0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:46 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) pread64(r0, &(0x7f00000005c0)=""/178, 0xb2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xbe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)="000000008c00000001000000008000", 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000004c0)) write$evdev(0xffffffffffffffff, &(0x7f0000000500), 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000540)={{0x0, r1+30000000}, {0x77359400}}, &(0x7f00000003c0)) 11:07:47 executing program 2: r0 = socket$kcm(0x2, 0x5, 0x0) close(r0) r1 = socket$kcm(0xa, 0x400000000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f00000001c0), 0x4) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="a0", 0x1}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000003700)={&(0x7f00000032c0)=@can, 0x80, 0x0}, 0x0) 11:07:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x8, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:07:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:07:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x56c, 0x0) 11:07:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) pread64(r0, &(0x7f00000005c0)=""/178, 0xb2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xbe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)="000000008c00000001000000008000", 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000004c0)) write$evdev(0xffffffffffffffff, &(0x7f0000000500), 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000540)={{0x0, r1+30000000}, {0x77359400}}, &(0x7f00000003c0)) 11:07:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x8, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:07:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:07:47 executing program 5: io_setup(0x80400000000002, &(0x7f0000000040)=0x0) io_getevents(r0, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000000)={0x4000000000001, 0x7}) r1 = memfd_create(&(0x7f0000000600)="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", 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r1}]) r2 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) io_submit(r0, 0x1, &(0x7f0000001280)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)}]) 11:07:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) pread64(r0, &(0x7f00000005c0)=""/178, 0xb2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xbe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)="000000008c00000001000000008000", 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000004c0)) write$evdev(0xffffffffffffffff, &(0x7f0000000500), 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000540)={{0x0, r1+30000000}, {0x77359400}}, &(0x7f00000003c0)) 11:07:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:07:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x56c, 0x0) 11:07:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x4c}}, 0x0) 11:07:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:07:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) pread64(r0, &(0x7f00000005c0)=""/178, 0xb2, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xbe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000580)="000000008c00000001000000008000", 0x0) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000004c0)) write$evdev(0xffffffffffffffff, &(0x7f0000000500), 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000540)={{0x0, r1+30000000}, {0x77359400}}, &(0x7f00000003c0)) 11:07:47 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBLED(r0, 0x80045113, &(0x7f0000a07fff)) 11:07:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x4c}}, 0x0) 11:07:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 11:07:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x4c}}, 0x0) 11:07:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x803, 0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0xf758d37fc4173455, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}]}, 0x4c}}, 0x0) 11:07:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x56c, 0x0) 11:07:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x14b, 0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 11:07:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 11:07:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) 11:07:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x6, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/26, 0x3}], 0x100000000000025c) write$FUSE_DIRENT(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='2'], 0x1) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) 11:07:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 11:07:49 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x34) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xffffffffffff0001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f00000007fa)="97", 0x1, 0x0, &(0x7f00006f9000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:07:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="8b01359b1dfc", [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x608, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:07:49 executing program 4: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 11:07:49 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x7) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1d223b000}], 0x0) sendto(r0, &(0x7f0000000280)="dde6c47bff94a01e1009bf914395678440518317a09b3c04377d5df98e5b897b826d7856f4f4afaecd3cefa8679374c2939560da3383235ccc643132b153180f56e75c55ac2d975fc3e5354976082b75e8a0d33ff172f519", 0x58, 0x80, &(0x7f0000000380)=@ax25={0x3, {"f329a14ad48927"}, 0x8}, 0x80) 11:07:49 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x7) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1d223b000}], 0x0) sendto(r0, &(0x7f0000000280)="dde6c47bff94a01e1009bf914395678440518317a09b3c04377d5df98e5b897b826d7856f4f4afaecd3cefa8679374c2939560da3383235ccc643132b153180f56e75c55ac2d975fc3e5354976082b75e8a0d33ff172f519", 0x58, 0x80, &(0x7f0000000380)=@ax25={0x3, {"f329a14ad48927"}, 0x8}, 0x80) 11:07:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 11:07:50 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x19a) 11:07:50 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@logdev={'logdev', 0x3d, './file0'}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:07:50 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x7) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1d223b000}], 0x0) sendto(r0, &(0x7f0000000280)="dde6c47bff94a01e1009bf914395678440518317a09b3c04377d5df98e5b897b826d7856f4f4afaecd3cefa8679374c2939560da3383235ccc643132b153180f56e75c55ac2d975fc3e5354976082b75e8a0d33ff172f519", 0x58, 0x80, &(0x7f0000000380)=@ax25={0x3, {"f329a14ad48927"}, 0x8}, 0x80) 11:07:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 11:07:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) 11:07:50 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 11:07:50 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x19a) [ 2642.037777] overlayfs: failed to resolve './file1': -2 11:07:50 executing program 4: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:50 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8000, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000240)=0x7) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1d223b000}], 0x0) sendto(r0, &(0x7f0000000280)="dde6c47bff94a01e1009bf914395678440518317a09b3c04377d5df98e5b897b826d7856f4f4afaecd3cefa8679374c2939560da3383235ccc643132b153180f56e75c55ac2d975fc3e5354976082b75e8a0d33ff172f519", 0x58, 0x80, &(0x7f0000000380)=@ax25={0x3, {"f329a14ad48927"}, 0x8}, 0x80) 11:07:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0)) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 11:07:50 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x19a) [ 2642.087867] overlayfs: failed to resolve './file1': -2 11:07:50 executing program 5: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:50 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) 11:07:50 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x8, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x19a) 11:07:50 executing program 2: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) 11:07:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="fc00000049000700ab092500090007000aab0700000000001d00369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00020000000000000000272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) [ 2642.402283] overlayfs: failed to resolve './file1': -2 [ 2642.568331] overlayfs: failed to resolve './file1': -2 [ 2642.747276] overlayfs: failed to resolve './file1': -2 11:07:51 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) 11:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001200190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 11:07:51 executing program 2: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) 11:07:51 executing program 4: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:51 executing program 1: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) [ 2643.084811] overlayfs: failed to resolve './file1': -2 11:07:51 executing program 5: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001200190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) [ 2643.196022] overlayfs: failed to resolve './file1': -2 11:07:51 executing program 2: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) 11:07:51 executing program 3: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) [ 2643.289488] overlayfs: failed to resolve './file1': -2 11:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001200190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 11:07:52 executing program 1: r0 = socket(0x10, 0x802, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @broadcast, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x0, @local, 'ip6_vti0\x00'}}) ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x8, 0x5}, {0x7, 0x101}]}, 0x14, 0x1) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x401, 0x5) r3 = getpid() ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) sched_setscheduler(r3, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x4, 0x1, &(0x7f0000000940)=[{&(0x7f00000008c0)}], 0x0, 0x0) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) mount$overlay(0x404e02, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e"]) creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x7, 0x5}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000400)=""/59) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000cc0)={0x0, 0x0, 0x6, 'queue1\x00'}) fallocate(r4, 0x40, 0x44, 0x81000f3) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) connect$l2tp(r5, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22}, 0x3, 0x3, 0x4, 0x3}}, 0x26) write(r0, &(0x7f0000000140)="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", 0xfc) [ 2643.542718] overlayfs: failed to resolve './file1': -2 [ 2643.581357] overlayfs: failed to resolve './file1': -2 11:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f000051c000)=[{&(0x7f0000000100)="480000001200190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 11:07:52 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-control\x00', 0x0, 0x0) epoll_wait(r0, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x6, 0x6) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000a00)={0x9, 0x0, [], {0x0, @bt={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3011, 0x55b}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0xfe80000000000000, @remote, [0x89000000, 0x700, 0x0, 0xc0fe, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80385}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x9, 0x60}}], 0x48}, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000021c0)) fstat(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@mcast1, @in6=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001f40)=0xe8) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000020c0)={0x68, 0x29, 0x2, {0x0, [{{0x12, 0x0, 0x4}, 0x0, 0x6, 0x7, './file0'}, {{0x6, 0x1, 0x7}, 0xeb6, 0x5, 0x7, './file0'}, {{0x4}, 0x0, 0x0, 0x7, './file0'}]}}, 0x68) syz_mount_image$erofs(&(0x7f00000018c0)='erofs\x00', &(0x7f0000001900)='./file0\x00', 0x7f, 0x0, &(0x7f0000001d40), 0x10, &(0x7f0000001f80)={[], [{@fowner_lt={'fowner<', r2}}, {@uid_gt={'uid>'}}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@ipv4, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002000)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rfkill\x00', 0x80000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001880)='/dev/video37\x00', 0x2, 0x0) [ 2643.914980] overlayfs: failed to resolve './file1': -2 11:07:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002080)={0x0, 0x1, 0x2, [0x81, 0x0]}, &(0x7f00000020c0)=0xc) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x0, 0xfffffffffffffff9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000009c0)={0xffffffffffffff9c}) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) syz_read_part_table(0xd0ba, 0x1, &(0x7f0000003440)=[{&(0x7f0000003380), 0x0, 0xf5}]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000005, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e1086dd", &(0x7f0000000140)=""/41, 0x69}, 0x28) 11:07:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:52 executing program 4: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:52 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d400300000000006506000001ed00007c040000000000006f460000000000007b1a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)="505c881c"}, 0x48) 11:07:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x24, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff}}]}]}, 0x24}}, 0x0) 11:07:52 executing program 5: r0 = socket$inet(0x10, 0x0, 0x1000000) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "e4707aebd66225b35248bfb6e8e2f6f0ba4f16debc192e130588bdd15ba2d3b26e07157da2c6e427e27e619ef4348a4a591414ee90c84b486e2e9049b0e665"}, {0x0}, 0x0}, 0xa0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, &(0x7f00000006c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217b8c241c03f4fa4", 0xc7) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4) 11:07:52 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002080)={0x0, 0x1, 0x2, [0x81, 0x0]}, &(0x7f00000020c0)=0xc) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x0, 0xfffffffffffffff9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000009c0)={0xffffffffffffff9c}) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) syz_read_part_table(0xd0ba, 0x1, &(0x7f0000003440)=[{&(0x7f0000003380), 0x0, 0xf5}]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000005, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e1086dd", &(0x7f0000000140)=""/41, 0x69}, 0x28) [ 2644.338967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 11:07:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d400300000000006506000001ed00007c040000000000006f460000000000007b1a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)="505c881c"}, 0x48) 11:07:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x24, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff}}]}]}, 0x24}}, 0x0) 11:07:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d400300000000006506000001ed00007c040000000000006f460000000000007b1a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)="505c881c"}, 0x48) 11:07:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 2644.702969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 11:07:53 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000013d400300000000006506000001ed00007c040000000000006f460000000000007b1a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)="505c881c"}, 0x48) 11:07:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x24, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff}}]}]}, 0x24}}, 0x0) 11:07:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) [ 2645.144297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 11:07:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f00003c0fdc)={0x24, 0x0, 0x1, 0x800000001, 0x0, 0x0, {0xa}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff}}]}]}, 0x24}}, 0x0) 11:07:53 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002080)={0x0, 0x1, 0x2, [0x81, 0x0]}, &(0x7f00000020c0)=0xc) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x0, 0xfffffffffffffff9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000009c0)={0xffffffffffffff9c}) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) syz_read_part_table(0xd0ba, 0x1, &(0x7f0000003440)=[{&(0x7f0000003380), 0x0, 0xf5}]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000005, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e1086dd", &(0x7f0000000140)=""/41, 0x69}, 0x28) 11:07:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x8) 11:07:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x8) [ 2645.501339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 11:07:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x8) 11:07:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) 11:07:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) 11:07:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x2, {{0x2, 0x0, @multicast2}}}, 0x149) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), 0x8) 11:07:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002080)={0x0, 0x1, 0x2, [0x81, 0x0]}, &(0x7f00000020c0)=0xc) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x2f, 0x4, 0x0, {0x0, 0xfffffffffffffff9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000009c0)={0xffffffffffffff9c}) socketpair$inet(0x2, 0x2, 0x1, &(0x7f0000000280)) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) syz_read_part_table(0xd0ba, 0x1, &(0x7f0000003440)=[{&(0x7f0000003380), 0x0, 0xf5}]) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000280)=0x1f) mmap(&(0x7f0000000000/0x62000)=nil, 0x62000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x1800000000000005, 0xe, 0x29, &(0x7f0000000000)="b90703e69ebf08bb64879e1086dd", &(0x7f0000000140)=""/41, 0x69}, 0x28) 11:07:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) [ 2646.372042] sctp_getsockopt_delayed_ack: 4 callbacks suppressed [ 2646.372166] sctp: [Deprecated]: syz-executor5 (pid 5496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2646.372166] Use struct sctp_sack_info instead 11:07:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000003c0)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000000200)=0x91) 11:07:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:55 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x1bd, 0x0) 11:07:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x10804, &(0x7f00000004c0)={'trans=tcp,', {'port'}, 0x2c, {[{@noextend='noextend'}, {@cache_loose='cache=loose'}], [{@uid_gt={'uid>'}}, {@fowner_eq={'fowner'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-%posix_acl_access!#'}}]}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41) 11:07:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x8, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 11:07:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x8, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 11:07:55 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x51, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc02c5341, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 11:07:55 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) [ 2647.137019] sctp: [Deprecated]: syz-executor5 (pid 5504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2647.137019] Use struct sctp_sack_info instead 11:07:55 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x8, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 11:07:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 11:07:56 executing program 4: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 11:07:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) [ 2647.412643] autofs4:pid:5536:autofs_fill_super: called with bogus options 11:07:56 executing program 4: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) [ 2647.484081] sctp: [Deprecated]: syz-executor5 (pid 5546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2647.484081] Use struct sctp_sack_info instead 11:07:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 11:07:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x8, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) [ 2647.524874] sctp: [Deprecated]: syz-executor2 (pid 5549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2647.524874] Use struct sctp_sack_info instead 11:07:56 executing program 4: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) [ 2647.623770] autofs4:pid:5553:autofs_fill_super: called with bogus options 11:07:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f00000006c0), 0xfffffdb7}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 11:07:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:56 executing program 1: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) [ 2647.822371] autofs4:pid:5570:autofs_fill_super: called with bogus options 11:07:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:56 executing program 4: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 11:07:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:56 executing program 1: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) 11:07:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) [ 2648.297037] autofs4:pid:5578:autofs_fill_super: called with bogus options [ 2648.334243] sctp: [Deprecated]: syz-executor5 (pid 5581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2648.334243] Use struct sctp_sack_info instead [ 2648.369867] sctp: [Deprecated]: syz-executor4 (pid 5587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2648.369867] Use struct sctp_sack_info instead 11:07:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:57 executing program 1: setresuid(0x0, 0xee01, 0x0) add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0x0, 0x0) [ 2648.438764] sctp: [Deprecated]: syz-executor2 (pid 5593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2648.438764] Use struct sctp_sack_info instead [ 2648.801313] autofs4:pid:5586:autofs_fill_super: called with bogus options 11:07:57 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x1) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f00000004c0)=0x100000035) 11:07:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80a102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 11:07:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 2648.888335] autofs4:pid:5606:autofs_fill_super: called with bogus options [ 2648.958756] autofs4:pid:5612:autofs_fill_super: called with bogus options 11:07:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000026000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000001c0)="64650f01d10f21c13e0fc71ee4e564260533092e0f083e3636650f1811650f01cf0f20d86635200000000f22d80f0138baf80c66b8d0ffdb8566efbafc0c66b80900000066ef", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:07:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) [ 2649.219244] sctp: [Deprecated]: syz-executor5 (pid 5620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2649.219244] Use struct sctp_sack_info instead 11:07:58 executing program 3: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x88a8ffff, 0x0, 0x8}}}}}, 0x0) [ 2649.307360] sctp: [Deprecated]: syz-executor4 (pid 5625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2649.307360] Use struct sctp_sack_info instead 11:07:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000082100003d03010000000000950000000000000071260000000000006706000002000000bf25000000000000620500000e0000000f65000000000000bf540000000000000704000004faff003d4301000000000095000000000000005d54090000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf25000000000000070500000e0000001f6200000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:07:58 executing program 3: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x88a8ffff, 0x0, 0x8}}}}}, 0x0) [ 2649.644486] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2649.672530] sctp: [Deprecated]: syz-executor2 (pid 5640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2649.672530] Use struct sctp_sack_info instead 11:07:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:07:58 executing program 3: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x88a8ffff, 0x0, 0x8}}}}}, 0x0) [ 2649.724126] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2649.764758] CPU: 1 PID: 5627 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2649.773270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2649.782669] Call Trace: [ 2649.785272] dump_stack+0x244/0x39d [ 2649.788934] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2649.794173] dump_header+0x27b/0xf72 [ 2649.797898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.803475] ? check_preemption_disabled+0x48/0x280 [ 2649.808498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.814041] ? pagefault_out_of_memory+0x197/0x197 [ 2649.818974] ? debug_smp_processor_id+0x1c/0x20 [ 2649.823654] ? perf_trace_lock+0x14d/0x7a0 [ 2649.827913] ? debug_smp_processor_id+0x1c/0x20 [ 2649.832601] ? perf_trace_lock_acquire+0x15b/0x800 [ 2649.837581] ? lock_is_held_type+0x210/0x210 [ 2649.842002] ? perf_trace_lock+0x7a0/0x7a0 [ 2649.846246] ? debug_smp_processor_id+0x1c/0x20 [ 2649.850935] ? perf_trace_lock+0x14d/0x7a0 [ 2649.855202] ? graph_lock+0x270/0x270 [ 2649.859028] ? print_usage_bug+0xc0/0xc0 [ 2649.863143] ? lock_is_held_type+0x210/0x210 [ 2649.867562] ? perf_trace_lock+0x7a0/0x7a0 [ 2649.871811] ? find_held_lock+0x36/0x1c0 [ 2649.875887] ? mark_held_locks+0xc7/0x130 [ 2649.880073] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2649.885200] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2649.890310] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2649.894982] ? trace_hardirqs_on+0xbd/0x310 [ 2649.899312] ? kasan_check_read+0x11/0x20 [ 2649.903471] ? ___ratelimit+0x3b4/0x672 [ 2649.907486] ? trace_hardirqs_off_caller+0x300/0x300 [ 2649.912599] ? trace_hardirqs_on+0x310/0x310 [ 2649.917015] ? lock_downgrade+0x900/0x900 [ 2649.921191] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2649.926328] ? ___ratelimit+0x3b9/0x672 [ 2649.930337] ? idr_get_free+0xf70/0xf70 [ 2649.934328] ? _raw_spin_unlock_irq+0x27/0x80 [ 2649.938845] ? _raw_spin_unlock_irq+0x27/0x80 [ 2649.943397] oom_kill_process.cold.27+0x10/0x903 [ 2649.948222] ? _raw_spin_unlock_irq+0x27/0x80 [ 2649.952746] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2649.957356] ? oom_evaluate_task+0x540/0x540 [ 2649.961792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2649.967343] ? cgroup_procs_next+0x70/0x70 [ 2649.971592] ? _raw_spin_unlock_irq+0x60/0x80 [ 2649.976092] ? oom_badness+0xaa0/0xaa0 [ 2649.979995] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2649.984764] ? mem_cgroup_iter_break+0x30/0x30 [ 2649.989395] ? cgroup_file_notify+0x226/0x2f0 [ 2649.993909] out_of_memory+0xa7f/0x1430 [ 2649.997894] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2650.002516] ? preempt_schedule+0x4d/0x60 [ 2650.006680] ? oom_killer_disable+0x3a0/0x3a0 [ 2650.011206] ? preempt_schedule+0x4d/0x60 11:07:58 executing program 3: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x88a8ffff, 0x0, 0x8}}}}}, 0x0) [ 2650.015368] ? ___preempt_schedule+0x16/0x18 [ 2650.019811] mem_cgroup_out_of_memory+0x15e/0x210 [ 2650.024690] ? memory_oom_group_write+0x160/0x160 [ 2650.029538] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2650.034394] ? page_counter_try_charge+0x1c1/0x220 [ 2650.039350] try_charge+0xdcd/0x1720 [ 2650.043128] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2650.047816] ? kasan_check_read+0x11/0x20 [ 2650.051983] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2650.057300] ? rcu_read_unlock_special+0x370/0x370 [ 2650.062290] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2650.067840] ? __kernel_text_address+0xd/0x40 [ 2650.072361] ? lock_page_memcg+0x350/0x350 [ 2650.076630] ? lock_acquire+0x1ed/0x520 [ 2650.080642] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2650.086034] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.091588] ? check_preemption_disabled+0x48/0x280 [ 2650.096631] memcg_kmem_charge_memcg+0x7c/0x120 [ 2650.101313] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2650.105820] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.111210] memcg_kmem_charge+0x149/0x350 [ 2650.115466] __alloc_pages_nodemask+0x89c/0xdd0 [ 2650.120162] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2650.125448] ? trace_hardirqs_off_caller+0x300/0x300 [ 2650.130569] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2650.135588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.141130] ? check_preemption_disabled+0x48/0x280 [ 2650.146173] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2650.151743] ? rcu_pm_notify+0xc0/0xc0 [ 2650.155652] ? copy_process+0x2027/0x8790 [ 2650.159823] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2650.164864] ? kmem_cache_alloc_node+0x349/0x730 [ 2650.169644] copy_process+0xa09/0x8790 [ 2650.173549] ? debug_smp_processor_id+0x1c/0x20 [ 2650.178230] ? __lock_acquire+0x62f/0x4c20 [ 2650.182480] ? free_unref_page_list+0xd1b/0x11e0 [ 2650.187258] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2650.191849] ? trace_hardirqs_on+0xbd/0x310 [ 2650.196232] ? __cleanup_sighand+0x70/0x70 [ 2650.200521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.206077] ? print_usage_bug+0xc0/0xc0 [ 2650.210147] ? debug_smp_processor_id+0x1c/0x20 [ 2650.214843] ? print_usage_bug+0xc0/0xc0 [ 2650.218930] ? perf_trace_lock_acquire+0x15b/0x800 [ 2650.223894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.229439] ? check_preemption_disabled+0x48/0x280 [ 2650.234497] ? debug_smp_processor_id+0x1c/0x20 [ 2650.239176] ? __lock_acquire+0x62f/0x4c20 [ 2650.243424] ? __lock_acquire+0x62f/0x4c20 [ 2650.247677] ? mark_held_locks+0x130/0x130 [ 2650.251956] ? print_usage_bug+0xc0/0xc0 [ 2650.256028] ? mark_held_locks+0x130/0x130 [ 2650.260285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.265824] ? check_preemption_disabled+0x48/0x280 [ 2650.270840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.276387] ? print_usage_bug+0xc0/0xc0 [ 2650.280453] ? __lock_acquire+0x62f/0x4c20 [ 2650.284726] ? lock_is_held_type+0x210/0x210 [ 2650.289177] ? print_usage_bug+0xc0/0xc0 [ 2650.293250] ? __lock_acquire+0x62f/0x4c20 [ 2650.297511] ? print_usage_bug+0xc0/0xc0 [ 2650.301603] ? __lock_acquire+0x62f/0x4c20 [ 2650.305851] ? perf_trace_lock_acquire+0x15b/0x800 [ 2650.310793] ? mark_held_locks+0x130/0x130 [ 2650.315067] ? debug_smp_processor_id+0x1c/0x20 [ 2650.319743] ? mark_held_locks+0x130/0x130 [ 2650.323978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.329525] ? check_preemption_disabled+0x48/0x280 [ 2650.334559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.340115] ? debug_smp_processor_id+0x1c/0x20 [ 2650.344789] ? perf_trace_lock+0x14d/0x7a0 [ 2650.349038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.354580] ? check_preemption_disabled+0x48/0x280 [ 2650.359601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.365189] ? debug_smp_processor_id+0x1c/0x20 [ 2650.369858] ? perf_trace_lock+0x14d/0x7a0 [ 2650.374125] ? perf_trace_lock_acquire+0x15b/0x800 [ 2650.379078] ? print_usage_bug+0xc0/0xc0 [ 2650.383157] ? graph_lock+0x270/0x270 [ 2650.386967] ? delayacct_end+0xc5/0x100 [ 2650.390964] ? graph_lock+0x270/0x270 [ 2650.394783] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2650.399903] ? __lock_acquire+0x62f/0x4c20 [ 2650.404153] ? find_held_lock+0x36/0x1c0 [ 2650.408262] ? mark_held_locks+0x130/0x130 [ 2650.412508] ? _raw_spin_unlock_irq+0x27/0x80 [ 2650.417012] ? _raw_spin_unlock_irq+0x27/0x80 [ 2650.421510] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2650.426100] ? trace_hardirqs_on+0xbd/0x310 [ 2650.430426] ? kasan_check_read+0x11/0x20 [ 2650.434584] ? psi_memstall_leave+0x1f8/0x260 [ 2650.439087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.444633] ? check_preemption_disabled+0x48/0x280 [ 2650.449665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2650.455216] ? debug_smp_processor_id+0x1c/0x20 [ 2650.459886] ? perf_trace_lock+0x14d/0x7a0 [ 2650.464120] ? debug_smp_processor_id+0x1c/0x20 [ 2650.468794] ? perf_trace_lock_acquire+0x15b/0x800 [ 2650.473747] ? lock_is_held_type+0x210/0x210 [ 2650.478162] ? perf_trace_lock+0x7a0/0x7a0 [ 2650.482411] ? graph_lock+0x270/0x270 [ 2650.486221] ? cgroup_file_notify+0x226/0x2f0 [ 2650.490739] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2650.495852] _do_fork+0x1cb/0x11c0 [ 2650.499578] ? fork_idle+0x1d0/0x1d0 [ 2650.503306] ? percpu_ref_put_many+0x11c/0x260 [ 2650.507897] ? lock_downgrade+0x900/0x900 [ 2650.512045] ? check_preemption_disabled+0x48/0x280 [ 2650.517069] ? kasan_check_read+0x11/0x20 [ 2650.521216] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2650.526496] ? rcu_softirq_qs+0x20/0x20 [ 2650.530494] ? check_preemption_disabled+0x48/0x280 [ 2650.535529] ? do_syscall_64+0x9a/0x820 [ 2650.539514] ? do_syscall_64+0x9a/0x820 [ 2650.543507] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2650.548115] ? trace_hardirqs_on+0xbd/0x310 [ 2650.552439] ? trace_hardirqs_on+0x310/0x310 [ 2650.556853] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.562220] ? trace_hardirqs_off_caller+0x300/0x300 [ 2650.567345] __x64_sys_clone+0xbf/0x150 [ 2650.571338] do_syscall_64+0x1b9/0x820 [ 2650.575225] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2650.580589] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2650.585539] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2650.590413] ? trace_hardirqs_on_caller+0x310/0x310 [ 2650.595453] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2650.600500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2650.605400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2650.610586] RIP: 0033:0x459f39 [ 2650.613806] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2650.633203] RSP: 002b:00007fff85277f88 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2650.640922] RAX: ffffffffffffffda RBX: 00007f2e89d1b700 RCX: 0000000000459f39 [ 2650.648187] RDX: 00007f2e89d1b9d0 RSI: 00007f2e89d1adb0 RDI: 00000000003d0f00 [ 2650.655487] RBP: 00007fff85278190 R08: 00007f2e89d1b700 R09: 00007f2e89d1b700 [ 2650.662772] R10: 00007f2e89d1b9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2650.670041] R13: 00007fff8527803f R14: 00007f2e89d1b9c0 R15: 0000000000000001 11:07:59 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="d3abc7990d535c9e70bc111c8eff7f0000000000004e0000", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000001c0), 0x3a36a8, 0x0, 0x0, 0x300) 11:07:59 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) [ 2650.776124] Task in /syz0 killed as a result of limit of /syz0 [ 2650.823050] memory: usage 307200kB, limit 307200kB, failcnt 3727 [ 2650.877956] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2650.913355] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2650.950177] Memory cgroup stats for /syz0: cache:1444KB rss:257468KB rss_huge:241664KB shmem:1176KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1224KB active_anon:257756KB inactive_file:8KB active_file:4KB unevictable:28KB [ 2651.011018] Memory cgroup out of memory: Kill process 3314 (syz-executor0) score 123 or sacrifice child [ 2651.038615] Killed process 3314 (syz-executor0) total-vm:70336kB, anon-rss:4252kB, file-rss:33688kB, shmem-rss:0kB [ 2651.093093] oom_reaper: reaped process 3314 (syz-executor0), now anon-rss:0kB, file-rss:32856kB, shmem-rss:0kB 11:07:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:07:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000005c0)=""/76, 0x4c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={r3, 0x81f4}, 0x8) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='syz1\x00', 0xfffffffffffffffe) r6 = geteuid() lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0x7, 0x0, 0x0, 0x152, 0x0, 0x79}, "cb47ba143ecdbf35c6e47c791f4ade381c3fdd0dd1c2847e38de1d011e772e36fd1a4fe501"}, 0x45) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)=ANY=[]) r8 = accept4(r2, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(r4, 0x29, 0x0, &(0x7f00000000c0)=ANY=[], 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000004c0)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x10, 0x1, {0x54, 0x88, 0xfffffffffffff000, {0x81, 0xfffffffffffffc00}, {0x636, 0x7fffffff}, @cond=[{0x1, 0x0, 0x3, 0x830e, 0x487, 0x4fa}, {0x7fffffff, 0x7ff, 0x1, 0x1, 0x3f, 0x5}]}, {0x55, 0x10000, 0x9, {0x200, 0x8}, {}, @rumble={0xff, 0x4}}}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/114) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x2, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x1f, 0x181002) 11:07:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000082100003d03010000000000950000000000000071260000000000006706000002000000bf25000000000000620500000e0000000f65000000000000bf540000000000000704000004faff003d4301000000000095000000000000005d54090000000000bf250000000000000f65000000000000070500000e000000bf5400000000000007040000040000003d4301000000000095000000000000006154000000000000bf25000000000000070500000e0000001f6200000000000007050000040000000f65000000000000bf5400000000000007040000040000003d3201000000000095000000000000004d54000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 11:07:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000534a68c398cc290a1938f9be8dfc0e06e5c52b4e1558316a1c3521fa85e1473989accefe7583da04fa968b3ed9decd5a9ceac082457f26b197a0e2b6028e8c25464c87d57758ead52cdd0a83748fe08c09f52ca02958090ff36c116171068e25a1d37446557934922b42590e26f37fc270330b8926ce76929c2060e013108a7f580b7348f472b78fe27dc6b6b2b399ad97ab9f3f55bd48645c3009471db24377c580989888cbc8faa6c304e9178d3c68d6f8ca7ba581db3b6cefbf4ca8067402697a20d5da7c356e56a0b5ef2b7fde89beff99d6597964ed6e"], 0x159}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x400300) 11:07:59 executing program 3: pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="8859c9fa2b52af5fac6bb50c3e381cd353b6edc75ed9dd594eb8193f188b0e6fd01b2ddda3e0a00bc7fed2d822ea737e1586531ff073a8519961d54e50a58ab9e0b5389a", 0x44, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000400)=""/246) 11:08:00 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:00 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:08:00 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000002}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x11d, 0x0, 0x0, {0x4001}, [@nested={0x4}]}, 0x18}}, 0x0) 11:08:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2651.633862] openvswitch: netlink: Flow key attr not present in new flow. 11:08:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000002}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x11d, 0x0, 0x0, {0x4001}, [@nested={0x4}]}, 0x18}}, 0x0) 11:08:00 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000340)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0xc008af12, &(0x7f0000000000)) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af25, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) [ 2651.946719] openvswitch: netlink: Flow key attr not present in new flow. 11:08:00 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:00 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:00 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x4000000007, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14}, 0x14) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000000), 0x10001) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 11:08:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000002}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x11d, 0x0, 0x0, {0x4001}, [@nested={0x4}]}, 0x18}}, 0x0) [ 2652.106816] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2652.120490] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2652.126629] CPU: 0 PID: 5716 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2652.135150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2652.144509] Call Trace: [ 2652.147111] dump_stack+0x244/0x39d [ 2652.150800] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2652.151522] openvswitch: netlink: Flow key attr not present in new flow. [ 2652.156023] ? mark_held_locks+0x130/0x130 [ 2652.156040] ? mark_held_locks+0x130/0x130 [ 2652.156071] dump_header+0x27b/0xf72 [ 2652.175084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.180659] ? check_preemption_disabled+0x48/0x280 [ 2652.185696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.191262] ? pagefault_out_of_memory+0x197/0x197 [ 2652.196200] ? debug_smp_processor_id+0x1c/0x20 [ 2652.200881] ? perf_trace_lock+0x14d/0x7a0 [ 2652.205155] ? debug_smp_processor_id+0x1c/0x20 [ 2652.209837] ? perf_trace_lock_acquire+0x15b/0x800 [ 2652.214783] ? lock_is_held_type+0x210/0x210 [ 2652.219234] ? perf_trace_lock+0x7a0/0x7a0 [ 2652.223526] ? debug_smp_processor_id+0x1c/0x20 [ 2652.228216] ? perf_trace_lock+0x14d/0x7a0 [ 2652.232474] ? graph_lock+0x270/0x270 [ 2652.236280] ? print_usage_bug+0xc0/0xc0 [ 2652.240384] ? lock_is_held_type+0x210/0x210 [ 2652.244809] ? find_held_lock+0x36/0x1c0 [ 2652.248889] ? mark_held_locks+0xc7/0x130 [ 2652.253070] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2652.258206] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2652.263313] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.263333] ? trace_hardirqs_on+0xbd/0x310 [ 2652.263353] ? kasan_check_read+0x11/0x20 [ 2652.276409] ? ___ratelimit+0x3b4/0x672 [ 2652.280400] ? trace_hardirqs_off_caller+0x300/0x300 [ 2652.280419] ? trace_hardirqs_on+0x310/0x310 [ 2652.280450] ? lock_downgrade+0x900/0x900 [ 2652.280475] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2652.299282] ? ___ratelimit+0x3b9/0x672 [ 2652.303261] ? idr_get_free+0xf70/0xf70 [ 2652.307283] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.311801] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.316345] oom_kill_process.cold.27+0x10/0x903 [ 2652.321125] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.325631] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.330259] ? oom_evaluate_task+0x540/0x540 [ 2652.332463] openvswitch: netlink: Flow key attr not present in new flow. [ 2652.334693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.334714] ? cgroup_procs_next+0x70/0x70 [ 2652.334734] ? _raw_spin_unlock_irq+0x60/0x80 [ 2652.334754] ? oom_badness+0xaa0/0xaa0 [ 2652.359731] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2652.364522] ? mem_cgroup_iter_break+0x30/0x30 [ 2652.369143] ? mark_held_locks+0xc7/0x130 [ 2652.373360] out_of_memory+0xa7f/0x1430 [ 2652.377346] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.381961] ? kasan_check_read+0x11/0x20 [ 2652.386137] ? oom_killer_disable+0x3a0/0x3a0 [ 2652.390706] mem_cgroup_out_of_memory+0x15e/0x210 [ 2652.395572] ? memory_oom_group_write+0x160/0x160 [ 2652.400432] ? memcg_kmem_charge_memcg+0x7c/0x120 11:08:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000002}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2f, 0x11d, 0x0, 0x0, {0x4001}, [@nested={0x4}]}, 0x18}}, 0x0) 11:08:01 executing program 5: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) [ 2652.405285] ? page_counter_try_charge+0x1c1/0x220 [ 2652.410225] try_charge+0xdcd/0x1720 [ 2652.413980] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2652.418665] ? kasan_check_read+0x11/0x20 [ 2652.422830] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2652.428103] ? rcu_read_unlock_special+0x370/0x370 [ 2652.433028] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2652.438591] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.443087] ? lock_page_memcg+0x350/0x350 [ 2652.447315] ? lock_acquire+0x1ed/0x520 [ 2652.451277] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2652.456648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.462180] ? check_preemption_disabled+0x48/0x280 [ 2652.467223] memcg_kmem_charge_memcg+0x7c/0x120 [ 2652.471892] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2652.476373] ? debug_smp_processor_id+0x1c/0x20 [ 2652.481029] memcg_kmem_charge+0x149/0x350 [ 2652.485249] __alloc_pages_nodemask+0x89c/0xdd0 [ 2652.489905] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2652.494914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.500669] ? check_preemption_disabled+0x48/0x280 [ 2652.505713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.511255] ? graph_lock+0x270/0x270 [ 2652.515081] ? __lock_is_held+0xb5/0x140 [ 2652.519124] ? lock_downgrade+0x900/0x900 [ 2652.523257] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2652.528785] alloc_pages_current+0x173/0x350 [ 2652.533199] pte_alloc_one+0x1b/0x1a0 [ 2652.537008] __pte_alloc+0x2a/0x350 [ 2652.540634] copy_page_range+0x2017/0x2ee0 [ 2652.544900] ? __pmd_alloc+0x450/0x450 [ 2652.548791] ? __rb_insert_augmented+0x3b2/0x1890 [ 2652.553615] ? __rb_insert_augmented+0x3b2/0x1890 [ 2652.558502] ? __save_stack_trace+0x8d/0xf0 [ 2652.562814] ? rb_insert_color_cached+0x14b0/0x14b0 [ 2652.567817] ? check_preemption_disabled+0x48/0x280 [ 2652.572835] ? debug_smp_processor_id+0x1c/0x20 [ 2652.577488] ? debug_smp_processor_id+0x1c/0x20 [ 2652.582154] ? perf_trace_lock_acquire+0x15b/0x800 [ 2652.587083] ? lock_is_held_type+0x210/0x210 [ 2652.591495] ? graph_lock+0x270/0x270 [ 2652.595279] ? lock_downgrade+0x900/0x900 [ 2652.599452] ? graph_lock+0x270/0x270 [ 2652.603245] ? graph_lock+0x270/0x270 [ 2652.607033] ? find_held_lock+0x36/0x1c0 [ 2652.611090] ? copy_process+0x4414/0x8790 [ 2652.615254] ? lock_downgrade+0x900/0x900 [ 2652.619404] ? lock_release+0xa10/0xa10 [ 2652.623361] ? perf_trace_sched_process_exec+0x860/0x860 [ 2652.628793] ? dup_userfaultfd+0x6d8/0x890 [ 2652.633029] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2652.638035] ? vma_compute_subtree_gap+0x160/0x240 [ 2652.642988] ? validate_mm_rb+0xaa/0xc0 [ 2652.646996] ? __vma_link_rb+0x26c/0x370 [ 2652.651064] copy_process+0x45ea/0x8790 [ 2652.655091] ? __cleanup_sighand+0x70/0x70 [ 2652.659330] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.663807] ? _raw_spin_unlock_irq+0x27/0x80 [ 2652.668349] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.672929] ? trace_hardirqs_on+0xbd/0x310 [ 2652.677249] ? kasan_check_read+0x11/0x20 [ 2652.681388] ? finish_task_switch+0x1f4/0x920 [ 2652.685918] ? trace_hardirqs_off_caller+0x300/0x300 [ 2652.691023] ? compat_start_thread+0x80/0x80 [ 2652.695448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.700994] ? _raw_spin_unlock_irq+0x60/0x80 [ 2652.705490] ? finish_task_switch+0x1f4/0x920 [ 2652.710010] ? finish_task_switch+0x1b4/0x920 [ 2652.714504] ? __switch_to_asm+0x34/0x70 [ 2652.718592] ? preempt_notifier_register+0x200/0x200 [ 2652.723676] ? __switch_to_asm+0x34/0x70 [ 2652.727747] ? __switch_to_asm+0x34/0x70 [ 2652.731804] ? __switch_to_asm+0x34/0x70 [ 2652.735861] ? __switch_to_asm+0x40/0x70 [ 2652.739909] ? __switch_to_asm+0x34/0x70 [ 2652.743964] ? __switch_to_asm+0x40/0x70 [ 2652.748025] ? __switch_to_asm+0x34/0x70 [ 2652.752082] ? __switch_to_asm+0x34/0x70 [ 2652.756157] ? __switch_to_asm+0x34/0x70 [ 2652.760204] ? __switch_to_asm+0x40/0x70 [ 2652.764258] ? __switch_to_asm+0x34/0x70 [ 2652.768318] ? __switch_to_asm+0x40/0x70 [ 2652.772380] ? __schedule+0x8d7/0x21d0 [ 2652.776328] ? __sched_text_start+0x8/0x8 [ 2652.780546] ? check_preemption_disabled+0x48/0x280 [ 2652.785568] ? find_held_lock+0x36/0x1c0 [ 2652.789626] ? try_to_wake_up+0x11c/0x1490 [ 2652.793852] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2652.798938] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2652.804050] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.808613] ? preempt_schedule+0x4d/0x60 [ 2652.812761] ? preempt_schedule_common+0x1f/0xe0 [ 2652.817517] ? preempt_schedule+0x4d/0x60 [ 2652.821691] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 2652.826818] ? try_to_wake_up+0x11c/0x1490 [ 2652.831058] ? migrate_swap_stop+0x8a0/0x8a0 [ 2652.835479] ? find_held_lock+0x36/0x1c0 [ 2652.839533] ? futex_wake+0x613/0x760 [ 2652.843321] ? lock_downgrade+0x900/0x900 [ 2652.847484] ? kasan_check_read+0x11/0x20 [ 2652.851646] ? do_raw_spin_trylock+0x270/0x270 [ 2652.856254] ? print_usage_bug+0xc0/0xc0 [ 2652.860298] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2652.865489] ? futex_wake+0x304/0x760 [ 2652.869277] ? __lock_acquire+0x62f/0x4c20 [ 2652.873537] ? find_held_lock+0x36/0x1c0 [ 2652.877604] ? mark_held_locks+0x130/0x130 [ 2652.881821] ? do_futex+0x249/0x26d0 [ 2652.885517] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2652.890780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.896330] ? check_preemption_disabled+0x48/0x280 [ 2652.901361] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.906881] ? check_preemption_disabled+0x48/0x280 [ 2652.911880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2652.917402] ? debug_smp_processor_id+0x1c/0x20 [ 2652.922076] ? perf_trace_lock+0x14d/0x7a0 [ 2652.926341] ? debug_smp_processor_id+0x1c/0x20 [ 2652.930993] ? perf_trace_lock_acquire+0x15b/0x800 [ 2652.935908] ? lock_is_held_type+0x210/0x210 [ 2652.940325] ? graph_lock+0x270/0x270 [ 2652.944128] ? graph_lock+0x270/0x270 [ 2652.947983] ? save_stack+0xa9/0xd0 [ 2652.951609] ? find_held_lock+0x36/0x1c0 [ 2652.955714] _do_fork+0x1cb/0x11c0 [ 2652.959242] ? fork_idle+0x1d0/0x1d0 [ 2652.962979] ? kasan_check_read+0x11/0x20 [ 2652.967120] ? _copy_to_user+0xc8/0x110 [ 2652.971093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2652.976625] ? put_timespec64+0x10f/0x1b0 [ 2652.980756] ? nsecs_to_jiffies+0x30/0x30 [ 2652.984901] ? do_syscall_64+0x9a/0x820 [ 2652.988875] ? do_syscall_64+0x9a/0x820 [ 2652.992839] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2652.997408] ? trace_hardirqs_on+0xbd/0x310 [ 2653.001716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2653.007236] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.012594] ? trace_hardirqs_off_caller+0x300/0x300 [ 2653.017692] __x64_sys_clone+0xbf/0x150 [ 2653.021673] do_syscall_64+0x1b9/0x820 [ 2653.025564] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2653.030909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2653.035822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2653.040670] ? trace_hardirqs_on_caller+0x310/0x310 [ 2653.045694] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2653.050712] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2653.055727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2653.060569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2653.065780] RIP: 0033:0x457569 [ 2653.068974] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2653.087871] RSP: 002b:00007f31d95c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2653.095566] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 2653.102829] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2653.110102] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2653.117364] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007f31d95c36d4 [ 2653.124612] R13: 00000000004bdaa6 R14: 00000000004cce30 R15: 00000000ffffffff [ 2653.135008] Task in /syz3 killed as a result of limit of /syz3 [ 2653.141762] memory: usage 307200kB, limit 307200kB, failcnt 1140 [ 2653.148177] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2653.158311] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2653.164670] Memory cgroup stats for /syz3: cache:1052KB rss:258516KB rss_huge:241664KB shmem:816KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:732KB active_anon:258624KB inactive_file:192KB active_file:68KB unevictable:24KB 11:08:01 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:01 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x2a9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 11:08:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) [ 2653.272478] Memory cgroup out of memory: Kill process 29809 (syz-executor3) score 123 or sacrifice child [ 2653.298146] Killed process 29809 (syz-executor3) total-vm:70336kB, anon-rss:4244kB, file-rss:33648kB, shmem-rss:0kB [ 2653.333219] oom_reaper: reaped process 29809 (syz-executor3), now anon-rss:0kB, file-rss:32816kB, shmem-rss:0kB 11:08:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) 11:08:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) 11:08:02 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r1, 0x0) 11:08:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r2, 0x5}) 11:08:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:02 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00'}) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000002600)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000002640)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000024c0), 0x100032, &(0x7f0000000500)={[{@init_itable='init_itable'}, {@commit={'commit'}}]}) 11:08:02 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x2a9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 11:08:02 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de0006000000000000000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000df25"], 0x1}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x6000, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:08:02 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000000)={0x81}) 11:08:02 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:02 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x8, 0xc0c, 0x1f}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f00000003c0)={0x1}, 0x8, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='lovmnet0,-\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file1/file0\x00') socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001400)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) 11:08:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 11:08:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x4000000001, &(0x7f0000000040)=0x5) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000580)) ppoll(&(0x7f00000004c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r0, r3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 11:08:03 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffff0023, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000540)) socketpair$inet6_udp(0xa, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x11}, 0x0) 11:08:03 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:08:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 11:08:03 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffff0023, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000540)) socketpair$inet6_udp(0xa, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x11}, 0x0) [ 2654.606497] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2654.666461] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2654.684818] CPU: 1 PID: 5801 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2654.693318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2654.702662] Call Trace: [ 2654.705265] dump_stack+0x244/0x39d [ 2654.708893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2654.714089] dump_header+0x27b/0xf72 [ 2654.717831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.723371] ? check_preemption_disabled+0x48/0x280 [ 2654.728383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.734086] ? pagefault_out_of_memory+0x197/0x197 [ 2654.739024] ? debug_smp_processor_id+0x1c/0x20 [ 2654.743740] ? perf_trace_lock+0x14d/0x7a0 [ 2654.748001] ? debug_smp_processor_id+0x1c/0x20 [ 2654.752674] ? perf_trace_lock_acquire+0x15b/0x800 [ 2654.757635] ? lock_is_held_type+0x210/0x210 [ 2654.762045] ? perf_trace_lock+0x7a0/0x7a0 [ 2654.766286] ? debug_smp_processor_id+0x1c/0x20 [ 2654.770959] ? perf_trace_lock+0x14d/0x7a0 [ 2654.775191] ? graph_lock+0x270/0x270 [ 2654.779018] ? print_usage_bug+0xc0/0xc0 [ 2654.783105] ? lock_is_held_type+0x210/0x210 [ 2654.787514] ? perf_trace_lock+0x7a0/0x7a0 [ 2654.791758] ? find_held_lock+0x36/0x1c0 [ 2654.795829] ? mark_held_locks+0xc7/0x130 [ 2654.799980] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2654.805100] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2654.810202] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2654.814782] ? trace_hardirqs_on+0xbd/0x310 [ 2654.819130] ? kasan_check_read+0x11/0x20 [ 2654.823272] ? ___ratelimit+0x3b4/0x672 [ 2654.827243] ? trace_hardirqs_off_caller+0x300/0x300 [ 2654.832346] ? trace_hardirqs_on+0x310/0x310 [ 2654.836749] ? lock_downgrade+0x900/0x900 [ 2654.840916] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2654.846032] ? ___ratelimit+0x3b9/0x672 [ 2654.850051] ? idr_get_free+0xf70/0xf70 [ 2654.854047] ? _raw_spin_unlock_irq+0x27/0x80 [ 2654.858545] ? _raw_spin_unlock_irq+0x27/0x80 [ 2654.863049] oom_kill_process.cold.27+0x10/0x903 [ 2654.867824] ? _raw_spin_unlock_irq+0x27/0x80 [ 2654.872318] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2654.876907] ? oom_evaluate_task+0x540/0x540 [ 2654.881328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2654.886871] ? cgroup_procs_next+0x70/0x70 [ 2654.891112] ? _raw_spin_unlock_irq+0x60/0x80 [ 2654.895636] ? oom_badness+0xaa0/0xaa0 [ 2654.899580] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2654.904349] ? mem_cgroup_iter_break+0x30/0x30 [ 2654.908947] ? mark_held_locks+0xc7/0x130 [ 2654.913103] out_of_memory+0xa7f/0x1430 [ 2654.917104] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2654.921701] ? kasan_check_read+0x11/0x20 [ 2654.925871] ? oom_killer_disable+0x3a0/0x3a0 [ 2654.930404] mem_cgroup_out_of_memory+0x15e/0x210 [ 2654.935252] ? memory_oom_group_write+0x160/0x160 [ 2654.940125] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2654.944980] ? page_counter_try_charge+0x1c1/0x220 [ 2654.949916] try_charge+0xdcd/0x1720 [ 2654.953639] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2654.958309] ? kasan_check_read+0x11/0x20 [ 2654.962460] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2654.967768] ? rcu_read_unlock_special+0x370/0x370 [ 2654.972754] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2654.978303] ? __lock_acquire+0x62f/0x4c20 [ 2654.982554] ? lock_page_memcg+0x350/0x350 [ 2654.986789] ? lock_acquire+0x1ed/0x520 [ 2654.990780] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2654.996145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.001690] ? check_preemption_disabled+0x48/0x280 [ 2655.006737] memcg_kmem_charge_memcg+0x7c/0x120 [ 2655.011405] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2655.015899] ? mark_held_locks+0x130/0x130 [ 2655.020152] memcg_kmem_charge+0x149/0x350 [ 2655.024398] __alloc_pages_nodemask+0x89c/0xdd0 [ 2655.029077] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2655.034093] ? perf_trace_lock_acquire+0x15b/0x800 [ 2655.039044] ? lock_is_held_type+0x210/0x210 [ 2655.043550] ? perf_trace_lock+0x7a0/0x7a0 [ 2655.047806] ? print_usage_bug+0xc0/0xc0 [ 2655.051879] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2655.057426] alloc_pages_current+0x173/0x350 [ 2655.061854] __pmd_alloc+0x3e/0x450 [ 2655.065487] copy_page_range+0x1f6c/0x2ee0 [ 2655.069804] ? mark_held_locks+0x130/0x130 [ 2655.074040] ? rcu_softirq_qs+0x20/0x20 [ 2655.078026] ? unwind_dump+0x190/0x190 [ 2655.081951] ? __pmd_alloc+0x450/0x450 [ 2655.085851] ? __rb_insert_augmented+0x3b2/0x1890 [ 2655.090718] ? lock_is_held_type+0x210/0x210 [ 2655.095136] ? rb_insert_color_cached+0x14b0/0x14b0 [ 2655.100215] ? save_stack+0xa9/0xd0 [ 2655.103879] ? graph_lock+0x270/0x270 [ 2655.107689] ? kasan_kmalloc+0xc7/0xe0 [ 2655.111574] ? kasan_slab_alloc+0x12/0x20 [ 2655.115725] ? kmem_cache_alloc+0x12e/0x730 [ 2655.120062] ? graph_lock+0x270/0x270 [ 2655.123870] ? __x64_sys_clone+0xbf/0x150 [ 2655.128020] ? do_syscall_64+0x1b9/0x820 [ 2655.132100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.137496] ? find_held_lock+0x36/0x1c0 [ 2655.141572] ? anon_vma_fork+0x5ef/0x820 [ 2655.145638] ? lock_downgrade+0x900/0x900 [ 2655.149796] ? lock_release+0xa10/0xa10 [ 2655.153776] ? perf_trace_sched_process_exec+0x860/0x860 [ 2655.159264] ? __lock_is_held+0xb5/0x140 [ 2655.163338] ? up_write+0x7b/0x220 [ 2655.166894] ? down_write_nested+0x130/0x130 [ 2655.171325] ? anon_vma_interval_tree_insert+0x2c9/0x370 [ 2655.176795] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2655.181813] ? vma_compute_subtree_gap+0x160/0x240 [ 2655.186751] ? validate_mm_rb+0xaa/0xc0 [ 2655.190755] ? __vma_link_rb+0x26c/0x370 [ 2655.194836] copy_process+0x45ea/0x8790 [ 2655.198874] ? __cleanup_sighand+0x70/0x70 [ 2655.203114] ? trace_hardirqs_on+0xbd/0x310 [ 2655.207480] ? finish_task_switch+0x1f4/0x920 [ 2655.211983] ? trace_hardirqs_off_caller+0x300/0x300 [ 2655.217115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.222664] ? _raw_spin_unlock_irq+0x60/0x80 [ 2655.227175] ? finish_task_switch+0x1b4/0x920 [ 2655.231703] ? __switch_to_asm+0x34/0x70 [ 2655.235776] ? __switch_to_asm+0x34/0x70 [ 2655.239845] ? __switch_to_asm+0x34/0x70 [ 2655.243909] ? __switch_to_asm+0x40/0x70 [ 2655.247974] ? __switch_to_asm+0x34/0x70 [ 2655.252040] ? __switch_to_asm+0x40/0x70 [ 2655.256122] ? __switch_to_asm+0x34/0x70 [ 2655.260210] ? __switch_to_asm+0x34/0x70 [ 2655.264304] ? __switch_to_asm+0x34/0x70 [ 2655.268367] ? __switch_to_asm+0x40/0x70 [ 2655.272430] ? __switch_to_asm+0x34/0x70 [ 2655.276500] ? __switch_to_asm+0x40/0x70 [ 2655.280595] ? __switch_to_asm+0x34/0x70 [ 2655.284712] ? __sched_text_start+0x8/0x8 [ 2655.288911] ? graph_lock+0x270/0x270 [ 2655.292737] ? graph_lock+0x270/0x270 [ 2655.296551] ? check_preemption_disabled+0x48/0x280 [ 2655.301588] ? find_held_lock+0x36/0x1c0 [ 2655.305677] ? perf_trace_sched_process_exec+0x860/0x860 [ 2655.311137] ? do_raw_spin_unlock+0xa7/0x330 [ 2655.315547] ? do_raw_spin_trylock+0x270/0x270 [ 2655.320149] ? lock_acquire+0x1ed/0x520 [ 2655.324172] ? __might_sleep+0x95/0x190 [ 2655.328168] ? futex_wait_queue_me+0x55d/0x840 [ 2655.332752] ? refill_pi_state_cache.part.7+0x310/0x310 [ 2655.338131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.343690] ? get_futex_value_locked+0xcb/0xf0 [ 2655.348364] ? futex_wait_setup+0x266/0x3e0 [ 2655.352702] ? futex_wake+0x760/0x760 [ 2655.356523] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2655.361759] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 2655.366887] ? futex_wait+0x5ec/0xa50 [ 2655.370721] ? print_usage_bug+0xc0/0xc0 [ 2655.374784] ? futex_wait_setup+0x3e0/0x3e0 [ 2655.379125] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2655.384329] ? futex_wake+0x304/0x760 [ 2655.388163] ? __lock_acquire+0x62f/0x4c20 [ 2655.392423] ? mark_held_locks+0x130/0x130 [ 2655.396659] ? do_futex+0x249/0x26d0 [ 2655.400412] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2655.405733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.411278] ? check_preemption_disabled+0x48/0x280 [ 2655.416315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.421854] ? check_preemption_disabled+0x48/0x280 [ 2655.426876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.432421] ? debug_smp_processor_id+0x1c/0x20 [ 2655.437089] ? perf_trace_lock+0x14d/0x7a0 [ 2655.441358] ? debug_smp_processor_id+0x1c/0x20 [ 2655.446044] ? perf_trace_lock_acquire+0x15b/0x800 [ 2655.450992] ? lock_is_held_type+0x210/0x210 [ 2655.455427] ? graph_lock+0x270/0x270 [ 2655.459265] ? graph_lock+0x270/0x270 [ 2655.463075] ? save_stack+0xa9/0xd0 [ 2655.466747] ? find_held_lock+0x36/0x1c0 [ 2655.470824] _do_fork+0x1cb/0x11c0 [ 2655.474397] ? fork_idle+0x1d0/0x1d0 [ 2655.478138] ? kasan_check_read+0x11/0x20 [ 2655.482301] ? _copy_to_user+0xc8/0x110 [ 2655.486274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2655.491821] ? put_timespec64+0x10f/0x1b0 [ 2655.495964] ? nsecs_to_jiffies+0x30/0x30 [ 2655.500123] ? do_syscall_64+0x9a/0x820 [ 2655.504104] ? do_syscall_64+0x9a/0x820 [ 2655.508123] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2655.512734] ? trace_hardirqs_on+0xbd/0x310 [ 2655.517065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.522604] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.527964] ? trace_hardirqs_off_caller+0x300/0x300 [ 2655.533089] __x64_sys_clone+0xbf/0x150 [ 2655.537093] do_syscall_64+0x1b9/0x820 [ 2655.541034] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2655.546428] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2655.551355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2655.556196] ? trace_hardirqs_on_caller+0x310/0x310 [ 2655.561211] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2655.566225] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2655.571258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2655.576107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2655.581289] RIP: 0033:0x457569 [ 2655.584486] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2655.603398] RSP: 002b:00007fe717020c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2655.611107] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 [ 2655.618379] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 2655.625647] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2655.633380] R10: 00000000200000c0 R11: 0000000000000246 R12: 00007fe7170216d4 [ 2655.640648] R13: 00000000004bdaa6 R14: 00000000004cce30 R15: 00000000ffffffff [ 2655.672045] Task in /syz2 killed as a result of limit of /syz2 [ 2655.678733] memory: usage 307200kB, limit 307200kB, failcnt 7671 [ 2655.696209] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2655.703256] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2655.709420] Memory cgroup stats for /syz2: cache:64KB rss:262164KB rss_huge:241664KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:262248KB inactive_file:0KB active_file:0KB unevictable:12KB [ 2655.730912] Memory cgroup out of memory: Kill process 21234 (syz-executor2) score 123 or sacrifice child [ 2655.740811] Killed process 21234 (syz-executor2) total-vm:70732kB, anon-rss:4284kB, file-rss:33556kB, shmem-rss:0kB [ 2655.753062] oom_reaper: reaped process 21234 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 2655.755211] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2655.774514] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2655.779650] CPU: 0 PID: 5809 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2655.788145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2655.797497] Call Trace: [ 2655.800095] dump_stack+0x244/0x39d [ 2655.803744] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2655.808976] ? mark_held_locks+0x130/0x130 [ 2655.813234] ? mark_held_locks+0x130/0x130 [ 2655.817490] dump_header+0x27b/0xf72 [ 2655.821231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.826785] ? check_preemption_disabled+0x48/0x280 [ 2655.831824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.837404] ? pagefault_out_of_memory+0x197/0x197 [ 2655.842355] ? debug_smp_processor_id+0x1c/0x20 [ 2655.847047] ? perf_trace_lock+0x14d/0x7a0 [ 2655.851320] ? debug_smp_processor_id+0x1c/0x20 [ 2655.856011] ? perf_trace_lock_acquire+0x15b/0x800 [ 2655.860981] ? lock_is_held_type+0x210/0x210 [ 2655.865414] ? perf_trace_lock+0x7a0/0x7a0 [ 2655.869702] ? debug_smp_processor_id+0x1c/0x20 [ 2655.874421] ? perf_trace_lock+0x14d/0x7a0 [ 2655.878673] ? graph_lock+0x270/0x270 [ 2655.882516] ? print_usage_bug+0xc0/0xc0 [ 2655.886649] ? lock_is_held_type+0x210/0x210 [ 2655.891114] ? find_held_lock+0x36/0x1c0 [ 2655.895210] ? mark_held_locks+0xc7/0x130 [ 2655.899386] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2655.904551] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2655.909680] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2655.914308] ? trace_hardirqs_on+0xbd/0x310 [ 2655.918655] ? kasan_check_read+0x11/0x20 [ 2655.922849] ? ___ratelimit+0x3b4/0x672 [ 2655.926853] ? trace_hardirqs_off_caller+0x300/0x300 [ 2655.931990] ? trace_hardirqs_on+0x310/0x310 [ 2655.936421] ? lock_downgrade+0x900/0x900 [ 2655.940601] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2655.945743] ? ___ratelimit+0x3b9/0x672 [ 2655.949754] ? idr_get_free+0xf70/0xf70 [ 2655.953755] ? _raw_spin_unlock_irq+0x27/0x80 [ 2655.958275] ? _raw_spin_unlock_irq+0x27/0x80 [ 2655.962802] oom_kill_process.cold.27+0x10/0x903 [ 2655.967585] ? _raw_spin_unlock_irq+0x27/0x80 [ 2655.972124] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2655.976756] ? oom_evaluate_task+0x540/0x540 [ 2655.981185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2655.986757] ? cgroup_procs_next+0x70/0x70 [ 2655.991021] ? _raw_spin_unlock_irq+0x60/0x80 [ 2655.995543] ? oom_badness+0xaa0/0xaa0 [ 2655.999454] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2656.004240] ? mem_cgroup_iter_break+0x30/0x30 [ 2656.008855] ? mark_held_locks+0xc7/0x130 [ 2656.013029] out_of_memory+0xa7f/0x1430 [ 2656.017026] ? lockdep_hardirqs_on+0x3bb/0x5b0 11:08:04 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x2a9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 11:08:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 11:08:04 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffff0023, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000540)) socketpair$inet6_udp(0xa, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x11}, 0x0) 11:08:04 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2656.021631] ? kasan_check_read+0x11/0x20 [ 2656.025806] ? oom_killer_disable+0x3a0/0x3a0 [ 2656.030344] mem_cgroup_out_of_memory+0x15e/0x210 [ 2656.035217] ? memory_oom_group_write+0x160/0x160 [ 2656.040078] ? mem_cgroup_try_charge+0x627/0xe20 [ 2656.044864] ? page_counter_try_charge+0x1c1/0x220 [ 2656.049820] try_charge+0xdcd/0x1720 [ 2656.053565] ? kasan_check_read+0x11/0x20 [ 2656.057766] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2656.062471] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2656.068055] ? lock_page_memcg+0x350/0x350 [ 2656.072323] ? lock_acquire+0x1ed/0x520 [ 2656.076327] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2656.081738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.087302] ? check_preemption_disabled+0x48/0x280 [ 2656.092346] ? kasan_check_read+0x11/0x20 [ 2656.096512] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2656.101803] ? rcu_softirq_qs+0x20/0x20 [ 2656.105813] mem_cgroup_try_charge+0x627/0xe20 [ 2656.110419] ? mem_cgroup_protected+0xa60/0xa60 [ 2656.115131] ? wp_page_copy+0x187b/0x24f0 [ 2656.119299] ? lock_downgrade+0x900/0x900 [ 2656.123476] ? do_raw_spin_unlock+0xa7/0x330 [ 2656.127904] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2656.133467] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2656.138416] wp_page_copy+0x51d/0x24f0 [ 2656.142342] ? follow_pfn+0x2e0/0x2e0 [ 2656.146159] ? rb_next+0x140/0x140 [ 2656.149738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.155560] ? check_preemption_disabled+0x48/0x280 [ 2656.160587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.166150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.171722] ? check_preemption_disabled+0x48/0x280 [ 2656.176756] ? perf_trace_lock+0x14d/0x7a0 [ 2656.181012] ? debug_smp_processor_id+0x1c/0x20 [ 2656.185713] ? perf_trace_lock+0x14d/0x7a0 [ 2656.189969] ? lock_is_held_type+0x210/0x210 [ 2656.194463] ? lock_is_held_type+0x210/0x210 [ 2656.198938] ? graph_lock+0x270/0x270 [ 2656.202762] ? perf_iterate_sb+0x189/0xc60 [ 2656.207016] ? graph_lock+0x270/0x270 [ 2656.210830] ? mark_held_locks+0xc7/0x130 [ 2656.214996] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2656.219775] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2656.224373] ? retint_kernel+0x2d/0x2d [ 2656.228283] ? find_held_lock+0x36/0x1c0 [ 2656.232371] ? do_wp_page+0x518/0x2920 [ 2656.236276] ? lock_downgrade+0x900/0x900 [ 2656.240435] ? check_preemption_disabled+0x48/0x280 [ 2656.245468] ? print_usage_bug+0xc0/0xc0 [ 2656.249549] ? kasan_check_read+0x11/0x20 [ 2656.253723] ? do_raw_spin_unlock+0xa7/0x330 [ 2656.258148] ? do_raw_spin_trylock+0x270/0x270 [ 2656.262752] ? __pte_alloc_kernel+0x220/0x220 [ 2656.267280] do_wp_page+0x520/0x2920 [ 2656.271021] ? finish_mkwrite_fault+0x650/0x650 [ 2656.275735] ? mark_held_locks+0x130/0x130 [ 2656.280049] ? __lock_acquire+0x62f/0x4c20 [ 2656.284303] ? lock_is_held_type+0x210/0x210 [ 2656.288739] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.294291] ? check_preemption_disabled+0x48/0x280 [ 2656.299319] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.304890] ? mark_held_locks+0x130/0x130 [ 2656.309142] ? lock_is_held_type+0x210/0x210 [ 2656.313580] ? perf_trace_lock+0x7a0/0x7a0 [ 2656.317837] ? lock_is_held_type+0x210/0x210 [ 2656.322263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.327856] ? check_preemption_disabled+0x48/0x280 [ 2656.332887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.338456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.344006] ? check_preemption_disabled+0x48/0x280 [ 2656.349044] ? debug_smp_processor_id+0x1c/0x20 [ 2656.353745] ? debug_smp_processor_id+0x1c/0x20 [ 2656.358438] ? perf_trace_lock_acquire+0x15b/0x800 [ 2656.363383] ? lock_is_held_type+0x210/0x210 [ 2656.367826] ? print_usage_bug+0xc0/0xc0 [ 2656.371905] ? graph_lock+0x270/0x270 [ 2656.375733] ? print_usage_bug+0xc0/0xc0 [ 2656.379817] ? print_usage_bug+0xc0/0xc0 [ 2656.383915] ? __lock_acquire+0x62f/0x4c20 [ 2656.388170] ? lock_acquire+0x1ed/0x520 [ 2656.392162] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2656.396773] ? kasan_check_write+0x14/0x20 [ 2656.401021] ? do_raw_spin_lock+0x14f/0x350 [ 2656.405356] ? rwlock_bug.part.2+0x90/0x90 [ 2656.409626] ? mark_held_locks+0x130/0x130 [ 2656.413888] __handle_mm_fault+0x3be9/0x5be0 [ 2656.418322] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2656.423185] ? lock_is_held_type+0x210/0x210 [ 2656.427613] ? perf_trace_lock+0x7a0/0x7a0 [ 2656.431913] ? perf_trace_lock+0x7a0/0x7a0 [ 2656.436162] ? print_usage_bug+0xc0/0xc0 [ 2656.440253] ? graph_lock+0x270/0x270 [ 2656.444070] ? graph_lock+0x270/0x270 [ 2656.447895] ? find_held_lock+0x36/0x1c0 [ 2656.451991] ? handle_mm_fault+0x42a/0xc70 [ 2656.456241] ? lock_downgrade+0x900/0x900 [ 2656.460407] ? check_preemption_disabled+0x48/0x280 [ 2656.465443] ? kasan_check_read+0x11/0x20 [ 2656.469605] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2656.474907] ? rcu_read_unlock_special+0x370/0x370 [ 2656.479901] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2656.485500] ? check_preemption_disabled+0x48/0x280 [ 2656.490540] handle_mm_fault+0x54f/0xc70 [ 2656.494620] ? __handle_mm_fault+0x5be0/0x5be0 [ 2656.499491] ? find_vma+0x34/0x190 [ 2656.503054] __do_page_fault+0x5d6/0xe40 [ 2656.507149] do_page_fault+0xed/0x7d1 [ 2656.510975] ? vmalloc_sync_all+0x30/0x30 [ 2656.515141] ? error_entry+0x76/0xd0 [ 2656.518875] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2656.523908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2656.528769] ? trace_hardirqs_on_caller+0x310/0x310 [ 2656.533807] ? find_held_lock+0x36/0x1c0 [ 2656.537907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2656.542787] page_fault+0x1e/0x30 [ 2656.546254] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2656.552149] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2656.571061] RSP: 0018:ffff88012b3df888 EFLAGS: 00010206 [ 2656.576438] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 2656.583733] RDX: 0000000000001000 RSI: ffff880170390b00 RDI: 00000000203d1000 [ 2656.591033] RBP: ffff88012b3df8c0 R08: 0000000000000000 R09: 0000000000000040 [ 2656.598313] R10: ffffed002e0721ff R11: ffff880170390fff R12: 00000000203d1500 [ 2656.605595] R13: 00000000203d0500 R14: ffff880170390000 R15: 00007ffffffff000 [ 2656.612910] ? copyout+0xe4/0x100 [ 2656.616384] copy_page_to_iter+0x447/0x1000 [ 2656.620751] ? _copy_to_iter+0x1440/0x1440 [ 2656.624998] ? mutex_lock_nested+0x16/0x20 [ 2656.629243] ? mutex_lock_nested+0x16/0x20 [ 2656.633497] ? pipe_wait+0x1ff/0x2c0 [ 2656.637227] ? pipe_double_lock+0x210/0x210 [ 2656.641672] ? wakeup_pipe_writers+0x107/0x160 [ 2656.646289] ? finish_wait+0x430/0x430 [ 2656.650206] pipe_to_user+0xb4/0x170 [ 2656.653945] __splice_from_pipe+0x38b/0x7c0 [ 2656.658289] ? iter_to_pipe+0x800/0x800 [ 2656.662294] do_vmsplice.part.15+0x338/0x3d0 [ 2656.666736] ? do_tee+0x7c0/0x7c0 [ 2656.670217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.675778] __do_sys_vmsplice+0x251/0x2f0 [ 2656.680037] ? vmsplice_type.isra.17+0x150/0x150 [ 2656.684845] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2656.690394] ? put_timespec64+0x10f/0x1b0 [ 2656.694559] ? finish_task_switch+0x1f4/0x920 [ 2656.699074] ? nsecs_to_jiffies+0x30/0x30 [ 2656.703241] ? do_syscall_64+0x9a/0x820 [ 2656.707244] ? do_syscall_64+0x9a/0x820 [ 2656.711277] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2656.715877] ? trace_hardirqs_on+0xbd/0x310 [ 2656.720213] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2656.725766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.731145] ? trace_hardirqs_off_caller+0x300/0x300 [ 2656.736272] __x64_sys_vmsplice+0x97/0xf0 [ 2656.740441] do_syscall_64+0x1b9/0x820 [ 2656.744361] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2656.749749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2656.754712] ? trace_hardirqs_on_caller+0x310/0x310 [ 2656.759746] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2656.764780] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2656.771465] ? __switch_to_asm+0x40/0x70 [ 2656.775542] ? __switch_to_asm+0x34/0x70 [ 2656.779622] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2656.784490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2656.789711] RIP: 0033:0x457569 [ 2656.792921] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2656.811884] RSP: 002b:00007f2e89cf9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 2656.819605] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 11:08:05 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2656.826886] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 2656.834168] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2656.841445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89cfa6d4 [ 2656.848733] R13: 00000000004c5717 R14: 00000000004d9778 R15: 00000000ffffffff [ 2656.857568] sched: RT throttling activated 11:08:05 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:08:05 executing program 4: bind$alg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffff0023, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000540)) socketpair$inet6_udp(0xa, 0x2, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)}], 0x1, 0x0, 0x0, 0x11}, 0x0) [ 2657.467382] Task in /syz0 killed as a result of limit of /syz0 [ 2657.473523] memory: usage 307104kB, limit 307200kB, failcnt 3821 [ 2657.479703] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2657.486547] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2657.492749] Memory cgroup stats for /syz0: cache:1444KB rss:257156KB rss_huge:239616KB shmem:1176KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1224KB active_anon:257456KB inactive_file:0KB active_file:0KB unevictable:28KB 11:08:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:08:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f0000000100)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) 11:08:06 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x28002) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x4b, 0x200000000000002}], 0x96) 11:08:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x4000000001, &(0x7f0000000040)=0x5) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000580)) ppoll(&(0x7f00000004c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r0, r3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 11:08:06 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2657.514629] Memory cgroup out of memory: Kill process 5613 (syz-executor0) score 123 or sacrifice child [ 2657.524262] Killed process 5613 (syz-executor0) total-vm:70336kB, anon-rss:4252kB, file-rss:33664kB, shmem-rss:0kB [ 2657.542667] oom_reaper: reaped process 5613 (syz-executor0), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB 11:08:06 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x2a9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setpriority(0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) 11:08:06 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\a\x00vti0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x40}}, 0x0) 11:08:06 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) close(r0) 11:08:06 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2657.752499] validate_nla: 15 callbacks suppressed [ 2657.752508] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 2657.836854] syz-executor0 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2657.849234] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2657.854787] CPU: 1 PID: 5844 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2657.863310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2657.872676] Call Trace: [ 2657.875315] dump_stack+0x244/0x39d [ 2657.878980] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2657.884212] dump_header+0x27b/0xf72 [ 2657.887959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2657.893519] ? check_preemption_disabled+0x48/0x280 [ 2657.898560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2657.904126] ? pagefault_out_of_memory+0x197/0x197 [ 2657.909080] ? debug_smp_processor_id+0x1c/0x20 [ 2657.913773] ? perf_trace_lock+0x14d/0x7a0 [ 2657.918037] ? debug_smp_processor_id+0x1c/0x20 [ 2657.922746] ? perf_trace_lock_acquire+0x15b/0x800 [ 2657.927731] ? lock_is_held_type+0x210/0x210 [ 2657.932180] ? perf_trace_lock+0x7a0/0x7a0 [ 2657.936444] ? debug_smp_processor_id+0x1c/0x20 [ 2657.941148] ? perf_trace_lock+0x14d/0x7a0 [ 2657.942859] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2657.945407] ? graph_lock+0x270/0x270 [ 2657.945430] ? print_usage_bug+0xc0/0xc0 [ 2657.945448] ? lock_is_held_type+0x210/0x210 [ 2657.945474] ? perf_trace_lock+0x7a0/0x7a0 [ 2657.977078] ? find_held_lock+0x36/0x1c0 [ 2657.981178] ? mark_held_locks+0xc7/0x130 [ 2657.985382] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2657.990514] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2657.995645] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2658.000270] ? trace_hardirqs_on+0xbd/0x310 [ 2658.004621] ? kasan_check_read+0x11/0x20 [ 2658.008792] ? ___ratelimit+0x3b4/0x672 [ 2658.012800] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.017928] ? trace_hardirqs_on+0x310/0x310 [ 2658.022362] ? lock_downgrade+0x900/0x900 [ 2658.026546] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2658.031675] ? ___ratelimit+0x3b9/0x672 [ 2658.035722] ? idr_get_free+0xf70/0xf70 [ 2658.039742] ? _raw_spin_unlock_irq+0x27/0x80 [ 2658.044261] ? _raw_spin_unlock_irq+0x27/0x80 [ 2658.048793] oom_kill_process.cold.27+0x10/0x903 [ 2658.053579] ? _raw_spin_unlock_irq+0x27/0x80 [ 2658.058096] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2658.062736] ? oom_evaluate_task+0x540/0x540 [ 2658.067182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.072756] ? cgroup_procs_next+0x70/0x70 [ 2658.077014] ? _raw_spin_unlock_irq+0x60/0x80 [ 2658.081525] ? oom_badness+0xaa0/0xaa0 [ 2658.085430] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2658.090212] ? mem_cgroup_iter_break+0x30/0x30 [ 2658.094832] ? mark_held_locks+0xc7/0x130 [ 2658.099006] out_of_memory+0xa7f/0x1430 [ 2658.103009] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2658.107610] ? kasan_check_read+0x11/0x20 [ 2658.111783] ? oom_killer_disable+0x3a0/0x3a0 [ 2658.116323] mem_cgroup_out_of_memory+0x15e/0x210 [ 2658.121202] ? memory_oom_group_write+0x160/0x160 [ 2658.126059] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2658.130926] ? page_counter_try_charge+0x1c1/0x220 [ 2658.135876] try_charge+0xdcd/0x1720 [ 2658.139619] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2658.144341] ? kasan_check_read+0x11/0x20 [ 2658.148519] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2658.153817] ? rcu_read_unlock_special+0x370/0x370 [ 2658.158780] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2658.164357] ? debug_smp_processor_id+0x1c/0x20 [ 2658.169055] ? perf_trace_lock+0x14d/0x7a0 [ 2658.173318] ? lock_page_memcg+0x350/0x350 [ 2658.177586] ? lock_acquire+0x1ed/0x520 [ 2658.181587] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2658.186987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.192554] ? check_preemption_disabled+0x48/0x280 [ 2658.197607] memcg_kmem_charge_memcg+0x7c/0x120 [ 2658.202345] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2658.206875] memcg_kmem_charge+0x149/0x350 [ 2658.211137] __alloc_pages_nodemask+0x89c/0xdd0 [ 2658.215838] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2658.220889] ? perf_trace_sched_process_exec+0x860/0x860 [ 2658.226381] ? kasan_check_write+0x14/0x20 [ 2658.230642] ? copyin+0xb7/0x100 [ 2658.234064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2658.239103] ? copy_page_from_iter+0x541/0x8f0 [ 2658.243759] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2658.249342] alloc_pages_current+0x173/0x350 [ 2658.253786] pipe_write+0x910/0xec0 [ 2658.257463] __vfs_write+0x6b8/0x9f0 [ 2658.261209] ? kernel_read+0x120/0x120 [ 2658.265127] ? apparmor_path_rmdir+0x30/0x30 [ 2658.269558] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.274707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.280294] ? apparmor_file_permission+0x24/0x30 [ 2658.285181] ? rw_verify_area+0x118/0x360 [ 2658.289356] vfs_write+0x1fc/0x560 [ 2658.292928] ksys_write+0x101/0x260 [ 2658.296589] ? __ia32_sys_read+0xb0/0xb0 [ 2658.300681] ? trace_hardirqs_off_caller+0x300/0x300 [ 2658.305848] __x64_sys_write+0x73/0xb0 [ 2658.309766] do_syscall_64+0x1b9/0x820 [ 2658.313679] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2658.319094] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2658.324044] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2658.328913] ? trace_hardirqs_on_caller+0x310/0x310 [ 2658.333954] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2658.339001] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2658.344055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2658.348937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2658.354147] RIP: 0033:0x457569 [ 2658.357362] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2658.376285] RSP: 002b:00007f2e89d1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 11:08:06 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) 11:08:06 executing program 4: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local, 0x1}, 0x10) 11:08:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) [ 2658.384074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2658.391361] RDX: 00000000fffffef3 RSI: 00000000200001c0 RDI: 0000000000000005 [ 2658.398651] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2658.405957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89d1b6d4 [ 2658.413244] R13: 00000000004c2bb4 R14: 00000000004d97c0 R15: 00000000ffffffff [ 2658.422268] Task in /syz0 killed as a result of limit of /syz0 [ 2658.428276] memory: usage 307200kB, limit 307200kB, failcnt 3937 [ 2658.434651] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2658.441535] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2658.447713] Memory cgroup stats for /syz0: cache:1308KB rss:257564KB rss_huge:241664KB shmem:1176KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1224KB active_anon:257724KB inactive_file:0KB active_file:4KB unevictable:28KB [ 2658.469546] Memory cgroup out of memory: Kill process 5842 (syz-executor0) score 134 or sacrifice child [ 2658.479207] Killed process 5844 (syz-executor0) total-vm:70732kB, anon-rss:8372kB, file-rss:33628kB, shmem-rss:0kB 11:08:07 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x4000000001, &(0x7f0000000040)=0x5) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000580)) ppoll(&(0x7f00000004c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r0, r3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") [ 2658.494483] oom_reaper: reaped process 5852 (syz-executor0), now anon-rss:0kB, file-rss:32796kB, shmem-rss:0kB 11:08:07 executing program 4: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local, 0x1}, 0x10) [ 2658.561240] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 2658.593841] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. 