] oom_kill_process.cold+0x10/0x6f5 [ 941.435959] ? task_will_free_mem+0x139/0x6e0 [ 941.440502] out_of_memory+0x936/0x12d0 [ 941.444507] ? oom_killer_disable+0x280/0x280 [ 941.449027] ? find_held_lock+0x35/0x130 [ 941.453119] mem_cgroup_out_of_memory+0x1d2/0x240 [ 941.457973] ? memcg_event_wake+0x230/0x230 [ 941.462310] ? do_raw_spin_unlock+0x57/0x270 [ 941.466728] ? _raw_spin_unlock+0x2d/0x50 [ 941.470892] try_charge+0x1028/0x15b0 [ 941.474711] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 941.479592] ? rcu_read_lock_sched_held+0x110/0x130 [ 941.484637] ? __alloc_pages_nodemask+0x63e/0x760 [ 941.489497] ? do_raw_spin_unlock+0x57/0x270 [ 941.493936] memcg_kmem_charge_memcg+0x7c/0x130 [ 941.498622] ? memcg_kmem_put_cache+0xb0/0xb0 [ 941.503129] ? cache_grow_begin+0x59a/0x8c0 [ 941.507469] ? lockdep_hardirqs_on+0x415/0x5d0 [ 941.512090] ? trace_hardirqs_on+0x67/0x230 [ 941.516439] cache_grow_begin+0x25f/0x8c0 [ 941.520624] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 941.526194] ? __cpuset_node_allowed+0x136/0x540 [ 941.530972] fallback_alloc+0x1fd/0x2d0 [ 941.534969] ____cache_alloc_node+0x1be/0x1e0 [ 941.539488] kmem_cache_alloc+0x1f3/0x700 [ 941.543651] ? inet_create+0x2f4/0xe10 [ 941.547559] sk_prot_alloc+0x67/0x2e0 [ 941.551381] ? lock_downgrade+0x810/0x810 [ 941.555540] sk_alloc+0x39/0xf70 [ 941.558922] inet_create+0x36a/0xe10 [ 941.562660] __sock_create+0x3e6/0x750 [ 941.566570] __sys_socket+0x103/0x220 [ 941.570392] ? move_addr_to_kernel+0x80/0x80 [ 941.574841] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.579786] ? do_syscall_64+0x26/0x610 [ 941.583782] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.589155] ? do_syscall_64+0x26/0x610 [ 941.593159] __x64_sys_socket+0x73/0xb0 [ 941.597148] do_syscall_64+0x103/0x610 [ 941.601071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.606289] RIP: 0033:0x45b797 [ 941.609498] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 941.628433] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 941.636207] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 941.643501] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 941.650787] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 941.658071] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 941.665355] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 941.674193] Task in /syz3 killed as a result of limit of /syz3 [ 941.680914] memory: usage 33096kB, limit 0kB, failcnt 150 [ 941.686723] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.694407] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 941.701029] Memory cgroup stats for /syz3: cache:108KB rss:13216KB rss_huge:12288KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13096KB inactive_file:4KB active_file:4KB unevictable:0KB [ 941.722923] Memory cgroup out of memory: Kill process 19051 (syz-executor.3) score 9531000 or sacrifice child [ 941.733524] Killed process 19051 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 941.757432] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 941.776417] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 941.782159] CPU: 1 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 941.789126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 941.798495] Call Trace: [ 941.801107] dump_stack+0x172/0x1f0 [ 941.804757] dump_header+0x15e/0x929 [ 941.808484] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 941.813611] ? ___ratelimit+0x60/0x595 [ 941.817512] ? do_raw_spin_unlock+0x57/0x270 [ 941.821936] oom_kill_process.cold+0x10/0x6f5 [ 941.826446] ? task_will_free_mem+0x139/0x6e0 [ 941.830960] out_of_memory+0x936/0x12d0 [ 941.834954] ? oom_killer_disable+0x280/0x280 [ 941.839475] ? find_held_lock+0x35/0x130 [ 941.843580] mem_cgroup_out_of_memory+0x1d2/0x240 [ 941.848444] ? memcg_event_wake+0x230/0x230 [ 941.852784] ? do_raw_spin_unlock+0x57/0x270 [ 941.857210] ? _raw_spin_unlock+0x2d/0x50 [ 941.861370] try_charge+0x1028/0x15b0 [ 941.865194] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 941.870051] ? rcu_read_lock_sched_held+0x110/0x130 [ 941.875076] ? __alloc_pages_nodemask+0x63e/0x760 [ 941.879933] ? do_raw_spin_unlock+0x57/0x270 [ 941.884389] memcg_kmem_charge_memcg+0x7c/0x130 [ 941.889072] ? memcg_kmem_put_cache+0xb0/0xb0 [ 941.893576] ? cache_grow_begin+0x59a/0x8c0 [ 941.897926] ? lockdep_hardirqs_on+0x415/0x5d0 [ 941.902533] ? trace_hardirqs_on+0x67/0x230 [ 941.906876] cache_grow_begin+0x25f/0x8c0 [ 941.911049] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 941.916612] ? __cpuset_node_allowed+0x136/0x540 [ 941.921391] fallback_alloc+0x1fd/0x2d0 [ 941.925384] ____cache_alloc_node+0x1be/0x1e0 [ 941.929893] kmem_cache_alloc+0x1f3/0x700 [ 941.934047] ? inet6_create+0x2ea/0xf80 [ 941.938033] sk_prot_alloc+0x67/0x2e0 [ 941.941838] ? lock_downgrade+0x810/0x810 [ 941.946000] sk_alloc+0x39/0xf70 [ 941.949376] inet6_create+0x360/0xf80 [ 941.953195] __sock_create+0x3e6/0x750 [ 941.957107] __sys_socket+0x103/0x220 [ 941.960919] ? move_addr_to_kernel+0x80/0x80 [ 941.965333] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 941.970095] ? do_syscall_64+0x26/0x610 [ 941.974104] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.979489] ? do_syscall_64+0x26/0x610 [ 941.983488] __x64_sys_socket+0x73/0xb0 [ 941.987486] do_syscall_64+0x103/0x610 [ 941.991401] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 941.996614] RIP: 0033:0x45b797 [ 941.999821] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 942.018857] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 942.026596] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 942.033886] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 942.041188] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 942.048482] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 942.055775] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 942.063320] Task in /syz0 killed as a result of limit of /syz0 [ 942.069480] memory: usage 10460kB, limit 0kB, failcnt 300 [ 942.075046] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.082428] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.082436] Memory cgroup stats for [ 942.092579] /syz0: cache:164KB rss:424KB rss_huge:0KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:296KB inactive_file:0KB active_file:0KB unevictable:0KB [ 942.111202] Memory cgroup out of memory: Kill process 12178 (syz-executor.0) score 8988000 or sacrifice child [ 942.111436] Killed process 14113 (syz-executor.0) total-vm:72452kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 942.135722] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 942.149180] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 942.158009] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 942.164882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.174229] Call Trace: [ 942.176814] dump_stack+0x172/0x1f0 [ 942.180450] dump_header+0x15e/0x929 [ 942.184160] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 942.189265] ? ___ratelimit+0x60/0x595 [ 942.193158] ? do_raw_spin_unlock+0x57/0x270 [ 942.197594] oom_kill_process.cold+0x10/0x6f5 [ 942.202111] ? task_will_free_mem+0x139/0x6e0 [ 942.206636] out_of_memory+0x936/0x12d0 [ 942.210640] ? oom_killer_disable+0x280/0x280 [ 942.215164] ? find_held_lock+0x35/0x130 [ 942.219245] mem_cgroup_out_of_memory+0x1d2/0x240 [ 942.232244] ? memcg_event_wake+0x230/0x230 [ 