11:08:07 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x200}]) 11:08:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\a\x00vti0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x40}}, 0x0) 11:08:07 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) 11:08:07 executing program 4: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local, 0x1}, 0x10) 11:08:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) [ 2658.850157] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 2658.878802] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2658.889810] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2658.893547] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 2658.895136] CPU: 1 PID: 5892 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2658.918635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2658.928007] Call Trace: [ 2658.930621] dump_stack+0x244/0x39d [ 2658.934273] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2658.939490] ? mark_held_locks+0x130/0x130 [ 2658.943747] ? mark_held_locks+0x130/0x130 [ 2658.948017] dump_header+0x27b/0xf72 [ 2658.951822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.957376] ? check_preemption_disabled+0x48/0x280 [ 2658.962412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2658.968032] ? pagefault_out_of_memory+0x197/0x197 [ 2658.972973] ? debug_smp_processor_id+0x1c/0x20 [ 2658.977673] ? perf_trace_lock+0x14d/0x7a0 [ 2658.981945] ? debug_smp_processor_id+0x1c/0x20 [ 2658.986630] ? perf_trace_lock_acquire+0x15b/0x800 [ 2658.991582] ? lock_is_held_type+0x210/0x210 [ 2658.996022] ? perf_trace_lock+0x7a0/0x7a0 [ 2659.000272] ? debug_smp_processor_id+0x1c/0x20 [ 2659.004953] ? perf_trace_lock+0x14d/0x7a0 [ 2659.009204] ? graph_lock+0x270/0x270 [ 2659.013021] ? print_usage_bug+0xc0/0xc0 [ 2659.017095] ? lock_is_held_type+0x210/0x210 [ 2659.021538] ? find_held_lock+0x36/0x1c0 [ 2659.025631] ? mark_held_locks+0xc7/0x130 [ 2659.029800] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2659.034923] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2659.040042] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2659.044645] ? trace_hardirqs_on+0xbd/0x310 [ 2659.048978] ? kasan_check_read+0x11/0x20 [ 2659.053142] ? ___ratelimit+0x3b4/0x672 [ 2659.057133] ? trace_hardirqs_off_caller+0x300/0x300 [ 2659.062269] ? trace_hardirqs_on+0x310/0x310 [ 2659.066709] ? lock_downgrade+0x900/0x900 [ 2659.070889] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2659.076006] ? ___ratelimit+0x3b9/0x672 [ 2659.079995] ? idr_get_free+0xf70/0xf70 [ 2659.083986] ? _raw_spin_unlock_irq+0x27/0x80 [ 2659.088501] ? _raw_spin_unlock_irq+0x27/0x80 [ 2659.093026] oom_kill_process.cold.27+0x10/0x903 [ 2659.097802] ? _raw_spin_unlock_irq+0x27/0x80 [ 2659.102312] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2659.106929] ? oom_evaluate_task+0x540/0x540 [ 2659.111400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.117006] ? cgroup_procs_next+0x70/0x70 [ 2659.121266] ? _raw_spin_unlock_irq+0x60/0x80 [ 2659.125776] ? oom_badness+0xaa0/0xaa0 [ 2659.129681] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2659.134479] ? mem_cgroup_iter_break+0x30/0x30 [ 2659.139143] ? mark_held_locks+0xc7/0x130 [ 2659.143312] out_of_memory+0xa7f/0x1430 [ 2659.147302] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2659.151904] ? kasan_check_read+0x11/0x20 [ 2659.156071] ? oom_killer_disable+0x3a0/0x3a0 [ 2659.160605] mem_cgroup_out_of_memory+0x15e/0x210 [ 2659.165477] ? memory_oom_group_write+0x160/0x160 [ 2659.170334] ? mem_cgroup_try_charge+0x627/0xe20 [ 2659.175115] ? page_counter_try_charge+0x1c1/0x220 [ 2659.180066] try_charge+0xdcd/0x1720 [ 2659.183801] ? kasan_check_read+0x11/0x20 [ 2659.187978] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2659.192672] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2659.198249] ? lock_page_memcg+0x350/0x350 [ 2659.202508] ? lock_acquire+0x1ed/0x520 [ 2659.206497] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2659.211877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.217482] ? check_preemption_disabled+0x48/0x280 [ 2659.222527] ? kasan_check_read+0x11/0x20 [ 2659.226707] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2659.231999] ? rcu_softirq_qs+0x20/0x20 [ 2659.236007] mem_cgroup_try_charge+0x627/0xe20 [ 2659.240671] ? mem_cgroup_protected+0xa60/0xa60 [ 2659.245404] ? wp_page_copy+0x187b/0x24f0 [ 2659.249572] ? lock_downgrade+0x900/0x900 [ 2659.253756] ? do_raw_spin_unlock+0xa7/0x330 [ 2659.258185] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2659.263772] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2659.268739] wp_page_copy+0x51d/0x24f0 [ 2659.272660] ? follow_pfn+0x2e0/0x2e0 [ 2659.276513] ? rb_next+0x140/0x140 [ 2659.280086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.285637] ? check_preemption_disabled+0x48/0x280 [ 2659.290674] ? debug_smp_processor_id+0x1c/0x20 [ 2659.295380] ? perf_trace_lock+0x14d/0x7a0 [ 2659.299639] ? lock_is_held_type+0x210/0x210 [ 2659.304078] ? graph_lock+0x270/0x270 [ 2659.307898] ? lock_unpin_lock+0x4a0/0x4a0 [ 2659.312180] ? find_held_lock+0x36/0x1c0 [ 2659.316268] ? do_wp_page+0x518/0x2920 [ 2659.320176] ? lock_downgrade+0x900/0x900 [ 2659.324340] ? check_preemption_disabled+0x48/0x280 [ 2659.329374] ? print_usage_bug+0xc0/0xc0 [ 2659.333454] ? kasan_check_read+0x11/0x20 [ 2659.337618] ? do_raw_spin_unlock+0xa7/0x330 [ 2659.342045] ? do_raw_spin_trylock+0x270/0x270 [ 2659.346645] ? __pte_alloc_kernel+0x220/0x220 [ 2659.351159] ? __update_load_avg_se+0x5eb/0xae0 [ 2659.355857] do_wp_page+0x520/0x2920 [ 2659.359598] ? finish_mkwrite_fault+0x650/0x650 [ 2659.364298] ? mark_held_locks+0x130/0x130 [ 2659.368567] ? __lock_acquire+0x62f/0x4c20 [ 2659.372815] ? lock_is_held_type+0x210/0x210 [ 2659.377247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.382802] ? check_preemption_disabled+0x48/0x280 [ 2659.387831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.393402] ? mark_held_locks+0x130/0x130 [ 2659.397651] ? lock_is_held_type+0x210/0x210 [ 2659.402092] ? perf_trace_lock+0x7a0/0x7a0 [ 2659.406349] ? lock_is_held_type+0x210/0x210 [ 2659.410776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.416327] ? check_preemption_disabled+0x48/0x280 [ 2659.421355] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.426909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.432464] ? check_preemption_disabled+0x48/0x280 [ 2659.437496] ? debug_smp_processor_id+0x1c/0x20 [ 2659.442188] ? debug_smp_processor_id+0x1c/0x20 [ 2659.446875] ? perf_trace_lock_acquire+0x15b/0x800 [ 2659.451821] ? lock_is_held_type+0x210/0x210 [ 2659.456345] ? print_usage_bug+0xc0/0xc0 [ 2659.460417] ? graph_lock+0x270/0x270 [ 2659.464236] ? print_usage_bug+0xc0/0xc0 [ 2659.468318] ? print_usage_bug+0xc0/0xc0 [ 2659.472417] ? __lock_acquire+0x62f/0x4c20 [ 2659.476677] ? lock_acquire+0x1ed/0x520 [ 2659.480703] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2659.485328] ? kasan_check_write+0x14/0x20 [ 2659.489595] ? do_raw_spin_lock+0x14f/0x350 [ 2659.493937] ? rwlock_bug.part.2+0x90/0x90 [ 2659.498193] ? mark_held_locks+0x130/0x130 [ 2659.502461] __handle_mm_fault+0x3be9/0x5be0 [ 2659.506898] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2659.511759] ? lock_is_held_type+0x210/0x210 [ 2659.516186] ? perf_trace_lock+0x7a0/0x7a0 [ 2659.520437] ? perf_trace_lock+0x7a0/0x7a0 [ 2659.524710] ? print_usage_bug+0xc0/0xc0 [ 2659.528807] ? graph_lock+0x270/0x270 [ 2659.532621] ? graph_lock+0x270/0x270 [ 2659.536445] ? find_held_lock+0x36/0x1c0 [ 2659.540621] ? handle_mm_fault+0x42a/0xc70 [ 2659.544929] ? lock_downgrade+0x900/0x900 [ 2659.549095] ? check_preemption_disabled+0x48/0x280 [ 2659.554134] ? kasan_check_read+0x11/0x20 [ 2659.558296] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2659.563606] ? rcu_read_unlock_special+0x370/0x370 [ 2659.568553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2659.574107] ? check_preemption_disabled+0x48/0x280 [ 2659.579153] handle_mm_fault+0x54f/0xc70 [ 2659.583235] ? __handle_mm_fault+0x5be0/0x5be0 [ 2659.587840] ? find_vma+0x34/0x190 [ 2659.591403] __do_page_fault+0x5d6/0xe40 [ 2659.595500] do_page_fault+0xed/0x7d1 [ 2659.599316] ? vmalloc_sync_all+0x30/0x30 [ 2659.603485] ? error_entry+0x76/0xd0 [ 2659.607230] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2659.612390] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2659.617337] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2659.622197] ? trace_hardirqs_on_caller+0x310/0x310 [ 2659.627227] ? find_held_lock+0x36/0x1c0 [ 2659.631873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2659.636753] page_fault+0x1e/0x30 [ 2659.640224] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2659.646124] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2659.665050] RSP: 0018:ffff880120c57888 EFLAGS: 00010206 [ 2659.670429] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500 [ 2659.677731] RDX: 0000000000001000 RSI: ffff8801c10a1b00 RDI: 0000000020822000 [ 2659.685017] RBP: ffff880120c578c0 R08: 0000000000000000 R09: 0000000000000040 [ 2659.692302] R10: ffffed00382143ff R11: ffff8801c10a1fff R12: 0000000020822500 [ 2659.699581] R13: 0000000020821500 R14: ffff8801c10a1000 R15: 00007ffffffff000 [ 2659.706894] ? copyout+0xe4/0x100 [ 2659.710371] copy_page_to_iter+0x447/0x1000 [ 2659.714738] ? _copy_to_iter+0x1440/0x1440 [ 2659.718992] ? generic_pipe_buf_steal+0x3d0/0x3d0 [ 2659.723849] ? mutex_lock_nested+0x16/0x20 [ 2659.728100] ? pipe_wait+0x1ff/0x2c0 [ 2659.731835] ? pipe_double_lock+0x210/0x210 [ 2659.736166] ? wakeup_pipe_writers+0x107/0x160 [ 2659.740765] ? finish_wait+0x430/0x430 [ 2659.744704] pipe_to_user+0xb4/0x170 [ 2659.748443] __splice_from_pipe+0x38b/0x7c0 [ 2659.752785] ? iter_to_pipe+0x800/0x800 [ 2659.756789] do_vmsplice.part.15+0x338/0x3d0 [ 2659.761213] ? do_tee+0x7c0/0x7c0 [ 2659.764709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.770267] __do_sys_vmsplice+0x251/0x2f0 [ 2659.774520] ? vmsplice_type.isra.17+0x150/0x150 [ 2659.779318] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2659.784870] ? put_timespec64+0x10f/0x1b0 [ 2659.789036] ? finish_task_switch+0x1f4/0x920 [ 2659.793546] ? nsecs_to_jiffies+0x30/0x30 [ 2659.797727] ? do_syscall_64+0x9a/0x820 [ 2659.801731] ? do_syscall_64+0x9a/0x820 [ 2659.805740] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2659.810355] ? trace_hardirqs_on+0xbd/0x310 [ 2659.814706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2659.820260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.825639] ? trace_hardirqs_off_caller+0x300/0x300 [ 2659.830769] __x64_sys_vmsplice+0x97/0xf0 [ 2659.834936] do_syscall_64+0x1b9/0x820 [ 2659.838839] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2659.844273] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2659.849227] ? trace_hardirqs_on_caller+0x310/0x310 [ 2659.854308] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2659.859340] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2659.866037] ? __switch_to_asm+0x40/0x70 [ 2659.870106] ? __switch_to_asm+0x34/0x70 [ 2659.874233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2659.879100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2659.884303] RIP: 0033:0x457569 [ 2659.887512] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2659.906424] RSP: 002b:00007f2e89cf9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 2659.914151] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2659.921432] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004 [ 2659.928775] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2659.936054] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89cfa6d4 [ 2659.943332] R13: 00000000004c5717 R14: 00000000004d9778 R15: 00000000ffffffff 11:08:08 executing program 4: r0 = socket$inet(0x2, 0x200000001, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @local, 0x1}, 0x10) [ 2659.951517] Task in /syz0 killed as a result of limit of /syz0 [ 2659.957552] memory: usage 307200kB, limit 307200kB, failcnt 4216 [ 2659.963794] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.970560] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2659.977116] Memory cgroup stats for /syz0: cache:1308KB rss:257524KB rss_huge:241664KB shmem:1176KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1224KB active_anon:257668KB inactive_file:4KB active_file:0KB unevictable:28KB 11:08:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\a\x00vti0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x40}}, 0x0) [ 2659.998953] Memory cgroup out of memory: Kill process 5879 (syz-executor0) score 134 or sacrifice child [ 2660.008636] Killed process 5884 (syz-executor0) total-vm:70732kB, anon-rss:8372kB, file-rss:33624kB, shmem-rss:0kB 11:08:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) 11:08:08 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x4000000001, &(0x7f0000000040)=0x5) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000580)) ppoll(&(0x7f00000004c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r0, r3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 11:08:08 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) [ 2660.200498] netlink: 'syz-executor3': attribute type 4 has an invalid length. 11:08:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cf4db2ab", 0x4) [ 2660.238039] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. 11:08:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\a\x00vti0\x00'}, @IFLA_ADDRESS={0xc, 0x1, @dev}]}, 0x40}}, 0x0) [ 2660.405520] syz-executor0 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2660.417990] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2660.423222] CPU: 0 PID: 5914 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2660.431742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2660.441112] Call Trace: [ 2660.443749] dump_stack+0x244/0x39d [ 2660.447414] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2660.452644] dump_header+0x27b/0xf72 [ 2660.456416] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.461984] ? check_preemption_disabled+0x48/0x280 [ 2660.467049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.472626] ? pagefault_out_of_memory+0x197/0x197 [ 2660.477578] ? debug_smp_processor_id+0x1c/0x20 [ 2660.482281] ? perf_trace_lock+0x14d/0x7a0 [ 2660.486565] ? debug_smp_processor_id+0x1c/0x20 [ 2660.491261] ? perf_trace_lock_acquire+0x15b/0x800 [ 2660.496223] ? lock_is_held_type+0x210/0x210 [ 2660.500895] ? perf_trace_lock+0x7a0/0x7a0 [ 2660.505158] ? debug_smp_processor_id+0x1c/0x20 [ 2660.509851] ? perf_trace_lock+0x14d/0x7a0 [ 2660.514110] ? graph_lock+0x270/0x270 [ 2660.517943] ? print_usage_bug+0xc0/0xc0 [ 2660.522042] ? lock_is_held_type+0x210/0x210 [ 2660.526478] ? perf_trace_lock+0x7a0/0x7a0 [ 2660.530773] ? find_held_lock+0x36/0x1c0 [ 2660.534876] ? mark_held_locks+0xc7/0x130 [ 2660.539062] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2660.544188] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2660.549316] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2660.553928] ? trace_hardirqs_on+0xbd/0x310 [ 2660.558280] ? kasan_check_read+0x11/0x20 [ 2660.562465] ? ___ratelimit+0x3b4/0x672 [ 2660.566470] ? trace_hardirqs_off_caller+0x300/0x300 [ 2660.571600] ? trace_hardirqs_on+0x310/0x310 [ 2660.576036] ? lock_downgrade+0x900/0x900 [ 2660.580211] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2660.585331] ? ___ratelimit+0x3b9/0x672 [ 2660.589327] ? idr_get_free+0xf70/0xf70 [ 2660.593314] ? _raw_spin_unlock_irq+0x27/0x80 [ 2660.597852] ? _raw_spin_unlock_irq+0x27/0x80 [ 2660.602393] oom_kill_process.cold.27+0x10/0x903 [ 2660.607171] ? _raw_spin_unlock_irq+0x27/0x80 [ 2660.611702] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2660.616313] ? oom_evaluate_task+0x540/0x540 [ 2660.620749] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.626310] ? cgroup_procs_next+0x70/0x70 [ 2660.630577] ? _raw_spin_unlock_irq+0x60/0x80 [ 2660.635092] ? oom_badness+0xaa0/0xaa0 [ 2660.639000] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2660.643776] ? mem_cgroup_iter_break+0x30/0x30 [ 2660.648392] ? mark_held_locks+0xc7/0x130 [ 2660.652561] out_of_memory+0xa7f/0x1430 [ 2660.656548] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2660.661149] ? kasan_check_read+0x11/0x20 [ 2660.665331] ? oom_killer_disable+0x3a0/0x3a0 [ 2660.669873] mem_cgroup_out_of_memory+0x15e/0x210 [ 2660.674747] ? memory_oom_group_write+0x160/0x160 [ 2660.679602] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2660.684469] ? page_counter_try_charge+0x1c1/0x220 [ 2660.689423] try_charge+0xdcd/0x1720 [ 2660.693165] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2660.697857] ? kasan_check_read+0x11/0x20 [ 2660.702021] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2660.707313] ? rcu_read_unlock_special+0x370/0x370 [ 2660.712290] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2660.717843] ? debug_smp_processor_id+0x1c/0x20 [ 2660.722527] ? perf_trace_lock+0x14d/0x7a0 [ 2660.726780] ? lock_page_memcg+0x350/0x350 [ 2660.731039] ? lock_acquire+0x1ed/0x520 [ 2660.735033] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2660.740410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.745972] ? check_preemption_disabled+0x48/0x280 [ 2660.751017] memcg_kmem_charge_memcg+0x7c/0x120 [ 2660.755717] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2660.760243] memcg_kmem_charge+0x149/0x350 [ 2660.764498] __alloc_pages_nodemask+0x89c/0xdd0 [ 2660.769256] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2660.774304] ? perf_trace_sched_process_exec+0x860/0x860 [ 2660.779790] ? kasan_check_write+0x14/0x20 [ 2660.784045] ? copyin+0xb7/0x100 [ 2660.787433] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2660.792465] ? copy_page_from_iter+0x541/0x8f0 [ 2660.797077] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2660.802640] alloc_pages_current+0x173/0x350 [ 2660.807072] pipe_write+0x910/0xec0 [ 2660.810750] __vfs_write+0x6b8/0x9f0 [ 2660.814490] ? kernel_read+0x120/0x120 [ 2660.818398] ? apparmor_path_rmdir+0x30/0x30 [ 2660.822820] ? trace_hardirqs_off_caller+0x300/0x300 [ 2660.827940] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2660.833510] ? apparmor_file_permission+0x24/0x30 [ 2660.838376] ? rw_verify_area+0x118/0x360 [ 2660.842544] vfs_write+0x1fc/0x560 [ 2660.846109] ksys_write+0x101/0x260 [ 2660.849755] ? __ia32_sys_read+0xb0/0xb0 [ 2660.853835] ? trace_hardirqs_off_caller+0x300/0x300 [ 2660.858966] __x64_sys_write+0x73/0xb0 [ 2660.862873] do_syscall_64+0x1b9/0x820 [ 2660.866779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2660.872159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2660.877115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.881981] ? trace_hardirqs_on_caller+0x310/0x310 [ 2660.887039] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2660.892078] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2660.897129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2660.902001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2660.907215] RIP: 0033:0x457569 [ 2660.910511] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2660.929422] RSP: 002b:00007f2e89d1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2660.937144] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2660.944423] RDX: 00000000fffffef3 RSI: 00000000200001c0 RDI: 0000000000000005 [ 2660.951721] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2660.959002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89d1b6d4 [ 2660.966283] R13: 00000000004c2bb4 R14: 00000000004d97c0 R15: 00000000ffffffff [ 2660.975712] Task in /syz0 killed as a result of limit of /syz0 [ 2660.981804] memory: usage 307200kB, limit 307200kB, failcnt 4785 [ 2660.987974] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2660.994842] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:08:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) [ 2661.001190] Memory cgroup stats for /syz0: cache:1308KB rss:257572KB rss_huge:241664KB shmem:1176KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:1224KB active_anon:257724KB inactive_file:4KB active_file:0KB unevictable:28KB [ 2661.023135] Memory cgroup out of memory: Kill process 5907 (syz-executor0) score 134 or sacrifice child [ 2661.033585] Killed process 5907 (syz-executor0) total-vm:70732kB, anon-rss:8304kB, file-rss:32768kB, shmem-rss:0kB [ 2661.050274] oom_reaper: reaped process 5907 (syz-executor0), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 2661.073870] netlink: 'syz-executor3': attribute type 4 has an invalid length. 11:08:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x5}) 11:08:09 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1) 11:08:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) [ 2661.096091] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. 11:08:09 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x800448d3, &(0x7f0000001140)={'veth0_Yo_bridge\x00'}) 11:08:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mtu(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:08:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) 11:08:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3}) r4 = eventfd(0xd) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 11:08:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mtu(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:08:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) 11:08:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) 11:08:10 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mtu(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:08:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000080)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f0000000140)='GPL\x00', 0xffffffffffffff82, 0xa0, &(0x7f0000000400)=""/160, 0x0, 0x1}, 0x48) ioctl$KVM_RUN(r0, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@local, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000014c0)=0xe8) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f}}, 0x20) add_key(&(0x7f0000000840)='.dead\x00', &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x4}, @in6={0xa, 0x4e22, 0x20, @ipv4={[], [], @dev}, 0x6}, @in6={0xa, 0x4e23, 0x5, @local, 0x95}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}], 0x84) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000bc0)={@sco={0x1f, {0x7ff, 0x9, 0x5, 0x9, 0x8, 0xab7d}}, {&(0x7f0000000ac0)=""/228, 0xe4}, &(0x7f00000008c0), 0x6}, 0xa0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x48}, {[@timestamp={0x8, 0x20, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1]}, {}, {[@loopback]}]}]}}}}}}}, &(0x7f0000000000)) r1 = getpid() capset(&(0x7f0000000200)={0x200f1526, r1}, &(0x7f00000002c0)={0x0, 0x5, 0xc3, 0x400, 0x0, 0x7}) mknod(&(0x7f0000000a00)='./file0\x00', 0x461, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000640)=[&(0x7f0000000240)=']\x00']) [ 2661.708775] overlayfs: failed to resolve './file1': -2 11:08:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mtu(r0, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 11:08:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) [ 2661.870050] overlayfs: failed to resolve './file1': -2 11:08:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:10 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:10 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r0, r1) [ 2662.214898] overlayfs: failed to resolve './file1': -2 11:08:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:11 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) [ 2662.559954] syz-executor5 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 2662.586893] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2662.599982] CPU: 0 PID: 6031 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2662.608502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2662.617870] Call Trace: [ 2662.620481] dump_stack+0x244/0x39d [ 2662.624142] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2662.629374] dump_header+0x27b/0xf72 [ 2662.633128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.638812] ? check_preemption_disabled+0x48/0x280 [ 2662.643849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.649417] ? pagefault_out_of_memory+0x197/0x197 [ 2662.654378] ? debug_smp_processor_id+0x1c/0x20 [ 2662.659070] ? perf_trace_lock+0x14d/0x7a0 [ 2662.663327] ? debug_smp_processor_id+0x1c/0x20 [ 2662.668021] ? perf_trace_lock_acquire+0x15b/0x800 [ 2662.672990] ? lock_is_held_type+0x210/0x210 [ 2662.677431] ? perf_trace_lock+0x7a0/0x7a0 [ 2662.681714] ? debug_smp_processor_id+0x1c/0x20 [ 2662.686429] ? perf_trace_lock+0x14d/0x7a0 [ 2662.690713] ? graph_lock+0x270/0x270 [ 2662.694541] ? print_usage_bug+0xc0/0xc0 [ 2662.698630] ? lock_is_held_type+0x210/0x210 [ 2662.703063] ? perf_trace_lock+0x7a0/0x7a0 [ 2662.707331] ? find_held_lock+0x36/0x1c0 [ 2662.707771] overlayfs: failed to resolve './file1': -2 [ 2662.711425] ? mark_held_locks+0xc7/0x130 [ 2662.711450] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2662.711468] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2662.711487] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2662.711507] ? trace_hardirqs_on+0xbd/0x310 [ 2662.711526] ? kasan_check_read+0x11/0x20 [ 2662.711542] ? ___ratelimit+0x3b4/0x672 [ 2662.711561] ? trace_hardirqs_off_caller+0x300/0x300 [ 2662.711581] ? trace_hardirqs_on+0x310/0x310 [ 2662.711601] ? lock_downgrade+0x900/0x900 [ 2662.761973] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2662.767099] ? ___ratelimit+0x3b9/0x672 [ 2662.771099] ? idr_get_free+0xf70/0xf70 [ 2662.775093] ? _raw_spin_unlock_irq+0x27/0x80 [ 2662.779611] ? _raw_spin_unlock_irq+0x27/0x80 [ 2662.784146] oom_kill_process.cold.27+0x10/0x903 [ 2662.788928] ? _raw_spin_unlock_irq+0x27/0x80 [ 2662.793457] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2662.798073] ? oom_evaluate_task+0x540/0x540 [ 2662.802505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.808069] ? cgroup_procs_next+0x70/0x70 [ 2662.812341] ? _raw_spin_unlock_irq+0x60/0x80 [ 2662.816859] ? oom_badness+0xaa0/0xaa0 [ 2662.820774] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2662.825555] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2662.831119] ? mem_cgroup_iter_break+0x30/0x30 [ 2662.835761] ? cgroup_file_notify+0x226/0x2f0 [ 2662.840287] out_of_memory+0xa7f/0x1430 [ 2662.844312] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2662.848953] ? kasan_check_read+0x11/0x20 [ 2662.853137] ? oom_killer_disable+0x3a0/0x3a0 11:08:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) [ 2662.857706] mem_cgroup_out_of_memory+0x15e/0x210 [ 2662.862588] ? memory_oom_group_write+0x160/0x160 [ 2662.867488] try_charge+0xdcd/0x1720 [ 2662.871244] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2662.875947] ? __rcu_read_unlock+0x205/0x210 [ 2662.880394] ? rcu_read_unlock_special+0x370/0x370 [ 2662.885363] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2662.890920] ? retint_kernel+0x2d/0x2d [ 2662.894836] ? lock_page_memcg+0x350/0x350 [ 2662.899202] ? lock_acquire+0x1ed/0x520 [ 2662.903208] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2662.908596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.914153] ? check_preemption_disabled+0x48/0x280 [ 2662.919207] memcg_kmem_charge_memcg+0x7c/0x120 [ 2662.923902] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2662.928426] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2662.933826] memcg_kmem_charge+0x149/0x350 [ 2662.938099] __alloc_pages_nodemask+0x89c/0xdd0 [ 2662.942810] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2662.948123] ? lock_downgrade+0x900/0x900 [ 2662.952300] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2662.957340] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2662.962905] ? check_preemption_disabled+0x48/0x280 [ 2662.967968] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2662.973539] ? rcu_pm_notify+0xc0/0xc0 [ 2662.977464] ? copy_process+0x2027/0x8790 [ 2662.981635] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2662.986677] ? kmem_cache_alloc_node+0x349/0x730 [ 2662.991501] copy_process+0xa09/0x8790 [ 2662.995411] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.000209] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2663.004831] ? retint_kernel+0x2d/0x2d [ 2663.008751] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2663.013729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.018511] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2663.024022] ? __cleanup_sighand+0x70/0x70 [ 2663.028278] ? retint_kernel+0x2d/0x2d [ 2663.032212] ? _raw_spin_unlock_irq+0x56/0x80 [ 2663.036750] ? _raw_spin_unlock_irq+0x60/0x80 [ 2663.041271] ? finish_task_switch+0x1f4/0x920 [ 2663.045791] ? finish_task_switch+0x1b4/0x920 [ 2663.050309] ? __switch_to_asm+0x34/0x70 [ 2663.054397] ? preempt_notifier_register+0x200/0x200 [ 2663.059522] ? __switch_to_asm+0x34/0x70 [ 2663.063603] ? __switch_to_asm+0x34/0x70 [ 2663.067706] ? __switch_to_asm+0x40/0x70 [ 2663.071790] ? __switch_to_asm+0x34/0x70 [ 2663.075872] ? __switch_to_asm+0x40/0x70 [ 2663.079965] ? __switch_to_asm+0x34/0x70 [ 2663.084058] ? __switch_to_asm+0x40/0x70 [ 2663.088140] ? __switch_to_asm+0x34/0x70 [ 2663.092224] ? __switch_to_asm+0x34/0x70 [ 2663.096305] ? __switch_to_asm+0x40/0x70 [ 2663.100392] ? __switch_to_asm+0x34/0x70 [ 2663.104477] ? __switch_to_asm+0x40/0x70 [ 2663.108566] ? __switch_to_asm+0x34/0x70 [ 2663.112653] ? __switch_to_asm+0x40/0x70 [ 2663.116771] ? __schedule+0x8d7/0x21d0 [ 2663.120713] ? __sched_text_start+0x8/0x8 [ 2663.124890] ? graph_lock+0x270/0x270 [ 2663.128732] ? graph_lock+0x270/0x270 [ 2663.132558] ? check_preemption_disabled+0x48/0x280 [ 2663.137619] ? find_held_lock+0x36/0x1c0 [ 2663.141756] ? perf_trace_sched_process_exec+0x860/0x860 [ 2663.147235] ? do_raw_spin_unlock+0xa7/0x330 [ 2663.151669] ? do_raw_spin_trylock+0x270/0x270 [ 2663.156299] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.161080] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2663.165708] ? retint_kernel+0x2d/0x2d [ 2663.169621] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2663.174572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.180127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.184910] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2663.190385] ? refill_pi_state_cache.part.7+0x310/0x310 [ 2663.195789] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.200582] ? retint_kernel+0x2d/0x2d [ 2663.204503] ? futex_wait+0x580/0xa50 [ 2663.208332] ? __sanitizer_cov_trace_pc+0x11/0x50 [ 2663.213202] ? futex_wait+0x5ec/0xa50 [ 2663.217041] ? print_usage_bug+0xc0/0xc0 [ 2663.221128] ? print_usage_bug+0xc0/0xc0 [ 2663.225209] ? futex_wait_setup+0x3e0/0x3e0 [ 2663.229553] ? retint_kernel+0x2d/0x2d [ 2663.233472] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2663.238427] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2663.243644] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.248446] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2663.253928] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 2663.259062] ? futex_wake+0x304/0x760 [ 2663.262906] ? __lock_acquire+0x62f/0x4c20 [ 2663.267226] ? mark_held_locks+0x130/0x130 [ 2663.271488] ? do_futex+0x249/0x26d0 [ 2663.275223] ? __lockdep_init_map+0x336/0x590 [ 2663.279750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.285311] ? check_preemption_disabled+0x48/0x280 [ 2663.290355] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.295918] ? check_preemption_disabled+0x48/0x280 [ 2663.300974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.306542] ? debug_smp_processor_id+0x1c/0x20 [ 2663.311235] ? perf_trace_lock+0x14d/0x7a0 [ 2663.315489] ? debug_smp_processor_id+0x1c/0x20 [ 2663.320181] ? perf_trace_lock_acquire+0x15b/0x800 [ 2663.325142] ? lock_is_held_type+0x210/0x210 [ 2663.329582] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2663.335068] ? graph_lock+0x270/0x270 [ 2663.338896] ? find_held_lock+0x36/0x1c0 [ 2663.342986] ? graph_lock+0x270/0x270 [ 2663.346841] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.351625] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.356413] ? find_held_lock+0x36/0x1c0 [ 2663.360603] _do_fork+0x1cb/0x11c0 [ 2663.364181] ? fork_idle+0x1d0/0x1d0 [ 2663.367927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.372736] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2663.377343] ? retint_kernel+0x2d/0x2d [ 2663.381251] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2663.386249] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.391033] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2663.396516] ? _copy_to_user+0xc8/0x110 [ 2663.400522] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2663.406096] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2663.410885] ? retint_kernel+0x2d/0x2d [ 2663.414810] __x64_sys_clone+0xbf/0x150 [ 2663.418805] ? do_syscall_64+0xca/0x820 [ 2663.422804] do_syscall_64+0x1b9/0x820 [ 2663.426732] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2663.432120] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2663.437072] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.441948] ? trace_hardirqs_on_caller+0x310/0x310 [ 2663.446991] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2663.452008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2663.457544] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2663.462561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2663.467410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2663.472599] RIP: 0033:0x457569 [ 2663.475793] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2663.494706] RSP: 002b:00007feb19bb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2663.502410] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457569 11:08:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0), 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x360d, &(0x7f0000000600)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000280)) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0xff) setxattr$security_smack_entry(&(0x7f0000000800)='./file1\x00', &(0x7f0000000840)='security.SMACK64MMAP\x00', &(0x7f0000000880)='[}$keyring\x00', 0xb, 0x2) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendto(0xffffffffffffffff, &(0x7f0000000580)="9227303d8a801e20f3c10ebb33ea106cd27e7eb3d67a5f46b5d82865a2b65da1f11a6c0922422ce150e488a8e908e0b26a2318ec76f026b63277a57e010cd01634fbbdc9827272d7f17cf83489a3e9b14b870868b934b2a85eb15701ad125a910e1cd93cbb9855cdf944f8327aa2f8f9454d1e6ec61f9d016ca52250697ba7b65d7749608bc1ce1cfd1663cb9dc88781b7633367954402b3d2419c72fe710946f8f0dff6642f0a4afb2a784ac9829bf0af4aeb9039f4eaad0d7e77b1a82d51d8dcafaf1714888e0851296284f7c6c2dc52d0e9d6d0080f5a4d3e44c5a7757e7ab9430e3e4926c432dacd6d3f3c", 0xed, 0x20000000, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x3}, [{0x2, 0x0, r3}, {}, {0x2, 0x1}, {0x2, 0x1}], {0x4, 0x7}, [{}, {0x8, 0x4}, {0x8, 0x4}, {0x8, 0x6}, {0x8, 0x7}], {0x10, 0x4}, {0x20, 0x3}}, 0x6c, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{&(0x7f0000000300)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/39, 0x27}], 0x3, &(0x7f0000000780)=""/97, 0x61, 0x5}, 0x1000}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000940)=""/74, 0x4a}], 0x2, &(0x7f0000000ac0)=""/138, 0x8a, 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/130, 0x82}, {&(0x7f0000000c80)=""/247, 0xf7}], 0x3, &(0x7f0000001ec0)=""/203, 0xcb, 0x8}, 0x7f}, {{&(0x7f0000001fc0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/115, 0x73}, {&(0x7f0000003180)=""/130, 0x82}, {&(0x7f0000003240)=""/192, 0xc0}, {&(0x7f0000003300)=""/121, 0x79}, {&(0x7f0000003380)=""/11, 0xb}], 0x7, &(0x7f0000003440)=""/35, 0x23, 0x3098}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004540)=[{0x0}, {&(0x7f0000004480)=""/41, 0x29}, {&(0x7f00000044c0)=""/125, 0x7d}], 0x3, &(0x7f0000004580)=""/129, 0x81, 0x1ff}, 0x3}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/100, 0x64}, {&(0x7f00000046c0)=""/211, 0xd3}, {&(0x7f00000047c0)=""/158, 0x9e}, {&(0x7f0000004880)=""/112, 0x70}], 0x4, &(0x7f0000004940)=""/130, 0x82, 0x5}, 0x8}], 0x6, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) 11:08:12 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) [ 2663.509671] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000802102001ffc [ 2663.516952] RBP: 000000000072bf00 R08: ffffffffffffffff R09: 0000000000000000 [ 2663.524282] R10: 0000000020000040 R11: 0000000000000246 R12: 00007feb19bb96d4 [ 2663.531550] R13: 00000000004bdaa6 R14: 00000000004cce30 R15: 00000000ffffffff [ 2663.544804] Task in /syz5 killed as a result of limit of /syz5 [ 2663.564993] memory: usage 307196kB, limit 307200kB, failcnt 992 [ 2663.572050] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2663.579241] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2663.586410] Memory cgroup stats for /syz5: cache:200KB rss:257804KB rss_huge:241664KB shmem:192KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:257964KB inactive_file:0KB active_file:0KB unevictable:28KB [ 2663.619408] Memory cgroup out of memory: Kill process 4036 (syz-executor5) score 1120 or sacrifice child [ 2663.631189] Killed process 4036 (syz-executor5) total-vm:70336kB, anon-rss:6304kB, file-rss:33644kB, shmem-rss:0kB [ 2663.651874] oom_reaper: reaped process 4036 (syz-executor5), now anon-rss:0kB, file-rss:32812kB, shmem-rss:0kB [ 2663.698027] overlayfs: failed to resolve './file1': -2 11:08:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:12 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:12 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:12 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) [ 2664.186265] overlayfs: failed to resolve './file1': -2 [ 2664.210778] overlayfs: failed to resolve './file1': -2 11:08:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000122f61a8fb000004291a7a70a78419825b25cec37b6a240000000000000000008000"], 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x800) setgroups(0x0, &(0x7f0000000500)) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f00000000c0)=0x8) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) socketpair$inet(0x2, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getrandom(&(0x7f0000000180)=""/40, 0xffffffffffffff59, 0x2) read(0xffffffffffffffff, &(0x7f0000000540)=""/34, 0x11c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="ff020000000000000000000000000001fe8000000000000000000000000000aa000000ffff00000000000000ff000000ffffffffffffffffffffffffffffffff76657468315f746f5f626f6e6400000076657468310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003a00010301000000000000000000000000000000200148010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d6000004d302000000000100002800686c00000000000000000000000000000000000000000000000000000000030100000000000028005443504d5353000000000000000000000000000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380160010000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000030300000000000048006862680000000000000000000000000000000000000000000000000000000300000001010600000100010a0c0000010009000100e200090005001f00d70c020000000800060028004e4651554555450000000000000000000000000000000000000000000002060040000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000028005443504d535300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) syz_read_part_table(0xd0ba, 0x1, &(0x7f0000003440)=[{&(0x7f0000000300)="e2bf778dd5edbae7c6c5a1f18586f2123272fa4e3aca55c82bec88ab93cac206e47e65c2f2ede0e3172e1f8b17fed7a8d8e4f63ed1280b1be31cfcab200907f96eef760ffc8172d4d916c651d97f5adee2a6ea041967fa63a0ac473ff95b7c7ea576e7f45b447cea65a1dfe2183adbb276729383193e3ef0e0e84d236bf96c2becb72629fc6cef56f7441cfeb670e820d9fbb53a0b19c8e3fd8a601458057bfc4f72638a97dfac59b5e2", 0xaa, 0xf5}]) write$binfmt_aout(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1f8) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000280)=0x1f) close(0xffffffffffffffff) r5 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r5, 0x541b, &(0x7f0000000040)) 11:08:13 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000d80), 0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x7fff, "eecba8b6fc8c8d8035aef82a931ec61d774aa1ef3bf3608bcdb7ba593f4e8da2867be794e5f7e40c28fd57fcd7485f398df29b0e8efcc99b402a9de25ff6a74f8f1f30f9a70920b9cebca751ce902e15c7411a2c86ca33ec169865dd2be81ac0bddacbab75bf9ac8bc70ca276f856105cbdafe6c3cfc455f59279de9f98a14cc3f162cf85581146a44ea205f435f99c184834a5c012051fb39991acbcc245af96d068bf8c2ceb546dd81c85e1f51ee7e90709f207d7782b27f87c594ea8b9aface1a277bfb4be3f76cc2fb90bb892a0a574c6dd7652fa4a31c163a12e3518ac5a0d8"}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9097e116bcf3181884a7e723a37fec3bbd3d48d38a6e5f725"]) r3 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000780)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000180), 0x6, 0x2) chdir(&(0x7f0000000280)='./file0\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000c00)={0x0, 0x5, 0x81}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0xf0ffffffffffff) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) fcntl$getown(r0, 0x9) fallocate(r4, 0x40, 0x0, 0x0) 11:08:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) [ 2664.534903] overlayfs: failed to resolve './file1': -2 11:08:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:13 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2300000007ffff160065269dd03fe36424491633d61e00"], 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 11:08:13 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000002c0)=""/36) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000280)=0x400, 0x13e) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x800000000) 11:08:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x8, [{{@in6}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) [ 2664.890005] 9pnet: p9_errstr2errno: server reported unknown error e&Ð?ãd$I3Ö [ 2664.956997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 2665.031137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 11:08:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x17, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000003c0)=""/123) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, "38213aeccf5cc0e9a19146bb0a5d4ea13d18293c6fc0d64aa86942c40cdf1117b4dd11629bbb510271b206e2edba07eaa96934ae6208415e6a9f4245f5eed082", "ce02d76fd25967239ec98c5508b64fc1588377f5a5994cb0ba7a7f3b2b8b26d7fcd5c4e5812f01b8b0a4223b778f735fbcbc24f06bbdedae48e60aa0a5efbc4d", "63556d3d7108597503847a850793363d6cd0dc810ad07cf782e705c272226882"}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000)) clone(0xd0860000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, &(0x7f0000000180)=""/94}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1000000001) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000005c0)=""/219) fcntl$setstatus(r2, 0x4, 0x0) preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 11:08:13 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2300000007ffff160065269dd03fe36424491633d61e00"], 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) 11:08:13 executing program 0: syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x0, 0x18002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000001780)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='trusted.overlay.redirect\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x55) socket$inet6(0x2, 0x0, 0x0) ptrace$peekuser(0x3, r0, 0x4) tkill(r0, 0x11) [ 2665.245075] 9pnet: p9_errstr2errno: server reported unknown error e&Ð?ãd$I3Ö 11:08:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x8, [{{@in6}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) 11:08:14 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 11:08:14 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2300000007ffff160065269dd03fe36424491633d61e00"], 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 2665.446800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 2665.550597] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2665.561837] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2665.567235] CPU: 0 PID: 6119 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2665.575750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2665.585120] Call Trace: [ 2665.587755] dump_stack+0x244/0x39d [ 2665.591407] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2665.596642] ? mark_held_locks+0x130/0x130 [ 2665.600902] ? mark_held_locks+0x130/0x130 [ 2665.605182] dump_header+0x27b/0xf72 [ 2665.608927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.614500] ? check_preemption_disabled+0x48/0x280 [ 2665.619632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.625189] ? pagefault_out_of_memory+0x197/0x197 [ 2665.630166] ? debug_smp_processor_id+0x1c/0x20 [ 2665.634841] ? perf_trace_lock+0x14d/0x7a0 [ 2665.639093] ? debug_smp_processor_id+0x1c/0x20 [ 2665.643780] ? perf_trace_lock_acquire+0x15b/0x800 [ 2665.648740] ? lock_is_held_type+0x210/0x210 [ 2665.653217] ? perf_trace_lock+0x7a0/0x7a0 [ 2665.657470] ? debug_smp_processor_id+0x1c/0x20 [ 2665.662154] ? perf_trace_lock+0x14d/0x7a0 [ 2665.666404] ? graph_lock+0x270/0x270 [ 2665.670226] ? print_usage_bug+0xc0/0xc0 [ 2665.674306] ? lock_is_held_type+0x210/0x210 [ 2665.678757] ? find_held_lock+0x36/0x1c0 [ 2665.682845] ? mark_held_locks+0xc7/0x130 [ 2665.687015] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2665.692134] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2665.697252] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2665.701854] ? trace_hardirqs_on+0xbd/0x310 [ 2665.706188] ? kasan_check_read+0x11/0x20 [ 2665.710349] ? ___ratelimit+0x3b4/0x672 [ 2665.714349] ? trace_hardirqs_off_caller+0x300/0x300 [ 2665.719479] ? trace_hardirqs_on+0x310/0x310 [ 2665.723902] ? lock_downgrade+0x900/0x900 [ 2665.728072] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2665.733188] ? ___ratelimit+0x3b9/0x672 [ 2665.737178] ? idr_get_free+0xf70/0xf70 [ 2665.741167] ? _raw_spin_unlock_irq+0x27/0x80 [ 2665.745677] ? _raw_spin_unlock_irq+0x27/0x80 [ 2665.750214] oom_kill_process.cold.27+0x10/0x903 [ 2665.754992] ? _raw_spin_unlock_irq+0x27/0x80 [ 2665.759501] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2665.764112] ? oom_evaluate_task+0x540/0x540 [ 2665.768533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.774088] ? cgroup_procs_next+0x70/0x70 [ 2665.778344] ? _raw_spin_unlock_irq+0x60/0x80 [ 2665.782855] ? oom_badness+0xaa0/0xaa0 [ 2665.786759] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2665.791536] ? mem_cgroup_iter_break+0x30/0x30 [ 2665.796150] ? mark_held_locks+0xc7/0x130 [ 2665.800318] out_of_memory+0xa7f/0x1430 [ 2665.804305] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2665.808904] ? kasan_check_read+0x11/0x20 [ 2665.813070] ? oom_killer_disable+0x3a0/0x3a0 [ 2665.817613] mem_cgroup_out_of_memory+0x15e/0x210 [ 2665.822478] ? memory_oom_group_write+0x160/0x160 [ 2665.827333] ? mem_cgroup_try_charge+0x627/0xe20 [ 2665.832116] ? page_counter_try_charge+0x1c1/0x220 [ 2665.837068] try_charge+0xdcd/0x1720 [ 2665.840809] ? kasan_check_read+0x11/0x20 [ 2665.844989] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2665.849681] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2665.855257] ? lock_page_memcg+0x350/0x350 [ 2665.859525] ? lock_acquire+0x1ed/0x520 [ 2665.863516] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2665.868893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.874444] ? check_preemption_disabled+0x48/0x280 [ 2665.879481] ? kasan_check_read+0x11/0x20 [ 2665.883644] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2665.888934] ? rcu_softirq_qs+0x20/0x20 [ 2665.892950] mem_cgroup_try_charge+0x627/0xe20 [ 2665.897561] ? mem_cgroup_protected+0xa60/0xa60 [ 2665.902244] ? check_preemption_disabled+0x48/0x280 [ 2665.907281] ? __mod_zone_page_state+0x8a/0xf0 [ 2665.911917] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2665.917477] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2665.922439] wp_page_copy+0x51d/0x24f0 [ 2665.926354] ? print_usage_bug+0xc0/0xc0 [ 2665.930438] ? follow_pfn+0x2e0/0x2e0 [ 2665.934263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.939811] ? reuse_swap_page+0x4bd/0x1520 [ 2665.944155] ? swp_swapcount+0x530/0x530 [ 2665.948231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2665.953783] ? check_preemption_disabled+0x48/0x280 [ 2665.958807] ? __lock_acquire+0x62f/0x4c20 [ 2665.963058] ? debug_smp_processor_id+0x1c/0x20 [ 2665.967746] ? perf_trace_lock+0x14d/0x7a0 [ 2665.972011] ? lock_is_held_type+0x210/0x210 [ 2665.976462] ? debug_smp_processor_id+0x1c/0x20 [ 2665.981147] ? print_usage_bug+0xc0/0xc0 [ 2665.985206] ? perf_trace_lock_acquire+0x15b/0x800 [ 2665.990166] ? graph_lock+0x270/0x270 [ 2665.994004] ? check_preemption_disabled+0x48/0x280 [ 2665.999062] ? debug_smp_processor_id+0x1c/0x20 [ 2666.003751] ? find_held_lock+0x36/0x1c0 [ 2666.007875] ? do_wp_page+0x518/0x2920 [ 2666.011768] ? lock_downgrade+0x900/0x900 [ 2666.015934] ? wake_up_page_bit+0x6f0/0x6f0 [ 2666.020269] ? kasan_check_read+0x11/0x20 [ 2666.024447] ? do_raw_spin_unlock+0xa7/0x330 [ 2666.028859] ? do_raw_spin_trylock+0x270/0x270 [ 2666.033446] ? __pte_alloc_kernel+0x220/0x220 [ 2666.037943] ? check_preemption_disabled+0x48/0x280 [ 2666.043014] do_wp_page+0x520/0x2920 [ 2666.046760] ? finish_mkwrite_fault+0x650/0x650 [ 2666.051443] ? print_usage_bug+0xc0/0xc0 [ 2666.055508] ? __lock_acquire+0x62f/0x4c20 [ 2666.059759] ? __lock_acquire+0x62f/0x4c20 [ 2666.064020] ? mark_held_locks+0x130/0x130 [ 2666.068276] ? debug_smp_processor_id+0x1c/0x20 [ 2666.072954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2666.078532] ? check_preemption_disabled+0x48/0x280 [ 2666.083560] ? debug_smp_processor_id+0x1c/0x20 [ 2666.088260] ? perf_trace_lock_acquire+0x15b/0x800 [ 2666.093226] ? check_preemption_disabled+0x48/0x280 [ 2666.098269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2666.103871] ? print_usage_bug+0xc0/0xc0 [ 2666.107943] ? print_usage_bug+0xc0/0xc0 [ 2666.112023] ? debug_smp_processor_id+0x1c/0x20 [ 2666.116708] ? perf_trace_lock+0x14d/0x7a0 [ 2666.120945] ? perf_trace_lock_acquire+0x15b/0x800 [ 2666.125987] ? print_usage_bug+0xc0/0xc0 [ 2666.130051] ? graph_lock+0x270/0x270 [ 2666.133868] ? __lock_acquire+0x62f/0x4c20 [ 2666.138109] ? lock_acquire+0x1ed/0x520 [ 2666.142115] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2666.146787] ? kasan_check_write+0x14/0x20 [ 2666.151031] ? do_raw_spin_lock+0x14f/0x350 [ 2666.155357] ? rwlock_bug.part.2+0x90/0x90 [ 2666.159613] __handle_mm_fault+0x3be9/0x5be0 [ 2666.164036] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2666.168879] ? lock_is_held_type+0x210/0x210 [ 2666.173295] ? perf_trace_lock+0x7a0/0x7a0 [ 2666.177529] ? perf_trace_lock+0x7a0/0x7a0 [ 2666.181762] ? perf_trace_lock_acquire+0x15b/0x800 [ 2666.186747] ? graph_lock+0x270/0x270 [ 2666.190560] ? graph_lock+0x270/0x270 [ 2666.194362] ? find_held_lock+0x36/0x1c0 [ 2666.198440] ? handle_mm_fault+0x42a/0xc70 [ 2666.202674] ? lock_downgrade+0x900/0x900 [ 2666.206845] ? check_preemption_disabled+0x48/0x280 [ 2666.211880] ? kasan_check_read+0x11/0x20 [ 2666.216029] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2666.221320] ? rcu_read_unlock_special+0x370/0x370 [ 2666.226245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2666.231791] ? check_preemption_disabled+0x48/0x280 [ 2666.236846] handle_mm_fault+0x54f/0xc70 [ 2666.240918] ? __handle_mm_fault+0x5be0/0x5be0 [ 2666.245507] ? find_vma+0x34/0x190 [ 2666.249055] __do_page_fault+0x5d6/0xe40 [ 2666.253139] do_page_fault+0xed/0x7d1 [ 2666.256965] ? vmalloc_sync_all+0x30/0x30 [ 2666.261116] ? error_entry+0x70/0xd0 [ 2666.264838] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2666.269851] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2666.274784] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2666.279720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2666.284585] ? trace_hardirqs_on_caller+0x310/0x310 [ 2666.289603] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2666.295063] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2666.300083] ? page_fault+0x8/0x30 [ 2666.303633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2666.308486] ? page_fault+0x8/0x30 [ 2666.312036] page_fault+0x1e/0x30 [ 2666.315487] RIP: 0033:0x40ecaa [ 2666.318692] Code: 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 c7 45 18 01 00 00 00 49 89 85 10 05 00 00 48 8b 05 de 72 63 00 00 01 00 00 00 c7 05 ea 72 63 00 01 00 00 00 41 c7 85 1c 06 00 [ 2666.337600] RSP: 002b:00007ffd86dd2530 EFLAGS: 00010206 [ 2666.342973] RAX: 0000000000a46468 RBX: 0000000000020000 RCX: 00000000004575ba [ 2666.350251] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2666.357521] RBP: 00007ffd86dd2610 R08: ffffffffffffffff R09: 0000000000000000 [ 2666.364790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd86dd26f0 [ 2666.372057] R13: 00007fc12fe33700 R14: 0000000000000003 R15: 0000000000000001 [ 2666.383402] Task in /syz1 killed as a result of limit of /syz1 [ 2666.389664] memory: usage 307200kB, limit 307200kB, failcnt 890 11:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x8, [{{@in6}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) [ 2666.414677] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2666.444903] 9pnet: p9_errstr2errno: server reported unknown error e&Ð?ãd$I3Ö [ 2666.507280] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:08:15 executing program 4: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2300000007ffff160065269dd03fe36424491633d61e00"], 0x17) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) [ 2666.542973] Memory cgroup stats for /syz1: cache:6268KB rss:264948KB rss_huge:241664KB shmem:56KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:1680KB active_anon:247040KB inactive_file:204KB active_file:52KB unevictable:22408KB [ 2666.586402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 2666.624714] Memory cgroup out of memory: Kill process 29964 (syz-executor1) score 1106 or sacrifice child [ 2666.657442] Killed process 29964 (syz-executor1) total-vm:70336kB, anon-rss:2208kB, file-rss:33660kB, shmem-rss:0kB [ 2666.686231] 9pnet: p9_errstr2errno: server reported unknown error e&Ð?ãd$I3Ö [ 2666.712114] oom_reaper: reaped process 29964 (syz-executor1), now anon-rss:0kB, file-rss:32828kB, shmem-rss:0kB [ 2666.712279] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2666.810100] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2666.817071] CPU: 0 PID: 6155 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2666.825579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2666.834937] Call Trace: [ 2666.837548] dump_stack+0x244/0x39d [ 2666.841188] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2666.846418] ? mark_held_locks+0x130/0x130 [ 2666.850673] ? mark_held_locks+0x130/0x130 [ 2666.854942] dump_header+0x27b/0xf72 11:08:15 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000002c0)=""/36) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000280)=0x400, 0x13e) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x800000000) 11:08:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x0, 0x18002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000001780)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='trusted.overlay.redirect\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x55) socket$inet6(0x2, 0x0, 0x0) ptrace$peekuser(0x3, r0, 0x4) tkill(r0, 0x11) 11:08:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x8, [{{@in6}, 0x0, @in6=@dev}]}]}, 0xfc}, 0x8}, 0x0) 11:08:15 executing program 4: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@localflocks='localflocks'}]}) [ 2666.858711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2666.864264] ? check_preemption_disabled+0x48/0x280 [ 2666.869312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2666.874872] ? pagefault_out_of_memory+0x197/0x197 [ 2666.879840] ? debug_smp_processor_id+0x1c/0x20 [ 2666.884548] ? perf_trace_lock+0x14d/0x7a0 [ 2666.888785] ? debug_smp_processor_id+0x1c/0x20 [ 2666.893456] ? perf_trace_lock_acquire+0x15b/0x800 [ 2666.898435] ? lock_is_held_type+0x210/0x210 [ 2666.902899] ? perf_trace_lock+0x7a0/0x7a0 [ 2666.907181] ? debug_smp_processor_id+0x1c/0x20 [ 2666.911887] ? perf_trace_lock+0x14d/0x7a0 [ 2666.916151] ? graph_lock+0x270/0x270 [ 2666.919972] ? print_usage_bug+0xc0/0xc0 [ 2666.924045] ? lock_is_held_type+0x210/0x210 [ 2666.928474] ? find_held_lock+0x36/0x1c0 [ 2666.932555] ? mark_held_locks+0xc7/0x130 [ 2666.936750] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2666.941879] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2666.947019] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2666.951626] ? trace_hardirqs_on+0xbd/0x310 [ 2666.955966] ? kasan_check_read+0x11/0x20 11:08:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001580), 0xe803}], 0x1, &(0x7f00000025c0)}, 0x0) [ 2666.960126] ? ___ratelimit+0x3b4/0x672 [ 2666.964145] ? trace_hardirqs_off_caller+0x300/0x300 [ 2666.969261] ? trace_hardirqs_on+0x310/0x310 [ 2666.973704] ? lock_downgrade+0x900/0x900 [ 2666.977882] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2666.982997] ? ___ratelimit+0x3b9/0x672 [ 2666.986983] ? idr_get_free+0xf70/0xf70 [ 2666.990990] ? _raw_spin_unlock_irq+0x27/0x80 [ 2666.995518] ? _raw_spin_unlock_irq+0x27/0x80 [ 2667.000026] oom_kill_process.cold.27+0x10/0x903 [ 2667.004789] ? _raw_spin_unlock_irq+0x27/0x80 [ 2667.009296] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2667.013893] ? oom_evaluate_task+0x540/0x540 [ 2667.018310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.023898] ? cgroup_procs_next+0x70/0x70 [ 2667.028158] ? _raw_spin_unlock_irq+0x60/0x80 [ 2667.032664] ? oom_badness+0xaa0/0xaa0 [ 2667.036572] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2667.041396] ? mem_cgroup_iter_break+0x30/0x30 [ 2667.046039] ? mark_held_locks+0xc7/0x130 [ 2667.050219] out_of_memory+0xa7f/0x1430 [ 2667.054228] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2667.058852] ? kasan_check_read+0x11/0x20 [ 2667.058974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 2667.063012] ? oom_killer_disable+0x3a0/0x3a0 [ 2667.063052] mem_cgroup_out_of_memory+0x15e/0x210 [ 2667.063070] ? memory_oom_group_write+0x160/0x160 [ 2667.063083] ? mem_cgroup_try_charge+0x627/0xe20 [ 2667.063107] ? page_counter_try_charge+0x1c1/0x220 [ 2667.063127] try_charge+0xdcd/0x1720 [ 2667.063146] ? kasan_check_read+0x11/0x20 [ 2667.103281] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2667.107970] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2667.113519] ? lock_page_memcg+0x350/0x350 [ 2667.117781] ? lock_acquire+0x1ed/0x520 [ 2667.121803] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2667.127194] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.132747] ? check_preemption_disabled+0x48/0x280 [ 2667.137778] ? kasan_check_read+0x11/0x20 [ 2667.141938] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2667.147224] ? rcu_softirq_qs+0x20/0x20 [ 2667.151221] mem_cgroup_try_charge+0x627/0xe20 [ 2667.155832] ? mem_cgroup_protected+0xa60/0xa60 [ 2667.160512] ? check_preemption_disabled+0x48/0x280 [ 2667.165542] ? print_usage_bug+0xc0/0xc0 [ 2667.169616] ? __mod_zone_page_state+0x8a/0xf0 [ 2667.174210] ? graph_lock+0x270/0x270 [ 2667.178075] ? find_held_lock+0x36/0x1c0 [ 2667.182160] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2667.187735] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2667.192676] wp_page_copy+0x51d/0x24f0 [ 2667.196584] ? print_usage_bug+0xc0/0xc0 [ 2667.200711] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2667.206010] ? kasan_check_read+0x11/0x20 [ 2667.210190] ? follow_pfn+0x2e0/0x2e0 [ 2667.214005] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.219579] ? reuse_swap_page+0x4bd/0x1520 [ 2667.223909] ? swp_swapcount+0x530/0x530 [ 2667.227980] ? __lock_acquire+0x62f/0x4c20 [ 2667.232230] ? page_add_new_anon_rmap+0xb70/0xb70 [ 2667.237086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.242631] ? check_preemption_disabled+0x48/0x280 [ 2667.247715] ? debug_smp_processor_id+0x1c/0x20 [ 2667.252411] ? perf_trace_lock+0x14d/0x7a0 [ 2667.256665] ? lock_is_held_type+0x210/0x210 [ 2667.261113] ? debug_smp_processor_id+0x1c/0x20 [ 2667.265838] ? graph_lock+0x270/0x270 [ 2667.269734] ? mark_held_locks+0x130/0x130 [ 2667.273994] ? graph_lock+0x270/0x270 [ 2667.277817] ? lock_acquire+0x1ed/0x520 [ 2667.281842] ? find_held_lock+0x36/0x1c0 [ 2667.285930] ? do_wp_page+0x518/0x2920 [ 2667.289843] ? lock_downgrade+0x900/0x900 [ 2667.294017] ? wake_up_page_bit+0x6f0/0x6f0 [ 2667.298359] ? kasan_check_read+0x11/0x20 [ 2667.302509] ? do_raw_spin_unlock+0xa7/0x330 [ 2667.306921] ? do_raw_spin_trylock+0x270/0x270 [ 2667.311509] ? __pte_alloc_kernel+0x220/0x220 [ 2667.316037] do_wp_page+0x520/0x2920 [ 2667.319786] ? finish_mkwrite_fault+0x650/0x650 [ 2667.324465] ? filemap_map_pages+0xd6b/0x1a20 [ 2667.329019] ? lock_downgrade+0x900/0x900 [ 2667.333223] ? check_preemption_disabled+0x48/0x280 [ 2667.333244] ? kasan_check_read+0x11/0x20 [ 2667.333265] ? __lock_acquire+0x62f/0x4c20 [ 2667.333298] ? mark_held_locks+0x130/0x130 [ 2667.346692] ? find_get_entries_tag+0x1400/0x1400 [ 2667.346713] ? debug_smp_processor_id+0x1c/0x20 [ 2667.346730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.346746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.346760] ? check_preemption_disabled+0x48/0x280 [ 2667.346779] ? debug_smp_processor_id+0x1c/0x20 [ 2667.381225] ? perf_trace_lock_acquire+0x15b/0x800 [ 2667.386171] ? check_preemption_disabled+0x48/0x280 [ 2667.391210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.396773] ? print_usage_bug+0xc0/0xc0 [ 2667.400867] ? print_usage_bug+0xc0/0xc0 [ 2667.404939] ? graph_lock+0x270/0x270 [ 2667.408758] ? perf_trace_lock+0x14d/0x7a0 [ 2667.413021] ? perf_trace_lock_acquire+0x15b/0x800 [ 2667.417976] ? print_usage_bug+0xc0/0xc0 [ 2667.422095] ? __lock_acquire+0x62f/0x4c20 [ 2667.426371] ? lock_acquire+0x1ed/0x520 [ 2667.430365] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2667.434993] ? kasan_check_write+0x14/0x20 [ 2667.439255] ? do_raw_spin_lock+0x14f/0x350 [ 2667.443606] ? rwlock_bug.part.2+0x90/0x90 [ 2667.447851] ? do_raw_spin_trylock+0x270/0x270 [ 2667.452460] __handle_mm_fault+0x3be9/0x5be0 [ 2667.456904] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2667.461784] ? lock_is_held_type+0x210/0x210 [ 2667.466235] ? perf_trace_lock+0x7a0/0x7a0 [ 2667.470479] ? perf_trace_lock+0x7a0/0x7a0 [ 2667.474731] ? perf_trace_lock_acquire+0x15b/0x800 [ 2667.479700] ? graph_lock+0x270/0x270 [ 2667.483518] ? graph_lock+0x270/0x270 [ 2667.487352] ? find_held_lock+0x36/0x1c0 [ 2667.491432] ? handle_mm_fault+0x42a/0xc70 [ 2667.495678] ? lock_downgrade+0x900/0x900 [ 2667.499847] ? check_preemption_disabled+0x48/0x280 [ 2667.504886] ? kasan_check_read+0x11/0x20 [ 2667.509059] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2667.514368] ? rcu_read_unlock_special+0x370/0x370 [ 2667.519341] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2667.524887] ? check_preemption_disabled+0x48/0x280 [ 2667.529924] handle_mm_fault+0x54f/0xc70 [ 2667.534002] ? __handle_mm_fault+0x5be0/0x5be0 [ 2667.538613] ? find_vma+0x34/0x190 [ 2667.542171] __do_page_fault+0x5d6/0xe40 [ 2667.546252] do_page_fault+0xed/0x7d1 [ 2667.550096] ? vmalloc_sync_all+0x30/0x30 [ 2667.554248] ? error_entry+0x70/0xd0 [ 2667.558022] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2667.563045] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2667.567987] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2667.572922] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2667.577792] ? trace_hardirqs_on_caller+0x310/0x310 [ 2667.582818] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2667.588318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2667.594007] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2667.599056] ? page_fault+0x8/0x30 [ 2667.602617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2667.607466] ? page_fault+0x8/0x30 [ 2667.611012] page_fault+0x1e/0x30 [ 2667.614496] RIP: 0033:0x40d498 [ 2667.617746] Code: 48 8b 05 23 0a 30 00 48 89 08 48 8b 15 21 0a 30 00 48 89 42 08 48 8b 05 06 0a 30 00 48 89 05 0f 0a 30 00 49 8d 81 c0 02 00 00 <48> 89 05 b1 2b 63 00 49 8b 89 c8 02 00 00 49 8b 91 c0 02 00 00 48 [ 2667.636779] RSP: 002b:00007fffaa407578 EFLAGS: 00010246 [ 2667.642148] RAX: 0000000001774c00 RBX: 00007fffaa407580 RCX: 000000000070dea0 [ 2667.649427] RDX: 000000000040d2d0 RSI: 000000000070de90 RDI: 0000000001774c20 [ 2667.656710] RBP: 00007fffaa4075c0 R08: 0000000000000001 R09: 0000000001774940 11:08:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001580), 0xe803}], 0x1, &(0x7f00000025c0)}, 0x0) 11:08:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001580), 0xe803}], 0x1, &(0x7f00000025c0)}, 0x0) 11:08:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2) getsockname$unix(r1, &(0x7f0000000140), &(0x7f0000000040)=0x6e) [ 2667.663995] R10: 0000000001774c10 R11: 0000000000000202 R12: 0000000000000001 [ 2667.671290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 2667.718007] Task in /syz3 killed as a result of limit of /syz3 [ 2667.725085] memory: usage 304580kB, limit 307200kB, failcnt 1189 [ 2667.731442] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2667.751139] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2667.757438] Memory cgroup stats for /syz3: cache:1052KB rss:263012KB rss_huge:245760KB shmem:816KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:732KB active_anon:263092KB inactive_file:192KB active_file:80KB unevictable:24KB [ 2667.788586] Memory cgroup out of memory: Kill process 21469 (syz-executor3) score 123 or sacrifice child [ 2667.799259] Killed process 21469 (syz-executor3) total-vm:70336kB, anon-rss:4244kB, file-rss:33628kB, shmem-rss:0kB [ 2667.812725] oom_reaper: reaped process 21469 (syz-executor3), now anon-rss:0kB, file-rss:32796kB, shmem-rss:0kB 11:08:16 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000001c0)="e5f8574e07b93a413ff3f8c30eb7a3eee3db9d093a7f0c8c791e28d2817e7ea0875c3e8f92eb771d99cadecf4e4eecc238b20d695b74e5bea919d43d9908fd6b7eff202eb0f534b9291193fe3c4926d74880fdde8919407acdbf2cedaa56a06fc79220f325f86c09333de113990e3d1d9f4d3a951666f8c73d136dfd125134977cee6d4d2cdb10323389306bf864b2") 11:08:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x3, 0x4) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) 11:08:16 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000002c0)=""/36) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000280)=0x400, 0x13e) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x800000000) 11:08:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2) getsockname$unix(r1, &(0x7f0000000140), &(0x7f0000000040)=0x6e) 11:08:16 executing program 0: syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x0, 0x18002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000001780)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='trusted.overlay.redirect\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x55) socket$inet6(0x2, 0x0, 0x0) ptrace$peekuser(0x3, r0, 0x4) tkill(r0, 0x11) 11:08:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[]}, 0x8000) sendmsg(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001580), 0xe803}], 0x1, &(0x7f00000025c0)}, 0x0) 11:08:16 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000001c0)="e5f8574e07b93a413ff3f8c30eb7a3eee3db9d093a7f0c8c791e28d2817e7ea0875c3e8f92eb771d99cadecf4e4eecc238b20d695b74e5bea919d43d9908fd6b7eff202eb0f534b9291193fe3c4926d74880fdde8919407acdbf2cedaa56a06fc79220f325f86c09333de113990e3d1d9f4d3a951666f8c73d136dfd125134977cee6d4d2cdb10323389306bf864b2") [ 2667.925392] tmpfs: Bad mount option åøWN¹:A?óø÷£îãÛ : Œy(Ò~~ ‡\>’ëw™ÊÞÏNNìÂ8² i[t復Ô 11:08:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2) getsockname$unix(r1, &(0x7f0000000140), &(0x7f0000000040)=0x6e) 11:08:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x805, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2) getsockname$unix(r1, &(0x7f0000000140), &(0x7f0000000040)=0x6e) 11:08:16 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000001c0)="e5f8574e07b93a413ff3f8c30eb7a3eee3db9d093a7f0c8c791e28d2817e7ea0875c3e8f92eb771d99cadecf4e4eecc238b20d695b74e5bea919d43d9908fd6b7eff202eb0f534b9291193fe3c4926d74880fdde8919407acdbf2cedaa56a06fc79220f325f86c09333de113990e3d1d9f4d3a951666f8c73d136dfd125134977cee6d4d2cdb10323389306bf864b2") [ 2668.117995] tmpfs: Bad mount option åøWN¹:A?óø÷£îãÛ : Œy(Ò~~ ‡\>’ëw™ÊÞÏNNìÂ8² i[t復Ô 11:08:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x101, 0x400}], 0x0, 0x0) [ 2668.299233] tmpfs: Bad mount option åøWN¹:A?óø÷£îãÛ : Œy(Ò~~ ‡\>’ëw™ÊÞÏNNìÂ8² i[t復Ô 11:08:17 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f00000001c0)="e5f8574e07b93a413ff3f8c30eb7a3eee3db9d093a7f0c8c791e28d2817e7ea0875c3e8f92eb771d99cadecf4e4eecc238b20d695b74e5bea919d43d9908fd6b7eff202eb0f534b9291193fe3c4926d74880fdde8919407acdbf2cedaa56a06fc79220f325f86c09333de113990e3d1d9f4d3a951666f8c73d136dfd125134977cee6d4d2cdb10323389306bf864b2") 11:08:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/30, 0x1e, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x12}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 2668.555612] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2668.566553] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2668.571869] CPU: 1 PID: 6223 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2668.580380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.589735] Call Trace: [ 2668.592327] dump_stack+0x244/0x39d [ 2668.595965] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2668.601175] dump_header+0x27b/0xf72 [ 2668.604911] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.610430] ? check_preemption_disabled+0x48/0x280 [ 2668.615427] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.620996] ? pagefault_out_of_memory+0x197/0x197 [ 2668.625924] ? debug_smp_processor_id+0x1c/0x20 [ 2668.630598] ? perf_trace_lock+0x14d/0x7a0 [ 2668.634826] ? debug_smp_processor_id+0x1c/0x20 [ 2668.639484] ? perf_trace_lock_acquire+0x15b/0x800 [ 2668.644407] ? lock_is_held_type+0x210/0x210 [ 2668.648810] ? perf_trace_lock+0x7a0/0x7a0 [ 2668.653045] ? debug_smp_processor_id+0x1c/0x20 [ 2668.657726] ? perf_trace_lock+0x14d/0x7a0 [ 2668.661959] ? graph_lock+0x270/0x270 [ 2668.665764] ? print_usage_bug+0xc0/0xc0 [ 2668.669810] ? lock_is_held_type+0x210/0x210 [ 2668.674211] ? perf_trace_lock+0x7a0/0x7a0 [ 2668.678468] ? find_held_lock+0x36/0x1c0 [ 2668.682518] ? mark_held_locks+0xc7/0x130 [ 2668.686707] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2668.691805] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2668.696914] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2668.701501] ? trace_hardirqs_on+0xbd/0x310 [ 2668.705810] ? kasan_check_read+0x11/0x20 [ 2668.709959] ? ___ratelimit+0x3b4/0x672 [ 2668.713992] ? trace_hardirqs_off_caller+0x300/0x300 [ 2668.719083] ? trace_hardirqs_on+0x310/0x310 [ 2668.723493] ? lock_downgrade+0x900/0x900 [ 2668.727654] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2668.732787] ? ___ratelimit+0x3b9/0x672 [ 2668.736748] ? idr_get_free+0xf70/0xf70 [ 2668.740742] ? _raw_spin_unlock_irq+0x27/0x80 [ 2668.745229] ? _raw_spin_unlock_irq+0x27/0x80 [ 2668.749731] oom_kill_process.cold.27+0x10/0x903 [ 2668.754485] ? _raw_spin_unlock_irq+0x27/0x80 [ 2668.758966] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2668.763551] ? oom_evaluate_task+0x540/0x540 [ 2668.767946] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.773479] ? cgroup_procs_next+0x70/0x70 [ 2668.777724] ? _raw_spin_unlock_irq+0x60/0x80 [ 2668.782234] ? oom_badness+0xaa0/0xaa0 [ 2668.786115] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2668.790878] ? mem_cgroup_iter_break+0x30/0x30 [ 2668.795482] ? mark_held_locks+0xc7/0x130 [ 2668.799623] out_of_memory+0xa7f/0x1430 [ 2668.803590] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2668.808169] ? kasan_check_read+0x11/0x20 [ 2668.812304] ? oom_killer_disable+0x3a0/0x3a0 [ 2668.816792] mem_cgroup_out_of_memory+0x15e/0x210 [ 2668.821633] ? memory_oom_group_write+0x160/0x160 [ 2668.826479] ? mem_cgroup_try_charge+0x627/0xe20 [ 2668.831224] ? page_counter_try_charge+0x1c1/0x220 [ 2668.836148] try_charge+0xdcd/0x1720 [ 2668.839858] ? kasan_check_read+0x11/0x20 [ 2668.843998] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2668.848672] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2668.854217] ? lock_page_memcg+0x350/0x350 [ 2668.858439] ? lock_acquire+0x1ed/0x520 [ 2668.862402] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2668.867747] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.873278] ? check_preemption_disabled+0x48/0x280 [ 2668.878290] ? kasan_check_read+0x11/0x20 [ 2668.882444] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2668.887718] ? rcu_softirq_qs+0x20/0x20 [ 2668.891723] mem_cgroup_try_charge+0x627/0xe20 [ 2668.896334] ? __anon_vma_prepare+0x325/0x6c0 [ 2668.900866] ? mem_cgroup_protected+0xa60/0xa60 [ 2668.905543] ? up_write+0x7b/0x220 [ 2668.909098] ? down_write_nested+0x130/0x130 [ 2668.913507] ? __anon_vma_prepare+0x353/0x6c0 [ 2668.918001] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2668.923526] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2668.928454] __handle_mm_fault+0x284e/0x5be0 [ 2668.932875] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2668.937749] ? lock_is_held_type+0x210/0x210 [ 2668.942155] ? perf_trace_lock+0x7a0/0x7a0 [ 2668.946373] ? perf_trace_lock+0x7a0/0x7a0 [ 2668.950600] ? lock_downgrade+0x900/0x900 [ 2668.954769] ? graph_lock+0x270/0x270 [ 2668.958584] ? graph_lock+0x270/0x270 [ 2668.962401] ? find_held_lock+0x36/0x1c0 [ 2668.966466] ? handle_mm_fault+0x42a/0xc70 [ 2668.970691] ? lock_downgrade+0x900/0x900 [ 2668.974823] ? check_preemption_disabled+0x48/0x280 [ 2668.979823] ? kasan_check_read+0x11/0x20 [ 2668.983974] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2668.989276] ? rcu_read_unlock_special+0x370/0x370 [ 2668.994202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2668.999734] ? check_preemption_disabled+0x48/0x280 [ 2669.004740] handle_mm_fault+0x54f/0xc70 [ 2669.008809] ? __handle_mm_fault+0x5be0/0x5be0 [ 2669.013402] ? find_vma+0x34/0x190 [ 2669.016951] __do_page_fault+0x5d6/0xe40 [ 2669.021009] ? trace_hardirqs_off+0xb8/0x310 [ 2669.025417] do_page_fault+0xed/0x7d1 [ 2669.029241] ? vmalloc_sync_all+0x30/0x30 [ 2669.033431] ? error_entry+0x70/0xd0 [ 2669.037198] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2669.042195] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2669.047104] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2669.052030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2669.056874] ? trace_hardirqs_on_caller+0x310/0x310 [ 2669.061894] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2669.067347] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2669.072354] ? page_fault+0x8/0x30 [ 2669.075893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2669.080722] ? page_fault+0x8/0x30 [ 2669.084250] page_fault+0x1e/0x30 [ 2669.087706] RIP: 0033:0x40ec7f [ 2669.090878] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2669.109758] RSP: 002b:00007fffaa407340 EFLAGS: 00010206 [ 2669.115107] RAX: 00007f31d95a3000 RBX: 0000000000020000 RCX: 00000000004575ba [ 2669.122359] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2669.129615] RBP: 00007fffaa407420 R08: ffffffffffffffff R09: 0000000000000000 [ 2669.136900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaa407500 [ 2669.144157] R13: 00007f31d95c3700 R14: 0000000000000003 R15: 0000000000000000 11:08:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/30, 0x1e, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x12}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:08:17 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000002c0)=""/36) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000280)=0x400, 0x13e) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x800000000) [ 2669.171925] Task in /syz3 killed as a result of limit of /syz3 [ 2669.177945] memory: usage 307200kB, limit 307200kB, failcnt 1233 [ 2669.184186] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.191032] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2669.227739] Memory cgroup stats for /syz3: cache:1052KB rss:265252KB rss_huge:247808KB shmem:816KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:732KB active_anon:265384KB inactive_file:192KB active_file:68KB unevictable:24KB [ 2669.287229] Memory cgroup out of memory: Kill process 22426 (syz-executor3) score 120 or sacrifice child [ 2669.301634] Killed process 22426 (syz-executor3) total-vm:70468kB, anon-rss:4252kB, file-rss:32768kB, shmem-rss:0kB [ 2669.343578] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2669.363197] tmpfs: Bad mount option åøWN¹:A?óø÷£îãÛ : Œy(Ò~~ ‡\>’ëw™ÊÞÏNNìÂ8² i[t復Ô [ 2669.363440] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2669.397427] CPU: 1 PID: 6234 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2669.405936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.415294] Call Trace: [ 2669.417925] dump_stack+0x244/0x39d [ 2669.421572] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2669.426822] dump_header+0x27b/0xf72 [ 2669.430577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.436126] ? check_preemption_disabled+0x48/0x280 [ 2669.441167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.446744] ? pagefault_out_of_memory+0x197/0x197 [ 2669.451703] ? debug_smp_processor_id+0x1c/0x20 [ 2669.456383] ? perf_trace_lock+0x14d/0x7a0 [ 2669.460623] ? debug_smp_processor_id+0x1c/0x20 [ 2669.465298] ? perf_trace_lock_acquire+0x15b/0x800 [ 2669.470250] ? lock_is_held_type+0x210/0x210 [ 2669.474664] ? perf_trace_lock+0x7a0/0x7a0 [ 2669.478923] ? debug_smp_processor_id+0x1c/0x20 [ 2669.483593] ? perf_trace_lock+0x14d/0x7a0 [ 2669.487873] ? graph_lock+0x270/0x270 [ 2669.491693] ? print_usage_bug+0xc0/0xc0 [ 2669.495784] ? lock_is_held_type+0x210/0x210 [ 2669.500206] ? perf_trace_lock+0x7a0/0x7a0 [ 2669.504509] ? find_held_lock+0x36/0x1c0 [ 2669.508634] ? mark_held_locks+0xc7/0x130 [ 2669.512796] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2669.517934] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2669.523052] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2669.527664] ? trace_hardirqs_on+0xbd/0x310 [ 2669.532013] ? kasan_check_read+0x11/0x20 [ 2669.536163] ? ___ratelimit+0x3b4/0x672 [ 2669.540154] ? trace_hardirqs_off_caller+0x300/0x300 [ 2669.545261] ? trace_hardirqs_on+0x310/0x310 [ 2669.549705] ? lock_downgrade+0x900/0x900 [ 2669.553854] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2669.558991] ? ___ratelimit+0x3b9/0x672 [ 2669.562973] ? idr_get_free+0xf70/0xf70 [ 2669.566956] ? _raw_spin_unlock_irq+0x27/0x80 [ 2669.571463] ? _raw_spin_unlock_irq+0x27/0x80 [ 2669.575948] oom_kill_process.cold.27+0x10/0x903 [ 2669.580723] ? _raw_spin_unlock_irq+0x27/0x80 [ 2669.585223] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2669.589793] ? oom_evaluate_task+0x540/0x540 [ 2669.594209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.599746] ? cgroup_procs_next+0x70/0x70 [ 2669.603989] ? _raw_spin_unlock_irq+0x60/0x80 [ 2669.608496] ? oom_badness+0xaa0/0xaa0 [ 2669.612367] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2669.617103] ? mem_cgroup_iter_break+0x30/0x30 [ 2669.621675] ? mark_held_locks+0xc7/0x130 [ 2669.625828] out_of_memory+0xa7f/0x1430 [ 2669.629784] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2669.634346] ? kasan_check_read+0x11/0x20 [ 2669.638816] ? oom_killer_disable+0x3a0/0x3a0 [ 2669.643306] mem_cgroup_out_of_memory+0x15e/0x210 [ 2669.648132] ? memory_oom_group_write+0x160/0x160 [ 2669.652976] ? mem_cgroup_charge_skmem+0x216/0x410 [ 2669.657892] ? page_counter_try_charge+0x1c1/0x220 [ 2669.662804] try_charge+0xdcd/0x1720 [ 2669.666554] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2669.671226] ? tcp_sendpage_locked+0x80/0xc0 [ 2669.675659] ? inet_sendpage+0x1d9/0x740 [ 2669.679737] ? kernel_sendpage+0x93/0xf0 [ 2669.683789] ? sock_sendpage+0x8c/0xc0 [ 2669.687667] ? pipe_to_sendpage+0x2d0/0x400 [ 2669.691992] ? __splice_from_pipe+0x38b/0x7c0 [ 2669.696492] ? splice_from_pipe+0x1ec/0x340 [ 2669.700802] ? generic_splice_sendpage+0x3c/0x50 [ 2669.705578] ? direct_splice_actor+0x128/0x190 [ 2669.710169] ? splice_direct_to_actor+0x318/0x8f0 [ 2669.715019] ? do_splice_direct+0x2d4/0x420 [ 2669.719350] ? do_sendfile+0x62a/0xe20 [ 2669.723225] ? __x64_sys_sendfile64+0x1fd/0x250 [ 2669.727878] ? do_syscall_64+0x1b9/0x820 [ 2669.731969] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2669.737348] ? check_preemption_disabled+0x48/0x280 [ 2669.742349] ? print_usage_bug+0xc0/0xc0 [ 2669.746397] ? mark_held_locks+0xc7/0x130 [ 2669.750540] ? __lock_is_held+0xb5/0x140 [ 2669.754585] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2669.759547] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2669.764471] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2669.769043] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 2669.774182] ? trace_hardirqs_off_caller+0x300/0x300 [ 2669.779268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2669.784806] ? check_preemption_disabled+0x48/0x280 [ 2669.789840] mem_cgroup_charge_skmem+0x216/0x410 [ 2669.794577] ? mem_cgroup_sk_free+0x2d0/0x2d0 [ 2669.799069] ? graph_lock+0x270/0x270 [ 2669.802856] __sk_mem_raise_allocated+0x65f/0x17e0 [ 2669.807819] ? ipv4_mtu+0x39f/0x590 [ 2669.811448] ? __lock_acquire+0x62f/0x4c20 [ 2669.815674] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2669.820033] ? tcp_select_initial_window+0x3e0/0x3e0 [ 2669.825153] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2669.830165] ? tcp_current_mss+0x2ac/0x410 [ 2669.834381] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 2669.838510] ? debug_smp_processor_id+0x1c/0x20 [ 2669.843159] ? perf_trace_lock+0x14d/0x7a0 [ 2669.847402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.852954] ? check_preemption_disabled+0x48/0x280 [ 2669.857995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.863522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.869072] ? check_preemption_disabled+0x48/0x280 [ 2669.874091] ? debug_smp_processor_id+0x1c/0x20 [ 2669.878761] ? perf_trace_lock_acquire+0x15b/0x800 [ 2669.883696] __sk_mem_schedule+0x6d/0xe0 [ 2669.887759] do_tcp_sendpages+0x61b/0x1dc0 [ 2669.891978] ? graph_lock+0x270/0x270 [ 2669.895782] ? sk_stream_alloc_skb+0x960/0x960 [ 2669.900365] ? find_held_lock+0x36/0x1c0 [ 2669.904447] ? mark_held_locks+0xc7/0x130 [ 2669.908584] ? __local_bh_enable_ip+0x160/0x260 [ 2669.913265] ? __local_bh_enable_ip+0x160/0x260 [ 2669.917919] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2669.922485] ? trace_hardirqs_on+0xbd/0x310 [ 2669.926791] ? lock_release+0xa10/0xa10 [ 2669.930764] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2669.935781] ? tcp_rate_check_app_limited+0x121/0x460 [ 2669.940987] ? tcp_fastopen_reset_cipher.cold.12+0x50/0x50 [ 2669.946594] ? check_preemption_disabled+0x48/0x280 [ 2669.951593] ? lock_sock_nested+0x9a/0x120 [ 2669.955811] ? lock_sock_nested+0x9a/0x120 [ 2669.960103] tcp_sendpage_locked+0x80/0xc0 [ 2669.964347] tcp_sendpage+0x3f/0x60 [ 2669.967953] ? tcp_sendpage_locked+0xc0/0xc0 [ 2669.972345] inet_sendpage+0x1d9/0x740 [ 2669.976247] ? inode_init_owner+0x340/0x340 [ 2669.980558] ? inet_sendmsg+0x690/0x690 [ 2669.984514] ? current_time+0x10b/0x1b0 [ 2669.988504] kernel_sendpage+0x93/0xf0 [ 2669.992389] ? inet_sendmsg+0x690/0x690 [ 2669.996386] sock_sendpage+0x8c/0xc0 [ 2670.000108] ? kernel_sendpage+0xf0/0xf0 [ 2670.004153] pipe_to_sendpage+0x2d0/0x400 [ 2670.008327] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2670.013196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.018755] ? splice_from_pipe_next.part.11+0x296/0x340 [ 2670.024194] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2670.029721] __splice_from_pipe+0x38b/0x7c0 [ 2670.034028] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2670.038888] splice_from_pipe+0x1ec/0x340 [ 2670.043076] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2670.047921] ? splice_shrink_spd+0xd0/0xd0 [ 2670.052151] generic_splice_sendpage+0x3c/0x50 [ 2670.056752] ? splice_from_pipe+0x340/0x340 [ 2670.061064] direct_splice_actor+0x128/0x190 [ 2670.065468] splice_direct_to_actor+0x318/0x8f0 [ 2670.070136] ? pipe_to_sendpage+0x400/0x400 [ 2670.074444] ? do_splice_to+0x190/0x190 [ 2670.078421] ? security_file_permission+0x1c2/0x220 [ 2670.083468] ? rw_verify_area+0x118/0x360 [ 2670.087622] do_splice_direct+0x2d4/0x420 [ 2670.091761] ? splice_direct_to_actor+0x8f0/0x8f0 [ 2670.096594] ? apparmor_file_permission+0x24/0x30 [ 2670.101426] ? rw_verify_area+0x118/0x360 [ 2670.105562] do_sendfile+0x62a/0xe20 [ 2670.109269] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2670.113838] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2670.119372] ? put_timespec64+0x10f/0x1b0 [ 2670.123504] ? do_syscall_64+0x9a/0x820 [ 2670.127476] ? do_syscall_64+0x9a/0x820 [ 2670.131438] __x64_sys_sendfile64+0x1fd/0x250 [ 2670.135924] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 2670.140500] do_syscall_64+0x1b9/0x820 [ 2670.144371] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2670.149722] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2670.154645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2670.159501] ? trace_hardirqs_on_caller+0x310/0x310 [ 2670.164517] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2670.169522] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2670.174540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2670.179378] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2670.184590] RIP: 0033:0x457569 [ 2670.187781] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2670.206663] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2670.214360] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2670.221627] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2670.228902] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2670.236178] R10: 0a00004000000004 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2670.243453] R13: 00000000004c3c2a R14: 00000000004d63d0 R15: 00000000ffffffff [ 2670.284990] Task in /syz1 killed as a result of limit of /syz1 [ 2670.292385] memory: usage 307200kB, limit 307200kB, failcnt 934 [ 2670.299146] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2670.306443] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2670.312776] Memory cgroup stats for /syz1: cache:6400KB rss:265004KB rss_huge:241664KB shmem:188KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:1808KB active_anon:247020KB inactive_file:204KB active_file:52KB unevictable:22408KB [ 2670.335115] Memory cgroup out of memory: Kill process 17156 (syz-executor1) score 1106 or sacrifice child [ 2670.344965] Killed process 17156 (syz-executor1) total-vm:70468kB, anon-rss:2196kB, file-rss:33664kB, shmem-rss:0kB [ 2670.357279] oom_reaper: reaped process 17156 (syz-executor1), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB [ 2670.361802] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2670.385006] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2670.390193] CPU: 0 PID: 6230 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2670.398683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2670.408077] Call Trace: [ 2670.410679] dump_stack+0x244/0x39d [ 2670.414334] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2670.419518] dump_header+0x27b/0xf72 [ 2670.423239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.428763] ? check_preemption_disabled+0x48/0x280 [ 2670.433762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.439283] ? pagefault_out_of_memory+0x197/0x197 [ 2670.444197] ? debug_smp_processor_id+0x1c/0x20 [ 2670.448861] ? perf_trace_lock+0x14d/0x7a0 [ 2670.453086] ? debug_smp_processor_id+0x1c/0x20 [ 2670.457752] ? perf_trace_lock_acquire+0x15b/0x800 [ 2670.462669] ? lock_is_held_type+0x210/0x210 [ 2670.467070] ? perf_trace_lock+0x7a0/0x7a0 [ 2670.471292] ? debug_smp_processor_id+0x1c/0x20 [ 2670.475945] ? perf_trace_lock+0x14d/0x7a0 [ 2670.480167] ? graph_lock+0x270/0x270 [ 2670.483955] ? print_usage_bug+0xc0/0xc0 [ 2670.488014] ? lock_is_held_type+0x210/0x210 [ 2670.492438] ? perf_trace_lock+0x7a0/0x7a0 [ 2670.496661] ? find_held_lock+0x36/0x1c0 [ 2670.500725] ? mark_held_locks+0xc7/0x130 [ 2670.504861] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2670.510201] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2670.515319] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2670.519891] ? trace_hardirqs_on+0xbd/0x310 [ 2670.524197] ? kasan_check_read+0x11/0x20 [ 2670.528353] ? ___ratelimit+0x3b4/0x672 [ 2670.532314] ? trace_hardirqs_off_caller+0x300/0x300 [ 2670.537426] ? trace_hardirqs_on+0x310/0x310 [ 2670.541823] ? lock_downgrade+0x900/0x900 [ 2670.545968] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2670.551056] ? ___ratelimit+0x3b9/0x672 [ 2670.555018] ? idr_get_free+0xf70/0xf70 [ 2670.558981] ? _raw_spin_unlock_irq+0x27/0x80 [ 2670.563465] ? _raw_spin_unlock_irq+0x27/0x80 [ 2670.567952] oom_kill_process.cold.27+0x10/0x903 [ 2670.572706] ? _raw_spin_unlock_irq+0x27/0x80 [ 2670.577188] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2670.581789] ? oom_evaluate_task+0x540/0x540 [ 2670.586237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.591758] ? cgroup_procs_next+0x70/0x70 [ 2670.595987] ? _raw_spin_unlock_irq+0x60/0x80 [ 2670.600480] ? oom_badness+0xaa0/0xaa0 [ 2670.604364] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2670.609105] ? mem_cgroup_iter_break+0x30/0x30 [ 2670.613679] ? mark_held_locks+0xc7/0x130 [ 2670.617822] out_of_memory+0xa7f/0x1430 [ 2670.621807] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2670.626399] ? kasan_check_read+0x11/0x20 [ 2670.630536] ? oom_killer_disable+0x3a0/0x3a0 [ 2670.635030] mem_cgroup_out_of_memory+0x15e/0x210 [ 2670.639857] ? memory_oom_group_write+0x160/0x160 [ 2670.644706] ? mem_cgroup_try_charge+0x627/0xe20 [ 2670.649466] ? page_counter_try_charge+0x1c1/0x220 [ 2670.654412] try_charge+0xdcd/0x1720 [ 2670.658128] ? kasan_check_read+0x11/0x20 [ 2670.662292] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2670.666949] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2670.672490] ? lock_page_memcg+0x350/0x350 [ 2670.676735] ? lock_acquire+0x1ed/0x520 [ 2670.680729] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2670.686083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.691617] ? check_preemption_disabled+0x48/0x280 [ 2670.696619] ? kasan_check_read+0x11/0x20 [ 2670.700753] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2670.706042] ? rcu_softirq_qs+0x20/0x20 [ 2670.710043] mem_cgroup_try_charge+0x627/0xe20 [ 2670.714640] ? __anon_vma_prepare+0x325/0x6c0 [ 2670.719131] ? mem_cgroup_protected+0xa60/0xa60 [ 2670.723803] ? up_write+0x7b/0x220 [ 2670.727330] ? down_write_nested+0x130/0x130 [ 2670.731734] ? __anon_vma_prepare+0x353/0x6c0 [ 2670.736231] ? mark_held_locks+0x130/0x130 [ 2670.740463] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2670.746004] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2670.750929] __handle_mm_fault+0x284e/0x5be0 [ 2670.755340] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2670.760184] ? lock_is_held_type+0x210/0x210 [ 2670.764597] ? perf_trace_lock+0x7a0/0x7a0 [ 2670.768842] ? perf_trace_lock+0x7a0/0x7a0 [ 2670.773072] ? lock_downgrade+0x900/0x900 [ 2670.777230] ? graph_lock+0x270/0x270 [ 2670.781020] ? graph_lock+0x270/0x270 [ 2670.784821] ? find_held_lock+0x36/0x1c0 [ 2670.788900] ? handle_mm_fault+0x42a/0xc70 [ 2670.793131] ? lock_downgrade+0x900/0x900 [ 2670.797272] ? check_preemption_disabled+0x48/0x280 [ 2670.802291] ? kasan_check_read+0x11/0x20 [ 2670.806424] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2670.811714] ? rcu_read_unlock_special+0x370/0x370 [ 2670.816638] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2670.822180] ? check_preemption_disabled+0x48/0x280 [ 2670.827188] handle_mm_fault+0x54f/0xc70 [ 2670.831280] ? __handle_mm_fault+0x5be0/0x5be0 [ 2670.835848] ? find_vma+0x34/0x190 [ 2670.839376] __do_page_fault+0x5d6/0xe40 [ 2670.843418] ? trace_hardirqs_off+0xb8/0x310 [ 2670.847813] do_page_fault+0xed/0x7d1 [ 2670.851605] ? vmalloc_sync_all+0x30/0x30 [ 2670.855766] ? error_entry+0x70/0xd0 [ 2670.859463] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2670.864468] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2670.869467] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2670.874411] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2670.879238] ? trace_hardirqs_on_caller+0x310/0x310 11:08:19 executing program 0: syz_open_dev$vcsn(&(0x7f0000000640)='/dev/vcs#\x00', 0x0, 0x18002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r0 = gettid() socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000001780)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000580)='trusted.overlay.redirect\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x55) socket$inet6(0x2, 0x0, 0x0) ptrace$peekuser(0x3, r0, 0x4) tkill(r0, 0x11) 11:08:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x3, 0x4) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) 11:08:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/30, 0x1e, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x12}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) 11:08:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) 11:08:19 executing program 2: r0 = semget$private(0x0, 0x4000, 0x3f) semctl$SEM_INFO(r0, 0x0, 0x13, 0x0) [ 2670.884243] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2670.889715] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2670.894884] ? page_fault+0x8/0x30 [ 2670.898430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2670.903307] ? page_fault+0x8/0x30 [ 2670.906890] page_fault+0x1e/0x30 [ 2670.910345] RIP: 0033:0x40ec7f [ 2670.913541] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2670.932449] RSP: 002b:00007ffd86dd2530 EFLAGS: 00010206 [ 2670.937832] RAX: 00007fc12fe13000 RBX: 0000000000020000 RCX: 00000000004575ba [ 2670.945120] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2670.952410] RBP: 00007ffd86dd2610 R08: ffffffffffffffff R09: 0000000000000000 [ 2670.959716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd86dd26f0 [ 2670.967019] R13: 00007fc12fe33700 R14: 0000000000000003 R15: 0000000000000001 [ 2670.984910] Task in /syz1 killed as a result of limit of /syz1 [ 2671.007862] memory: usage 306968kB, limit 307200kB, failcnt 947 [ 2671.015347] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2671.023790] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2671.032525] Memory cgroup stats for /syz1: cache:7456KB rss:262936KB rss_huge:239616KB shmem:1112KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2800KB active_anon:244908KB inactive_file:204KB active_file:52KB unevictable:22408KB [ 2671.066815] Memory cgroup out of memory: Kill process 18404 (syz-executor1) score 1106 or sacrifice child 11:08:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) 11:08:19 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20}, 0x20}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/30, 0x1e, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x12}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 2671.087103] Killed process 18404 (syz-executor1) total-vm:70336kB, anon-rss:2192kB, file-rss:33660kB, shmem-rss:0kB 11:08:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2671.131318] syz-executor1 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2671.180249] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2671.187696] CPU: 0 PID: 6234 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2671.196224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2671.205601] Call Trace: [ 2671.208201] dump_stack+0x244/0x39d [ 2671.211842] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2671.217044] ? mark_held_locks+0x130/0x130 [ 2671.221280] ? mark_held_locks+0x130/0x130 [ 2671.225528] dump_header+0x27b/0xf72 [ 2671.229239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.234784] ? check_preemption_disabled+0x48/0x280 [ 2671.239822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.245358] ? pagefault_out_of_memory+0x197/0x197 [ 2671.250293] ? debug_smp_processor_id+0x1c/0x20 [ 2671.254953] ? perf_trace_lock+0x14d/0x7a0 [ 2671.259192] ? debug_smp_processor_id+0x1c/0x20 [ 2671.263844] ? perf_trace_lock_acquire+0x15b/0x800 [ 2671.268771] ? lock_is_held_type+0x210/0x210 [ 2671.273179] ? perf_trace_lock+0x7a0/0x7a0 [ 2671.277425] ? debug_smp_processor_id+0x1c/0x20 [ 2671.282091] ? perf_trace_lock+0x14d/0x7a0 [ 2671.286307] ? graph_lock+0x270/0x270 [ 2671.290110] ? print_usage_bug+0xc0/0xc0 [ 2671.294239] ? lock_is_held_type+0x210/0x210 [ 2671.298726] ? find_held_lock+0x36/0x1c0 [ 2671.302788] ? mark_held_locks+0xc7/0x130 [ 2671.306955] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2671.312100] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2671.317200] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.321787] ? trace_hardirqs_on+0xbd/0x310 [ 2671.326107] ? kasan_check_read+0x11/0x20 [ 2671.330272] ? ___ratelimit+0x3b4/0x672 [ 2671.334249] ? trace_hardirqs_off_caller+0x300/0x300 [ 2671.339346] ? trace_hardirqs_on+0x310/0x310 [ 2671.343746] ? lock_downgrade+0x900/0x900 [ 2671.347922] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2671.353032] ? ___ratelimit+0x3b9/0x672 [ 2671.357016] ? idr_get_free+0xf70/0xf70 [ 2671.361012] ? _raw_spin_unlock_irq+0x27/0x80 [ 2671.365502] ? _raw_spin_unlock_irq+0x27/0x80 [ 2671.370015] oom_kill_process.cold.27+0x10/0x903 [ 2671.374759] ? _raw_spin_unlock_irq+0x27/0x80 [ 2671.379283] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.383868] ? oom_evaluate_task+0x540/0x540 [ 2671.388293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.393852] ? cgroup_procs_next+0x70/0x70 [ 2671.398077] ? _raw_spin_unlock_irq+0x60/0x80 [ 2671.402579] ? oom_badness+0xaa0/0xaa0 [ 2671.406477] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2671.411246] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2671.416783] ? mem_cgroup_iter_break+0x30/0x30 [ 2671.421362] ? cgroup_file_notify+0x226/0x2f0 [ 2671.425857] out_of_memory+0xa7f/0x1430 [ 2671.429836] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.434453] ? kasan_check_read+0x11/0x20 [ 2671.438636] ? oom_killer_disable+0x3a0/0x3a0 [ 2671.443156] mem_cgroup_out_of_memory+0x15e/0x210 [ 2671.448008] ? memory_oom_group_write+0x160/0x160 [ 2671.452837] ? mem_cgroup_try_charge+0x627/0xe20 [ 2671.457602] ? page_counter_try_charge+0x1c1/0x220 [ 2671.462520] try_charge+0xdcd/0x1720 [ 2671.466231] ? kasan_check_read+0x11/0x20 [ 2671.470377] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2671.475032] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2671.480564] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2671.486098] ? lock_page_memcg+0x350/0x350 [ 2671.490327] ? lock_acquire+0x1ed/0x520 [ 2671.494289] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2671.499888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.505424] ? check_preemption_disabled+0x48/0x280 [ 2671.510432] ? kasan_check_read+0x11/0x20 [ 2671.514579] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2671.519883] ? rcu_softirq_qs+0x20/0x20 [ 2671.523880] mem_cgroup_try_charge+0x627/0xe20 [ 2671.528454] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.533985] ? mem_cgroup_protected+0xa60/0xa60 [ 2671.538655] ? shmem_getattr+0x2c0/0x2c0 [ 2671.542730] ? shmem_getpage_gfp+0x1f7d/0x4840 [ 2671.547309] ? _raw_spin_unlock_irq+0x27/0x80 [ 2671.551826] ? _raw_spin_unlock_irq+0x27/0x80 [ 2671.556306] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.560902] ? trace_hardirqs_on+0xbd/0x310 [ 2671.565270] ? kasan_check_read+0x11/0x20 [ 2671.569427] ? trace_hardirqs_off_caller+0x300/0x300 [ 2671.574541] ? trace_hardirqs_on+0xbd/0x310 [ 2671.578874] ? kasan_check_read+0x11/0x20 [ 2671.583021] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2671.587944] shmem_getpage_gfp+0x186b/0x4840 [ 2671.592369] ? mark_held_locks+0xc7/0x130 [ 2671.596519] ? shmem_add_to_page_cache+0x1950/0x1950 [ 2671.601616] ? check_preemption_disabled+0x48/0x280 [ 2671.606643] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2671.611297] ? mark_held_locks+0xc7/0x130 [ 2671.615444] ? tcp_sendpage+0x3f/0x60 [ 2671.619251] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2671.624179] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2671.629111] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.633797] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2671.639150] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 2671.644271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.649852] ? mark_held_locks+0xc7/0x130 [ 2671.654003] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2671.658928] ? print_usage_bug+0xc0/0xc0 [ 2671.663018] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2671.667605] ? trace_hardirqs_on+0xbd/0x310 [ 2671.671940] ? __lock_acquire+0x62f/0x4c20 [ 2671.676210] ? check_preemption_disabled+0x48/0x280 [ 2671.681228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.686775] ? check_preemption_disabled+0x48/0x280 [ 2671.691804] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.697350] ? mark_page_accessed+0xcaf/0x2040 [ 2671.701935] ? activate_page+0x1040/0x1040 [ 2671.706230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.711782] ? page_mapping+0x5a2/0xa50 [ 2671.715765] ? __page_mapcount+0x580/0x580 [ 2671.720027] ? mark_held_locks+0x130/0x130 [ 2671.724274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.729832] ? __set_page_dirty_no_writeback+0x3c9/0x6c0 [ 2671.735303] ? do_writepages+0x1a0/0x1a0 [ 2671.739360] ? __lock_acquire+0x62f/0x4c20 [ 2671.743594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.749125] ? check_preemption_disabled+0x48/0x280 [ 2671.754229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.759777] ? lock_is_held_type+0x210/0x210 [ 2671.764204] ? do_writepages+0x1a0/0x1a0 [ 2671.768293] ? set_page_dirty+0x639/0x1030 [ 2671.772527] ? __writepage+0xe0/0xe0 [ 2671.776242] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.781781] ? perf_trace_lock+0x14d/0x7a0 [ 2671.786012] ? debug_smp_processor_id+0x1c/0x20 [ 2671.790697] ? perf_trace_lock_acquire+0x15b/0x800 [ 2671.795645] ? lock_is_held_type+0x210/0x210 [ 2671.800067] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2671.805098] ? sanity+0x23c/0x340 [ 2671.808587] ? kasan_check_write+0x14/0x20 [ 2671.812846] ? copy_page_to_iter+0x5a4/0x1000 [ 2671.817502] ? perf_trace_sched_process_exec+0x860/0x860 [ 2671.822950] ? aa_file_perm+0x469/0x1060 [ 2671.827012] shmem_file_read_iter+0x399/0x1010 [ 2671.831591] ? shmem_mfill_atomic_pte+0x2850/0x2850 [ 2671.836604] ? aa_file_perm+0x490/0x1060 [ 2671.840674] ? inet_sendmsg+0x690/0x690 [ 2671.844683] ? aa_path_link+0x5e0/0x5e0 [ 2671.848703] ? kernel_sendpage+0x9a/0xf0 [ 2671.852768] ? inet_sendmsg+0x690/0x690 [ 2671.856743] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2671.862264] ? page_cache_pipe_buf_release+0x1e3/0x310 [ 2671.867527] ? page_cache_pipe_buf_steal+0x860/0x860 [ 2671.872622] ? pipe_to_sendpage+0x2d8/0x400 [ 2671.876951] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2671.881804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.887333] ? splice_from_pipe_next.part.11+0x296/0x340 [ 2671.892795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2671.898329] ? fsnotify+0x50e/0xef0 [ 2671.901964] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2671.907011] ? iov_iter_pipe+0xbb/0x2f0 [ 2671.911002] generic_file_splice_read+0x5a2/0x9a0 [ 2671.915870] ? add_to_pipe+0x360/0x360 [ 2671.919762] ? rw_verify_area+0x118/0x360 [ 2671.923919] ? add_to_pipe+0x360/0x360 [ 2671.927829] do_splice_to+0x12e/0x190 [ 2671.931643] splice_direct_to_actor+0x270/0x8f0 [ 2671.936318] ? pipe_to_sendpage+0x400/0x400 [ 2671.940636] ? do_splice_to+0x190/0x190 [ 2671.944618] ? security_file_permission+0x1c2/0x220 [ 2671.949646] ? rw_verify_area+0x118/0x360 [ 2671.953787] do_splice_direct+0x2d4/0x420 [ 2671.957925] ? splice_direct_to_actor+0x8f0/0x8f0 [ 2671.962800] ? apparmor_file_permission+0x24/0x30 [ 2671.967705] ? rw_verify_area+0x118/0x360 [ 2671.971869] do_sendfile+0x62a/0xe20 [ 2671.975581] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2671.980156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2671.985692] ? put_timespec64+0x10f/0x1b0 [ 2671.989836] ? do_syscall_64+0x9a/0x820 [ 2671.993826] ? do_syscall_64+0x9a/0x820 [ 2671.997806] __x64_sys_sendfile64+0x1fd/0x250 [ 2672.002305] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 2672.006911] do_syscall_64+0x1b9/0x820 [ 2672.010803] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2672.016184] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2672.021123] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2672.025980] ? trace_hardirqs_on_caller+0x310/0x310 [ 2672.031022] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2672.036030] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2672.041054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2672.045956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2672.051171] RIP: 0033:0x457569 [ 2672.054387] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2672.073304] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 11:08:20 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2672.081008] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2672.088275] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2672.095535] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2672.102814] R10: 0a00004000000004 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2672.110083] R13: 00000000004c3c2a R14: 00000000004d63d0 R15: 00000000ffffffff [ 2672.144274] Task in /syz1 killed as a result of limit of /syz1 [ 2672.154158] memory: usage 304632kB, limit 307200kB, failcnt 947 [ 2672.168180] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2672.184419] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2672.201928] Memory cgroup stats for /syz1: cache:7456KB rss:260784KB rss_huge:237568KB shmem:1112KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2800KB active_anon:242764KB inactive_file:204KB active_file:52KB unevictable:22408KB 11:08:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x3, 0x4) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) 11:08:20 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2672.252014] Memory cgroup out of memory: Kill process 31822 (syz-executor1) score 1106 or sacrifice child [ 2672.263843] Killed process 31822 (syz-executor1) total-vm:70468kB, anon-rss:2216kB, file-rss:33632kB, shmem-rss:0kB [ 2672.276993] oom_reaper: reaped process 31822 (syz-executor1), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB [ 2672.415521] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2672.426742] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2672.433715] CPU: 0 PID: 6256 Comm: syz-executor2 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2672.442213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2672.451565] Call Trace: [ 2672.454163] dump_stack+0x244/0x39d [ 2672.457827] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2672.463044] dump_header+0x27b/0xf72 [ 2672.466780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2672.472334] ? check_preemption_disabled+0x48/0x280 [ 2672.477369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2672.482915] ? pagefault_out_of_memory+0x197/0x197 [ 2672.487852] ? debug_smp_processor_id+0x1c/0x20 [ 2672.492525] ? perf_trace_lock+0x14d/0x7a0 [ 2672.496762] ? debug_smp_processor_id+0x1c/0x20 [ 2672.501658] ? perf_trace_lock_acquire+0x15b/0x800 [ 2672.506614] ? lock_is_held_type+0x210/0x210 [ 2672.511039] ? perf_trace_lock+0x7a0/0x7a0 [ 2672.515302] ? debug_smp_processor_id+0x1c/0x20 [ 2672.519991] ? perf_trace_lock+0x14d/0x7a0 [ 2672.524257] ? graph_lock+0x270/0x270 [ 2672.528052] ? print_usage_bug+0xc0/0xc0 [ 2672.532094] ? lock_is_held_type+0x210/0x210 [ 2672.536482] ? perf_trace_lock+0x7a0/0x7a0 [ 2672.540709] ? find_held_lock+0x36/0x1c0 [ 2672.544773] ? mark_held_locks+0xc7/0x130 [ 2672.548910] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2672.553999] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2672.559087] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2672.563668] ? trace_hardirqs_on+0xbd/0x310 [ 2672.567994] ? kasan_check_read+0x11/0x20 [ 2672.572134] ? ___ratelimit+0x3b4/0x672 [ 2672.576132] ? trace_hardirqs_off_caller+0x300/0x300 [ 2672.581226] ? trace_hardirqs_on+0x310/0x310 [ 2672.585649] ? lock_downgrade+0x900/0x900 [ 2672.589837] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2672.594940] ? ___ratelimit+0x3b9/0x672 [ 2672.598948] ? idr_get_free+0xf70/0xf70 [ 2672.602931] ? _raw_spin_unlock_irq+0x27/0x80 [ 2672.607437] ? _raw_spin_unlock_irq+0x27/0x80 [ 2672.611940] oom_kill_process.cold.27+0x10/0x903 [ 2672.616733] ? _raw_spin_unlock_irq+0x27/0x80 [ 2672.621254] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2672.625844] ? oom_evaluate_task+0x540/0x540 [ 2672.630245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2672.635766] ? cgroup_procs_next+0x70/0x70 [ 2672.640009] ? _raw_spin_unlock_irq+0x60/0x80 [ 2672.644504] ? oom_badness+0xaa0/0xaa0 [ 2672.648404] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2672.653196] ? mem_cgroup_iter_break+0x30/0x30 [ 2672.657798] ? mark_held_locks+0xc7/0x130 [ 2672.661941] out_of_memory+0xa7f/0x1430 [ 2672.665913] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2672.670492] ? kasan_check_read+0x11/0x20 [ 2672.674623] ? oom_killer_disable+0x3a0/0x3a0 [ 2672.679134] mem_cgroup_out_of_memory+0x15e/0x210 [ 2672.683977] ? memory_oom_group_write+0x160/0x160 [ 2672.688798] ? mem_cgroup_try_charge+0x627/0xe20 [ 2672.693538] ? page_counter_try_charge+0x1c1/0x220 [ 2672.698498] try_charge+0xdcd/0x1720 [ 2672.702214] ? kasan_check_read+0x11/0x20 [ 2672.706370] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2672.711025] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2672.716559] ? lock_page_memcg+0x350/0x350 [ 2672.720799] ? lock_acquire+0x1ed/0x520 [ 2672.724774] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2672.730135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2672.735656] ? check_preemption_disabled+0x48/0x280 [ 2672.740700] ? kasan_check_read+0x11/0x20 [ 2672.744854] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2672.750128] ? rcu_softirq_qs+0x20/0x20 [ 2672.754156] mem_cgroup_try_charge+0x627/0xe20 [ 2672.758755] ? mem_cgroup_protected+0xa60/0xa60 [ 2672.763428] ? rcu_read_unlock_special+0x370/0x370 [ 2672.768372] ? __lock_acquire+0x62f/0x4c20 [ 2672.772588] ? __lock_acquire+0x62f/0x4c20 [ 2672.776824] ? perf_event_comm_output+0x750/0x750 [ 2672.781662] ? mark_held_locks+0x130/0x130 [ 2672.785890] ? mark_held_locks+0x130/0x130 [ 2672.790139] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2672.795679] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2672.800645] __handle_mm_fault+0x284e/0x5be0 [ 2672.805105] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2672.809938] ? lock_is_held_type+0x210/0x210 [ 2672.814348] ? perf_trace_lock+0x7a0/0x7a0 [ 2672.818576] ? perf_trace_lock+0x7a0/0x7a0 [ 2672.822828] ? graph_lock+0x270/0x270 [ 2672.826634] ? graph_lock+0x270/0x270 [ 2672.830451] ? find_held_lock+0x36/0x1c0 [ 2672.834530] ? handle_mm_fault+0x42a/0xc70 [ 2672.838765] ? lock_downgrade+0x900/0x900 [ 2672.842894] ? check_preemption_disabled+0x48/0x280 [ 2672.847910] ? kasan_check_read+0x11/0x20 [ 2672.852048] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2672.857318] ? rcu_read_unlock_special+0x370/0x370 [ 2672.862246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2672.867783] ? check_preemption_disabled+0x48/0x280 [ 2672.872795] handle_mm_fault+0x54f/0xc70 [ 2672.876841] ? __handle_mm_fault+0x5be0/0x5be0 [ 2672.881423] ? find_vma+0x34/0x190 [ 2672.884966] __do_page_fault+0x5d6/0xe40 [ 2672.889025] ? trace_hardirqs_off+0xb8/0x310 [ 2672.893438] do_page_fault+0xed/0x7d1 [ 2672.897257] ? vmalloc_sync_all+0x30/0x30 [ 2672.901414] ? error_entry+0x70/0xd0 [ 2672.905115] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2672.910114] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2672.915034] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2672.919948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2672.924781] ? trace_hardirqs_on_caller+0x310/0x310 [ 2672.929790] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2672.935238] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2672.940237] ? page_fault+0x8/0x30 [ 2672.943776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2672.948603] ? page_fault+0x8/0x30 [ 2672.952137] page_fault+0x1e/0x30 [ 2672.955600] RIP: 0033:0x459f1d [ 2672.958790] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 30 8a fb ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 2672.977672] RSP: 002b:00007ffc855b95a8 EFLAGS: 00010202 [ 2672.983018] RAX: ffffffffffffffea RBX: 00007fe716f7c700 RCX: 00007fe716f7c700 [ 2672.990282] RDX: 00000000003d0f00 RSI: 00007fe716f7bdb0 RDI: 000000000040e070 [ 2672.997535] RBP: 00007ffc855b97b0 R08: 00007fe716f7c9d0 R09: 00007fe716f7c700 [ 2673.004784] R10: 00007fe716f7bdc0 R11: 0000000000000246 R12: 0000000000000000 [ 2673.012042] R13: 00007ffc855b965f R14: 00007fe716f7c9c0 R15: 0000000000000005 [ 2673.022212] Task in /syz2 killed as a result of limit of /syz2 [ 2673.028222] memory: usage 307200kB, limit 307200kB, failcnt 7804 [ 2673.035852] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.042804] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2673.048980] Memory cgroup stats for /syz2: cache:64KB rss:261480KB rss_huge:239616KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:261608KB inactive_file:4KB active_file:0KB unevictable:12KB [ 2673.070052] Memory cgroup out of memory: Kill process 2311 (syz-executor2) score 123 or sacrifice child [ 2673.079872] Killed process 2311 (syz-executor2) total-vm:70600kB, anon-rss:4276kB, file-rss:33556kB, shmem-rss:0kB [ 2673.093905] oom_reaper: reaped process 2311 (syz-executor2), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 11:08:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x3, 0x4) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) 11:08:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) 11:08:22 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) 11:08:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) 11:08:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) 11:08:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) 11:08:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) [ 2674.064256] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2674.131103] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2674.154474] CPU: 0 PID: 6291 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2674.162996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2674.172353] Call Trace: [ 2674.174972] dump_stack+0x244/0x39d [ 2674.178621] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2674.183839] dump_header+0x27b/0xf72 [ 2674.187590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.193141] ? check_preemption_disabled+0x48/0x280 [ 2674.198174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 11:08:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2674.203781] ? pagefault_out_of_memory+0x197/0x197 [ 2674.208740] ? debug_smp_processor_id+0x1c/0x20 [ 2674.213421] ? perf_trace_lock+0x14d/0x7a0 [ 2674.217666] ? debug_smp_processor_id+0x1c/0x20 [ 2674.222361] ? perf_trace_lock_acquire+0x15b/0x800 [ 2674.227327] ? lock_is_held_type+0x210/0x210 [ 2674.231846] ? perf_trace_lock+0x7a0/0x7a0 [ 2674.236097] ? debug_smp_processor_id+0x1c/0x20 [ 2674.240793] ? perf_trace_lock+0x14d/0x7a0 [ 2674.245040] ? graph_lock+0x270/0x270 [ 2674.248870] ? print_usage_bug+0xc0/0xc0 [ 2674.252949] ? lock_is_held_type+0x210/0x210 [ 2674.257379] ? perf_trace_lock+0x7a0/0x7a0 [ 2674.261642] ? find_held_lock+0x36/0x1c0 [ 2674.265798] ? mark_held_locks+0xc7/0x130 [ 2674.269977] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2674.275101] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2674.280253] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2674.284867] ? trace_hardirqs_on+0xbd/0x310 [ 2674.289204] ? kasan_check_read+0x11/0x20 [ 2674.293377] ? ___ratelimit+0x3b4/0x672 [ 2674.297399] ? trace_hardirqs_off_caller+0x300/0x300 [ 2674.302544] ? trace_hardirqs_on+0x310/0x310 [ 2674.306974] ? lock_downgrade+0x900/0x900 [ 2674.311147] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2674.316268] ? ___ratelimit+0x3b9/0x672 [ 2674.320257] ? idr_get_free+0xf70/0xf70 [ 2674.324239] ? _raw_spin_unlock_irq+0x27/0x80 [ 2674.328742] ? _raw_spin_unlock_irq+0x27/0x80 [ 2674.333259] oom_kill_process.cold.27+0x10/0x903 [ 2674.338028] ? _raw_spin_unlock_irq+0x27/0x80 [ 2674.342528] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2674.347144] ? oom_evaluate_task+0x540/0x540 11:08:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2674.351592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.357154] ? cgroup_procs_next+0x70/0x70 [ 2674.361412] ? _raw_spin_unlock_irq+0x60/0x80 [ 2674.365937] ? oom_badness+0xaa0/0xaa0 [ 2674.369843] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2674.374614] ? mem_cgroup_iter_break+0x30/0x30 [ 2674.379245] ? mark_held_locks+0xc7/0x130 [ 2674.383430] out_of_memory+0xa7f/0x1430 [ 2674.387417] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2674.392016] ? kasan_check_read+0x11/0x20 [ 2674.396193] ? oom_killer_disable+0x3a0/0x3a0 [ 2674.400767] mem_cgroup_out_of_memory+0x15e/0x210 [ 2674.405646] ? memory_oom_group_write+0x160/0x160 [ 2674.410508] ? mem_cgroup_charge_skmem+0x216/0x410 [ 2674.415455] ? page_counter_try_charge+0x1c1/0x220 [ 2674.420403] try_charge+0xdcd/0x1720 [ 2674.424176] ? mark_held_locks+0x130/0x130 [ 2674.428434] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2674.433117] ? __lock_acquire+0x62f/0x4c20 [ 2674.437371] ? debug_smp_processor_id+0x1c/0x20 [ 2674.442049] ? perf_trace_lock+0x14d/0x7a0 [ 2674.446306] ? print_usage_bug+0xc0/0xc0 [ 2674.450393] ? mark_held_locks+0xc7/0x130 [ 2674.454562] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2674.459505] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2674.464444] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2674.469038] ? check_preemption_disabled+0x48/0x280 [ 2674.474100] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 2674.479232] ? trace_hardirqs_off_caller+0x300/0x300 [ 2674.484356] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2674.489924] ? check_preemption_disabled+0x48/0x280 [ 2674.494974] mem_cgroup_charge_skmem+0x216/0x410 [ 2674.500271] ? mem_cgroup_sk_free+0x2d0/0x2d0 [ 2674.504798] ? graph_lock+0x270/0x270 [ 2674.508627] __sk_mem_raise_allocated+0x65f/0x17e0 [ 2674.513602] ? ipv4_mtu+0x39f/0x590 [ 2674.517258] ? __lock_acquire+0x62f/0x4c20 [ 2674.521547] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2674.525888] ? tcp_select_initial_window+0x3e0/0x3e0 [ 2674.531024] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2674.536061] ? tcp_current_mss+0x2ac/0x410 [ 2674.540312] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 2674.544490] ? debug_smp_processor_id+0x1c/0x20 [ 2674.549171] ? perf_trace_lock+0x14d/0x7a0 11:08:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2674.553414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.558955] ? check_preemption_disabled+0x48/0x280 [ 2674.563990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.569559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.575099] ? check_preemption_disabled+0x48/0x280 [ 2674.580141] ? debug_smp_processor_id+0x1c/0x20 [ 2674.584834] ? perf_trace_lock_acquire+0x15b/0x800 [ 2674.589776] __sk_mem_schedule+0x6d/0xe0 [ 2674.593878] do_tcp_sendpages+0x61b/0x1dc0 [ 2674.598115] ? graph_lock+0x270/0x270 [ 2674.601989] ? sk_stream_alloc_skb+0x960/0x960 [ 2674.606581] ? find_held_lock+0x36/0x1c0 [ 2674.610658] ? mark_held_locks+0xc7/0x130 [ 2674.614859] ? __local_bh_enable_ip+0x160/0x260 [ 2674.619552] ? __local_bh_enable_ip+0x160/0x260 [ 2674.624228] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2674.628861] ? trace_hardirqs_on+0xbd/0x310 [ 2674.633191] ? lock_release+0xa10/0xa10 [ 2674.637171] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2674.642194] ? tcp_rate_check_app_limited+0x121/0x460 [ 2674.647392] ? tcp_fastopen_reset_cipher.cold.12+0x50/0x50 [ 2674.653020] ? check_preemption_disabled+0x48/0x280 [ 2674.658079] ? lock_sock_nested+0x9a/0x120 [ 2674.662346] ? lock_sock_nested+0x9a/0x120 [ 2674.666608] tcp_sendpage_locked+0x80/0xc0 [ 2674.670858] tcp_sendpage+0x3f/0x60 [ 2674.674496] ? tcp_sendpage_locked+0xc0/0xc0 [ 2674.678930] inet_sendpage+0x1d9/0x740 [ 2674.682850] ? inode_init_owner+0x340/0x340 [ 2674.687186] ? inet_sendmsg+0x690/0x690 [ 2674.691166] ? current_time+0x10b/0x1b0 [ 2674.695184] kernel_sendpage+0x93/0xf0 [ 2674.699078] ? inet_sendmsg+0x690/0x690 [ 2674.703101] sock_sendpage+0x8c/0xc0 [ 2674.706834] ? kernel_sendpage+0xf0/0xf0 [ 2674.710903] pipe_to_sendpage+0x2d0/0x400 [ 2674.715064] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2674.719925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2674.725494] ? splice_from_pipe_next.part.11+0x296/0x340 [ 2674.730968] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2674.736521] __splice_from_pipe+0x38b/0x7c0 [ 2674.740873] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2674.745756] splice_from_pipe+0x1ec/0x340 [ 2674.749924] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2674.754793] ? splice_shrink_spd+0xd0/0xd0 [ 2674.759057] generic_splice_sendpage+0x3c/0x50 [ 2674.763662] ? splice_from_pipe+0x340/0x340 [ 2674.768040] direct_splice_actor+0x128/0x190 [ 2674.772466] splice_direct_to_actor+0x318/0x8f0 [ 2674.777153] ? pipe_to_sendpage+0x400/0x400 [ 2674.781498] ? do_splice_to+0x190/0x190 [ 2674.785509] ? security_file_permission+0x1c2/0x220 [ 2674.790537] ? rw_verify_area+0x118/0x360 [ 2674.794756] do_splice_direct+0x2d4/0x420 [ 2674.798918] ? splice_direct_to_actor+0x8f0/0x8f0 [ 2674.803768] ? apparmor_file_permission+0x24/0x30 [ 2674.808627] ? rw_verify_area+0x118/0x360 [ 2674.812821] do_sendfile+0x62a/0xe20 [ 2674.816584] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2674.821207] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2674.826765] ? put_timespec64+0x10f/0x1b0 [ 2674.830935] ? do_syscall_64+0x9a/0x820 [ 2674.834928] ? do_syscall_64+0x9a/0x820 [ 2674.838921] __x64_sys_sendfile64+0x1fd/0x250 [ 2674.843450] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 2674.848068] do_syscall_64+0x1b9/0x820 [ 2674.851981] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2674.857348] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2674.862274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2674.867132] ? trace_hardirqs_on_caller+0x310/0x310 [ 2674.872150] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2674.877168] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2674.882217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2674.887095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2674.892307] RIP: 0033:0x457569 [ 2674.895495] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2674.914390] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2674.922095] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2674.929359] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2674.936643] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2674.943912] R10: 0a00004000000004 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2674.951216] R13: 00000000004c3c2a R14: 00000000004d63d0 R15: 00000000ffffffff 11:08:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2674.988126] Task in /syz1 killed as a result of limit of /syz1 [ 2675.020126] memory: usage 307200kB, limit 307200kB, failcnt 981 [ 2675.027834] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:08:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 11:08:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) [ 2675.039249] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2675.053269] Memory cgroup stats for /syz1: cache:9700KB rss:258628KB rss_huge:235520KB shmem:3488KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:5056KB active_anon:240724KB inactive_file:204KB active_file:52KB unevictable:22408KB 11:08:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) [ 2675.123122] Memory cgroup out of memory: Kill process 26393 (syz-executor1) score 1106 or sacrifice child [ 2675.133332] Killed process 26393 (syz-executor1) total-vm:70336kB, anon-rss:2208kB, file-rss:33628kB, shmem-rss:0kB [ 2675.168452] oom_reaper: reaped process 6286 (syz-executor2), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB 11:08:23 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 11:08:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) 11:08:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:23 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r2, 0x1) listen(r1, 0x8000000000000009) close(r1) 11:08:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "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"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 11:08:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) [ 2675.560435] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2675.617668] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2675.648120] CPU: 1 PID: 6325 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2675.656646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2675.666014] Call Trace: [ 2675.668609] dump_stack+0x244/0x39d [ 2675.672247] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2675.677469] ? mark_held_locks+0x130/0x130 [ 2675.681715] ? mark_held_locks+0x130/0x130 [ 2675.685964] dump_header+0x27b/0xf72 [ 2675.689714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2675.695257] ? check_preemption_disabled+0x48/0x280 [ 2675.700281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2675.705830] ? pagefault_out_of_memory+0x197/0x197 [ 2675.710778] ? debug_smp_processor_id+0x1c/0x20 [ 2675.715472] ? perf_trace_lock+0x14d/0x7a0 [ 2675.719750] ? debug_smp_processor_id+0x1c/0x20 [ 2675.724500] ? perf_trace_lock_acquire+0x15b/0x800 [ 2675.729478] ? lock_is_held_type+0x210/0x210 [ 2675.733909] ? perf_trace_lock+0x7a0/0x7a0 [ 2675.738158] ? debug_smp_processor_id+0x1c/0x20 [ 2675.742836] ? perf_trace_lock+0x14d/0x7a0 [ 2675.747088] ? graph_lock+0x270/0x270 [ 2675.750913] ? print_usage_bug+0xc0/0xc0 [ 2675.755011] ? lock_is_held_type+0x210/0x210 [ 2675.759465] ? find_held_lock+0x36/0x1c0 [ 2675.763557] ? mark_held_locks+0xc7/0x130 [ 2675.767730] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2675.772860] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2675.777971] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2675.782607] ? trace_hardirqs_on+0xbd/0x310 [ 2675.786951] ? kasan_check_read+0x11/0x20 [ 2675.791105] ? ___ratelimit+0x3b4/0x672 [ 2675.795090] ? trace_hardirqs_off_caller+0x300/0x300 [ 2675.800240] ? trace_hardirqs_on+0x310/0x310 [ 2675.804657] ? lock_downgrade+0x900/0x900 [ 2675.808877] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2675.813989] ? ___ratelimit+0x3b9/0x672 [ 2675.817972] ? idr_get_free+0xf70/0xf70 [ 2675.821956] ? _raw_spin_unlock_irq+0x27/0x80 [ 2675.826517] ? _raw_spin_unlock_irq+0x27/0x80 [ 2675.831037] oom_kill_process.cold.27+0x10/0x903 [ 2675.835808] ? _raw_spin_unlock_irq+0x27/0x80 [ 2675.840332] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2675.844956] ? oom_evaluate_task+0x540/0x540 [ 2675.849400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2675.854970] ? cgroup_procs_next+0x70/0x70 [ 2675.859229] ? _raw_spin_unlock_irq+0x60/0x80 [ 2675.863756] ? oom_badness+0xaa0/0xaa0 [ 2675.867669] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2675.872455] ? mem_cgroup_iter_break+0x30/0x30 [ 2675.877131] ? mark_held_locks+0xc7/0x130 [ 2675.881301] out_of_memory+0xa7f/0x1430 [ 2675.885292] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2675.889899] ? kasan_check_read+0x11/0x20 [ 2675.894068] ? oom_killer_disable+0x3a0/0x3a0 [ 2675.898611] mem_cgroup_out_of_memory+0x15e/0x210 [ 2675.903483] ? memory_oom_group_write+0x160/0x160 [ 2675.908339] ? mem_cgroup_charge_skmem+0x216/0x410 [ 2675.913294] ? page_counter_try_charge+0x1c1/0x220 [ 2675.918243] try_charge+0xdcd/0x1720 [ 2675.921973] ? is_bpf_text_address+0xd3/0x170 [ 2675.926501] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2675.931204] ? __save_stack_trace+0x8d/0xf0 [ 2675.935564] ? save_stack+0xa9/0xd0 [ 2675.939220] ? mark_held_locks+0xc7/0x130 [ 2675.943387] ? tcp_sendpage+0x3f/0x60 [ 2675.947204] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2675.952151] ? mem_cgroup_charge_skmem+0x26c/0x410 [ 2675.957103] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2675.961720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2675.967108] ? __sk_mem_raise_allocated+0x65f/0x17e0 [ 2675.972234] ? trace_hardirqs_off_caller+0x300/0x300 [ 2675.977358] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2675.982913] ? check_preemption_disabled+0x48/0x280 [ 2675.987961] mem_cgroup_charge_skmem+0x216/0x410 [ 2675.992743] ? mem_cgroup_sk_free+0x2d0/0x2d0 [ 2675.997254] ? __kmalloc_node_track_caller+0x3c/0x70 [ 2676.002374] ? __kmalloc_node_track_caller+0x3c/0x70 [ 2676.007501] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2676.012541] __sk_mem_raise_allocated+0x65f/0x17e0 [ 2676.017495] ? kasan_kmalloc+0xc7/0xe0 [ 2676.021410] ? sk_busy_loop_end+0x1c0/0x1c0 [ 2676.025758] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2676.031320] ? kasan_check_write+0x14/0x20 [ 2676.035571] ? __alloc_skb+0x4c1/0x770 [ 2676.039492] ? netdev_alloc_frag+0x1f0/0x1f0 [ 2676.043922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2676.049539] ? tcp_established_options+0x366/0x5b0 [ 2676.054538] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2676.059582] __sk_mem_schedule+0x6d/0xe0 [ 2676.063665] sk_stream_alloc_skb+0x448/0x960 [ 2676.068096] ? tcp_init_transfer+0x470/0x470 [ 2676.072530] ? debug_smp_processor_id+0x1c/0x20 [ 2676.077207] ? perf_trace_lock_acquire+0x15b/0x800 [ 2676.082168] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2676.087204] do_tcp_sendpages+0xaf6/0x1dc0 [ 2676.091450] ? graph_lock+0x270/0x270 [ 2676.095267] ? print_usage_bug+0xc0/0xc0 [ 2676.099352] ? sk_stream_alloc_skb+0x960/0x960 [ 2676.103945] ? find_held_lock+0x36/0x1c0 [ 2676.108028] ? mark_held_locks+0xc7/0x130 [ 2676.112189] ? __local_bh_enable_ip+0x160/0x260 [ 2676.116866] ? __local_bh_enable_ip+0x160/0x260 [ 2676.121545] ? trace_hardirqs_on+0xbd/0x310 [ 2676.125870] ? lock_release+0xa10/0xa10 [ 2676.129852] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2676.134873] ? tcp_rate_check_app_limited+0x121/0x460 [ 2676.140069] ? tcp_fastopen_reset_cipher.cold.12+0x50/0x50 [ 2676.145707] ? check_preemption_disabled+0x48/0x280 [ 2676.150736] ? lock_sock_nested+0x9a/0x120 [ 2676.154982] ? lock_sock_nested+0x9a/0x120 [ 2676.159237] tcp_sendpage_locked+0x80/0xc0 [ 2676.163491] tcp_sendpage+0x3f/0x60 [ 2676.167129] ? tcp_sendpage_locked+0xc0/0xc0 [ 2676.171550] inet_sendpage+0x1d9/0x740 [ 2676.175446] ? inode_init_owner+0x340/0x340 [ 2676.179784] ? inet_sendmsg+0x690/0x690 [ 2676.183799] ? current_time+0x10b/0x1b0 [ 2676.187799] kernel_sendpage+0x93/0xf0 [ 2676.191699] ? inet_sendmsg+0x690/0x690 [ 2676.195720] sock_sendpage+0x8c/0xc0 [ 2676.199445] ? kernel_sendpage+0xf0/0xf0 [ 2676.203516] pipe_to_sendpage+0x2d0/0x400 [ 2676.207793] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2676.212642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2676.218201] ? splice_from_pipe_next.part.11+0x296/0x340 [ 2676.223660] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2676.229221] __splice_from_pipe+0x38b/0x7c0 [ 2676.233562] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2676.238421] splice_from_pipe+0x1ec/0x340 [ 2676.242576] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2676.247424] ? splice_shrink_spd+0xd0/0xd0 [ 2676.251698] generic_splice_sendpage+0x3c/0x50 [ 2676.256288] ? splice_from_pipe+0x340/0x340 [ 2676.260653] direct_splice_actor+0x128/0x190 [ 2676.265090] splice_direct_to_actor+0x318/0x8f0 [ 2676.269771] ? pipe_to_sendpage+0x400/0x400 [ 2676.274105] ? do_splice_to+0x190/0x190 [ 2676.278092] ? security_file_permission+0x1c2/0x220 [ 2676.283227] ? rw_verify_area+0x118/0x360 [ 2676.287408] do_splice_direct+0x2d4/0x420 [ 2676.291557] ? splice_direct_to_actor+0x8f0/0x8f0 [ 2676.296456] ? apparmor_file_permission+0x24/0x30 [ 2676.301710] ? rw_verify_area+0x118/0x360 [ 2676.305864] do_sendfile+0x62a/0xe20 [ 2676.309611] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2676.314227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2676.319780] ? put_timespec64+0x10f/0x1b0 [ 2676.323954] ? do_syscall_64+0x9a/0x820 [ 2676.327927] ? do_syscall_64+0x9a/0x820 [ 2676.331935] __x64_sys_sendfile64+0x1fd/0x250 [ 2676.336461] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 2676.341053] do_syscall_64+0x1b9/0x820 [ 2676.344980] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2676.350374] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2676.355300] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2676.360147] ? trace_hardirqs_on_caller+0x310/0x310 [ 2676.365164] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2676.370181] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2676.375205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2676.380056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2676.385257] RIP: 0033:0x457569 [ 2676.388451] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2676.407358] RSP: 002b:00007f31d95c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2676.415085] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2676.422372] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2676.429639] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2676.436908] R10: 0a00004000000004 R11: 0000000000000246 R12: 00007f31d95c36d4 [ 2676.444226] R13: 00000000004c3c2a R14: 00000000004d63d0 R15: 00000000ffffffff 11:08:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 