942.236578] ? do_raw_spin_unlock+0x57/0x270 [ 942.241084] ? _raw_spin_unlock+0x2d/0x50 [ 942.245373] try_charge+0x1028/0x15b0 [ 942.249192] ? find_held_lock+0x35/0x130 [ 942.253273] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.258138] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.262991] ? find_held_lock+0x35/0x130 [ 942.267268] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.272128] memcg_kmem_charge_memcg+0x7c/0x130 [ 942.276836] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.281336] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 942.286179] memcg_kmem_charge+0x136/0x300 [ 942.290423] __alloc_pages_nodemask+0x3c6/0x760 [ 942.295369] ? __alloc_pages_slowpath+0x2870/0x2870 [ 942.300402] ? lockdep_hardirqs_on+0x415/0x5d0 [ 942.305000] ? trace_hardirqs_on+0x67/0x230 [ 942.309343] ? kasan_check_read+0x11/0x20 [ 942.313601] copy_process.part.0+0x3e0/0x7970 [ 942.318117] ? mark_held_locks+0x100/0x100 [ 942.322369] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 942.327924] ? __might_fault+0x12b/0x1e0 [ 942.332006] ? __cleanup_sighand+0x70/0x70 [ 942.336276] ? lock_downgrade+0x810/0x810 [ 942.340494] _do_fork+0x257/0xfe0 [ 942.343984] ? fork_idle+0x1d0/0x1d0 [ 942.347722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.352480] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.357364] ? do_syscall_64+0x26/0x610 [ 942.361353] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.366847] ? do_syscall_64+0x26/0x610 [ 942.370855] __x64_sys_clone+0xbf/0x150 [ 942.374856] do_syscall_64+0x103/0x610 [ 942.378772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.383973] RIP: 0033:0x4571fa [ 942.387158] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 942.406063] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 942.413773] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 942.421038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 942.428390] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 942.435749] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 942.443062] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 942.450627] Task in /syz4 killed as a result of limit of /syz4 [ 942.456682] memory: usage 29780kB, limit 0kB, failcnt 173 [ 942.463843] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.470724] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.470732] Memory cgroup stats for /syz4: [ 942.481215] cache:96KB rss:6588KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6544KB inactive_file:0KB active_file:0KB unevictable:0KB [ 942.499311] Memory cgroup out of memory: Kill process 28640 (syz-executor.4) score 9285000 or sacrifice child [ 942.499379] Killed process 28640 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 942.500618] oom_reaper: reaped process 28640 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 942.522250] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 942.543580] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 942.549000] CPU: 1 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 942.555849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.565381] Call Trace: [ 942.567992] dump_stack+0x172/0x1f0 [ 942.571647] dump_header+0x15e/0x929 [ 942.575384] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 942.575404] ? ___ratelimit+0x60/0x595 [ 942.575418] ? do_raw_spin_unlock+0x57/0x270 [ 942.575440] oom_kill_process.cold+0x10/0x6f5 [ 942.575459] ? task_will_free_mem+0x139/0x6e0 [ 942.597864] ? find_held_lock+0x35/0x130 [ 942.601945] out_of_memory+0x936/0x12d0 [ 942.601965] ? lock_downgrade+0x810/0x810 [ 942.601984] ? oom_killer_disable+0x280/0x280 [ 942.601996] ? find_held_lock+0x35/0x130 [ 942.602022] mem_cgroup_out_of_memory+0x1d2/0x240 [ 942.602037] ? memcg_event_wake+0x230/0x230 [ 942.602057] ? do_raw_spin_unlock+0x57/0x270 [ 942.602073] ? _raw_spin_unlock+0x2d/0x50 [ 942.602099] try_charge+0x1028/0x15b0 [ 942.614830] ? find_held_lock+0x35/0x130 [ 942.614858] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.614873] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.614889] ? find_held_lock+0x35/0x130 [ 942.614908] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 942.628141] memcg_kmem_charge_memcg+0x7c/0x130 [ 942.628160] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.628187] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 942.628207] memcg_kmem_charge+0x136/0x300 [ 942.644628] __alloc_pages_nodemask+0x3c6/0x760 [ 942.644648] ? __alloc_pages_slowpath+0x2870/0x2870 [ 942.644670] ? lockdep_hardirqs_on+0x415/0x5d0 [ 942.644701] ? trace_hardirqs_on+0x67/0x230 [ 942.663294] ? kasan_check_read+0x11/0x20 [ 942.663319] copy_process.part.0+0x3e0/0x7970 [ 942.663341] ? mark_held_locks+0x100/0x100 [ 942.663356] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 942.663376] ? __might_fault+0x12b/0x1e0 [ 942.681625] ? __cleanup_sighand+0x70/0x70 [ 942.681646] ? lock_downgrade+0x810/0x810 [ 942.681673] _do_fork+0x257/0xfe0 [ 942.681692] ? fork_idle+0x1d0/0x1d0 [ 942.681716] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.681731] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.681745] ? do_syscall_64+0x26/0x610 [ 942.681761] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.681779] ? do_syscall_64+0x26/0x610 [ 942.696055] __x64_sys_clone+0xbf/0x150 [ 942.696076] do_syscall_64+0x103/0x610 [ 942.696097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.696109] RIP: 0033:0x4571fa [ 942.696127] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 942.713395] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 942.713411] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 942.713419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 942.713428] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 942.713436] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 942.713445] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 942.722420] Task in /syz4 killed as a result of limit of /syz4 [ 942.722459] memory: usage 27460kB, limit 0kB, failcnt 179 [ 942.722468] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.722476] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.722482] Memory cgroup stats for /syz4: cache:96KB rss:4428KB rss_huge:4096KB shmem:0KB mapped_file:0KB [ 942.743000] dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB [ 942.751897] active_anon:4384KB inactive_file:0KB active_file:0KB unevictable:0KB [ 942.751948] Memory cgroup out of memory: Kill process 766 (syz-executor.4) score 9285000 or sacrifice child [ 942.752013] Killed process 766 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 942.759956] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 942.769342] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 942.769374] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 942.769387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 942.769392] Call Trace: [ 942.769412] dump_stack+0x172/0x1f0 [ 942.769433] dump_header+0x15e/0x929 [ 942.769450] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 942.769467] ? ___ratelimit+0x60/0x595 [ 942.769481] ? do_raw_spin_unlock+0x57/0x270 [ 942.769506] oom_kill_process.cold+0x10/0x6f5 [ 942.777901] ? task_will_free_mem+0x139/0x6e0 [ 942.777923] out_of_memory+0x936/0x12d0 [ 942.777945] ? oom_killer_disable+0x280/0x280 [ 942.777960] ? find_held_lock+0x35/0x130 [ 942.777987] mem_cgroup_out_of_memory+0x1d2/0x240 [ 