11:08:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "ca5c3db77ba1ec526155477bd87d669493697819cf51635bee740c58b3eca4ca9e1787e5e72747b3e7090c1b0d759afb5d37122424701775038ea453cee438cfdc677dca52fa68838ad77d536aff8e3cee3c11644fda8f2bcde154af37155db9a02326058c48103c8b32b712bb3f65428c4fc9a2a3ce830f10f0f51e4ae4c03f18ed11de11f647632610be6ba16233b429e568e5324b58a4a5b574b2494f5dde3603345b7d70baba62b30ead38a38056f560bd5634073167296e48fe7c56e37d5d828cfe76231166955ebd744d234e5a2f6ffe6614fce748ed48d77c9d5e5dcb738598c543d3c8550ded7fb7e24bffbf206a0e56c18901eacf33f8c9abbe87ddec25e4d28db33ab19eea6617c7069618e9690091be4dfa50259fd5ae7147f0ad46217dc73525ef5bae2698ccf5ade002e35152f6534e0781356ae1f3180ca4d804088c676f1e8b571fc4a0f50b3f3b4f27b2d081aea17852ab3d60f28e2ebda2d74012e2e5d476f42f46c79ae83c0a3db3281decd0e4c70ed79958f6799e84a90cb380cdcc9d0dd3d780dee8a9c59085ecc2163dca4068232a39d9f58edb7d056f24b8493970428ad8fba0dcfe1ad9b771935979c9ba025a85d16ab4e1aba467589327f8fc41e0f57361f961216efc841a8708145e5f0ee56a7237f772f6b0ef75e415d779b3a5c7c4e0a66089578c5a3c843ce8f91d1e76526de26313107894a35e9a65308ae2580e2f7f1095698003209902e80277533b55ef347610c0f7f4027ef92f2af428ec57b09ab0ccbca45c4cb8ec3fe29fdef484ad704fb2c9f96239fdc717db165f78b66755d4e1d2845a3c759baab11d89df0a28eb942db0b105ab656a4c229af3daa7f2b93970f5c2510b505ae233483064683c9f7b868d06a9543b0e04131797ae17e3b4656c139ae2e01ed7a53ee31210617bd4accce1956dec698c683833c4f3fba78c44f41c186b4281880724c99c0f6c2dabd7f15bd379db9798e5c2d9f78e8c3ce425f346ee31b72236cac78050f1e6697f4346e1ae14712b661a0aa5c235f529ded95aa6abdad4ddca4722d2574b7d3893f0afe636c25e70e0b959b4d7812a611b1b0693666df461b4cf6d61f10cc6572efb6678e6de86ad98780c14dde99a136482995f1b266401e50e2c123c15352e2d370f298717e1e47e2f12abf4ece10365529bb2881acc485489a1dc012facaf31009368af717f2047285eeccf28c9703fb39bc3c99a6eacf6299a1cea19797ca12b8060a2087388178f0822a4df8b010994296790e9faa73161521a98cd19f8d7cd7210eb9eeb6c8646c3c93b31d40170dfec0730bd20bdea3a09b08570315c9a1b72b2bef0ac55646ddc9abecc5633c79314fc9987a2f98468c989e8ce27e5335dc478effae437ef0268d4542772c4512809d6679ad68869315b73c9ed6ecf1f6cb4d7ab1bfe8c2704b8655d30471d15910a899ea855b7e9a9745b0e5c529515fcc7abfbbf011c5ab1104e57656ec0b84f6962fd01668ec1f7d81af9485cd10bd7794a4e900b79d95ec1d2d901f6db8eb68e9b84c39b1dcd774c3122475ac467786313462c7867ad84138434105e2bbfc669136bcf0a81094a9fb1282517fde7507492b8cc1967dc211dc20942c9132c6ee724bcefc15fc7fa2ee616288dfc51bb5e22cac9e7c2bf0d78b2934f356fcdb8a0f76b2713861738644da8465ac0969d909d0cdc228a0a0dd5fd8a2c63ea950a113404ca41073797b60cff2708f5ae4e201aa5edc2b0fd9880613700b2dc4b9f705e5ad019bbdc2ee67be4b5a346711e0a9e44540463f0a1641f66c495fb131489cd43ed9c86944ccd5474c95ef2f507edde037a3fee9cab836bea9a9937ba0943b5dcb2e237e62132613f3dcfed03ff3118776f2dcca9cc9d9a50ef713aaa657d2424236ed5c0fc31191e563989cc3e9dc45ee2347cd7262c23b24ca975df6d0cca803b8d2d361be50590fb678c26253f50f2f17da3f9155e7d9bc2387c7f80af8fb91ccefe7608335ad73e70f74a3c976e3b9ed43f8edaa623d2f72cf24fec6ee73d96113b4b60e97ae13ffe666f60204f68ea485baf7524337571b79a74316159387b8819b3a42ac01704a90415156ab33d7853589740b95aec8b291289d7b6b103a094f31250b3182f51f98aaabdb05cfd463d9f02a0f722adb9b713265d263b5b6412ef9efa52e9909720301785c648bdf04300f470e78c21cafd258509038665a573c45766356b3a1180cd947f8132b0c0e9d23a4ff58688b10220160cd599b34df796fd05406688bfbe90a65f3d283f22b096d978618f4a66744e1ad6c73c6cb4991e254c823a8005e1bf72a619078a8157e8df46693d6afebb20dc90883c5158803e9ad13058c5f7934453f9cafd20c596a75d37db0d5bce1afeadd9d71c32d7bba1b7da0bc86a2cbb936ab3ffb413b5fdbfbf5ee41e8a406bbd2dd9748c1f736b51a64f274c588d6f9eeae9c41a2651e2643bd1673302e118d673fd3a27a3fed71a53c626cf8379877acee7fa807aeb6254008a02476864c0c6424ab41b8411cd54d767eda068077a4db1b6fb32187def1cfd73f8dd16f382b53b28bacb12fef77b98ab7ce7b32abfab74a624a9732756705cd7c86c6bedeecb6d05dedc02c97cc60020cad93c2bf7733f21aa1aedb7b1e8386225a72b1ebad2a5302c8016dca944e2a7cdd659a8586a5508b5cab6aca336caa8b86cd5193c9cc8b55cf6b96db93e0911a7a87b39ecbf1f0ea8ffab7f252a0b376c804737313ea9d01def208f9a56a48e51fa649557e63c4b9e36fe675393c8e4febd1513a29b01767d80efa1e234daa564751af1cc91e36d2a677e9c16656705ccc20e9109ef1e99787e37f450586d6f2b3f7172d862120b6c76c5773e66f4f9e9f8c7af6bd7663cce37178c26aeb4ea04e48666cb3026639a1d06cc6d7ccafc9a62111fa1ee7f131034ada097a2c027330fe2bff898cba6dcf74365578ebb51056872dc3c49832a572849081b69c010f0f7be647798881d62db223f697f66f7427792f33f1dd1655c067fffa74fe28b4bb53f4c4ed2586b78ea7059dd9eb4ca34eea056cede74598e1a702971fa9dff14f27e56e7d11c4ae80cb6a33ff38dfe98305a7d5a03ccf5a75b4da215222f4c9ef54006c8d89de6f95d11d12574cf061e9c60d9e472bd04880aea988579df4a1e7ec2f7d214411a7e08024789c17a43e2ce73d511a9216baa7bbfffdbb137975d92b9a2d55de8e8979943cd9cad90497d870d8c71863cea279f4d8118f64000c253258342d58a65f0e2ed154ce50d98098f24f124f9099bf0b990721e14ccf249f3ef81bd8bd7442d36869005d374275a36f0fa956b9605cd7ff61b80ab54e12189e2fa560a317eaad213ac5c1cf3c357585c7f2bbae33d39e6edef9441e65397ab7e0c40f0d4cd9774846e1ca4c2db6962a8c2028afb12378be968d5754931b1e7196002438598020242c79aced2666c80e06c2154d7fa26ead633693f1457d7d45c52f19924770f9513fe8b4e8554f3ca14fad96d08ca671039bb15081c9cdc7745b8443a7a72cf3eb78dcf4f2197b7f498fe949bca9d103775bb8592d322ec5d08609531b7ca6b55fae429e7e9a418a5c9ebe07f2e06d7b828de24403be243e11c6473aed1da202606a114e1da3ebdd867c71e434c08e6e084cf49268b710e2380f183076633026e56a7d8851999b45885f970db2550c2652ad6e973429f66cca9c85da876027b93f6348175a43ddae9384dd1bd4600b5c25e395a1006f8a7debf27af521e7d5a40b25a6c5f3e81b5a9ca20fbbf03e50145151b11dcccf6ea4b21a15acd30d7097bf041f690c74e9a24c455aa856dddc04c0a5e305bdec25d2ae45805a97239d6482a3fb3cf3757ce6ac79b6fc3ff817d8e95bb4e6dd9d109331662cd31d980b4d86a1759c9d2508b7dcd1497b893088d406828886d4f368a354b7fd0b0e5b2aac7dab5af12916b5346db636361265f25b8f810075933879a58ac91c37e662863e9894e53f3465a7fa3bb01d730b259e50bbf8b1bf32cf9bd80cf3adc5f5eca10e8270d91c46a6d3f81f8929ba57310afc26e32580f1c772b6efa5b5659c4bcea0632c7837abcbf2773591a4e99929ea1c9140f2bc2756791ff6c7b235c2337e3a2d7aa1f67a90f87ccd0e320b9ed0e36ebb2d16f38518775a52a87abd304311b88d61bef8504262dda45b70cf0d3fe57ff9671ec4b71e9d77c1e1b60dc0318afd4f8677a241e351bb9aa1013e8e7ac1fc438bf819a22cf024c77078c449097f601fdb15f11484233b2f519edc843100c9e403f8ca2fb8438a4ddcf571c51960ad00703f65ad3bbb66ba26cd3a7ab0c9d80fb43f4c469693faf98cdfd88d835f539b7835e8cad2751ae5385ffcc48ce389da59e566f8f23d1c45cff3b51a381989c988edb3d8be3ee557f64d5a6fd6f0286a4aca064e656cb48e28dc3536fdf66aaa6971a41b4351df55adbda855f9c7412e45707bf5d00a143d8ccc82073b2c4a76b28f10501333ff9c78abe6f640917677220d1aad8b73208be53eb87ecf07c8d928a5688d106dffa9e9b63d123c696465ebf8f31256bf3d6a3a25f83f34f914e3417e691884bd210c9f0d8a7dcb9da0e0d5278811cc614dae15962316541ecd21fa41ebf1bd879cd6d73c78f2992dc0c1d0f8e2c08338e545350e71d9f4d8bfcdf36cf54f195a8fcfa8855c4f912e2152f375fd51d30e69bc3a71646e08254c8c0ae132c1b38d4064a0890fc0955c48af405f1385eb75a681120b6d84dfca6a3b4fe6829c01ba09fd8f3b8cf5a31c101c521fc2a73151939d44f14ba59a736dd3b54bf31d0399da6ab45eeeab295985fbaaef04dc94e8dc9871d5941adc286fd61374a4e19dca45d44affc7a7a58bd8333861c1dfebeb30e33a3ea1d3a75f23f7404e43b1817392b9b59f95f989cb2eac0ea9a7300fd74da55f5f4288d0dccc90de13a4cf14cdf4cf0f23bf1219418a55e60da5cf81a4b3e8bed4cfbdebf5cb1b92db92291a493e4be0213503f9c2c9ea38edd6f47907ea4541946cbc1451ab3280c949252350ed40b6040ba1bf74d216ecc81413dc912c7175a6459dda9e6db7caa5c7d0b38ea90abd68ffdf200468d87424836fc1e854b0ed64c2193ff57c23b54163a7b916a5081fee9fae8599be6e241a163adf8bf7e6f2f100a656502c904bc7bcfe52980bba5a8f7c0c6f62732203018299b0fe93673a8cdc720a7cf4fe3193b9e751afce14e86eaa10fe65f2b9cb8a7da71eba1005c8001a0fc13f456120ec3a700ed133272084ae78c3cfb96eb1568cb92e3601bb95fac693efe465982da2c4ea81df2ceb5307a53c50220b12015a1974c9290b719b912afa4e53c83ce4f65db8f371312c94a5cb104f526ced28ad791d9c4ad5138a989ff40bc2abf28f916ae76268b1c3fb8ea6992588b7873b73dbafe460bb1776ae33409ad458239545d0a8d0fd9dcb7f0024112b8b7f42df52c79441f13cbea0d07f53fded36531a601640e75ebf2bed56676b3700c74d1ca801e6d09e5bda0691b884774557a1db29592f955f5ba06c4f40a1c487b310163929800ccc44462bcefd7421bbfe8e0345c34616f16333e03a5d71de432c355d5519956d0830e02045e379eb689142a"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 11:08:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "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"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 11:08:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) [ 2676.597448] Task in /syz3 killed as a result of limit of /syz3 [ 2676.618948] memory: usage 307200kB, limit 307200kB, failcnt 1279 11:08:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "ca5c3db77ba1ec526155477bd87d669493697819cf51635bee740c58b3eca4ca9e1787e5e72747b3e7090c1b0d759afb5d37122424701775038ea453cee438cfdc677dca52fa68838ad77d536aff8e3cee3c11644fda8f2bcde154af37155db9a02326058c48103c8b32b712bb3f65428c4fc9a2a3ce830f10f0f51e4ae4c03f18ed11de11f647632610be6ba16233b429e568e5324b58a4a5b574b2494f5dde3603345b7d70baba62b30ead38a38056f560bd5634073167296e48fe7c56e37d5d828cfe76231166955ebd744d234e5a2f6ffe6614fce748ed48d77c9d5e5dcb738598c543d3c8550ded7fb7e24bffbf206a0e56c18901eacf33f8c9abbe87ddec25e4d28db33ab19eea6617c7069618e9690091be4dfa50259fd5ae7147f0ad46217dc73525ef5bae2698ccf5ade002e35152f6534e0781356ae1f3180ca4d804088c676f1e8b571fc4a0f50b3f3b4f27b2d081aea17852ab3d60f28e2ebda2d74012e2e5d476f42f46c79ae83c0a3db3281decd0e4c70ed79958f6799e84a90cb380cdcc9d0dd3d780dee8a9c59085ecc2163dca4068232a39d9f58edb7d056f24b8493970428ad8fba0dcfe1ad9b771935979c9ba025a85d16ab4e1aba467589327f8fc41e0f57361f961216efc841a8708145e5f0ee56a7237f772f6b0ef75e415d779b3a5c7c4e0a66089578c5a3c843ce8f91d1e76526de26313107894a35e9a65308ae2580e2f7f1095698003209902e80277533b55ef347610c0f7f4027ef92f2af428ec57b09ab0ccbca45c4cb8ec3fe29fdef484ad704fb2c9f96239fdc717db165f78b66755d4e1d2845a3c759baab11d89df0a28eb942db0b105ab656a4c229af3daa7f2b93970f5c2510b505ae233483064683c9f7b868d06a9543b0e04131797ae17e3b4656c139ae2e01ed7a53ee31210617bd4accce1956dec698c683833c4f3fba78c44f41c186b4281880724c99c0f6c2dabd7f15bd379db9798e5c2d9f78e8c3ce425f346ee31b72236cac78050f1e6697f4346e1ae14712b661a0aa5c235f529ded95aa6abdad4ddca4722d2574b7d3893f0afe636c25e70e0b959b4d7812a611b1b0693666df461b4cf6d61f10cc6572efb6678e6de86ad98780c14dde99a136482995f1b266401e50e2c123c15352e2d370f298717e1e47e2f12abf4ece10365529bb2881acc485489a1dc012facaf31009368af717f2047285eeccf28c9703fb39bc3c99a6eacf6299a1cea19797ca12b8060a2087388178f0822a4df8b010994296790e9faa73161521a98cd19f8d7cd7210eb9eeb6c8646c3c93b31d40170dfec0730bd20bdea3a09b08570315c9a1b72b2bef0ac55646ddc9abecc5633c79314fc9987a2f98468c989e8ce27e5335dc478effae437ef0268d4542772c4512809d6679ad68869315b73c9ed6ecf1f6cb4d7ab1bfe8c2704b8655d30471d15910a899ea855b7e9a9745b0e5c529515fcc7abfbbf011c5ab1104e57656ec0b84f6962fd01668ec1f7d81af9485cd10bd7794a4e900b79d95ec1d2d901f6db8eb68e9b84c39b1dcd774c3122475ac467786313462c7867ad84138434105e2bbfc669136bcf0a81094a9fb1282517fde7507492b8cc1967dc211dc20942c9132c6ee724bcefc15fc7fa2ee616288dfc51bb5e22cac9e7c2bf0d78b2934f356fcdb8a0f76b2713861738644da8465ac0969d909d0cdc228a0a0dd5fd8a2c63ea950a113404ca41073797b60cff2708f5ae4e201aa5edc2b0fd9880613700b2dc4b9f705e5ad019bbdc2ee67be4b5a346711e0a9e44540463f0a1641f66c495fb131489cd43ed9c86944ccd5474c95ef2f507edde037a3fee9cab836bea9a9937ba0943b5dcb2e237e62132613f3dcfed03ff3118776f2dcca9cc9d9a50ef713aaa657d2424236ed5c0fc31191e563989cc3e9dc45ee2347cd7262c23b24ca975df6d0cca803b8d2d361be50590fb678c26253f50f2f17da3f9155e7d9bc2387c7f80af8fb91ccefe7608335ad73e70f74a3c976e3b9ed43f8edaa623d2f72cf24fec6ee73d96113b4b60e97ae13ffe666f60204f68ea485baf7524337571b79a74316159387b8819b3a42ac01704a90415156ab33d7853589740b95aec8b291289d7b6b103a094f31250b3182f51f98aaabdb05cfd463d9f02a0f722adb9b713265d263b5b6412ef9efa52e9909720301785c648bdf04300f470e78c21cafd258509038665a573c45766356b3a1180cd947f8132b0c0e9d23a4ff58688b10220160cd599b34df796fd05406688bfbe90a65f3d283f22b096d978618f4a66744e1ad6c73c6cb4991e254c823a8005e1bf72a619078a8157e8df46693d6afebb20dc90883c5158803e9ad13058c5f7934453f9cafd20c596a75d37db0d5bce1afeadd9d71c32d7bba1b7da0bc86a2cbb936ab3ffb413b5fdbfbf5ee41e8a406bbd2dd9748c1f736b51a64f274c588d6f9eeae9c41a2651e2643bd1673302e118d673fd3a27a3fed71a53c626cf8379877acee7fa807aeb6254008a02476864c0c6424ab41b8411cd54d767eda068077a4db1b6fb32187def1cfd73f8dd16f382b53b28bacb12fef77b98ab7ce7b32abfab74a624a9732756705cd7c86c6bedeecb6d05dedc02c97cc60020cad93c2bf7733f21aa1aedb7b1e8386225a72b1ebad2a5302c8016dca944e2a7cdd659a8586a5508b5cab6aca336caa8b86cd5193c9cc8b55cf6b96db93e0911a7a87b39ecbf1f0ea8ffab7f252a0b376c804737313ea9d01def208f9a56a48e51fa649557e63c4b9e36fe675393c8e4febd1513a29b01767d80efa1e234daa564751af1cc91e36d2a677e9c16656705ccc20e9109ef1e99787e37f450586d6f2b3f7172d862120b6c76c5773e66f4f9e9f8c7af6bd7663cce37178c26aeb4ea04e48666cb3026639a1d06cc6d7ccafc9a62111fa1ee7f131034ada097a2c027330fe2bff898cba6dcf74365578ebb51056872dc3c49832a572849081b69c010f0f7be647798881d62db223f697f66f7427792f33f1dd1655c067fffa74fe28b4bb53f4c4ed2586b78ea7059dd9eb4ca34eea056cede74598e1a702971fa9dff14f27e56e7d11c4ae80cb6a33ff38dfe98305a7d5a03ccf5a75b4da215222f4c9ef54006c8d89de6f95d11d12574cf061e9c60d9e472bd04880aea988579df4a1e7ec2f7d214411a7e08024789c17a43e2ce73d511a9216baa7bbfffdbb137975d92b9a2d55de8e8979943cd9cad90497d870d8c71863cea279f4d8118f64000c253258342d58a65f0e2ed154ce50d98098f24f124f9099bf0b990721e14ccf249f3ef81bd8bd7442d36869005d374275a36f0fa956b9605cd7ff61b80ab54e12189e2fa560a317eaad213ac5c1cf3c357585c7f2bbae33d39e6edef9441e65397ab7e0c40f0d4cd9774846e1ca4c2db6962a8c2028afb12378be968d5754931b1e7196002438598020242c79aced2666c80e06c2154d7fa26ead633693f1457d7d45c52f19924770f9513fe8b4e8554f3ca14fad96d08ca671039bb15081c9cdc7745b8443a7a72cf3eb78dcf4f2197b7f498fe949bca9d103775bb8592d322ec5d08609531b7ca6b55fae429e7e9a418a5c9ebe07f2e06d7b828de24403be243e11c6473aed1da202606a114e1da3ebdd867c71e434c08e6e084cf49268b710e2380f183076633026e56a7d8851999b45885f970db2550c2652ad6e973429f66cca9c85da876027b93f6348175a43ddae9384dd1bd4600b5c25e395a1006f8a7debf27af521e7d5a40b25a6c5f3e81b5a9ca20fbbf03e50145151b11dcccf6ea4b21a15acd30d7097bf041f690c74e9a24c455aa856dddc04c0a5e305bdec25d2ae45805a97239d6482a3fb3cf3757ce6ac79b6fc3ff817d8e95bb4e6dd9d109331662cd31d980b4d86a1759c9d2508b7dcd1497b893088d406828886d4f368a354b7fd0b0e5b2aac7dab5af12916b5346db636361265f25b8f810075933879a58ac91c37e662863e9894e53f3465a7fa3bb01d730b259e50bbf8b1bf32cf9bd80cf3adc5f5eca10e8270d91c46a6d3f81f8929ba57310afc26e32580f1c772b6efa5b5659c4bcea0632c7837abcbf2773591a4e99929ea1c9140f2bc2756791ff6c7b235c2337e3a2d7aa1f67a90f87ccd0e320b9ed0e36ebb2d16f38518775a52a87abd304311b88d61bef8504262dda45b70cf0d3fe57ff9671ec4b71e9d77c1e1b60dc0318afd4f8677a241e351bb9aa1013e8e7ac1fc438bf819a22cf024c77078c449097f601fdb15f11484233b2f519edc843100c9e403f8ca2fb8438a4ddcf571c51960ad00703f65ad3bbb66ba26cd3a7ab0c9d80fb43f4c469693faf98cdfd88d835f539b7835e8cad2751ae5385ffcc48ce389da59e566f8f23d1c45cff3b51a381989c988edb3d8be3ee557f64d5a6fd6f0286a4aca064e656cb48e28dc3536fdf66aaa6971a41b4351df55adbda855f9c7412e45707bf5d00a143d8ccc82073b2c4a76b28f10501333ff9c78abe6f640917677220d1aad8b73208be53eb87ecf07c8d928a5688d106dffa9e9b63d123c696465ebf8f31256bf3d6a3a25f83f34f914e3417e691884bd210c9f0d8a7dcb9da0e0d5278811cc614dae15962316541ecd21fa41ebf1bd879cd6d73c78f2992dc0c1d0f8e2c08338e545350e71d9f4d8bfcdf36cf54f195a8fcfa8855c4f912e2152f375fd51d30e69bc3a71646e08254c8c0ae132c1b38d4064a0890fc0955c48af405f1385eb75a681120b6d84dfca6a3b4fe6829c01ba09fd8f3b8cf5a31c101c521fc2a73151939d44f14ba59a736dd3b54bf31d0399da6ab45eeeab295985fbaaef04dc94e8dc9871d5941adc286fd61374a4e19dca45d44affc7a7a58bd8333861c1dfebeb30e33a3ea1d3a75f23f7404e43b1817392b9b59f95f989cb2eac0ea9a7300fd74da55f5f4288d0dccc90de13a4cf14cdf4cf0f23bf1219418a55e60da5cf81a4b3e8bed4cfbdebf5cb1b92db92291a493e4be0213503f9c2c9ea38edd6f47907ea4541946cbc1451ab3280c949252350ed40b6040ba1bf74d216ecc81413dc912c7175a6459dda9e6db7caa5c7d0b38ea90abd68ffdf200468d87424836fc1e854b0ed64c2193ff57c23b54163a7b916a5081fee9fae8599be6e241a163adf8bf7e6f2f100a656502c904bc7bcfe52980bba5a8f7c0c6f62732203018299b0fe93673a8cdc720a7cf4fe3193b9e751afce14e86eaa10fe65f2b9cb8a7da71eba1005c8001a0fc13f456120ec3a700ed133272084ae78c3cfb96eb1568cb92e3601bb95fac693efe465982da2c4ea81df2ceb5307a53c50220b12015a1974c9290b719b912afa4e53c83ce4f65db8f371312c94a5cb104f526ced28ad791d9c4ad5138a989ff40bc2abf28f916ae76268b1c3fb8ea6992588b7873b73dbafe460bb1776ae33409ad458239545d0a8d0fd9dcb7f0024112b8b7f42df52c79441f13cbea0d07f53fded36531a601640e75ebf2bed56676b3700c74d1ca801e6d09e5bda0691b884774557a1db29592f955f5ba06c4f40a1c487b310163929800ccc44462bcefd7421bbfe8e0345c34616f16333e03a5d71de432c355d5519956d0830e02045e379eb689142a"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) [ 2676.644646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2676.658469] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2676.670974] Memory cgroup stats for /syz3: cache:3164KB rss:261164KB rss_huge:243712KB shmem:2928KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:2724KB active_anon:261360KB inactive_file:192KB active_file:80KB unevictable:24KB [ 2676.710455] Memory cgroup out of memory: Kill process 22447 (syz-executor3) score 120 or sacrifice child [ 2676.723651] Killed process 22447 (syz-executor3) total-vm:70468kB, anon-rss:4252kB, file-rss:32768kB, shmem-rss:0kB 11:08:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "ca5c3db77ba1ec526155477bd87d669493697819cf51635bee740c58b3eca4ca9e1787e5e72747b3e7090c1b0d759afb5d37122424701775038ea453cee438cfdc677dca52fa68838ad77d536aff8e3cee3c11644fda8f2bcde154af37155db9a02326058c48103c8b32b712bb3f65428c4fc9a2a3ce830f10f0f51e4ae4c03f18ed11de11f647632610be6ba16233b429e568e5324b58a4a5b574b2494f5dde3603345b7d70baba62b30ead38a38056f560bd5634073167296e48fe7c56e37d5d828cfe76231166955ebd744d234e5a2f6ffe6614fce748ed48d77c9d5e5dcb738598c543d3c8550ded7fb7e24bffbf206a0e56c18901eacf33f8c9abbe87ddec25e4d28db33ab19eea6617c7069618e9690091be4dfa50259fd5ae7147f0ad46217dc73525ef5bae2698ccf5ade002e35152f6534e0781356ae1f3180ca4d804088c676f1e8b571fc4a0f50b3f3b4f27b2d081aea17852ab3d60f28e2ebda2d74012e2e5d476f42f46c79ae83c0a3db3281decd0e4c70ed79958f6799e84a90cb380cdcc9d0dd3d780dee8a9c59085ecc2163dca4068232a39d9f58edb7d056f24b8493970428ad8fba0dcfe1ad9b771935979c9ba025a85d16ab4e1aba467589327f8fc41e0f57361f961216efc841a8708145e5f0ee56a7237f772f6b0ef75e415d779b3a5c7c4e0a66089578c5a3c843ce8f91d1e76526de26313107894a35e9a65308ae2580e2f7f1095698003209902e80277533b55ef347610c0f7f4027ef92f2af428ec57b09ab0ccbca45c4cb8ec3fe29fdef484ad704fb2c9f96239fdc717db165f78b66755d4e1d2845a3c759baab11d89df0a28eb942db0b105ab656a4c229af3daa7f2b93970f5c2510b505ae233483064683c9f7b868d06a9543b0e04131797ae17e3b4656c139ae2e01ed7a53ee31210617bd4accce1956dec698c683833c4f3fba78c44f41c186b4281880724c99c0f6c2dabd7f15bd379db9798e5c2d9f78e8c3ce425f346ee31b72236cac78050f1e6697f4346e1ae14712b661a0aa5c235f529ded95aa6abdad4ddca4722d2574b7d3893f0afe636c25e70e0b959b4d7812a611b1b0693666df461b4cf6d61f10cc6572efb6678e6de86ad98780c14dde99a136482995f1b266401e50e2c123c15352e2d370f298717e1e47e2f12abf4ece10365529bb2881acc485489a1dc012facaf31009368af717f2047285eeccf28c9703fb39bc3c99a6eacf6299a1cea19797ca12b8060a2087388178f0822a4df8b010994296790e9faa73161521a98cd19f8d7cd7210eb9eeb6c8646c3c93b31d40170dfec0730bd20bdea3a09b08570315c9a1b72b2bef0ac55646ddc9abecc5633c79314fc9987a2f98468c989e8ce27e5335dc478effae437ef0268d4542772c4512809d6679ad68869315b73c9ed6ecf1f6cb4d7ab1bfe8c2704b8655d30471d15910a899ea855b7e9a9745b0e5c529515fcc7abfbbf011c5ab1104e57656ec0b84f6962fd01668ec1f7d81af9485cd10bd7794a4e900b79d95ec1d2d901f6db8eb68e9b84c39b1dcd774c3122475ac467786313462c7867ad84138434105e2bbfc669136bcf0a81094a9fb1282517fde7507492b8cc1967dc211dc20942c9132c6ee724bcefc15fc7fa2ee616288dfc51bb5e22cac9e7c2bf0d78b2934f356fcdb8a0f76b2713861738644da8465ac0969d909d0cdc228a0a0dd5fd8a2c63ea950a113404ca41073797b60cff2708f5ae4e201aa5edc2b0fd9880613700b2dc4b9f705e5ad019bbdc2ee67be4b5a346711e0a9e44540463f0a1641f66c495fb131489cd43ed9c86944ccd5474c95ef2f507edde037a3fee9cab836bea9a9937ba0943b5dcb2e237e62132613f3dcfed03ff3118776f2dcca9cc9d9a50ef713aaa657d2424236ed5c0fc31191e563989cc3e9dc45ee2347cd7262c23b24ca975df6d0cca803b8d2d361be50590fb678c26253f50f2f17da3f9155e7d9bc2387c7f80af8fb91ccefe7608335ad73e70f74a3c976e3b9ed43f8edaa623d2f72cf24fec6ee73d96113b4b60e97ae13ffe666f60204f68ea485baf7524337571b79a74316159387b8819b3a42ac01704a90415156ab33d7853589740b95aec8b291289d7b6b103a094f31250b3182f51f98aaabdb05cfd463d9f02a0f722adb9b713265d263b5b6412ef9efa52e9909720301785c648bdf04300f470e78c21cafd258509038665a573c45766356b3a1180cd947f8132b0c0e9d23a4ff58688b10220160cd599b34df796fd05406688bfbe90a65f3d283f22b096d978618f4a66744e1ad6c73c6cb4991e254c823a8005e1bf72a619078a8157e8df46693d6afebb20dc90883c5158803e9ad13058c5f7934453f9cafd20c596a75d37db0d5bce1afeadd9d71c32d7bba1b7da0bc86a2cbb936ab3ffb413b5fdbfbf5ee41e8a406bbd2dd9748c1f736b51a64f274c588d6f9eeae9c41a2651e2643bd1673302e118d673fd3a27a3fed71a53c626cf8379877acee7fa807aeb6254008a02476864c0c6424ab41b8411cd54d767eda068077a4db1b6fb32187def1cfd73f8dd16f382b53b28bacb12fef77b98ab7ce7b32abfab74a624a9732756705cd7c86c6bedeecb6d05dedc02c97cc60020cad93c2bf7733f21aa1aedb7b1e8386225a72b1ebad2a5302c8016dca944e2a7cdd659a8586a5508b5cab6aca336caa8b86cd5193c9cc8b55cf6b96db93e0911a7a87b39ecbf1f0ea8ffab7f252a0b376c804737313ea9d01def208f9a56a48e51fa649557e63c4b9e36fe675393c8e4febd1513a29b01767d80efa1e234daa564751af1cc91e36d2a677e9c16656705ccc20e9109ef1e99787e37f450586d6f2b3f7172d862120b6c76c5773e66f4f9e9f8c7af6bd7663cce37178c26aeb4ea04e48666cb3026639a1d06cc6d7ccafc9a62111fa1ee7f131034ada097a2c027330fe2bff898cba6dcf74365578ebb51056872dc3c49832a572849081b69c010f0f7be647798881d62db223f697f66f7427792f33f1dd1655c067fffa74fe28b4bb53f4c4ed2586b78ea7059dd9eb4ca34eea056cede74598e1a702971fa9dff14f27e56e7d11c4ae80cb6a33ff38dfe98305a7d5a03ccf5a75b4da215222f4c9ef54006c8d89de6f95d11d12574cf061e9c60d9e472bd04880aea988579df4a1e7ec2f7d214411a7e08024789c17a43e2ce73d511a9216baa7bbfffdbb137975d92b9a2d55de8e8979943cd9cad90497d870d8c71863cea279f4d8118f64000c253258342d58a65f0e2ed154ce50d98098f24f124f9099bf0b990721e14ccf249f3ef81bd8bd7442d36869005d374275a36f0fa956b9605cd7ff61b80ab54e12189e2fa560a317eaad213ac5c1cf3c357585c7f2bbae33d39e6edef9441e65397ab7e0c40f0d4cd9774846e1ca4c2db6962a8c2028afb12378be968d5754931b1e7196002438598020242c79aced2666c80e06c2154d7fa26ead633693f1457d7d45c52f19924770f9513fe8b4e8554f3ca14fad96d08ca671039bb15081c9cdc7745b8443a7a72cf3eb78dcf4f2197b7f498fe949bca9d103775bb8592d322ec5d08609531b7ca6b55fae429e7e9a418a5c9ebe07f2e06d7b828de24403be243e11c6473aed1da202606a114e1da3ebdd867c71e434c08e6e084cf49268b710e2380f183076633026e56a7d8851999b45885f970db2550c2652ad6e973429f66cca9c85da876027b93f6348175a43ddae9384dd1bd4600b5c25e395a1006f8a7debf27af521e7d5a40b25a6c5f3e81b5a9ca20fbbf03e50145151b11dcccf6ea4b21a15acd30d7097bf041f690c74e9a24c455aa856dddc04c0a5e305bdec25d2ae45805a97239d6482a3fb3cf3757ce6ac79b6fc3ff817d8e95bb4e6dd9d109331662cd31d980b4d86a1759c9d2508b7dcd1497b893088d406828886d4f368a354b7fd0b0e5b2aac7dab5af12916b5346db636361265f25b8f810075933879a58ac91c37e662863e9894e53f3465a7fa3bb01d730b259e50bbf8b1bf32cf9bd80cf3adc5f5eca10e8270d91c46a6d3f81f8929ba57310afc26e32580f1c772b6efa5b5659c4bcea0632c7837abcbf2773591a4e99929ea1c9140f2bc2756791ff6c7b235c2337e3a2d7aa1f67a90f87ccd0e320b9ed0e36ebb2d16f38518775a52a87abd304311b88d61bef8504262dda45b70cf0d3fe57ff9671ec4b71e9d77c1e1b60dc0318afd4f8677a241e351bb9aa1013e8e7ac1fc438bf819a22cf024c77078c449097f601fdb15f11484233b2f519edc843100c9e403f8ca2fb8438a4ddcf571c51960ad00703f65ad3bbb66ba26cd3a7ab0c9d80fb43f4c469693faf98cdfd88d835f539b7835e8cad2751ae5385ffcc48ce389da59e566f8f23d1c45cff3b51a381989c988edb3d8be3ee557f64d5a6fd6f0286a4aca064e656cb48e28dc3536fdf66aaa6971a41b4351df55adbda855f9c7412e45707bf5d00a143d8ccc82073b2c4a76b28f10501333ff9c78abe6f640917677220d1aad8b73208be53eb87ecf07c8d928a5688d106dffa9e9b63d123c696465ebf8f31256bf3d6a3a25f83f34f914e3417e691884bd210c9f0d8a7dcb9da0e0d5278811cc614dae15962316541ecd21fa41ebf1bd879cd6d73c78f2992dc0c1d0f8e2c08338e545350e71d9f4d8bfcdf36cf54f195a8fcfa8855c4f912e2152f375fd51d30e69bc3a71646e08254c8c0ae132c1b38d4064a0890fc0955c48af405f1385eb75a681120b6d84dfca6a3b4fe6829c01ba09fd8f3b8cf5a31c101c521fc2a73151939d44f14ba59a736dd3b54bf31d0399da6ab45eeeab295985fbaaef04dc94e8dc9871d5941adc286fd61374a4e19dca45d44affc7a7a58bd8333861c1dfebeb30e33a3ea1d3a75f23f7404e43b1817392b9b59f95f989cb2eac0ea9a7300fd74da55f5f4288d0dccc90de13a4cf14cdf4cf0f23bf1219418a55e60da5cf81a4b3e8bed4cfbdebf5cb1b92db92291a493e4be0213503f9c2c9ea38edd6f47907ea4541946cbc1451ab3280c949252350ed40b6040ba1bf74d216ecc81413dc912c7175a6459dda9e6db7caa5c7d0b38ea90abd68ffdf200468d87424836fc1e854b0ed64c2193ff57c23b54163a7b916a5081fee9fae8599be6e241a163adf8bf7e6f2f100a656502c904bc7bcfe52980bba5a8f7c0c6f62732203018299b0fe93673a8cdc720a7cf4fe3193b9e751afce14e86eaa10fe65f2b9cb8a7da71eba1005c8001a0fc13f456120ec3a700ed133272084ae78c3cfb96eb1568cb92e3601bb95fac693efe465982da2c4ea81df2ceb5307a53c50220b12015a1974c9290b719b912afa4e53c83ce4f65db8f371312c94a5cb104f526ced28ad791d9c4ad5138a989ff40bc2abf28f916ae76268b1c3fb8ea6992588b7873b73dbafe460bb1776ae33409ad458239545d0a8d0fd9dcb7f0024112b8b7f42df52c79441f13cbea0d07f53fded36531a601640e75ebf2bed56676b3700c74d1ca801e6d09e5bda0691b884774557a1db29592f955f5ba06c4f40a1c487b310163929800ccc44462bcefd7421bbfe8e0345c34616f16333e03a5d71de432c355d5519956d0830e02045e379eb689142a"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 11:08:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "ca5c3db77ba1ec526155477bd87d669493697819cf51635bee740c58b3eca4ca9e1787e5e72747b3e7090c1b0d759afb5d37122424701775038ea453cee438cfdc677dca52fa68838ad77d536aff8e3cee3c11644fda8f2bcde154af37155db9a02326058c48103c8b32b712bb3f65428c4fc9a2a3ce830f10f0f51e4ae4c03f18ed11de11f647632610be6ba16233b429e568e5324b58a4a5b574b2494f5dde3603345b7d70baba62b30ead38a38056f560bd5634073167296e48fe7c56e37d5d828cfe76231166955ebd744d234e5a2f6ffe6614fce748ed48d77c9d5e5dcb738598c543d3c8550ded7fb7e24bffbf206a0e56c18901eacf33f8c9abbe87ddec25e4d28db33ab19eea6617c7069618e9690091be4dfa50259fd5ae7147f0ad46217dc73525ef5bae2698ccf5ade002e35152f6534e0781356ae1f3180ca4d804088c676f1e8b571fc4a0f50b3f3b4f27b2d081aea17852ab3d60f28e2ebda2d74012e2e5d476f42f46c79ae83c0a3db3281decd0e4c70ed79958f6799e84a90cb380cdcc9d0dd3d780dee8a9c59085ecc2163dca4068232a39d9f58edb7d056f24b8493970428ad8fba0dcfe1ad9b771935979c9ba025a85d16ab4e1aba467589327f8fc41e0f57361f961216efc841a8708145e5f0ee56a7237f772f6b0ef75e415d779b3a5c7c4e0a66089578c5a3c843ce8f91d1e76526de26313107894a35e9a65308ae2580e2f7f1095698003209902e80277533b55ef347610c0f7f4027ef92f2af428ec57b09ab0ccbca45c4cb8ec3fe29fdef484ad704fb2c9f96239fdc717db165f78b66755d4e1d2845a3c759baab11d89df0a28eb942db0b105ab656a4c229af3daa7f2b93970f5c2510b505ae233483064683c9f7b868d06a9543b0e04131797ae17e3b4656c139ae2e01ed7a53ee31210617bd4accce1956dec698c683833c4f3fba78c44f41c186b4281880724c99c0f6c2dabd7f15bd379db9798e5c2d9f78e8c3ce425f346ee31b72236cac78050f1e6697f4346e1ae14712b661a0aa5c235f529ded95aa6abdad4ddca4722d2574b7d3893f0afe636c25e70e0b959b4d7812a611b1b0693666df461b4cf6d61f10cc6572efb6678e6de86ad98780c14dde99a136482995f1b266401e50e2c123c15352e2d370f298717e1e47e2f12abf4ece10365529bb2881acc485489a1dc012facaf31009368af717f2047285eeccf28c9703fb39bc3c99a6eacf6299a1cea19797ca12b8060a2087388178f0822a4df8b010994296790e9faa73161521a98cd19f8d7cd7210eb9eeb6c8646c3c93b31d40170dfec0730bd20bdea3a09b08570315c9a1b72b2bef0ac55646ddc9abecc5633c79314fc9987a2f98468c989e8ce27e5335dc478effae437ef0268d4542772c4512809d6679ad68869315b73c9ed6ecf1f6cb4d7ab1bfe8c2704b8655d30471d15910a899ea855b7e9a9745b0e5c529515fcc7abfbbf011c5ab1104e57656ec0b84f6962fd01668ec1f7d81af9485cd10bd7794a4e900b79d95ec1d2d901f6db8eb68e9b84c39b1dcd774c3122475ac467786313462c7867ad84138434105e2bbfc669136bcf0a81094a9fb1282517fde7507492b8cc1967dc211dc20942c9132c6ee724bcefc15fc7fa2ee616288dfc51bb5e22cac9e7c2bf0d78b2934f356fcdb8a0f76b2713861738644da8465ac0969d909d0cdc228a0a0dd5fd8a2c63ea950a113404ca41073797b60cff2708f5ae4e201aa5edc2b0fd9880613700b2dc4b9f705e5ad019bbdc2ee67be4b5a346711e0a9e44540463f0a1641f66c495fb131489cd43ed9c86944ccd5474c95ef2f507edde037a3fee9cab836bea9a9937ba0943b5dcb2e237e62132613f3dcfed03ff3118776f2dcca9cc9d9a50ef713aaa657d2424236ed5c0fc31191e563989cc3e9dc45ee2347cd7262c23b24ca975df6d0cca803b8d2d361be50590fb678c26253f50f2f17da3f9155e7d9bc2387c7f80af8fb91ccefe7608335ad73e70f74a3c976e3b9ed43f8edaa623d2f72cf24fec6ee73d96113b4b60e97ae13ffe666f60204f68ea485baf7524337571b79a74316159387b8819b3a42ac01704a90415156ab33d7853589740b95aec8b291289d7b6b103a094f31250b3182f51f98aaabdb05cfd463d9f02a0f722adb9b713265d263b5b6412ef9efa52e9909720301785c648bdf04300f470e78c21cafd258509038665a573c45766356b3a1180cd947f8132b0c0e9d23a4ff58688b10220160cd599b34df796fd05406688bfbe90a65f3d283f22b096d978618f4a66744e1ad6c73c6cb4991e254c823a8005e1bf72a619078a8157e8df46693d6afebb20dc90883c5158803e9ad13058c5f7934453f9cafd20c596a75d37db0d5bce1afeadd9d71c32d7bba1b7da0bc86a2cbb936ab3ffb413b5fdbfbf5ee41e8a406bbd2dd9748c1f736b51a64f274c588d6f9eeae9c41a2651e2643bd1673302e118d673fd3a27a3fed71a53c626cf8379877acee7fa807aeb6254008a02476864c0c6424ab41b8411cd54d767eda068077a4db1b6fb32187def1cfd73f8dd16f382b53b28bacb12fef77b98ab7ce7b32abfab74a624a9732756705cd7c86c6bedeecb6d05dedc02c97cc60020cad93c2bf7733f21aa1aedb7b1e8386225a72b1ebad2a5302c8016dca944e2a7cdd659a8586a5508b5cab6aca336caa8b86cd5193c9cc8b55cf6b96db93e0911a7a87b39ecbf1f0ea8ffab7f252a0b376c804737313ea9d01def208f9a56a48e51fa649557e63c4b9e36fe675393c8e4febd1513a29b01767d80efa1e234daa564751af1cc91e36d2a677e9c16656705ccc20e9109ef1e99787e37f450586d6f2b3f7172d862120b6c76c5773e66f4f9e9f8c7af6bd7663cce37178c26aeb4ea04e48666cb3026639a1d06cc6d7ccafc9a62111fa1ee7f131034ada097a2c027330fe2bff898cba6dcf74365578ebb51056872dc3c49832a572849081b69c010f0f7be647798881d62db223f697f66f7427792f33f1dd1655c067fffa74fe28b4bb53f4c4ed2586b78ea7059dd9eb4ca34eea056cede74598e1a702971fa9dff14f27e56e7d11c4ae80cb6a33ff38dfe98305a7d5a03ccf5a75b4da215222f4c9ef54006c8d89de6f95d11d12574cf061e9c60d9e472bd04880aea988579df4a1e7ec2f7d214411a7e08024789c17a43e2ce73d511a9216baa7bbfffdbb137975d92b9a2d55de8e8979943cd9cad90497d870d8c71863cea279f4d8118f64000c253258342d58a65f0e2ed154ce50d98098f24f124f9099bf0b990721e14ccf249f3ef81bd8bd7442d36869005d374275a36f0fa956b9605cd7ff61b80ab54e12189e2fa560a317eaad213ac5c1cf3c357585c7f2bbae33d39e6edef9441e65397ab7e0c40f0d4cd9774846e1ca4c2db6962a8c2028afb12378be968d5754931b1e7196002438598020242c79aced2666c80e06c2154d7fa26ead633693f1457d7d45c52f19924770f9513fe8b4e8554f3ca14fad96d08ca671039bb15081c9cdc7745b8443a7a72cf3eb78dcf4f2197b7f498fe949bca9d103775bb8592d322ec5d08609531b7ca6b55fae429e7e9a418a5c9ebe07f2e06d7b828de24403be243e11c6473aed1da202606a114e1da3ebdd867c71e434c08e6e084cf49268b710e2380f183076633026e56a7d8851999b45885f970db2550c2652ad6e973429f66cca9c85da876027b93f6348175a43ddae9384dd1bd4600b5c25e395a1006f8a7debf27af521e7d5a40b25a6c5f3e81b5a9ca20fbbf03e50145151b11dcccf6ea4b21a15acd30d7097bf041f690c74e9a24c455aa856dddc04c0a5e305bdec25d2ae45805a97239d6482a3fb3cf3757ce6ac79b6fc3ff817d8e95bb4e6dd9d109331662cd31d980b4d86a1759c9d2508b7dcd1497b893088d406828886d4f368a354b7fd0b0e5b2aac7dab5af12916b5346db636361265f25b8f810075933879a58ac91c37e662863e9894e53f3465a7fa3bb01d730b259e50bbf8b1bf32cf9bd80cf3adc5f5eca10e8270d91c46a6d3f81f8929ba57310afc26e32580f1c772b6efa5b5659c4bcea0632c7837abcbf2773591a4e99929ea1c9140f2bc2756791ff6c7b235c2337e3a2d7aa1f67a90f87ccd0e320b9ed0e36ebb2d16f38518775a52a87abd304311b88d61bef8504262dda45b70cf0d3fe57ff9671ec4b71e9d77c1e1b60dc0318afd4f8677a241e351bb9aa1013e8e7ac1fc438bf819a22cf024c77078c449097f601fdb15f11484233b2f519edc843100c9e403f8ca2fb8438a4ddcf571c51960ad00703f65ad3bbb66ba26cd3a7ab0c9d80fb43f4c469693faf98cdfd88d835f539b7835e8cad2751ae5385ffcc48ce389da59e566f8f23d1c45cff3b51a381989c988edb3d8be3ee557f64d5a6fd6f0286a4aca064e656cb48e28dc3536fdf66aaa6971a41b4351df55adbda855f9c7412e45707bf5d00a143d8ccc82073b2c4a76b28f10501333ff9c78abe6f640917677220d1aad8b73208be53eb87ecf07c8d928a5688d106dffa9e9b63d123c696465ebf8f31256bf3d6a3a25f83f34f914e3417e691884bd210c9f0d8a7dcb9da0e0d5278811cc614dae15962316541ecd21fa41ebf1bd879cd6d73c78f2992dc0c1d0f8e2c08338e545350e71d9f4d8bfcdf36cf54f195a8fcfa8855c4f912e2152f375fd51d30e69bc3a71646e08254c8c0ae132c1b38d4064a0890fc0955c48af405f1385eb75a681120b6d84dfca6a3b4fe6829c01ba09fd8f3b8cf5a31c101c521fc2a73151939d44f14ba59a736dd3b54bf31d0399da6ab45eeeab295985fbaaef04dc94e8dc9871d5941adc286fd61374a4e19dca45d44affc7a7a58bd8333861c1dfebeb30e33a3ea1d3a75f23f7404e43b1817392b9b59f95f989cb2eac0ea9a7300fd74da55f5f4288d0dccc90de13a4cf14cdf4cf0f23bf1219418a55e60da5cf81a4b3e8bed4cfbdebf5cb1b92db92291a493e4be0213503f9c2c9ea38edd6f47907ea4541946cbc1451ab3280c949252350ed40b6040ba1bf74d216ecc81413dc912c7175a6459dda9e6db7caa5c7d0b38ea90abd68ffdf200468d87424836fc1e854b0ed64c2193ff57c23b54163a7b916a5081fee9fae8599be6e241a163adf8bf7e6f2f100a656502c904bc7bcfe52980bba5a8f7c0c6f62732203018299b0fe93673a8cdc720a7cf4fe3193b9e751afce14e86eaa10fe65f2b9cb8a7da71eba1005c8001a0fc13f456120ec3a700ed133272084ae78c3cfb96eb1568cb92e3601bb95fac693efe465982da2c4ea81df2ceb5307a53c50220b12015a1974c9290b719b912afa4e53c83ce4f65db8f371312c94a5cb104f526ced28ad791d9c4ad5138a989ff40bc2abf28f916ae76268b1c3fb8ea6992588b7873b73dbafe460bb1776ae33409ad458239545d0a8d0fd9dcb7f0024112b8b7f42df52c79441f13cbea0d07f53fded36531a601640e75ebf2bed56676b3700c74d1ca801e6d09e5bda0691b884774557a1db29592f955f5ba06c4f40a1c487b310163929800ccc44462bcefd7421bbfe8e0345c34616f16333e03a5d71de432c355d5519956d0830e02045e379eb689142a"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) 11:08:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) getsockname$inet6(r2, &(0x7f00000001c0), &(0x7f0000000340)=0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000003c0)=0x5, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3}) 11:08:25 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="ff24df814dcaacc18bca956c55f123b7acfddab0d2c02635645520e4c2c1fbd739", 0x21) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='Pev ', 0x0) ftruncate(r1, 0x200739) sendfile(r0, r1, 0x0, 0xa00004000000004) 11:08:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) 11:08:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) 11:08:25 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000800)={0x0, 0x7, 0xf9f, "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"}, 0xfa7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340), 0x4) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000780)={[{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x54f6, 0x6000000000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x4, 0x400}]}) r1 = getpid() add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000001c0)={0xd9a, {0x7, 0x0, 0x1, 0x0, 0x76a, 0x4}}) keyctl$assume_authority(0x10, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) msgget(0xffffffffffffffff, 0x20c) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffffb}}, 0x28) ptrace(0x10, r1) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ptrace$pokeuser(0x6, r1, 0x388, 0x3ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcf, 0x0, 0x0) [ 2677.074373] syz-executor3 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2677.086673] syz-executor3 cpuset=syz3 mems_allowed=0 [ 2677.100941] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2677.117118] CPU: 0 PID: 6372 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2677.125638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2677.134995] Call Trace: [ 2677.137591] dump_stack+0x244/0x39d [ 2677.141248] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2677.146482] ? mark_held_locks+0x130/0x130 [ 2677.150749] ? mark_held_locks+0x130/0x130 [ 2677.155002] dump_header+0x27b/0xf72 [ 2677.158738] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.164322] ? check_preemption_disabled+0x48/0x280 [ 2677.169345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.174891] ? pagefault_out_of_memory+0x197/0x197 [ 2677.179821] ? debug_smp_processor_id+0x1c/0x20 [ 2677.184496] ? perf_trace_lock+0x14d/0x7a0 [ 2677.188770] ? debug_smp_processor_id+0x1c/0x20 [ 2677.193444] ? perf_trace_lock_acquire+0x15b/0x800 [ 2677.198423] ? lock_is_held_type+0x210/0x210 [ 2677.202857] ? perf_trace_lock+0x7a0/0x7a0 [ 2677.207103] ? debug_smp_processor_id+0x1c/0x20 [ 2677.211800] ? perf_trace_lock+0x14d/0x7a0 [ 2677.216058] ? graph_lock+0x270/0x270 [ 2677.219870] ? print_usage_bug+0xc0/0xc0 [ 2677.223941] ? lock_is_held_type+0x210/0x210 [ 2677.228380] ? find_held_lock+0x36/0x1c0 [ 2677.232494] ? mark_held_locks+0xc7/0x130 [ 2677.236653] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2677.241769] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2677.246875] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2677.251467] ? trace_hardirqs_on+0xbd/0x310 [ 2677.255818] ? kasan_check_read+0x11/0x20 [ 2677.260001] ? ___ratelimit+0x3b4/0x672 [ 2677.264002] ? trace_hardirqs_off_caller+0x300/0x300 [ 2677.269125] ? trace_hardirqs_on+0x310/0x310 [ 2677.273585] ? lock_downgrade+0x900/0x900 [ 2677.277776] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2677.282895] ? ___ratelimit+0x3b9/0x672 [ 2677.286884] ? idr_get_free+0xf70/0xf70 [ 2677.290881] ? _raw_spin_unlock_irq+0x27/0x80 [ 2677.295431] ? _raw_spin_unlock_irq+0x27/0x80 [ 2677.299956] oom_kill_process.cold.27+0x10/0x903 [ 2677.304754] ? _raw_spin_unlock_irq+0x27/0x80 [ 2677.309258] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2677.313852] ? oom_evaluate_task+0x540/0x540 [ 2677.318277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.323828] ? cgroup_procs_next+0x70/0x70 [ 2677.328079] ? _raw_spin_unlock_irq+0x60/0x80 [ 2677.332640] ? oom_badness+0xaa0/0xaa0 [ 2677.336551] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2677.341314] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2677.346861] ? mem_cgroup_iter_break+0x30/0x30 [ 2677.351485] ? cgroup_file_notify+0x226/0x2f0 [ 2677.356022] out_of_memory+0xa7f/0x1430 [ 2677.360010] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2677.364713] ? kasan_check_read+0x11/0x20 [ 2677.368875] ? oom_killer_disable+0x3a0/0x3a0 [ 2677.373428] mem_cgroup_out_of_memory+0x15e/0x210 [ 2677.378284] ? memory_oom_group_write+0x160/0x160 [ 2677.383168] ? mem_cgroup_try_charge+0x627/0xe20 [ 2677.387950] ? page_counter_try_charge+0x1c1/0x220 [ 2677.392920] try_charge+0xdcd/0x1720 [ 2677.396659] ? kasan_check_read+0x11/0x20 [ 2677.400854] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2677.405549] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2677.411101] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2677.416653] ? lock_page_memcg+0x350/0x350 [ 2677.420913] ? lock_acquire+0x1ed/0x520 [ 2677.424895] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2677.430268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.435817] ? check_preemption_disabled+0x48/0x280 [ 2677.440965] ? kasan_check_read+0x11/0x20 [ 2677.445125] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2677.450437] ? rcu_softirq_qs+0x20/0x20 [ 2677.454444] mem_cgroup_try_charge+0x627/0xe20 [ 2677.459037] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2677.464601] ? mem_cgroup_protected+0xa60/0xa60 [ 2677.469304] ? shmem_getattr+0x2c0/0x2c0 [ 2677.473391] ? shmem_getpage_gfp+0x1f7d/0x4840 [ 2677.477990] ? _raw_spin_unlock_irq+0x27/0x80 [ 2677.482494] ? _raw_spin_unlock_irq+0x27/0x80 [ 2677.487003] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2677.491605] ? trace_hardirqs_on+0xbd/0x310 [ 2677.495937] ? kasan_check_read+0x11/0x20 [ 2677.500112] ? trace_hardirqs_off_caller+0x300/0x300 [ 2677.505234] ? lock_downgrade+0x900/0x900 [ 2677.509400] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2677.514351] shmem_getpage_gfp+0x186b/0x4840 [ 2677.518811] ? shmem_add_to_page_cache+0x1950/0x1950 [ 2677.523924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.529486] ? activate_page+0xa3a/0x1040 [ 2677.533649] ? rotate_reclaimable_page+0x1380/0x1380 [ 2677.538777] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2677.543802] ? ktime_get+0x2c1/0x400 [ 2677.547534] ? ktime_get_raw_ts64+0x4d0/0x4d0 [ 2677.552056] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2677.556756] ? kernel_sendpage+0x93/0xf0 [ 2677.560820] ? sock_sendpage+0x8c/0xc0 [ 2677.564735] ? pipe_to_sendpage+0x2d0/0x400 [ 2677.569077] ? __splice_from_pipe+0x38b/0x7c0 [ 2677.573577] ? splice_from_pipe+0x1ec/0x340 [ 2677.577902] ? direct_splice_actor+0x128/0x190 [ 2677.582508] ? do_splice_direct+0x2d4/0x420 [ 2677.586837] ? do_sendfile+0x62a/0xe20 [ 2677.590728] ? __x64_sys_sendfile64+0x1fd/0x250 [ 2677.595426] ? mem_cgroup_charge_skmem+0x240/0x410 [ 2677.600369] ? print_usage_bug+0xc0/0xc0 [ 2677.604443] ? __lock_acquire+0x62f/0x4c20 [ 2677.608675] ? check_preemption_disabled+0x48/0x280 [ 2677.613755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2677.619297] ? mark_page_accessed+0xcaf/0x2040 [ 2677.623893] ? activate_page+0x1040/0x1040 [ 2677.628132] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2677.633850] ? page_mapping+0x5a2/0xa50 [ 2677.637829] ? __page_mapcount+0x580/0x580 [ 2677.642080] ? mark_held_locks+0x130/0x130 [ 2677.646322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2677.651858] ? __set_page_dirty_no_writeback+0x3c9/0x6c0 [ 2677.657309] ? do_writepages+0x1a0/0x1a0 [ 2677.661374] ? __lock_acquire+0x62f/0x4c20 [ 2677.665615] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.671151] ? check_preemption_disabled+0x48/0x280 [ 2677.676162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.681718] ? lock_is_held_type+0x210/0x210 [ 2677.686125] ? do_writepages+0x1a0/0x1a0 [ 2677.690197] ? set_page_dirty+0x639/0x1030 [ 2677.694478] ? __writepage+0xe0/0xe0 [ 2677.698223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.703767] ? perf_trace_lock+0x14d/0x7a0 [ 2677.707999] ? debug_smp_processor_id+0x1c/0x20 [ 2677.712668] ? perf_trace_lock_acquire+0x15b/0x800 [ 2677.717614] ? lock_is_held_type+0x210/0x210 [ 2677.722041] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2677.727090] ? sanity+0x23c/0x340 [ 2677.730564] ? kasan_check_write+0x14/0x20 [ 2677.734804] ? copy_page_to_iter+0x5a4/0x1000 [ 2677.739329] ? perf_trace_sched_process_exec+0x860/0x860 [ 2677.744813] ? aa_file_perm+0x469/0x1060 [ 2677.748887] shmem_file_read_iter+0x399/0x1010 [ 2677.753490] ? shmem_mfill_atomic_pte+0x2850/0x2850 [ 2677.758505] ? aa_file_perm+0x490/0x1060 [ 2677.762584] ? inet_sendmsg+0x690/0x690 [ 2677.766567] ? aa_path_link+0x5e0/0x5e0 [ 2677.770549] ? kernel_sendpage+0x9a/0xf0 [ 2677.774602] ? inet_sendmsg+0x690/0x690 [ 2677.778595] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2677.784145] ? page_cache_pipe_buf_release+0x1e3/0x310 [ 2677.789461] ? page_cache_pipe_buf_steal+0x860/0x860 [ 2677.794562] ? pipe_to_sendpage+0x2d8/0x400 [ 2677.798902] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2677.803740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.809275] ? splice_from_pipe_next.part.11+0x296/0x340 [ 2677.814742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2677.820289] ? fsnotify+0x50e/0xef0 [ 2677.823990] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2677.829007] ? iov_iter_pipe+0xbb/0x2f0 [ 2677.832992] generic_file_splice_read+0x5a2/0x9a0 [ 2677.837837] ? add_to_pipe+0x360/0x360 [ 2677.841776] ? rw_verify_area+0x118/0x360 [ 2677.845964] ? add_to_pipe+0x360/0x360 [ 2677.849875] do_splice_to+0x12e/0x190 [ 2677.853680] splice_direct_to_actor+0x270/0x8f0 [ 2677.858369] ? pipe_to_sendpage+0x400/0x400 [ 2677.862729] ? do_splice_to+0x190/0x190 [ 2677.866710] ? security_file_permission+0x1c2/0x220 [ 2677.871730] ? rw_verify_area+0x118/0x360 [ 2677.875879] do_splice_direct+0x2d4/0x420 [ 2677.880043] ? splice_direct_to_actor+0x8f0/0x8f0 [ 2677.884927] ? apparmor_file_permission+0x24/0x30 [ 2677.889779] ? rw_verify_area+0x118/0x360 [ 2677.893932] do_sendfile+0x62a/0xe20 [ 2677.897654] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2677.902254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2677.907838] ? put_timespec64+0x10f/0x1b0 [ 2677.911993] ? do_syscall_64+0x9a/0x820 [ 2677.916012] ? do_syscall_64+0x9a/0x820 [ 2677.920034] __x64_sys_sendfile64+0x1fd/0x250 [ 2677.924527] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 2677.929119] do_syscall_64+0x1b9/0x820 [ 2677.933020] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2677.938437] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2677.943379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2677.948232] ? trace_hardirqs_on_caller+0x310/0x310 [ 2677.953263] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2677.958283] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2677.963305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2677.968201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2677.973411] RIP: 0033:0x457569 [ 2677.976604] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2677.995513] RSP: 002b:00007f31d95c2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2678.003234] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2678.010502] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2678.017769] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2678.025039] R10: 0a00004000000004 R11: 0000000000000246 R12: 00007f31d95c36d4 [ 2678.032305] R13: 00000000004c3c2a R14: 00000000004d63d0 R15: 00000000ffffffff [ 2678.046537] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 2678.071639] netlink: 'syz-executor4': attribute type 2 has an invalid length. 