942.778001] ? memcg_event_wake+0x230/0x230 [ 942.778020] ? do_raw_spin_unlock+0x57/0x270 [ 942.778036] ? _raw_spin_unlock+0x2d/0x50 [ 942.778055] try_charge+0x1028/0x15b0 [ 942.804702] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 942.804726] ? rcu_read_lock_sched_held+0x110/0x130 [ 942.804740] ? __alloc_pages_nodemask+0x63e/0x760 [ 942.804752] ? do_raw_spin_unlock+0x57/0x270 [ 942.804773] memcg_kmem_charge_memcg+0x7c/0x130 [ 942.804789] ? memcg_kmem_put_cache+0xb0/0xb0 [ 942.804801] ? cache_grow_begin+0x59a/0x8c0 [ 942.804816] ? lockdep_hardirqs_on+0x415/0x5d0 [ 942.804831] ? trace_hardirqs_on+0x67/0x230 [ 942.804851] cache_grow_begin+0x25f/0x8c0 [ 942.819430] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 942.819447] ? __cpuset_node_allowed+0x136/0x540 [ 942.819464] fallback_alloc+0x1fd/0x2d0 [ 942.819483] ____cache_alloc_node+0x1be/0x1e0 [ 942.819500] kmem_cache_alloc+0x1f3/0x700 [ 942.819515] ? inet_create+0x2f4/0xe10 [ 942.819536] sk_prot_alloc+0x67/0x2e0 [ 942.819551] ? lock_downgrade+0x810/0x810 [ 942.819567] sk_alloc+0x39/0xf70 [ 942.819595] inet_create+0x36a/0xe10 [ 942.819618] __sock_create+0x3e6/0x750 [ 942.834191] __sys_socket+0x103/0x220 [ 942.834208] ? move_addr_to_kernel+0x80/0x80 [ 942.834223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 942.834237] ? do_syscall_64+0x26/0x610 [ 942.834252] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.834264] ? do_syscall_64+0x26/0x610 [ 942.834282] __x64_sys_socket+0x73/0xb0 [ 942.834298] do_syscall_64+0x103/0x610 [ 942.834316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 942.834328] RIP: 0033:0x45b797 [ 942.834343] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 942.834357] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 [ 942.847619] ORIG_RAX: 0000000000000029 [ 942.847628] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 942.847636] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 942.847643] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 942.847650] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 942.847659] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 942.855769] Task in [ 942.876880] /syz3 [ 942.890556] killed as a result of limit of /syz3 [ 942.890611] memory: usage 30696kB, limit 0kB, failcnt 156 [ 942.890621] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.890628] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 942.890635] Memory cgroup stats for /syz3: cache:108KB rss:10964KB rss_huge:10240KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10924KB inactive_file:4KB active_file:4KB unevictable:0KB [ 942.890746] Memory cgroup out of memory: Kill process 28468 (syz-executor.3) score 9287000 or sacrifice child [ 942.911321] Killed process 28468 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 942.912573] oom_reaper: reaped process 28468 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 942.936055] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 942.955774] device hsr_slave_1 left promiscuous mode [ 942.962576] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 943.316220] CPU: 0 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 943.323156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.332496] Call Trace: [ 943.335081] dump_stack+0x172/0x1f0 [ 943.338708] dump_header+0x15e/0x929 [ 943.342432] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 943.347535] ? ___ratelimit+0x60/0x595 [ 943.351425] ? do_raw_spin_unlock+0x57/0x270 [ 943.355834] oom_kill_process.cold+0x10/0x6f5 [ 943.360324] ? task_will_free_mem+0x139/0x6e0 [ 943.364810] out_of_memory+0x936/0x12d0 [ 943.368787] ? oom_killer_disable+0x280/0x280 [ 943.373271] ? find_held_lock+0x35/0x130 [ 943.377346] mem_cgroup_out_of_memory+0x1d2/0x240 [ 943.382189] ? memcg_event_wake+0x230/0x230 [ 943.386505] ? do_raw_spin_unlock+0x57/0x270 [ 943.390910] ? _raw_spin_unlock+0x2d/0x50 [ 943.395052] try_charge+0x1028/0x15b0 [ 943.398843] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 943.403679] ? rcu_read_lock_sched_held+0x110/0x130 [ 943.408692] ? __alloc_pages_nodemask+0x63e/0x760 [ 943.413541] ? do_raw_spin_unlock+0x57/0x270 [ 943.417947] memcg_kmem_charge_memcg+0x7c/0x130 [ 943.422624] ? memcg_kmem_put_cache+0xb0/0xb0 [ 943.427118] ? cache_grow_begin+0x59a/0x8c0 [ 943.431467] ? lockdep_hardirqs_on+0x415/0x5d0 [ 943.436039] ? trace_hardirqs_on+0x67/0x230 [ 943.440348] cache_grow_begin+0x25f/0x8c0 [ 943.444496] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 943.450031] ? __cpuset_node_allowed+0x136/0x540 [ 943.454814] fallback_alloc+0x1fd/0x2d0 [ 943.458781] ____cache_alloc_node+0x1be/0x1e0 [ 943.463267] kmem_cache_alloc+0x1f3/0x700 [ 943.467418] ? inet6_create+0x2ea/0xf80 [ 943.471387] sk_prot_alloc+0x67/0x2e0 [ 943.475174] ? lock_downgrade+0x810/0x810 [ 943.479323] sk_alloc+0x39/0xf70 [ 943.482701] inet6_create+0x360/0xf80 [ 943.486497] __sock_create+0x3e6/0x750 [ 943.490396] __sys_socket+0x103/0x220 [ 943.494200] ? move_addr_to_kernel+0x80/0x80 [ 943.498605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.503371] ? do_syscall_64+0x26/0x610 [ 943.507342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.512710] ? do_syscall_64+0x26/0x610 [ 943.516679] __x64_sys_socket+0x73/0xb0 [ 943.520702] do_syscall_64+0x103/0x610 [ 943.524596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.529781] RIP: 0033:0x45b797 [ 943.532971] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 943.551884] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 943.559603] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 943.566875] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 943.574144] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 943.581410] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 943.588676] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 943.598716] Task in /syz0 killed as a result of limit of /syz0 [ 943.604968] memory: usage 10184kB, limit 0kB, failcnt 306 [ 943.610722] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.617571] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 943.623938] Memory cgroup stats for /syz0: cache:164KB rss:280KB rss_huge:0KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:188KB inactive_file:0KB active_file:0KB unevictable:0KB [ 943.645541] Memory cgroup out of memory: Kill process 12178 (syz-executor.0) score 8988000 or sacrifice child [ 943.658967] Killed process 14129 (syz-executor.0) total-vm:72452kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 943.674636] device hsr_slave_0 left promiscuous mode [ 943.680955] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 943.700790] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 943.706277] CPU: 0 PID: 7973 Comm: syz-executor.4 Not tainted 4.19.34 #2 [ 943.713121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 943.722462] Call Trace: [ 943.725045] dump_stack+0x172/0x1f0 [ 943.728663] dump_header+0x15e/0x929 [ 943.732371] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 943.737477] ? ___ratelimit+0x60/0x595 [ 943.741353] ? do_raw_spin_unlock+0x57/0x270 [ 943.745751] oom_kill_process.cold+0x10/0x6f5 [ 943.750257] ? task_will_free_mem+0x139/0x6e0 [ 943.754748] out_of_memory+0x936/0x12d0 [ 943.758718] ? oom_killer_disable+0x280/0x280 [ 943.763207] ? find_held_lock+0x35/0x130 [ 943.767276] mem_cgroup_out_of_memory+0x1d2/0x240 [ 943.772123] ? memcg_event_wake+0x230/0x230 [ 943.776454] ? do_raw_spin_unlock+0x57/0x270 [ 943.780866] ? _raw_spin_unlock+0x2d/0x50 [ 943.785015] try_charge+0x1028/0x15b0 [ 943.788812] ? find_held_lock+0x35/0x130 [ 943.792869] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 943.797723] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.802560] ? find_held_lock+0x35/0x130 [ 943.806619] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 943.811454] memcg_kmem_charge_memcg+0x7c/0x130 [ 943.816128] ? memcg_kmem_put_cache+0xb0/0xb0 [ 943.820622] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 943.825455] memcg_kmem_charge+0x136/0x300 [ 943.829695] __alloc_pages_nodemask+0x3c6/0x760 [ 943.834355] ? __alloc_pages_slowpath+0x2870/0x2870 [ 943.839365] ? lockdep_hardirqs_on+0x415/0x5d0 [ 943.843938] ? trace_hardirqs_on+0x67/0x230 [ 943.848246] ? kasan_check_read+0x11/0x20 [ 943.852405] copy_process.part.0+0x3e0/0x7970 [ 943.856900] ? mark_held_locks+0x100/0x100 [ 943.861129] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 943.865796] ? __might_fault+0x12b/0x1e0 [ 943.869873] ? __cleanup_sighand+0x70/0x70 [ 943.874109] ? lock_downgrade+0x810/0x810 [ 943.878276] _do_fork+0x257/0xfe0 [ 943.881723] ? fork_idle+0x1d0/0x1d0 [ 943.885432] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.890178] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 943.894929] ? do_syscall_64+0x26/0x610 [ 943.898896] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.904249] ? do_syscall_64+0x26/0x610 [ 943.908218] __x64_sys_clone+0xbf/0x150 [ 943.912191] do_syscall_64+0x103/0x610 [ 943.916078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 943.921258] RIP: 0033:0x4571fa [ 943.924439] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 943.943333] RSP: 002b:00007fff46130e20 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 943.951038] RAX: ffffffffffffffda RBX: 00007fff46130e20 RCX: 00000000004571fa [ 943.958317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 943.965577] RBP: 00007fff46130e60 R08: 0000000000000001 R09: 000000000190a940 [ 943.972846] R10: 000000000190ac10 R11: 0000000000000246 R12: 0000000000000001 [ 943.980109] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff46130eb0 [ 943.991831] Task in /syz4 killed as a result of limit of /syz4 [ 943.997868] memory: usage 25140kB, limit 0kB, failcnt 185 [ 944.004080] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.011322] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.017690] Memory cgroup stats for /syz4: cache:96KB rss:2280KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2240KB inactive_file:0KB active_file:0KB unevictable:0KB [ 944.038691] Memory cgroup out of memory: Kill process 898 (syz-executor.4) score 9285000 or sacrifice child [ 944.049524] Killed process 898 (syz-executor.4) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 944.060716] syz-executor.3 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 944.061535] oom_reaper: reaped process 898 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 944.074294] syz-executor.3 cpuset=syz3 mems_allowed=0-1 [ 944.089170] CPU: 1 PID: 12072 Comm: syz-executor.3 Not tainted 4.19.34 #2 [ 944.096114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.096120] Call Trace: [ 944.096142] dump_stack+0x172/0x1f0 [ 944.096162] dump_header+0x15e/0x929 [ 944.096179] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 944.096204] ? ___ratelimit+0x60/0x595 [ 944.096217] ? do_raw_spin_unlock+0x57/0x270 [ 944.096236] oom_kill_process.cold+0x10/0x6f5 [ 944.096255] ? task_will_free_mem+0x139/0x6e0 [ 944.111841] out_of_memory+0x936/0x12d0 [ 944.141803] ? oom_killer_disable+0x280/0x280 [ 944.146989] ? find_held_lock+0x35/0x130 [ 944.151068] mem_cgroup_out_of_memory+0x1d2/0x240 [ 944.155941] ? memcg_event_wake+0x230/0x230 [ 944.160285] ? do_raw_spin_unlock+0x57/0x270 [ 944.164708] ? _raw_spin_unlock+0x2d/0x50 [ 944.168879] try_charge+0x1028/0x15b0 [ 944.172700] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 944.177560] ? rcu_read_lock_sched_held+0x110/0x130 [ 944.182581] ? __alloc_pages_nodemask+0x63e/0x760 [ 944.187433] ? do_raw_spin_unlock+0x57/0x270 [ 944.191861] memcg_kmem_charge_memcg+0x7c/0x130 [ 944.196529] ? memcg_kmem_put_cache+0xb0/0xb0 [ 944.201018] ? cache_grow_begin+0x59a/0x8c0 [ 944.205391] ? lockdep_hardirqs_on+0x415/0x5d0 [ 944.209975] ? trace_hardirqs_on+0x67/0x230 [ 944.214299] cache_grow_begin+0x25f/0x8c0 [ 944.218447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 944.232846] ? __cpuset_node_allowed+0x136/0x540 [ 944.237610] fallback_alloc+0x1fd/0x2d0 [ 944.241597] ____cache_alloc_node+0x1be/0x1e0 [ 944.246092] kmem_cache_alloc+0x1f3/0x700 [ 944.250261] ? inet_create+0x2f4/0xe10 [ 944.254159] sk_prot_alloc+0x67/0x2e0 [ 944.257957] ? lock_downgrade+0x810/0x810 [ 944.262101] sk_alloc+0x39/0xf70 [ 944.265477] inet_create+0x36a/0xe10 [ 944.269208] __sock_create+0x3e6/0x750 [ 944.273094] __sys_socket+0x103/0x220 [ 944.276887] ? move_addr_to_kernel+0x80/0x80 [ 944.281297] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 944.286043] ? do_syscall_64+0x26/0x610 [ 944.290028] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.295402] ? do_syscall_64+0x26/0x610 [ 944.299373] __x64_sys_socket+0x73/0xb0 [ 944.303359] do_syscall_64+0x103/0x610 [ 944.307245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.312449] RIP: 0033:0x45b797 [ 944.315649] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 944.334549] RSP: 002b:00007ffe065f1e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 944.342253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045b797 [ 944.349525] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 944.356813] RBP: 0000000000005627 R08: 0000000000000000 R09: 000000000000000a [ 944.364105] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 944.371372] R13: 00007ffe065f2520 R14: 00000000000e2281 R15: 00007ffe065f2530 [ 944.378945] Task in /syz3 killed as a result of limit of /syz3 [ 944.380017] team0 (unregistering): Port device team_slave_1 removed [ 944.385067] memory: usage 28372kB, limit 0kB, failcnt 162 [ 944.385078] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.385092] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.404091] Memory cgroup stats for /syz3: cache:108KB rss:8808KB rss_huge:8192KB shmem:140KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8764KB inactive_file:4KB active_file:4KB unevictable:0KB [ 944.431053] Memory cgroup out of memory: Kill process 28680 (syz-executor.3) score 9287000 or sacrifice child [ 944.431123] Killed process 28680 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 944.431450] syz-executor.0 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 944.467489] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 944.473090] CPU: 1 PID: 12178 Comm: syz-executor.0 Not tainted 4.19.34 #2 [ 944.480036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 944.489416] Call Trace: [ 944.489443] dump_stack+0x172/0x1f0 [ 944.489463] dump_header+0x15e/0x929 [ 944.489479] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 944.489494] ? ___ratelimit+0x60/0x595 [ 944.489507] ? do_raw_spin_unlock+0x57/0x270 [ 944.489524] oom_kill_process.cold+0x10/0x6f5 [ 944.489542] ? task_will_free_mem+0x139/0x6e0 [ 944.489561] out_of_memory+0x936/0x12d0 [ 944.489581] ? oom_killer_disable+0x280/0x280 [ 944.489607] ? find_held_lock+0x35/0x130 [ 944.489631] mem_cgroup_out_of_memory+0x1d2/0x240 [ 944.499596] ? memcg_event_wake+0x230/0x230 [ 944.499618] ? do_raw_spin_unlock+0x57/0x270 [ 944.499635] ? _raw_spin_unlock+0x2d/0x50 [ 944.499653] try_charge+0x1028/0x15b0 [ 944.499675] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 944.499696] ? rcu_read_lock_sched_held+0x110/0x130 [ 944.499709] ? __alloc_pages_nodemask+0x63e/0x760 [ 944.499721] ? do_raw_spin_unlock+0x57/0x270 [ 944.499744] memcg_kmem_charge_memcg+0x7c/0x130 [ 944.499760] ? memcg_kmem_put_cache+0xb0/0xb0 [ 944.499773] ? cache_grow_begin+0x59a/0x8c0 [ 944.499789] ? lockdep_hardirqs_on+0x415/0x5d0 [ 944.499805] ? trace_hardirqs_on+0x67/0x230 [ 944.499820] cache_grow_begin+0x25f/0x8c0 [ 944.499838] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 944.499858] ? __cpuset_node_allowed+0x136/0x540 [ 944.508890] fallback_alloc+0x1fd/0x2d0 [ 944.508911] ____cache_alloc_node+0x1be/0x1e0 [ 944.508928] kmem_cache_alloc+0x1f3/0x700 [ 944.508941] ? inet6_create+0x2ea/0xf80 [ 944.508961] sk_prot_alloc+0x67/0x2e0 [ 944.508976] ? lock_downgrade+0x810/0x810 [ 944.508994] sk_alloc+0x39/0xf70 [ 944.518015] inet6_create+0x360/0xf80 [ 944.518038] __sock_create+0x3e6/0x750 [ 944.518056] __sys_socket+0x103/0x220 [ 944.518071] ? move_addr_to_kernel+0x80/0x80 [ 944.518087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 944.518100] ? do_syscall_64+0x26/0x610 [ 944.518115] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.518135] ? do_syscall_64+0x26/0x610 [ 944.526658] __x64_sys_socket+0x73/0xb0 [ 944.526678] do_syscall_64+0x103/0x610 [ 944.526697] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 944.526708] RIP: 0033:0x45b797 [ 944.526723] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 944.526730] RSP: 002b:00007fff4b2cc2d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 944.526744] RAX: ffffffffffffffda RBX: 000000000070db00 RCX: 000000000045b797 [ 944.526752] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000000a [ 944.526766] RBP: 0000000000007252 R08: 0000000000006000 R09: 0000000000004000 [ 944.535356] R10: 00007fff4b2cc400 R11: 0000000000000246 R12: 0000000000000000 [ 944.535366] R13: 00007fff4b2ccaa0 R14: 0000000000000029 R15: 00007fff4b2ccab0 [ 944.536378] Task in [ 944.549853] /syz0 [ 944.557808] killed as a result of limit of [ 944.572872] /syz0 [ 944.582650] memory: usage 9904kB, limit 0kB, failcnt 312 [ 944.596477] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.610947] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 944.624537] Memory cgroup stats for [ 944.633013] /syz0: cache:164KB rss:140KB rss_huge:0KB shmem:68KB mapped_file:132KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68KB inactive_file:0KB active_file:0KB unevictable:0KB [ 944.633118] Memory cgroup out of memory: Kill process 12178 (syz-executor.0) score 8988000 or sacrifice child [ 944.633387] Killed process 12178 (syz-executor.0) total-vm:72320kB, anon-rss:116kB, file-rss:35712kB, shmem-rss:0kB [ 944.645063] Memory cgroup out of memory: Kill process 7973 (syz-executor.4) score 8986000 or sacrifice child [ 944.649294] oom_reaper: reaped process 12178 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 944.653179] Killed process 7973 (syz-executor.4) total-vm:72320kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 944.679315] Memory cgroup out of memory: Kill process 1624 (syz-executor.3) score 9287000 or sacrifice child [ 944.683856] oom_reaper: reaped process 7973 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 944.687113] Killed process 1624 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 944.759125] Memory cgroup out of memory: Kill process 28500 (syz-executor.3) score 9285000 or sacrifice child [ 944.762113] Killed process 28500 (syz-executor.3) total-vm:72452kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 944.798327] Memory cgroup out of memory: Kill process 20741 (syz-executor.3) score 9284000 or sacrifice child [ 944.847809] Killed process 20741 (syz-executor.3) total-vm:72452kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 944.872945] oom_reaper: reaped process 20741 (syz-executor.3), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 944.903413] Memory cgroup out of memory: Kill process 12072 (syz-executor.3) score 8986000 or sacrifice child [ 944.923570] Killed process 12072 (syz-executor.3) total-vm:72320kB, anon-rss:112kB, file-rss:35712kB, shmem-rss:0kB [ 944.948191] oom_reaper: reaped process 12072 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 944.989516] team0 (unregistering): Port device team_slave_0 removed [ 945.012727] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 945.054065] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 945.152972] bond0 (unregistering): Released all slaves 14:51:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) 14:51:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 945.928909] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.936172] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.951385] device bridge_slave_0 entered promiscuous mode 14:51:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='pids.events\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x88, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66bfe1f5006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bba080068bd72c116aaf33198cc7613d1266b9f53b325c077", 0x0, 0x9}, 0x28) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x8, r0, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(r0, &(0x7f0000000600)='\x00\x02\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="9cabbf0400cbb140419b800081002545", 0x10}], 0x1}, 0x0) write$cgroup_int(r4, &(0x7f0000000240), 0x12) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) openat$cgroup_ro(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0xb2) gettid() readlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)=""/253, 0xfd) r8 = socket$kcm(0xa, 0x5, 0x0) gettid() sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_type(r1, &(0x7f0000000380)='cgroup.type\x00', 0x2, 0x0) gettid() openat$cgroup_ro(r6, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000003c0)=0x100, 0x12) [ 945.994777] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.039508] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.053779] device bridge_slave_1 entered promiscuous mode [ 946.113650] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 946.159129] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 946.254165] chnl_net:caif_netlink_parms(): no params data found [ 946.263031] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 946.271155] team0: Port device team_slave_0 added [ 946.286956] chnl_net:caif_netlink_parms(): no params data found [ 946.301461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 946.309084] team0: Port device team_slave_1 added [ 946.328926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 946.336826] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 946.442749] device hsr_slave_0 entered promiscuous mode [ 946.479880] device hsr_slave_1 entered promiscuous mode [ 946.589965] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.596368] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.606012] device bridge_slave_0 entered promiscuous mode [ 946.629298] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 946.636931] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.649576] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.657079] device