11:08:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) [ 2678.117472] Task in /syz3 killed as a result of limit of /syz3 [ 2678.124090] memory: usage 307200kB, limit 307200kB, failcnt 1312 [ 2678.131127] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.138416] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.145557] Memory cgroup stats for /syz3: cache:4220KB rss:259000KB rss_huge:241664KB shmem:3984KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:3792KB active_anon:259260KB inactive_file:192KB active_file:80KB unevictable:24KB 11:08:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) [ 2678.199731] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 2678.263249] Memory cgroup out of memory: Kill process 22464 (syz-executor3) score 120 or sacrifice child [ 2678.274127] Killed process 22464 (syz-executor3) total-vm:70468kB, anon-rss:4252kB, file-rss:32768kB, shmem-rss:0kB 11:08:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) [ 2678.307622] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2678.355660] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 2678.358547] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2678.371283] CPU: 1 PID: 6370 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2678.379788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.389139] Call Trace: [ 2678.391738] dump_stack+0x244/0x39d [ 2678.395393] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2678.400600] dump_header+0x27b/0xf72 [ 2678.404331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2678.409875] ? check_preemption_disabled+0x48/0x280 [ 2678.414900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2678.420451] ? pagefault_out_of_memory+0x197/0x197 [ 2678.425395] ? debug_smp_processor_id+0x1c/0x20 [ 2678.430077] ? perf_trace_lock+0x14d/0x7a0 [ 2678.434340] ? debug_smp_processor_id+0x1c/0x20 [ 2678.439022] ? perf_trace_lock_acquire+0x15b/0x800 [ 2678.443966] ? lock_is_held_type+0x210/0x210 [ 2678.448383] ? perf_trace_lock+0x7a0/0x7a0 [ 2678.452626] ? debug_smp_processor_id+0x1c/0x20 [ 2678.457330] ? perf_trace_lock+0x14d/0x7a0 [ 2678.461601] ? graph_lock+0x270/0x270 [ 2678.465440] ? print_usage_bug+0xc0/0xc0 [ 2678.469504] ? lock_is_held_type+0x210/0x210 [ 2678.473898] ? perf_trace_lock+0x7a0/0x7a0 [ 2678.478120] ? find_held_lock+0x36/0x1c0 [ 2678.482188] ? mark_held_locks+0xc7/0x130 [ 2678.486340] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2678.491441] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2678.496545] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2678.501246] ? trace_hardirqs_on+0xbd/0x310 [ 2678.505566] ? kasan_check_read+0x11/0x20 [ 2678.509731] ? ___ratelimit+0x3b4/0x672 [ 2678.513707] ? trace_hardirqs_off_caller+0x300/0x300 [ 2678.518795] ? trace_hardirqs_on+0x310/0x310 [ 2678.523202] ? lock_downgrade+0x900/0x900 [ 2678.527383] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2678.532485] ? ___ratelimit+0x3b9/0x672 [ 2678.536437] ? idr_get_free+0xf70/0xf70 [ 2678.540388] ? _raw_spin_unlock_irq+0x27/0x80 [ 2678.544866] ? _raw_spin_unlock_irq+0x27/0x80 [ 2678.549346] oom_kill_process.cold.27+0x10/0x903 [ 2678.554100] ? _raw_spin_unlock_irq+0x27/0x80 [ 2678.558577] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2678.563159] ? oom_evaluate_task+0x540/0x540 [ 2678.567545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2678.573064] ? cgroup_procs_next+0x70/0x70 [ 2678.577340] ? _raw_spin_unlock_irq+0x60/0x80 [ 2678.581849] ? oom_badness+0xaa0/0xaa0 [ 2678.585720] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2678.590456] ? mem_cgroup_iter_break+0x30/0x30 [ 2678.595043] ? mark_held_locks+0xc7/0x130 [ 2678.599199] out_of_memory+0xa7f/0x1430 [ 2678.603181] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2678.607745] ? kasan_check_read+0x11/0x20 [ 2678.611876] ? oom_killer_disable+0x3a0/0x3a0 [ 2678.616360] mem_cgroup_out_of_memory+0x15e/0x210 [ 2678.621182] ? memory_oom_group_write+0x160/0x160 [ 2678.626033] ? mem_cgroup_try_charge+0x627/0xe20 [ 2678.630804] ? page_counter_try_charge+0x1c1/0x220 [ 2678.635754] try_charge+0xdcd/0x1720 [ 2678.639451] ? kasan_check_read+0x11/0x20 [ 2678.643602] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2678.648256] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2678.653781] ? lock_page_memcg+0x350/0x350 [ 2678.658015] ? lock_acquire+0x1ed/0x520 [ 2678.661988] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2678.667328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2678.672860] ? check_preemption_disabled+0x48/0x280 [ 2678.677858] ? kasan_check_read+0x11/0x20 [ 2678.681988] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2678.687262] ? rcu_softirq_qs+0x20/0x20 [ 2678.691225] mem_cgroup_try_charge+0x627/0xe20 [ 2678.695788] ? __anon_vma_prepare+0x325/0x6c0 [ 2678.700288] ? mem_cgroup_protected+0xa60/0xa60 [ 2678.704970] ? up_write+0x7b/0x220 [ 2678.708511] ? down_write_nested+0x130/0x130 [ 2678.712927] ? __anon_vma_prepare+0x353/0x6c0 [ 2678.717410] ? mark_held_locks+0x130/0x130 [ 2678.721654] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2678.727219] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2678.732184] __handle_mm_fault+0x284e/0x5be0 [ 2678.736613] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2678.741467] ? lock_is_held_type+0x210/0x210 [ 2678.745881] ? perf_trace_lock+0x7a0/0x7a0 [ 2678.750100] ? perf_trace_lock+0x7a0/0x7a0 [ 2678.754326] ? lock_downgrade+0x900/0x900 [ 2678.758481] ? graph_lock+0x270/0x270 [ 2678.762268] ? graph_lock+0x270/0x270 [ 2678.766061] ? find_held_lock+0x36/0x1c0 [ 2678.770111] ? handle_mm_fault+0x42a/0xc70 [ 2678.774351] ? lock_downgrade+0x900/0x900 [ 2678.778485] ? check_preemption_disabled+0x48/0x280 [ 2678.783493] ? kasan_check_read+0x11/0x20 [ 2678.787654] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2678.792915] ? rcu_read_unlock_special+0x370/0x370 [ 2678.797830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2678.803349] ? check_preemption_disabled+0x48/0x280 [ 2678.808353] handle_mm_fault+0x54f/0xc70 [ 2678.812402] ? __handle_mm_fault+0x5be0/0x5be0 [ 2678.816983] ? find_vma+0x34/0x190 [ 2678.820523] __do_page_fault+0x5d6/0xe40 [ 2678.824565] ? trace_hardirqs_off+0xb8/0x310 [ 2678.828959] do_page_fault+0xed/0x7d1 [ 2678.832759] ? vmalloc_sync_all+0x30/0x30 [ 2678.836920] ? error_entry+0x70/0xd0 [ 2678.840631] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2678.845645] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2678.850568] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2678.855498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2678.860335] ? trace_hardirqs_on_caller+0x310/0x310 [ 2678.865365] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2678.870802] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2678.875800] ? page_fault+0x8/0x30 [ 2678.879350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2678.884200] ? page_fault+0x8/0x30 [ 2678.887738] page_fault+0x1e/0x30 [ 2678.891201] RIP: 0033:0x40ec7f [ 2678.894376] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2678.913272] RSP: 002b:00007ffd86dd2530 EFLAGS: 00010206 [ 2678.918616] RAX: 00007fc12fe13000 RBX: 0000000000020000 RCX: 00000000004575ba [ 2678.925882] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2678.933150] RBP: 00007ffd86dd2610 R08: ffffffffffffffff R09: 0000000000000000 [ 2678.940400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd86dd26f0 [ 2678.947668] R13: 00007fc12fe33700 R14: 0000000000000006 R15: 0000000000000001 [ 2678.957322] Task in /syz1 killed as a result of limit of /syz1 [ 2678.963420] memory: usage 307184kB, limit 307200kB, failcnt 1054 [ 2678.969576] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.976407] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2678.982623] Memory cgroup stats for /syz1: cache:11020KB rss:256344KB rss_huge:233472KB shmem:4676KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:6140KB active_anon:238640KB inactive_file:204KB active_file:56KB unevictable:22408KB 11:08:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 11:08:27 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) ftruncate(r1, 0x100000000) 11:08:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8}]}, 0x1c}}, 0x0) 11:08:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000102) [ 2679.005072] Memory cgroup out of memory: Kill process 31801 (syz-executor1) score 1106 or sacrifice child [ 2679.014863] Killed process 31801 (syz-executor1) total-vm:70336kB, anon-rss:2208kB, file-rss:33628kB, shmem-rss:0kB [ 2679.026530] oom_reaper: reaped process 31801 (syz-executor1), now anon-rss:0kB, file-rss:32796kB, shmem-rss:0kB [ 2679.038972] oom_reaper: reaped process 6355 (syz-executor0), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB 11:08:27 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) dup2(r0, r1) 11:08:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) [ 2679.136966] netlink: 'syz-executor4': attribute type 2 has an invalid length. 11:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) 11:08:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000102) 11:08:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 11:08:27 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x80040080045010, 0x0) 11:08:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 11:08:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) 11:08:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) read$eventfd(r3, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) [ 2679.353529] netlink: 'syz-executor4': attribute type 4 has an invalid length. 11:08:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000102) 11:08:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x4, 0xfffffff0}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 11:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) 11:08:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 11:08:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) 11:08:28 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) shutdown(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000102) [ 2679.504619] bridge0: port 2(bridge_slave_1) entered disabled state [ 2679.512483] bridge0: port 1(bridge_slave_0) entered disabled state [ 2679.536093] netlink: 'syz-executor4': attribute type 4 has an invalid length. 11:08:28 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)) 11:08:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 11:08:28 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0008) r2 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x21}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) 11:08:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0/file0\x00', 0x3fffa, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) utime(&(0x7f0000001880)='./file0\x00', &(0x7f0000000440)={0xffffffff, 0x91c2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0xffffffffffffffff, 0x0) setsockopt$packet_buf(r2, 0x107, 0x7, &(0x7f0000000400)="db1050c922", 0x5) r3 = socket(0x10, 0x2, 0x0) mount(&(0x7f0000000300), &(0x7f0000001840)='./file0\x00', &(0x7f0000000580)='ubifs\x00', 0x1003, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="d9e0954cbf2937284ae87dba98d899c8a506c1b93608525486752ffe7c2ac972610300000000000086eb4e8e0ebe60ebe0fb692d185c28d723b96c531c636e00a72b5b832cd03f09334b91bb"], 0x0, 0x0, 0x59a8a8c793e70182, 0x0) r4 = fcntl$getown(r1, 0x9) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="c3ba8fbe8c796647830805dd7092f734ee08000000000000000200540040000000000075"], 0x0, 0x0, 0x5010, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') sendfile(r3, r5, &(0x7f0000000000), 0x80000002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r6 = getegid() r7 = getuid() fchown(r2, r7, r6) mkdir(&(0x7f0000000480)='./file0\x00', 0xa0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000015c0)={@in6={{0xa, 0x4e22, 0x2, @remote, 0x4}}, 0x6, 0x9, 0xfd, "96c1ba742ddc1c664a1929edecdd05b31b3d084e1b7074d8f7d08a56656d21866825899e97d0ce22528bc8df547ebfe78b59265ce2a784bc0be6bd632bed5d075297feee3f57ddea54db110dff56c08a"}, 0xd8) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') r9 = syz_open_procfs(r4, &(0x7f0000000640)="6eff0ee7f8aa65742f986060") ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f00000018c0)={0x80000000, 0xc0000}) sendfile(r1, r9, &(0x7f0000000100)=0xffffffd, 0x4007ffffffb) fstatfs(r0, &(0x7f00000001c0)=""/216) 11:08:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x1, 0xffffffffffffffff) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xfdffffff, 0x10000204c00) fcntl$setstatus(r3, 0x4, 0x7000) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000140)={0x0, 0x77a, 0x1, 0x2, 0x1, 0x80000000}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240), 0x10) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r1, r4, &(0x7f0000002440), 0x2000005) [ 2679.789154] netlink: 'syz-executor4': attribute type 4 has an invalid length. [ 2679.914870] audit: type=1800 audit(1543748908.579:5337): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=17361 res=0 [ 2682.439108] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.445592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.452353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.458757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.476327] device bridge0 entered promiscuous mode [ 2682.515866] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.522366] bridge0: port 1(bridge_slave_0) entered disabled state [ 2682.532835] device bridge0 left promiscuous mode 11:08:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r1, 0x3, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x1c}}, 0x0) 11:08:31 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)) 11:08:31 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:08:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, &(0x7f0000000780)=""/16, 0x10}, 0x1000000}], 0x1, 0x0, &(0x7f0000007d80)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ptype\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 11:08:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) read$eventfd(r3, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) 11:08:31 executing program 2: io_setup(0x0, 0xffffffffffffffff) [ 2682.736267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.742657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2682.749272] bridge0: port 1(bridge_slave_0) entered blocking state [ 2682.755682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2682.763041] device bridge0 entered promiscuous mode [ 2682.825382] netlink: 'syz-executor4': attribute type 4 has an invalid length. 11:08:31 executing program 2: io_setup(0x0, 0xffffffffffffffff) 11:08:31 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)) [ 2682.929270] dccp_invalid_packet: P.Data Offset(66) too large 11:08:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_open_dev$adsp(0x0, 0x37, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)) 11:08:31 executing program 2: io_setup(0x0, 0xffffffffffffffff) 11:08:31 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000280)) 11:08:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_open_dev$adsp(0x0, 0x37, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)) 11:08:32 executing program 2: io_setup(0x0, 0xffffffffffffffff) 11:08:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x0) [ 2683.622497] dccp_invalid_packet: P.Data Offset(66) too large [ 2684.844886] bridge0: port 2(bridge_slave_1) entered disabled state [ 2684.851534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2684.858154] device bridge0 left promiscuous mode 11:08:33 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 2685.052922] bridge0: port 2(bridge_slave_1) entered blocking state [ 2685.059338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2685.066516] bridge0: port 1(bridge_slave_0) entered blocking state [ 2685.072914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2685.079632] device bridge0 entered promiscuous mode 11:08:33 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 11:08:33 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) read$eventfd(r3, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) 11:08:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x0) 11:08:33 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:08:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_open_dev$adsp(0x0, 0x37, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)) [ 2685.142609] dccp_invalid_packet: P.Data Offset(66) too large 11:08:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x0) [ 2685.285510] dccp_invalid_packet: P.Data Offset(66) too large [ 2685.292804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2685.300208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2685.358797] device bridge0 left promiscuous mode 11:08:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) syz_open_dev$adsp(0x0, 0x37, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)) 11:08:34 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) 11:08:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x0) 11:08:34 executing program 4: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000200)) readv(r0, &(0x7f0000000180), 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 2685.703485] IPVS: ftp: loaded support on port[0] = 21 [ 2685.709263] dccp_invalid_packet: P.Data Offset(66) too large [ 2686.381838] bridge0: port 2(bridge_slave_1) entered blocking state [ 2686.388308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2686.395089] bridge0: port 1(bridge_slave_0) entered blocking state [ 2686.401477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2686.408366] device bridge0 entered promiscuous mode [ 2686.968629] bridge0: port 1(bridge_slave_0) entered blocking state [ 2686.975178] bridge0: port 1(bridge_slave_0) entered disabled state [ 2686.982843] device bridge_slave_0 entered promiscuous mode [ 2687.014244] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.021654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2687.028589] device bridge_slave_1 entered promiscuous mode [ 2687.058679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 2687.091453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 2687.183482] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2687.216100] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2687.357752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 2687.365233] team0: Port device team_slave_0 added [ 2687.394945] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 2687.402519] team0: Port device team_slave_1 added [ 2687.433913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2687.467560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 2687.474816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2687.483300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2687.510013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 2687.517122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2687.526203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2687.552388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 2687.559419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2687.568699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2687.859203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.865583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2687.872323] bridge0: port 1(bridge_slave_0) entered blocking state [ 2687.878663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2687.886976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 2688.471422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2688.956613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2689.061618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 2689.173936] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 2689.180081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2689.188742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2689.292490] 8021q: adding VLAN 0 to HW filter on device team0 11:08:38 executing program 4: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:38 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r2 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f00000003c0)={0x1, 0x3ff}) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x84000) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000bc0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000180)=0x7, 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) read$eventfd(r3, &(0x7f0000000200), 0x8) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000240)) 11:08:38 executing program 5: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:38 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:38 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) [ 2690.150862] bridge0: port 2(bridge_slave_1) entered disabled state [ 2690.158275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.204698] device bridge0 left promiscuous mode 11:08:38 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 11:08:39 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x400000000000003}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 11:08:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_CREATE_VCPU(r0, 0xc00c5512, 0x0) 11:08:39 executing program 5: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:39 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_CREATE_VCPU(r0, 0xc00c5512, 0x0) 11:08:39 executing program 4: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_CREATE_VCPU(r0, 0xc00c5512, 0x0) 11:08:40 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:40 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:40 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_CREATE_VCPU(r0, 0xc00c5512, 0x0) 11:08:40 executing program 5: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 11:08:40 executing program 4: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000380), &(0x7f00000003c0), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000980)={@mcast2}, &(0x7f00000009c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x3, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'security\x00'}, &(0x7f0000000180)=0x54) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 2692.014837] bridge0: port 2(bridge_slave_1) entered blocking state [ 2692.021343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2692.027942] bridge0: port 1(bridge_slave_0) entered blocking state [ 2692.034364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2692.041456] device bridge0 entered promiscuous mode [ 2692.047471] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 11:08:40 executing program 0: r0 = socket$inet6(0xa, 0x80b, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x181000, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x1f) bind(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000600)={0x103ff, 0x0, &(0x7f00007f9000/0x4000)=nil}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000500)={0x9f0000, 0x3e840000000, 0xf9, [], &(0x7f0000000100)={0xbb0b6d, 0x17d, [], @value=0xffffffffffffffc1}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setresuid(r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000680)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x50000802}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0900363f272fbba9bddbdf250100000008000100000000000c0008000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000180)={{0x7f, 0x9, 0x5, 0x1, 0x8, 0x7}, 0xc183, 0x1f2, 0xffffffffffffffbc, 0xffffffffffff0000, 0x0, "05d50ef9fdd30b164dddb2ba5fe1ef5bb4ae22723a5a35e32b2446737839bcc099c6264831de3aadcd6e8bea24f394e41893fb63729b3c7ae8f3db44bad73020ceb8ec94ac86a31e5512aa321e9ee01f5be29bf68b81b379f05e73f9b749b7da12d2c2f515ad7f4f91339a5a1a5da73c68fe5aae44e5272f83186ec00f1ac83b"}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x10005, 0x0, &(0x7f0000862000/0x4000)=nil}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000240)={[{0x6, 0x3, 0x2, 0x40, 0x3e, 0x0, 0x3ff, 0x20, 0x400, 0x8, 0x9, 0x3ff, 0xfff}, {0x6, 0x200, 0x48000000000000, 0x3, 0x7, 0x0, 0x7fffffff, 0x8, 0xdc, 0x16d, 0x100, 0x39d0, 0x10000}, {0xffffffff, 0x80, 0x4, 0x82d8, 0x9, 0x7ff, 0x1, 0xe39, 0xffffffffffffffff, 0x6, 0x7, 0x0, 0x7}], 0x7}) 11:08:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000095c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000019) 11:08:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/255, 0xff, 0x0, &(0x7f0000000280)=@nl, 0x80) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) dup(0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x4) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x93000}], 0x200000000000000f, 0x0) 11:08:41 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000095c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000019) 11:08:41 executing program 0: r0 = socket$inet6(0xa, 0x80b, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x181000, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x1f) bind(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000600)={0x103ff, 0x0, &(0x7f00007f9000/0x4000)=nil}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000500)={0x9f0000, 0x3e840000000, 0xf9, [], &(0x7f0000000100)={0xbb0b6d, 0x17d, [], @value=0xffffffffffffffc1}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setresuid(r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000680)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x50000802}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0900363f272fbba9bddbdf250100000008000100000000000c0008000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000180)={{0x7f, 0x9, 0x5, 0x1, 0x8, 0x7}, 0xc183, 0x1f2, 0xffffffffffffffbc, 0xffffffffffff0000, 0x0, "05d50ef9fdd30b164dddb2ba5fe1ef5bb4ae22723a5a35e32b2446737839bcc099c6264831de3aadcd6e8bea24f394e41893fb63729b3c7ae8f3db44bad73020ceb8ec94ac86a31e5512aa321e9ee01f5be29bf68b81b379f05e73f9b749b7da12d2c2f515ad7f4f91339a5a1a5da73c68fe5aae44e5272f83186ec00f1ac83b"}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x10005, 0x0, &(0x7f0000862000/0x4000)=nil}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000240)={[{0x6, 0x3, 0x2, 0x40, 0x3e, 0x0, 0x3ff, 0x20, 0x400, 0x8, 0x9, 0x3ff, 0xfff}, {0x6, 0x200, 0x48000000000000, 0x3, 0x7, 0x0, 0x7fffffff, 0x8, 0xdc, 0x16d, 0x100, 0x39d0, 0x10000}, {0xffffffff, 0x80, 0x4, 0x82d8, 0x9, 0x7ff, 0x1, 0xe39, 0xffffffffffffffff, 0x6, 0x7, 0x0, 0x7}], 0x7}) 11:08:41 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 11:08:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x7, "a514edcfb55013f36e1206a7535e71aaaa51837e3b553acf8e6e1b154146c6fb"}) 11:08:41 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2693.059348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:08:41 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) 11:08:41 executing program 0: r0 = socket$inet6(0xa, 0x80b, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x181000, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x1f) bind(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000600)={0x103ff, 0x0, &(0x7f00007f9000/0x4000)=nil}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000500)={0x9f0000, 0x3e840000000, 0xf9, [], &(0x7f0000000100)={0xbb0b6d, 0x17d, [], @value=0xffffffffffffffc1}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setresuid(r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000680)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x50000802}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0900363f272fbba9bddbdf250100000008000100000000000c0008000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000180)={{0x7f, 0x9, 0x5, 0x1, 0x8, 0x7}, 0xc183, 0x1f2, 0xffffffffffffffbc, 0xffffffffffff0000, 0x0, "05d50ef9fdd30b164dddb2ba5fe1ef5bb4ae22723a5a35e32b2446737839bcc099c6264831de3aadcd6e8bea24f394e41893fb63729b3c7ae8f3db44bad73020ceb8ec94ac86a31e5512aa321e9ee01f5be29bf68b81b379f05e73f9b749b7da12d2c2f515ad7f4f91339a5a1a5da73c68fe5aae44e5272f83186ec00f1ac83b"}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x10005, 0x0, &(0x7f0000862000/0x4000)=nil}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000240)={[{0x6, 0x3, 0x2, 0x40, 0x3e, 0x0, 0x3ff, 0x20, 0x400, 0x8, 0x9, 0x3ff, 0xfff}, {0x6, 0x200, 0x48000000000000, 0x3, 0x7, 0x0, 0x7fffffff, 0x8, 0xdc, 0x16d, 0x100, 0x39d0, 0x10000}, {0xffffffff, 0x80, 0x4, 0x82d8, 0x9, 0x7ff, 0x1, 0xe39, 0xffffffffffffffff, 0x6, 0x7, 0x0, 0x7}], 0x7}) 11:08:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x7, "a514edcfb55013f36e1206a7535e71aaaa51837e3b553acf8e6e1b154146c6fb"}) 11:08:41 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000095c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000019) 11:08:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:42 executing program 4: pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x40189206, &(0x7f0000000180)) [ 2693.379200] bridge0: port 2(bridge_slave_1) entered disabled state [ 2693.386225] bridge0: port 1(bridge_slave_0) entered disabled state 11:08:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x7, "a514edcfb55013f36e1206a7535e71aaaa51837e3b553acf8e6e1b154146c6fb"}) 11:08:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000095c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000019) [ 2693.422182] device bridge0 left promiscuous mode 11:08:42 executing program 1: unshare(0x8040400) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r0, 0x1262, 0x0) 11:08:42 executing program 0: r0 = socket$inet6(0xa, 0x80b, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x2000005, 0x100010, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x181000, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000340)=0x1f) bind(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000600)={0x103ff, 0x0, &(0x7f00007f9000/0x4000)=nil}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000500)={0x9f0000, 0x3e840000000, 0xf9, [], &(0x7f0000000100)={0xbb0b6d, 0x17d, [], @value=0xffffffffffffffc1}}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) setresuid(r6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000fc4ffb)='eth0\x00') ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000680)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x50000802}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0900363f272fbba9bddbdf250100000008000100000000000c0008000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r9, 0x800448d3, &(0x7f0000000180)={{0x7f, 0x9, 0x5, 0x1, 0x8, 0x7}, 0xc183, 0x1f2, 0xffffffffffffffbc, 0xffffffffffff0000, 0x0, "05d50ef9fdd30b164dddb2ba5fe1ef5bb4ae22723a5a35e32b2446737839bcc099c6264831de3aadcd6e8bea24f394e41893fb63729b3c7ae8f3db44bad73020ceb8ec94ac86a31e5512aa321e9ee01f5be29bf68b81b379f05e73f9b749b7da12d2c2f515ad7f4f91339a5a1a5da73c68fe5aae44e5272f83186ec00f1ac83b"}) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x10005, 0x0, &(0x7f0000862000/0x4000)=nil}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f0000000240)={[{0x6, 0x3, 0x2, 0x40, 0x3e, 0x0, 0x3ff, 0x20, 0x400, 0x8, 0x9, 0x3ff, 0xfff}, {0x6, 0x200, 0x48000000000000, 0x3, 0x7, 0x0, 0x7fffffff, 0x8, 0xdc, 0x16d, 0x100, 0x39d0, 0x10000}, {0xffffffff, 0x80, 0x4, 0x82d8, 0x9, 0x7ff, 0x1, 0xe39, 0xffffffffffffffff, 0x6, 0x7, 0x0, 0x7}], 0x7}) 11:08:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0xffffffe7}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r1, 0x0, r4, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000440), 0xffffff6b) write$selinux_attr(r2, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) 11:08:42 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6287, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x7, "a514edcfb55013f36e1206a7535e71aaaa51837e3b553acf8e6e1b154146c6fb"}) 11:08:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') geteuid() preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:08:42 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 11:08:42 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:08:42 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 11:08:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:43 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 11:08:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:08:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') geteuid() preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:08:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:43 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0xffffffe7}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r1, 0x0, r4, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000440), 0xffffff6b) write$selinux_attr(r2, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) 11:08:43 executing program 0: capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000000)) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) 11:08:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2694.750551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2694.761471] bridge0: port 1(bridge_slave_0) entered disabled state 11:08:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:08:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') geteuid() preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:08:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0xffffffe7}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r1, 0x0, r4, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000440), 0xffffff6b) write$selinux_attr(r2, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) 11:08:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0), 0x4) 11:08:44 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 11:08:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3553800000}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000280)={'ip6gretap0\x00', @ifru_flags=0x601}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e21, 0x0, @ipv4}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}, 0x2, [0x0, 0x6cd, 0x6d8a, 0x0, 0x0, 0x0, 0x9, 0x309]}, 0x5c) r2 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={"6272696467653000000100"}) 11:08:44 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) recvmmsg(0xffffffffffffff9c, &(0x7f0000002ac0)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000200)=""/54, 0x36}], 0x2, 0x0, 0x0, 0x400}, 0x4}, {{&(0x7f0000000400)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, &(0x7f0000000600)=""/29, 0x1d, 0xffffffffffffff24}, 0x9}, {{&(0x7f0000000640), 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x80000001}, 0x5}, {{&(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f00000023c0)=""/1, 0x1}], 0x6, 0x0, 0x0, 0x3}}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/15, 0xf}], 0x4, &(0x7f0000002700)=""/47, 0x2f, 0x2}}, {{&(0x7f0000002740)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/191, 0xbf}], 0x1, &(0x7f00000028c0)=""/11, 0xb, 0x400}, 0x3}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)}], 0x1, &(0x7f0000002a80), 0x0, 0x57}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000002cc0)={0x77359400}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002d00)={0x0, 0x5e, "90a6d286b4e2329b096ac76b834f007ea1c3efe1846daf4e5da9ba6d4b8a712e93411735c7c7fb99ca0921e9c66684b9ce16a34fbc2a3df1b1ad21a05b199b1db86eabfa7be90dbefc7de4b54b9df40c9895142cec58a9b8552a8d1835ab"}, &(0x7f0000002d80)=0x66) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002dc0)={r1, 0x2, 0x3, 0xcf2f, 0x5, 0x7f}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002980)='/dev/full\x00', 0x40000, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000002a80)='syz1\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x10000000002) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$P9_ROPEN(r3, &(0x7f0000000080)={0xfffffffffffffe9d, 0x71, 0x0, {{0x7f, 0x0, 0xb}, 0x9}}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) 11:08:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2d6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"74756e6c300042b5abd3a915edee00"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:08:45 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket(0x80000000a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000400)=""/157, 0x9d) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00'}) [ 2696.633643] sysfs: Unknown parameter './file0' 11:08:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') geteuid() preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 11:08:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:45 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r2, &(0x7f0000000140)={0xffffffe7}, 0x50) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xffffff6b) splice(r1, 0x0, r4, 0x0, 0xffffbfffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000440), 0xffffff6b) write$selinux_attr(r2, &(0x7f0000000300)='system_u:object_r:urandom_device_t:s0\x00', 0x26) 11:08:45 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket(0x80000000a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000400)=""/157, 0x9d) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00'}) 11:08:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:45 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket(0x80000000a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000400)=""/157, 0x9d) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00'}) 11:08:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) recvmmsg(0xffffffffffffff9c, &(0x7f0000002ac0)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000200)=""/54, 0x36}], 0x2, 0x0, 0x0, 0x400}, 0x4}, {{&(0x7f0000000400)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, &(0x7f0000000600)=""/29, 0x1d, 0xffffffffffffff24}, 0x9}, {{&(0x7f0000000640), 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x80000001}, 0x5}, {{&(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f00000023c0)=""/1, 0x1}], 0x6, 0x0, 0x0, 0x3}}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/15, 0xf}], 0x4, &(0x7f0000002700)=""/47, 0x2f, 0x2}}, {{&(0x7f0000002740)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/191, 0xbf}], 0x1, &(0x7f00000028c0)=""/11, 0xb, 0x400}, 0x3}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)}], 0x1, &(0x7f0000002a80), 0x0, 0x57}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000002cc0)={0x77359400}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002d00)={0x0, 0x5e, "90a6d286b4e2329b096ac76b834f007ea1c3efe1846daf4e5da9ba6d4b8a712e93411735c7c7fb99ca0921e9c66684b9ce16a34fbc2a3df1b1ad21a05b199b1db86eabfa7be90dbefc7de4b54b9df40c9895142cec58a9b8552a8d1835ab"}, &(0x7f0000002d80)=0x66) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002dc0)={r1, 0x2, 0x3, 0xcf2f, 0x5, 0x7f}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002980)='/dev/full\x00', 0x40000, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000002a80)='syz1\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x10000000002) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$P9_ROPEN(r3, &(0x7f0000000080)={0xfffffffffffffe9d, 0x71, 0x0, {{0x7f, 0x0, 0xb}, 0x9}}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) 11:08:46 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socket(0x80000000a, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00', &(0x7f0000000400)=""/157, 0x9d) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00'}) 11:08:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)="e91f7189591e9233614b00", 0x7, 0x0, 0x0, 0x0, 0x0) 11:08:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2a29a6ccb8412d43385dec1ae7e3d2c21a7b73e992108cd8ea3d28599a3dfb89b4ba5d3e2d6bf8642dadc9314058d14956f600f6df4e349a57911414a9b0525"], 0x40) 11:08:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 1: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x2b, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x2, 0x253, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:08:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000280)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) 11:08:46 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2a29a6ccb8412d43385dec1ae7e3d2c21a7b73e992108cd8ea3d28599a3dfb89b4ba5d3e2d6bf8642dadc9314058d14956f600f6df4e349a57911414a9b0525"], 0x40) 11:08:46 executing program 1: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x2b, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x2, 0x253, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:08:47 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) recvmmsg(0xffffffffffffff9c, &(0x7f0000002ac0)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000200)=""/54, 0x36}], 0x2, 0x0, 0x0, 0x400}, 0x4}, {{&(0x7f0000000400)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, &(0x7f0000000600)=""/29, 0x1d, 0xffffffffffffff24}, 0x9}, {{&(0x7f0000000640), 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x80000001}, 0x5}, {{&(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f00000023c0)=""/1, 0x1}], 0x6, 0x0, 0x0, 0x3}}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/15, 0xf}], 0x4, &(0x7f0000002700)=""/47, 0x2f, 0x2}}, {{&(0x7f0000002740)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/191, 0xbf}], 0x1, &(0x7f00000028c0)=""/11, 0xb, 0x400}, 0x3}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)}], 0x1, &(0x7f0000002a80), 0x0, 0x57}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000002cc0)={0x77359400}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002d00)={0x0, 0x5e, "90a6d286b4e2329b096ac76b834f007ea1c3efe1846daf4e5da9ba6d4b8a712e93411735c7c7fb99ca0921e9c66684b9ce16a34fbc2a3df1b1ad21a05b199b1db86eabfa7be90dbefc7de4b54b9df40c9895142cec58a9b8552a8d1835ab"}, &(0x7f0000002d80)=0x66) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002dc0)={r1, 0x2, 0x3, 0xcf2f, 0x5, 0x7f}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002980)='/dev/full\x00', 0x40000, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000002a80)='syz1\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x10000000002) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$P9_ROPEN(r3, &(0x7f0000000080)={0xfffffffffffffe9d, 0x71, 0x0, {{0x7f, 0x0, 0xb}, 0x9}}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) 11:08:47 executing program 1: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x2b, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x2, 0x253, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:08:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x2, 0x880) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7, 0xa000}, 0x4) r2 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={"6272696467653000000100"}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x100000000, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x10f, 0x5, 0x1, "bbefb3941557d8d0902957e1aec113b9", "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"}, 0x10f, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000002c0)={0x3}, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x490000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000009c0)={@loopback}, 0x20) 11:08:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2a29a6ccb8412d43385dec1ae7e3d2c21a7b73e992108cd8ea3d28599a3dfb89b4ba5d3e2d6bf8642dadc9314058d14956f600f6df4e349a57911414a9b0525"], 0x40) [ 2698.454978] bridge0: port 2(bridge_slave_1) entered blocking state [ 2698.461748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2698.469939] bridge0: port 1(bridge_slave_0) entered blocking state [ 2698.477125] bridge0: port 1(bridge_slave_0) entered forwarding state 11:08:47 executing program 1: syz_emit_ethernet(0x642, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x223, 0x2b, 0x0, @local={0xfe, 0x8a00, [0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634]}, @local, {[], @tcp={{0x2, 0x253, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 11:08:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x12, r0, 0x0) ioctl(r0, 0x1, &(0x7f00000002c0)) 11:08:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285") ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0x57) 11:08:47 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000000), 0xe) dup3(r0, r1, 0x0) 11:08:47 