bridge_slave_1 entered promiscuous mode [ 946.671051] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.677477] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.693540] device bridge_slave_0 entered promiscuous mode [ 946.706449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 946.732712] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.739147] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.747785] device bridge_slave_1 entered promiscuous mode [ 946.771516] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 946.790617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 946.800113] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 946.817726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 946.833369] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 946.841660] team0: Port device team_slave_0 added [ 946.875280] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 946.888792] team0: Port device team_slave_1 added [ 946.899896] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 946.907609] team0: Port device team_slave_0 added [ 946.922842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 946.929780] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 946.937362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 946.954335] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 946.966661] team0: Port device team_slave_1 added [ 946.993267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 947.051205] device hsr_slave_0 entered promiscuous mode [ 947.109933] device hsr_slave_1 entered promiscuous mode [ 947.175834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 947.184823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 947.211922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 947.323265] device hsr_slave_0 entered promiscuous mode [ 947.369985] device hsr_slave_1 entered promiscuous mode [ 947.430247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 947.437464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 947.459282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.486373] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 947.506245] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 947.524796] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 947.542765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 947.556408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 947.568542] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 947.583204] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.597199] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 947.607260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 947.652506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 947.660984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 947.668639] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.675688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.686062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 947.695346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 947.703239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 947.713171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 947.721278] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.727659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.738220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 947.760944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 947.767963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 947.790979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 947.806473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 947.825996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 947.845221] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 947.859205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 947.883418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 947.891271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 947.899062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 947.917524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.938015] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 947.949051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.965318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 947.973778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 947.985915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 948.001514] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 948.021157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 948.040730] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 948.060702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 948.066987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.075574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.083759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 948.091243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 948.098466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 948.114668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 948.128053] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 948.148182] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.169243] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 948.178398] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 948.185217] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.194659] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 948.205406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.213413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.221918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.230347] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.236891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.247260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 948.258912] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 948.267845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.275545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.283864] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.293306] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.299923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.307552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.315711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.323606] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.330673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.338885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.363429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 948.385125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.402899] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 948.412393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 948.422924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.433141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.441631] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.448145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.458347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 948.478731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.489262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 948.502135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 948.513605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.521818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.532454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 948.539752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.547959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.560465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.567882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 948.577530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.585502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.595919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.607364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 948.623887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 948.633292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.641202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.649778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.657576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.681036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.692193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 948.702834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.710911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.721281] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 948.735395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 948.743424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.758928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.767743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.779040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.799255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 948.808731] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 948.826003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.850542] oom_kill_process: 5 callbacks suppressed [ 948.850632] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 948.870315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.873922] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 948.878274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.888263] CPU: 1 PID: 7178 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 948.894464] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 948.897692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 948.905188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.913155] Call Trace: [ 948.913183] dump_stack+0x172/0x1f0 [ 948.913211] dump_header+0x15e/0x929 [ 948.913228] ? ___ratelimit+0x5b/0x595 [ 948.913249] ? ___ratelimit+0x60/0x595 [ 948.927850] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 948.929701] oom_kill_process.cold+0x10/0x6f5 [ 948.929722] ? task_will_free_mem+0x139/0x6e0 [ 948.929742] out_of_memory+0x936/0x12d0 [ 948.929765] ? oom_killer_disable+0x280/0x280 [ 948.929790] mem_cgroup_out_of_memory+0x1d2/0x240 [ 948.952096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.952742] ? memcg_event_wake+0x230/0x230 [ 948.961228] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 948.961248] ? cgroup_file_notify+0x140/0x1b0 [ 948.961268] memory_max_write+0x169/0x300 [ 948.961283] ? retint_kernel+0x2d/0x2d [ 948.961302] ? mem_cgroup_write+0x360/0x360 [ 948.968616] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 948.972240] ? mem_cgroup_write+0x360/0x360 [ 948.972264] cgroup_file_write+0x245/0x7a0 [ 948.972281] ? mem_cgroup_write+0x360/0x360 [ 948.972296] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 948.972319] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 948.984740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.986268] kernfs_fop_write+0x2ba/0x480 [ 948.994329] __vfs_write+0x116/0x820 [ 949.041652] ? kernfs_fop_open+0xd90/0xd90 [ 949.045911] ? kernel_read+0x120/0x120 [ 949.049845] ? __lock_is_held+0xb6/0x140 [ 949.053945] ? rcu_read_lock_sched_held+0x110/0x130 [ 949.058991] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 949.063801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 949.069371] ? __sb_start_write+0x1ac/0x360 [ 949.073738] vfs_write+0x20c/0x560 [ 949.077307] ksys_write+0xea/0x1f0 [ 949.080871] ? __ia32_sys_read+0xb0/0xb0 [ 949.084960] ? do_syscall_64+0x26/0x610 [ 949.088952] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 949.088969] ? do_syscall_64+0x26/0x610 [ 949.088989] __x64_sys_write+0x73/0xb0 [ 949.089007] do_syscall_64+0x103/0x610 [ 949.089026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 949.089039] RIP: 0033:0x458c29 [ 949.089060] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 949.098521] RSP: 002b:00007f2b2a30dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 949.098539] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 949.098547] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000007 [ 949.098556] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 949.098564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b2a30e6d4 [ 949.098573] R13: 00000000004c84b7 R14: 00000000004de878 R15: 00000000ffffffff [ 949.176477] Task in /syz5 killed as a result of limit of /syz5 [ 949.229310] memory: usage 8852kB, limit 0kB, failcnt 321 [ 949.237148] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 949.247990] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 949.256789] Memory cgroup stats for /syz5: cache:192KB rss:2124KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 949.293437] Memory cgroup out of memory: Kill process 7177 (syz-executor.5) score 9272000 or sacrifice child [ 949.309356] Killed process 7177 (syz-executor.5) total-vm:72456kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 949.343327] oom_reaper: reaped process 7177 (syz-executor.5), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 14:51:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) 14:51:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmmsg(r0, &(0x7f0000009d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:51:10 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000580)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000040)={0xa, &(0x7f0000000100)="e6"}) 14:51:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) 14:51:10 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 949.734641] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 949.749860] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 949.755841] CPU: 0 PID: 7163 Comm: syz-executor.5 Not tainted 4.19.34 #2 [ 949.762706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 949.772151] Call Trace: [ 949.774764] dump_stack+0x172/0x1f0 [ 949.778427] dump_header+0x15e/0x929 [ 949.782165] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 949.787301] ? ___ratelimit+0x60/0x595 [ 949.791218] ? do_raw_spin_unlock+0x57/0x270 [ 949.795660] oom_kill_process.cold+0x10/0x6f5 [ 949.800191] ? task_will_free_mem+0x139/0x6e0 [ 949.804731] out_of_memory+0x936/0x12d0 [ 949.808743] ? lock_downgrade+0x810/0x810 [ 949.812916] ? oom_killer_disable+0x280/0x280 [ 949.817429] ? find_held_lock+0x35/0x130 [ 949.821518] mem_cgroup_out_of_memory+0x1d2/0x240 [ 949.826383] ? memcg_event_wake+0x230/0x230 [ 949.830768] ? do_raw_spin_unlock+0x57/0x270 [ 949.835201] ? _raw_spin_unlock+0x2d/0x50 [ 949.839375] try_charge+0x1028/0x15b0 [ 949.843196] ? find_held_lock+0x35/0x130 [ 949.847286] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 949.852159] ? kasan_check_read+0x11/0x20 [ 949.856334] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 949.861202] mem_cgroup_try_charge+0x24d/0x5e0 [ 949.865815] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 949.870768] wp_page_copy+0x430/0x16a0 [ 949.874701] ? follow_pfn+0x2a0/0x2a0 [ 949.878619] ? kasan_check_read+0x11/0x20 [ 949.882785] ? do_raw_spin_unlock+0x57/0x270 [ 949.887220] do_wp_page+0x57d/0x10b0 [ 949.890966] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 949.895657] ? kasan_check_write+0x14/0x20 [ 949.899916] ? do_raw_spin_lock+0xc8/0x240 [ 949.904196] __handle_mm_fault+0x230a/0x3f80 [ 949.908647] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 949.913519] ? find_held_lock+0x35/0x130 [ 949.917615] ? handle_mm_fault+0x322/0xb30 [ 949.921900] ? kasan_check_read+0x11/0x20 [ 949.926077] handle_mm_fault+0x43f/0xb30 [ 949.930429] __do_page_fault+0x62a/0xe90 [ 949.934518] ? vmalloc_fault+0x770/0x770 [ 949.938606] ? trace_hardirqs_off_caller+0x65/0x220 [ 949.943642] ? trace_hardirqs_on_caller+0x6a/0x220 [ 949.948586] ? page_fault+0x8/0x30 [ 949.952158] do_page_fault+0x71/0x581 [ 949.956078] ? page_fault+0x8/0x30 [ 949.959646] page_fault+0x1e/0x30 [ 949.963108] RIP: 0033:0x403242 [ 949.966310] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 29 84 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 d9 39 05 00 48 [ 949.985233] RSP: 002b:00007ffd1ea62bb0 EFLAGS: 00010246 [ 949.990625] RAX: 0000000000000000 RBX: 00000000000e7a49 RCX: 0000000000412900 [ 949.997910] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd1ea63ce0 [ 950.005197] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001799940 [ 950.012488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1ea63ce0 [ 950.019859] R13: 00007ffd1ea63cd0 R14: 0000000000000000 R15: 00007ffd1ea63ce0 [ 950.034704] Task in /syz5 killed as a result of limit of /syz5 14:51:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) [ 950.074090] memory: usage 6516kB, limit 0kB, failcnt 329 [ 950.095088] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 950.137757] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 950.175805] Memory cgroup stats for /syz5: cache:192KB rss:68KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 950.239783] Memory cgroup out of memory: Kill process 7163 (syz-executor.5) score 8755000 or sacrifice child [ 950.254736] Killed process 7163 (syz-executor.5) total-vm:72324kB, anon-rss:76kB, file-rss:34820kB, shmem-rss:0kB [ 950.266769] oom_reaper: reaped process 7163 (syz-executor.5), now anon-rss:0kB, file-rss:33988kB, shmem-rss:0kB [ 953.573963] bridge0: port 3(gretap0) entered disabled state [ 953.727748] device gretap0 left promiscuous mode [ 953.732734] bridge0: port 3(gretap0) entered disabled state [ 954.731637] device bridge_slave_1 left promiscuous mode [ 954.737133] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.800576] device bridge_slave_0 left promiscuous mode [ 954.806887] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.863277] device bridge_slave_1 left promiscuous mode [ 954.868823] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.910395] device bridge_slave_0 left promiscuous mode [ 954.915879] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.960963] device bridge_slave_1 left promiscuous mode [ 954.966452] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.010215] device bridge_slave_0 left promiscuous mode [ 955.015682] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.973157] device hsr_slave_1 left promiscuous mode [ 965.015504] device hsr_slave_0 left promiscuous mode [ 965.075997] team0 (unregistering): Port device team_slave_1 removed [ 965.089797] team0 (unregistering): Port device team_slave_0 removed [ 965.103976] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 965.175654] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.264124] bond0 (unregistering): Released all slaves [ 965.422172] device hsr_slave_1 left promiscuous mode [ 965.484259] device hsr_slave_0 left promiscuous mode [ 965.535249] team0 (unregistering): Port device team_slave_1 removed [ 965.547788] team0 (unregistering): Port device team_slave_0 removed [ 965.564387] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.655216] bond0 (unregistering): Released all slaves [ 965.772769] device hsr_slave_1 left promiscuous mode [ 965.835356] device hsr_slave_0 left promiscuous mode [ 965.886361] team0 (unregistering): Port device team_slave_1 removed [ 965.897216] team0 (unregistering): Port device team_slave_0 removed [ 965.912447] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 965.991277] bond0 (unregistering): Released all slaves [ 967.701636] WARNING: CPU: 0 PID: 328 at net/ipv6/xfrm6_tunnel.c:351 xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.711040] Kernel panic - not syncing: panic_on_warn set ... [ 967.711040] [ 967.718400] CPU: 0 PID: 328 Comm: kworker/u4:4 Not tainted 4.19.34 #2 [ 967.724968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.734328] Workqueue: netns cleanup_net [ 967.738375] Call Trace: [ 967.740965] dump_stack+0x172/0x1f0 [ 967.744617] panic+0x263/0x51d [ 967.747803] ? __warn_printk+0xf3/0xf3 [ 967.751697] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.756452] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 967.761997] ? __warn.cold+0x5/0x54 [ 967.765623] ? __warn+0xe8/0x1d0 [ 967.768997] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.773764] __warn.cold+0x20/0x54 [ 967.777295] ? kasan_check_read+0x11/0x20 [ 967.781445] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.786205] report_bug+0x263/0x2b0 [ 967.789886] do_error_trap+0x204/0x360 [ 967.793793] ? math_error+0x340/0x340 [ 967.797659] ? __flush_work+0x48c/0x840 [ 967.801653] ? error_entry+0x76/0xd0 [ 967.805376] ? trace_hardirqs_off_caller+0x65/0x220 [ 967.810386] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 967.815493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 967.820347] do_invalid_op+0x1b/0x20 [ 967.824072] invalid_op+0x14/0x20 [ 967.827525] RIP: 0010:xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.832897] Code: 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 0f 85 73 01 00 00 4d 8b 34 24 31 ff 4c 89 f6 e8 7b b8 61 fb 4d 85 f6 74 b3 e8 d1 b6 61 fb <0f> 0b eb aa 48 81 c3 00 08 00 00 45 31 e4 49 be 00 00 00 00 00 fc [ 967.851795] RSP: 0018:ffff8880a995fbe0 EFLAGS: 00010293 [ 967.857152] RAX: ffff8880a93ec340 RBX: ffff888075d381c0 RCX: ffffffff86098065 [ 967.864430] RDX: 0000000000000000 RSI: ffffffff8609806f RDI: 0000000000000007 [ 967.871727] RBP: ffff8880a995fc08 R08: ffff8880a93ec340 R09: ffff8880a93ecc30 [ 967.878992] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888075d38278 [ 967.886259] R13: 0000000000000017 R14: ffff8880a1327780 R15: dffffc0000000000 [ 967.893562] ? xfrm6_tunnel_net_exit+0x1d5/0x370 [ 967.898320] ? xfrm6_tunnel_net_exit+0x1df/0x370 [ 967.903123] ? xfrm6_tunnel_alloc_spi+0x920/0x920 [ 967.907975] ops_exit_list.isra.0+0xb0/0x160 [ 967.912379] cleanup_net+0x3fb/0x960 [ 967.916080] ? unregister_pernet_device+0x80/0x80 [ 967.920923] ? __lock_is_held+0xb6/0x140 [ 967.924991] process_one_work+0x98e/0x1760 [ 967.929222] ? pwq_dec_nr_in_flight+0x320/0x320 [ 967.933880] ? lock_acquire+0x16f/0x3f0 [ 967.937844] ? kasan_check_write+0x14/0x20 [ 967.942075] ? do_raw_spin_lock+0xc8/0x240 [ 967.946316] worker_thread+0x98/0xe40 [ 967.950132] kthread+0x357/0x430 [ 967.953489] ? process_one_work+0x1760/0x1760 [ 967.957996] ? kthread_delayed_work_timer_fn+0x290/0x290 [ 967.963462] ret_from_fork+0x3a/0x50 [ 967.968236] Kernel Offset: disabled [ 967.972064] Rebooting in 86400 seconds..