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2a29a6ccb8412d43385dec1ae7e3d2c21a7b73e992108cd8ea3d28599a3dfb89b4ba5d3e2d6bf8642dadc9314058d14956f600f6df4e349a57911414a9b0525"], 0x40) 11:08:47 executing program 5: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) recvmmsg(0xffffffffffffff9c, &(0x7f0000002ac0)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000200)=""/54, 0x36}], 0x2, 0x0, 0x0, 0x400}, 0x4}, {{&(0x7f0000000400)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, &(0x7f0000000600)=""/29, 0x1d, 0xffffffffffffff24}, 0x9}, {{&(0x7f0000000640), 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000880)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x80000001}, 0x5}, {{&(0x7f0000001140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002400)=[{&(0x7f00000011c0)=""/69, 0x45}, {&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/169, 0xa9}, {&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f00000023c0)=""/1, 0x1}], 0x6, 0x0, 0x0, 0x3}}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)}, {&(0x7f0000002600)=""/107, 0x6b}, {&(0x7f0000002680)=""/15, 0xf}], 0x4, &(0x7f0000002700)=""/47, 0x2f, 0x2}}, {{&(0x7f0000002740)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000002880)=[{&(0x7f00000027c0)=""/191, 0xbf}], 0x1, &(0x7f00000028c0)=""/11, 0xb, 0x400}, 0x3}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002980)}], 0x1, &(0x7f0000002a80), 0x0, 0x57}, 0x7fffffff}], 0x7, 0x10000, &(0x7f0000002cc0)={0x77359400}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002d00)={0x0, 0x5e, "90a6d286b4e2329b096ac76b834f007ea1c3efe1846daf4e5da9ba6d4b8a712e93411735c7c7fb99ca0921e9c66684b9ce16a34fbc2a3df1b1ad21a05b199b1db86eabfa7be90dbefc7de4b54b9df40c9895142cec58a9b8552a8d1835ab"}, &(0x7f0000002d80)=0x66) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002dc0)={r1, 0x2, 0x3, 0xcf2f, 0x5, 0x7f}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000002980)='/dev/full\x00', 0x40000, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000002a80)='syz1\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0x10000000002) r3 = dup3(0xffffffffffffffff, r0, 0x80000) write$P9_ROPEN(r3, &(0x7f0000000080)={0xfffffffffffffe9d, 0x71, 0x0, {{0x7f, 0x0, 0xb}, 0x9}}, 0x18) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) [ 2698.671194] device bridge0 entered promiscuous mode 11:08:47 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) [ 2698.772352] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 11:08:47 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 2698.825345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2698.857569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2698.864132] bridge0: port 1(bridge_slave_0) entered disabled state 11:08:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) [ 2698.938513] device bridge0 left promiscuous mode 11:08:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x2, 0x880) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7, 0xa000}, 0x4) r2 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={"6272696467653000000100"}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x100000000, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x10f, 0x5, 0x1, "bbefb3941557d8d0902957e1aec113b9", "5ad0462b6d422c91609454e84a3c43f2a29cfa451ae6156c861c24fd85baa415b6c5133f36ed8ca7e249d08d54b9901ff2db035fa91bfdf808e3aeaa9fe1f1aef7fa8aab7fb2abd3196b5fa2ad0b26da5e47e312eee2a40ceffce38ba289f2b1675adc549c391e87d5c019608ae16a344bc8f562b3f540709dfe91cca7179a2f57b15fc5016c1375a402cb4e75ed912fba762a130e734c36fd17ba1f9c551a00f23b150cc9727ef968d0ff588efe8b100846e1f1dd7ce2102e0b903605dd6cda589023d78f2760917d024e800b3909a11ae5d7f4334f0341c06496da8197685dce5ba8961faad556e3f51e24d36a46c9de5f00d68cde4209606b"}, 0x10f, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000002c0)={0x3}, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x490000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000009c0)={@loopback}, 0x20) 11:08:48 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) [ 2699.388184] bridge0: port 2(bridge_slave_1) entered blocking state [ 2699.394643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2699.401431] bridge0: port 1(bridge_slave_0) entered blocking state [ 2699.407875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2699.421801] device bridge0 entered promiscuous mode 11:08:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000636000)=0x2, 0x4) 11:08:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285") ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0x57) 11:08:48 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 2699.572888] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2699.573279] bridge0: port 2(bridge_slave_1) entered disabled state [ 2699.591228] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.592583] syz-executor1 cpuset=syz1 mems_allowed=0 11:08:48 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 2699.656765] device bridge0 left promiscuous mode [ 2699.694722] CPU: 1 PID: 7164 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2699.703226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2699.712575] Call Trace: [ 2699.715166] dump_stack+0x244/0x39d [ 2699.718806] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2699.724025] ? mark_held_locks+0x130/0x130 [ 2699.728276] ? mark_held_locks+0x130/0x130 [ 2699.732527] dump_header+0x27b/0xf72 [ 2699.736263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2699.741814] ? check_preemption_disabled+0x48/0x280 [ 2699.746853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2699.752419] ? pagefault_out_of_memory+0x197/0x197 [ 2699.757395] ? debug_smp_processor_id+0x1c/0x20 [ 2699.762094] ? perf_trace_lock+0x14d/0x7a0 [ 2699.766345] ? debug_smp_processor_id+0x1c/0x20 [ 2699.771048] ? perf_trace_lock_acquire+0x15b/0x800 [ 2699.775983] ? lock_is_held_type+0x210/0x210 [ 2699.780396] ? perf_trace_lock+0x7a0/0x7a0 [ 2699.784632] ? debug_smp_processor_id+0x1c/0x20 [ 2699.789298] ? perf_trace_lock+0x14d/0x7a0 [ 2699.793549] ? graph_lock+0x270/0x270 [ 2699.797395] ? print_usage_bug+0xc0/0xc0 [ 2699.801483] ? lock_is_held_type+0x210/0x210 [ 2699.805968] ? find_held_lock+0x36/0x1c0 [ 2699.810059] ? mark_held_locks+0xc7/0x130 [ 2699.814215] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2699.819425] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2699.824534] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2699.829122] ? trace_hardirqs_on+0xbd/0x310 [ 2699.833446] ? kasan_check_read+0x11/0x20 [ 2699.837612] ? ___ratelimit+0x3b4/0x672 [ 2699.841636] ? trace_hardirqs_off_caller+0x300/0x300 [ 2699.846758] ? trace_hardirqs_on+0x310/0x310 [ 2699.851173] ? lock_downgrade+0x900/0x900 [ 2699.855332] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2699.860473] ? ___ratelimit+0x3b9/0x672 [ 2699.864450] ? idr_get_free+0xf70/0xf70 [ 2699.868460] ? _raw_spin_unlock_irq+0x27/0x80 [ 2699.872962] ? _raw_spin_unlock_irq+0x27/0x80 [ 2699.877473] oom_kill_process.cold.27+0x10/0x903 [ 2699.882235] ? _raw_spin_unlock_irq+0x27/0x80 [ 2699.886769] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2699.891384] ? oom_evaluate_task+0x540/0x540 [ 2699.895823] ? cgroup_procs_next+0x70/0x70 [ 2699.900086] ? _raw_spin_unlock_irq+0x60/0x80 [ 2699.904588] ? oom_badness+0xaa0/0xaa0 [ 2699.908507] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2699.913266] ? mem_cgroup_iter_break+0x30/0x30 [ 2699.917864] ? mark_held_locks+0xc7/0x130 [ 2699.922017] out_of_memory+0xa7f/0x1430 [ 2699.925992] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2699.930584] ? kasan_check_read+0x11/0x20 [ 2699.934774] ? oom_killer_disable+0x3a0/0x3a0 [ 2699.939327] mem_cgroup_out_of_memory+0x15e/0x210 [ 2699.944187] ? memory_oom_group_write+0x160/0x160 [ 2699.949040] ? mem_cgroup_try_charge+0x627/0xe20 [ 2699.953831] ? page_counter_try_charge+0x1c1/0x220 [ 2699.958801] try_charge+0xdcd/0x1720 [ 2699.962536] ? kasan_check_read+0x11/0x20 [ 2699.966709] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2699.971409] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2699.976969] ? lock_page_memcg+0x350/0x350 [ 2699.981481] ? lock_acquire+0x1ed/0x520 [ 2699.985469] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2699.990879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2699.996444] ? check_preemption_disabled+0x48/0x280 [ 2700.001489] ? kasan_check_read+0x11/0x20 [ 2700.005642] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2700.010953] ? rcu_softirq_qs+0x20/0x20 [ 2700.014953] mem_cgroup_try_charge+0x627/0xe20 [ 2700.019542] ? mark_held_locks+0xc7/0x130 [ 2700.023713] ? mem_cgroup_protected+0xa60/0xa60 [ 2700.028413] ? wp_page_copy+0x187b/0x24f0 [ 2700.032568] ? lock_downgrade+0x900/0x900 [ 2700.036749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2700.041551] ? do_raw_spin_unlock+0xa7/0x330 [ 2700.045997] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2700.051550] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2700.056536] wp_page_copy+0x51d/0x24f0 [ 2700.060470] ? follow_pfn+0x2e0/0x2e0 [ 2700.064274] ? kvm_sched_clock_read+0x9/0x20 [ 2700.068717] ? mark_held_locks+0x130/0x130 [ 2700.072961] ? __asan_poison_stack_memory+0x37/0x40 [ 2700.077985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.083545] ? check_preemption_disabled+0x48/0x280 [ 2700.088571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.094116] ? check_preemption_disabled+0x48/0x280 [ 2700.099141] ? debug_smp_processor_id+0x1c/0x20 [ 2700.103826] ? perf_trace_lock+0x14d/0x7a0 [ 2700.108136] ? lock_is_held_type+0x210/0x210 [ 2700.112556] ? lock_is_held_type+0x210/0x210 [ 2700.116961] ? graph_lock+0x270/0x270 [ 2700.120780] ? graph_lock+0x270/0x270 [ 2700.124581] ? check_preemption_disabled+0x48/0x280 [ 2700.129631] ? graph_lock+0x270/0x270 [ 2700.133449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.139023] ? find_held_lock+0x36/0x1c0 [ 2700.143120] ? do_wp_page+0x518/0x2920 [ 2700.147020] ? lock_downgrade+0x900/0x900 [ 2700.151186] ? kasan_check_read+0x11/0x20 [ 2700.155339] ? do_raw_spin_unlock+0xa7/0x330 [ 2700.159765] ? do_raw_spin_trylock+0x270/0x270 [ 2700.164368] ? __pte_alloc_kernel+0x220/0x220 [ 2700.168884] do_wp_page+0x520/0x2920 [ 2700.172617] ? finish_mkwrite_fault+0x650/0x650 [ 2700.177314] ? perf_log_itrace_start+0x530/0x530 [ 2700.182083] ? print_usage_bug+0xc0/0xc0 [ 2700.186152] ? perf_trace_lock+0x14d/0x7a0 [ 2700.190430] ? __lock_acquire+0x62f/0x4c20 [ 2700.194709] ? mark_held_locks+0x130/0x130 [ 2700.198981] ? retint_kernel+0x2d/0x2d [ 2700.202878] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2700.207816] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2700.212583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.218125] ? check_preemption_disabled+0x48/0x280 [ 2700.223146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.228709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.234271] ? check_preemption_disabled+0x48/0x280 [ 2700.239299] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.244867] ? check_preemption_disabled+0x48/0x280 [ 2700.249900] ? debug_smp_processor_id+0x1c/0x20 [ 2700.254621] ? perf_trace_lock_acquire+0x15b/0x800 [ 2700.259583] ? print_usage_bug+0xc0/0xc0 [ 2700.263648] ? print_usage_bug+0xc0/0xc0 [ 2700.267744] ? print_usage_bug+0xc0/0xc0 [ 2700.271839] ? _raw_spin_unlock_irq+0x60/0x80 [ 2700.276350] ? finish_task_switch+0x1f4/0x920 [ 2700.280856] ? finish_task_switch+0x1b4/0x920 [ 2700.285362] ? __switch_to_asm+0x34/0x70 [ 2700.289441] ? __lock_acquire+0x62f/0x4c20 [ 2700.293721] ? lock_acquire+0x1ed/0x520 [ 2700.297720] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2700.302328] ? kasan_check_write+0x14/0x20 [ 2700.306581] ? do_raw_spin_lock+0x14f/0x350 [ 2700.310927] ? rwlock_bug.part.2+0x90/0x90 [ 2700.315161] ? __lock_acquire+0x62f/0x4c20 [ 2700.319430] __handle_mm_fault+0x3be9/0x5be0 [ 2700.323848] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2700.328700] ? lock_is_held_type+0x210/0x210 [ 2700.333143] ? perf_trace_lock+0x7a0/0x7a0 [ 2700.337382] ? perf_trace_lock+0x7a0/0x7a0 [ 2700.341631] ? print_usage_bug+0xc0/0xc0 [ 2700.345699] ? print_usage_bug+0xc0/0xc0 [ 2700.349816] ? graph_lock+0x270/0x270 [ 2700.353620] ? graph_lock+0x270/0x270 [ 2700.357440] ? find_held_lock+0x36/0x1c0 [ 2700.361555] ? handle_mm_fault+0x42a/0xc70 [ 2700.365834] ? lock_downgrade+0x900/0x900 [ 2700.369999] ? check_preemption_disabled+0x48/0x280 [ 2700.375024] ? kasan_check_read+0x11/0x20 [ 2700.379241] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2700.384520] ? rcu_read_unlock_special+0x370/0x370 [ 2700.389457] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.395005] ? check_preemption_disabled+0x48/0x280 [ 2700.400054] handle_mm_fault+0x54f/0xc70 [ 2700.404134] ? __handle_mm_fault+0x5be0/0x5be0 [ 2700.408748] ? find_vma+0x34/0x190 [ 2700.412315] __do_page_fault+0x5d6/0xe40 [ 2700.416407] do_page_fault+0xed/0x7d1 [ 2700.420225] ? vmalloc_sync_all+0x30/0x30 [ 2700.424383] ? error_entry+0x76/0xd0 [ 2700.428115] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2700.433140] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2700.438079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2700.442945] ? trace_hardirqs_on_caller+0x310/0x310 [ 2700.447968] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2700.453469] ? find_held_lock+0x36/0x1c0 [ 2700.457548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2700.462404] page_fault+0x1e/0x30 [ 2700.465866] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2700.471757] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2700.490666] RSP: 0018:ffff880120c2f298 EFLAGS: 00010206 [ 2700.496096] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 0000000000000b40 [ 2700.503514] RDX: 0000000000008000 RSI: ffff88019f9a74c0 RDI: 000000002050d000 [ 2700.510810] RBP: ffff880120c2f2d0 R08: 0000000000000000 R09: 0000000000000200 [ 2700.518104] R10: ffffed0033f34fff R11: ffff88019f9a7fff R12: 000000002050db40 [ 2700.525387] R13: 0000000020505b40 R14: ffff88019f9a0000 R15: 00007ffffffff000 [ 2700.532746] ? copyout+0xe4/0x100 [ 2700.536213] copy_page_to_iter+0x447/0x1000 [ 2700.540546] ? _copy_to_iter+0x1440/0x1440 [ 2700.544790] ? __lock_is_held+0xb5/0x140 [ 2700.548896] skb_copy_datagram_iter+0x653/0xc10 [ 2700.553582] ? __sk_queue_drop_skb+0x1f0/0x1f0 [ 2700.558174] ? refcount_dec_checked+0x70/0x70 [ 2700.562716] ? retint_kernel+0x2d/0x2d [ 2700.566622] unix_stream_read_actor+0x7e/0xc0 [ 2700.571143] unix_stream_read_generic+0xb6a/0x1f50 [ 2700.576097] ? unix_bind+0xf90/0xf90 [ 2700.579851] ? lock_downgrade+0x900/0x900 [ 2700.584027] ? lock_release+0xa10/0xa10 [ 2700.588026] ? perf_trace_sched_process_exec+0x860/0x860 [ 2700.593511] ? usercopy_warn+0x110/0x110 [ 2700.597591] ? perf_trace_sched_process_exec+0x860/0x860 [ 2700.603044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.608599] ? _copy_from_user+0xdf/0x150 [ 2700.612775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.618314] ? aa_label_sk_perm+0x91/0x100 [ 2700.622570] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2700.627499] ? aa_sk_perm+0x22b/0x8e0 [ 2700.631301] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.636838] ? import_iovec+0x2a3/0x4b0 [ 2700.640935] ? aa_af_perm+0x5a0/0x5a0 [ 2700.644758] unix_stream_recvmsg+0x1c3/0x2e0 [ 2700.649169] ? unix_stream_splice_read+0x480/0x480 [ 2700.654114] ? unix_set_peek_off+0x90/0x90 [ 2700.658351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2700.663901] ? security_socket_recvmsg+0x9c/0xc0 [ 2700.668679] ? unix_stream_splice_read+0x480/0x480 [ 2700.673619] sock_recvmsg+0xd0/0x110 [ 2700.677396] ? __sock_recv_ts_and_drops+0x420/0x420 [ 2700.682455] ___sys_recvmsg+0x2b6/0x680 [ 2700.686470] ? ___sys_sendmsg+0x930/0x930 [ 2700.690639] ? __fget_light+0x2e9/0x430 [ 2700.694638] ? fget_raw+0x20/0x20 [ 2700.698097] ? __might_fault+0x12b/0x1e0 [ 2700.702163] ? lock_downgrade+0x900/0x900 [ 2700.706317] ? lock_release+0xa10/0xa10 [ 2700.710308] ? perf_trace_sched_process_exec+0x860/0x860 [ 2700.715782] ? trace_hardirqs_off_caller+0x300/0x300 [ 2700.720903] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.726444] ? sockfd_lookup_light+0xc5/0x160 [ 2700.730953] __sys_recvmsg+0x11a/0x280 [ 2700.734844] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2700.739435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2700.744999] ? put_timespec64+0x10f/0x1b0 [ 2700.749173] ? do_syscall_64+0x9a/0x820 [ 2700.753165] ? do_syscall_64+0x9a/0x820 [ 2700.757174] ? trace_hardirqs_off_caller+0x300/0x300 [ 2700.762304] __x64_sys_recvmsg+0x78/0xb0 [ 2700.766405] do_syscall_64+0x1b9/0x820 [ 2700.770296] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2700.775665] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2700.780603] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2700.785450] ? trace_hardirqs_on_caller+0x310/0x310 [ 2700.790495] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2700.795514] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2700.800567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2700.805502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2700.810721] RIP: 0033:0x457569 [ 2700.813916] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2700.832815] RSP: 002b:00007fc12fe32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2700.840521] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2700.847789] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000005 [ 2700.855076] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2700.862339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe336d4 [ 2700.869623] R13: 00000000004c39a7 R14: 00000000004d5f50 R15: 00000000ffffffff 11:08:50 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 2701.605488] Task in /syz1 killed as a result of limit of /syz1 [ 2701.628855] memory: usage 307128kB, limit 307200kB, failcnt 1142 [ 2701.650802] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2701.658033] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2701.706193] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.712624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2701.719214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2701.721083] Memory cgroup stats for /syz1: cache:11020KB rss:257260KB rss_huge:233472KB shmem:4676KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:239608KB inactive_file:204KB active_file:64KB unevictable:22408KB [ 2701.725655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2701.728053] device bridge0 entered promiscuous mode [ 2701.748396] Memory cgroup out of memory: Kill process 26365 (syz-executor1) score 1106 or sacrifice child [ 2701.770428] Killed process 26365 (syz-executor1) total-vm:70336kB, anon-rss:2208kB, file-rss:33616kB, shmem-rss:0kB [ 2701.790525] oom_reaper: reaped process 26365 (syz-executor1), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB 11:08:50 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:50 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0x40405514, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 'syz1\x00'}) 11:08:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285") ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0x57) 11:08:50 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x2, 0x880) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7, 0xa000}, 0x4) r2 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={"6272696467653000000100"}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x100000000, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x10f, 0x5, 0x1, "bbefb3941557d8d0902957e1aec113b9", "5ad0462b6d422c91609454e84a3c43f2a29cfa451ae6156c861c24fd85baa415b6c5133f36ed8ca7e249d08d54b9901ff2db035fa91bfdf808e3aeaa9fe1f1aef7fa8aab7fb2abd3196b5fa2ad0b26da5e47e312eee2a40ceffce38ba289f2b1675adc549c391e87d5c019608ae16a344bc8f562b3f540709dfe91cca7179a2f57b15fc5016c1375a402cb4e75ed912fba762a130e734c36fd17ba1f9c551a00f23b150cc9727ef968d0ff588efe8b100846e1f1dd7ce2102e0b903605dd6cda589023d78f2760917d024e800b3909a11ae5d7f4334f0341c06496da8197685dce5ba8961faad556e3f51e24d36a46c9de5f00d68cde4209606b"}, 0x10f, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000002c0)={0x3}, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x490000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000009c0)={@loopback}, 0x20) [ 2702.007815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2702.015556] bridge0: port 1(bridge_slave_0) entered disabled state [ 2702.051733] device bridge0 left promiscuous mode 11:08:50 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:50 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:50 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:08:50 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x5385, &(0x7f00000000c0)={0x10, 0x0, 0x0, "0bd6c5d6f6a36a4b6272ca46ffd519c4"}) 11:08:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4040ae79, 0x0) [ 2703.022524] oom_reaper: reaped process 7206 (syz-executor1), now anon-rss:0kB, file-rss:32748kB, shmem-rss:0kB [ 2703.055980] syz-executor5 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 11:08:51 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)="0a5c2d0240316285") ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) read(r0, &(0x7f00000001c0)=""/196, 0x57) [ 2703.075034] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2703.095374] CPU: 1 PID: 7223 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2703.103877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2703.113228] Call Trace: [ 2703.115827] dump_stack+0x244/0x39d [ 2703.119479] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2703.124708] dump_header+0x27b/0xf72 [ 2703.128440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2703.134019] ? check_preemption_disabled+0x48/0x280 [ 2703.139064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2703.144621] ? pagefault_out_of_memory+0x197/0x197 [ 2703.149569] ? print_usage_bug+0xc0/0xc0 [ 2703.153655] ? perf_trace_lock+0x14d/0x7a0 [ 2703.157917] ? debug_smp_processor_id+0x1c/0x20 [ 2703.162606] ? perf_trace_lock_acquire+0x15b/0x800 [ 2703.167559] ? lock_is_held_type+0x210/0x210 [ 2703.171982] ? perf_trace_lock+0x7a0/0x7a0 [ 2703.176247] ? debug_smp_processor_id+0x1c/0x20 [ 2703.180958] ? perf_trace_lock+0x14d/0x7a0 [ 2703.185226] ? mark_held_locks+0xc7/0x130 [ 2703.189435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.194243] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2703.198839] ? retint_kernel+0x2d/0x2d [ 2703.202773] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2703.207757] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.212526] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2703.218002] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.222785] ? retint_kernel+0x2d/0x2d [ 2703.226715] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2703.231840] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2703.236951] ? ___ratelimit+0x3b9/0x672 [ 2703.240933] ? idr_get_free+0xf70/0xf70 [ 2703.244917] ? _raw_spin_unlock_irq+0x27/0x80 [ 2703.249420] ? _raw_spin_unlock_irq+0x27/0x80 [ 2703.253962] oom_kill_process.cold.27+0x10/0x903 [ 2703.258732] ? mark_held_locks+0xc7/0x130 [ 2703.262896] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.267664] ? oom_evaluate_task+0x540/0x540 [ 2703.272103] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.276869] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2703.282349] ? _raw_spin_unlock_irq+0x60/0x80 [ 2703.286875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.291669] ? retint_kernel+0x2d/0x2d [ 2703.295585] ? out_of_memory+0xa1c/0x1430 [ 2703.299749] out_of_memory+0xa7f/0x1430 [ 2703.303729] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2703.308321] ? kasan_check_read+0x11/0x20 [ 2703.312478] ? oom_killer_disable+0x3a0/0x3a0 [ 2703.316996] mem_cgroup_out_of_memory+0x15e/0x210 [ 2703.321862] ? memory_oom_group_write+0x160/0x160 [ 2703.326714] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2703.331571] ? page_counter_try_charge+0x1c1/0x220 [ 2703.336526] try_charge+0xdcd/0x1720 [ 2703.340263] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2703.344964] ? __rcu_read_unlock+0x205/0x210 [ 2703.349416] ? rcu_read_unlock_special+0x370/0x370 [ 2703.354417] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2703.359999] ? lock_page_memcg+0x350/0x350 [ 2703.364244] ? lock_acquire+0x1ed/0x520 [ 2703.368241] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2703.373627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2703.379183] ? check_preemption_disabled+0x48/0x280 [ 2703.384221] memcg_kmem_charge_memcg+0x7c/0x120 [ 2703.388892] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2703.393396] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2703.398936] ? rcu_pm_notify+0xc0/0xc0 [ 2703.402841] memcg_kmem_charge+0x149/0x350 [ 2703.407103] __alloc_pages_nodemask+0x89c/0xdd0 [ 2703.411811] ? retint_kernel+0x2d/0x2d [ 2703.415715] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2703.420757] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2703.426311] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2703.431098] ? retint_kernel+0x2d/0x2d [ 2703.435028] ? get_task_policy.part.40+0x29/0xb0 [ 2703.439807] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2703.445382] alloc_pages_current+0x173/0x350 [ 2703.449808] alloc_skb_with_frags+0x258/0x7d0 [ 2703.454333] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2703.459118] sock_alloc_send_pskb+0x87a/0xaf0 [ 2703.463630] ? kasan_check_read+0x11/0x20 [ 2703.467793] ? sock_wmalloc+0x1f0/0x1f0 [ 2703.471814] ? sk_send_sigurg+0x3c0/0x3c0 [ 2703.476006] ? kasan_check_read+0x11/0x20 [ 2703.480164] ? do_raw_spin_trylock+0x270/0x270 [ 2703.484754] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2703.489877] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2703.495026] unix_stream_sendmsg+0x6f7/0xd40 [ 2703.499474] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2703.504173] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2703.509110] ? apparmor_socket_sendmsg+0x29/0x30 [ 2703.513863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2703.519416] ? security_socket_sendmsg+0x94/0xc0 [ 2703.524173] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2703.528899] sock_sendmsg+0xd5/0x120 [ 2703.532614] sock_write_iter+0x35e/0x5c0 [ 2703.536698] ? sock_sendmsg+0x120/0x120 [ 2703.540696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2703.546229] ? iov_iter_init+0xe5/0x210 [ 2703.550207] __vfs_write+0x6b8/0x9f0 [ 2703.553940] ? kernel_read+0x120/0x120 [ 2703.557826] ? apparmor_path_rmdir+0x30/0x30 [ 2703.562264] ? trace_hardirqs_off_caller+0x300/0x300 [ 2703.567395] ? apparmor_file_permission+0x24/0x30 [ 2703.572245] ? rw_verify_area+0x118/0x360 [ 2703.576398] vfs_write+0x1fc/0x560 [ 2703.579973] ksys_write+0x101/0x260 [ 2703.583613] ? __ia32_sys_read+0xb0/0xb0 [ 2703.587675] ? trace_hardirqs_off_caller+0x300/0x300 [ 2703.592804] __x64_sys_write+0x73/0xb0 [ 2703.596700] do_syscall_64+0x1b9/0x820 [ 2703.600583] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2703.605960] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2703.610920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2703.615765] ? trace_hardirqs_on_caller+0x310/0x310 [ 2703.620779] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2703.625797] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2703.631342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2703.636208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2703.641407] RIP: 0033:0x457569 [ 2703.644600] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2703.663515] RSP: 002b:00007feb19bb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2703.671223] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2703.679157] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2703.686425] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2703.693717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb19bb96d4 [ 2703.700981] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2703.715342] Task in /syz5 killed as a result of limit of /syz5 [ 2703.727784] memory: usage 307200kB, limit 307200kB, failcnt 1057 [ 2703.735572] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2703.745114] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2703.752644] Memory cgroup stats for /syz5: cache:200KB rss:262332KB rss_huge:245760KB shmem:192KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:262428KB inactive_file:0KB active_file:0KB unevictable:28KB [ 2703.775501] Memory cgroup out of memory: Kill process 4025 (syz-executor5) score 1120 or sacrifice child [ 2703.786051] Killed process 4025 (syz-executor5) total-vm:70336kB, anon-rss:6304kB, file-rss:33636kB, shmem-rss:0kB [ 2703.803248] oom_reaper: reaped process 4025 (syz-executor5), now anon-rss:0kB, file-rss:32804kB, shmem-rss:0kB [ 2703.991742] bridge0: port 2(bridge_slave_1) entered blocking state [ 2703.998177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2704.005010] bridge0: port 1(bridge_slave_0) entered blocking state [ 2704.011431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2704.068896] device bridge0 entered promiscuous mode 11:08:52 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000}, 0x359) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) write(r1, &(0x7f0000000000), 0x4764) 11:08:52 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 11:08:52 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x40046104, &(0x7f0000000140)) 11:08:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x2, 0x880) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x7, 0xa000}, 0x4) r2 = socket(0xa, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={"6272696467653000000100"}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0)=0x100000000, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) lseek(r0, 0x0, 0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x10f, 0x5, 0x1, "bbefb3941557d8d0902957e1aec113b9", "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"}, 0x10f, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000002c0)={0x3}, 0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x490000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000009c0)={@loopback}, 0x20) [ 2704.392455] bridge0: port 2(bridge_slave_1) entered disabled state [ 2704.394673] syz-executor1 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2704.400435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2704.411485] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2704.422810] CPU: 0 PID: 7237 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2704.431309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:08:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) [ 2704.440676] Call Trace: [ 2704.443281] dump_stack+0x244/0x39d [ 2704.446971] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2704.452196] dump_header+0x27b/0xf72 [ 2704.455977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2704.461525] ? check_preemption_disabled+0x48/0x280 [ 2704.466545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2704.472092] ? pagefault_out_of_memory+0x197/0x197 [ 2704.477038] ? debug_smp_processor_id+0x1c/0x20 [ 2704.481764] ? perf_trace_lock+0x14d/0x7a0 [ 2704.486019] ? debug_smp_processor_id+0x1c/0x20 11:08:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000}, 0x359) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) write(r1, &(0x7f0000000000), 0x4764) [ 2704.490714] ? perf_trace_lock_acquire+0x15b/0x800 [ 2704.495662] ? lock_is_held_type+0x210/0x210 [ 2704.500340] ? perf_trace_lock+0x7a0/0x7a0 [ 2704.504605] ? debug_smp_processor_id+0x1c/0x20 [ 2704.509288] ? perf_trace_lock+0x14d/0x7a0 [ 2704.513561] ? graph_lock+0x270/0x270 [ 2704.517392] ? print_usage_bug+0xc0/0xc0 [ 2704.521475] ? lock_is_held_type+0x210/0x210 [ 2704.525900] ? perf_trace_lock+0x7a0/0x7a0 [ 2704.530141] ? find_held_lock+0x36/0x1c0 [ 2704.534260] ? mark_held_locks+0xc7/0x130 [ 2704.538461] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2704.543570] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2704.548672] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2704.553303] ? trace_hardirqs_on+0xbd/0x310 [ 2704.557644] ? kasan_check_read+0x11/0x20 [ 2704.561803] ? ___ratelimit+0x3b4/0x672 [ 2704.565804] ? trace_hardirqs_off_caller+0x300/0x300 [ 2704.566424] device bridge0 left promiscuous mode [ 2704.570914] ? trace_hardirqs_on+0x310/0x310 [ 2704.570929] ? lock_downgrade+0x900/0x900 [ 2704.570950] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2704.570971] ? ___ratelimit+0x3b9/0x672 [ 2704.570987] ? idr_get_free+0xf70/0xf70 [ 2704.571001] ? _raw_spin_unlock_irq+0x27/0x80 [ 2704.571015] ? _raw_spin_unlock_irq+0x27/0x80 [ 2704.571065] oom_kill_process.cold.27+0x10/0x903 [ 2704.571083] ? _raw_spin_unlock_irq+0x27/0x80 [ 2704.571100] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2704.571124] ? oom_evaluate_task+0x540/0x540 [ 2704.571139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2704.571158] ? cgroup_procs_next+0x70/0x70 [ 2704.571179] ? _raw_spin_unlock_irq+0x60/0x80 [ 2704.571208] ? oom_badness+0xaa0/0xaa0 11:08:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) [ 2704.571227] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2704.571244] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2704.571291] ? mem_cgroup_iter_break+0x30/0x30 [ 2704.571340] ? cgroup_file_notify+0x226/0x2f0 [ 2704.571358] out_of_memory+0xa7f/0x1430 [ 2704.666249] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2704.670837] ? kasan_check_read+0x11/0x20 [ 2704.675753] ? oom_killer_disable+0x3a0/0x3a0 [ 2704.680292] mem_cgroup_out_of_memory+0x15e/0x210 [ 2704.685144] ? memory_oom_group_write+0x160/0x160 [ 2704.689994] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2704.694881] ? page_counter_try_charge+0x1c1/0x220 [ 2704.699835] try_charge+0xdcd/0x1720 [ 2704.703584] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2704.708264] ? kasan_check_read+0x11/0x20 [ 2704.712415] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2704.717721] ? rcu_read_unlock_special+0x370/0x370 [ 2704.722703] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2704.728255] ? lock_page_memcg+0x350/0x350 [ 2704.732505] ? lock_acquire+0x1ed/0x520 [ 2704.736486] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2704.741854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2704.747445] ? check_preemption_disabled+0x48/0x280 [ 2704.752493] memcg_kmem_charge_memcg+0x7c/0x120 [ 2704.757168] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2704.761686] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2704.767289] ? rcu_pm_notify+0xc0/0xc0 [ 2704.771194] memcg_kmem_charge+0x149/0x350 [ 2704.775490] __alloc_pages_nodemask+0x89c/0xdd0 [ 2704.780179] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2704.785198] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2704.790749] ? __alloc_skb+0x4c1/0x770 [ 2704.794644] ? debug_smp_processor_id+0x1c/0x20 [ 2704.799359] ? perf_trace_lock+0x14d/0x7a0 [ 2704.803603] ? debug_smp_processor_id+0x1c/0x20 [ 2704.808284] ? perf_trace_lock_acquire+0x15b/0x800 [ 2704.813261] ? lock_is_held_type+0x210/0x210 [ 2704.817680] ? perf_trace_lock+0x7a0/0x7a0 [ 2704.821931] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2704.827514] alloc_pages_current+0x173/0x350 [ 2704.831933] alloc_skb_with_frags+0x258/0x7d0 [ 2704.836476] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2704.841249] sock_alloc_send_pskb+0x87a/0xaf0 [ 2704.845773] ? kasan_check_read+0x11/0x20 [ 2704.849945] ? sock_wmalloc+0x1f0/0x1f0 [ 2704.853973] ? sk_send_sigurg+0x3c0/0x3c0 [ 2704.858131] ? kasan_check_read+0x11/0x20 [ 2704.862339] ? do_raw_spin_trylock+0x270/0x270 [ 2704.866929] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2704.872060] unix_stream_sendmsg+0x6f7/0xd40 [ 2704.876511] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2704.881232] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2704.886179] ? apparmor_socket_sendmsg+0x29/0x30 [ 2704.890934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2704.896534] ? security_socket_sendmsg+0x94/0xc0 [ 2704.901287] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2704.905956] sock_sendmsg+0xd5/0x120 [ 2704.909673] sock_write_iter+0x35e/0x5c0 [ 2704.913751] ? sock_sendmsg+0x120/0x120 [ 2704.917778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2704.923313] ? iov_iter_init+0xe5/0x210 [ 2704.927307] __vfs_write+0x6b8/0x9f0 [ 2704.931047] ? kernel_read+0x120/0x120 [ 2704.934939] ? apparmor_path_rmdir+0x30/0x30 [ 2704.939420] ? apparmor_file_permission+0x24/0x30 [ 2704.944313] ? rw_verify_area+0x118/0x360 [ 2704.948492] vfs_write+0x1fc/0x560 [ 2704.952074] ksys_write+0x101/0x260 [ 2704.955743] ? __ia32_sys_read+0xb0/0xb0 [ 2704.959840] ? trace_hardirqs_off_caller+0x300/0x300 [ 2704.964973] __x64_sys_write+0x73/0xb0 [ 2704.968878] do_syscall_64+0x1b9/0x820 [ 2704.972779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2704.978147] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2704.983104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2704.987949] ? trace_hardirqs_on_caller+0x310/0x310 [ 2704.992974] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2704.998004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2705.003540] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2705.008591] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2705.013449] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2705.018652] RIP: 0033:0x457569 [ 2705.021844] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2705.040743] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2705.048464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2705.055761] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2705.063027] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2705.070292] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2705.077573] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2705.088388] Task in /syz1 killed as a result of limit of /syz1 [ 2705.108434] memory: usage 307168kB, limit 307200kB, failcnt 1275 [ 2705.123237] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2705.142410] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2705.148865] Memory cgroup stats for /syz1: cache:11020KB rss:254696KB rss_huge:231424KB shmem:4676KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:237152KB inactive_file:204KB active_file:64KB unevictable:22408KB [ 2705.171674] Memory cgroup out of memory: Kill process 28216 (syz-executor1) score 1106 or sacrifice child [ 2705.181919] Killed process 28216 (syz-executor1) total-vm:70468kB, anon-rss:3060kB, file-rss:32768kB, shmem-rss:0kB [ 2705.222125] oom_reaper: reaped process 7238 (syz-executor1), now anon-rss:0kB, file-rss:32752kB, shmem-rss:0kB 11:08:53 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:53 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x40046104, &(0x7f0000000140)) 11:08:53 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 11:08:53 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:54 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x40046104, &(0x7f0000000140)) 11:08:54 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 11:08:54 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 11:08:54 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x40046104, &(0x7f0000000140)) [ 2705.775203] bridge0: port 2(bridge_slave_1) entered blocking state [ 2705.781717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2705.788393] bridge0: port 1(bridge_slave_0) entered blocking state [ 2705.794844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2705.887795] device bridge0 entered promiscuous mode 11:08:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x8}, 0x80) 11:08:54 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setuid(r1) setreuid(0x0, 0x0) 11:08:54 executing program 3: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:08:54 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000}, 0x359) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) write(r1, &(0x7f0000000000), 0x4764) [ 2706.100893] loop3: p1 p2 p3 p4 < > [ 2706.112917] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2706.227519] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2706.253145] __loop_clr_fd: partition scan of loop3 failed (rc=-22) [ 2706.276501] syz-executor1 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2706.320777] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2706.327101] CPU: 0 PID: 7269 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2706.335609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2706.344958] Call Trace: [ 2706.347600] dump_stack+0x244/0x39d [ 2706.351237] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2706.356461] dump_header+0x27b/0xf72 [ 2706.360235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2706.365792] ? check_preemption_disabled+0x48/0x280 11:08:55 executing program 5: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)="2f677288b9702e73746174007d88231ba79cfad631b04fb68d9fb4db977cf33fec62de80dfdfb5acfaf3d5eeb38f73553b6cc55a955c21bd4862af8f2c6bf5a75682774d76fe52fdecdf01de8c7fe9105e629655442851b5a5415cd4b43dd221c8bcb4b8b6eaaf6299aee1967b237166322ddc70aa806d384f45322e", 0x2761, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000540)=@llc={0x1a, 0x100, 0xa5ca, 0x4927, 0x8, 0x6, @random="25db0eda7ae5"}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000001cc0), 0x0, 0x40}, 0x8000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000), &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 11:08:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x1e, 0x2, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000}, 0x359) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) write(r1, &(0x7f0000000000), 0x4764) [ 2706.370832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2706.376420] ? pagefault_out_of_memory+0x197/0x197 [ 2706.380454] print_req_error: I/O error, dev loop3, sector 101 [ 2706.381372] ? print_usage_bug+0xc0/0xc0 [ 2706.381387] ? perf_trace_lock+0x14d/0x7a0 [ 2706.381416] ? debug_smp_processor_id+0x1c/0x20 [ 2706.381448] ? perf_trace_lock_acquire+0x15b/0x800 [ 2706.381484] ? lock_is_held_type+0x210/0x210 [ 2706.381515] ? perf_trace_lock+0x7a0/0x7a0 [ 2706.381531] ? debug_smp_processor_id+0x1c/0x20 [ 2706.381547] ? perf_trace_lock+0x14d/0x7a0 [ 2706.416935] print_req_error: I/O error, dev loop3, sector 101 [ 2706.418732] ? mark_held_locks+0xc7/0x130 [ 2706.418754] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2706.418772] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2706.423078] buffer_io_error: 6 callbacks suppressed [ 2706.423087] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 2706.428908] ? retint_kernel+0x2d/0x2d [ 2706.433778] print_req_error: I/O error, dev loop3, sector 105 [ 2706.437800] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2706.442478] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 2706.447381] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2706.455292] print_req_error: I/O error, dev loop3, sector 101 [ 2706.458510] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2706.464575] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 2706.469299] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2706.479661] print_req_error: I/O error, dev loop3, sector 105 [ 2706.481339] ? retint_kernel+0x2d/0x2d [ 2706.481387] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2706.481404] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2706.481419] ? ___ratelimit+0x3b9/0x672 [ 2706.481437] ? idr_get_free+0xf70/0xf70 [ 2706.487313] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 2706.492761] oom_kill_process.cold.27+0x10/0x903 [ 2706.492787] ? _raw_spin_unlock_irq+0x56/0x80 [ 2706.492806] ? oom_evaluate_task+0x540/0x540 [ 2706.492820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2706.492838] ? cgroup_procs_next+0x70/0x70 [ 2706.501332] print_req_error: I/O error, dev loop3, sector 101 [ 2706.505093] ? _raw_spin_unlock_irq+0x60/0x80 [ 2706.511101] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 2706.514840] ? oom_badness+0xaa0/0xaa0 [ 2706.521524] print_req_error: I/O error, dev loop3, sector 105 [ 2706.525028] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2706.529017] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 2706.532984] ? mem_cgroup_iter_break+0x30/0x30 [ 2706.533024] out_of_memory+0xa7f/0x1430 [ 2706.533039] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2706.533072] ? kasan_check_read+0x11/0x20 [ 2706.533090] ? oom_killer_disable+0x3a0/0x3a0 [ 2706.533129] mem_cgroup_out_of_memory+0x15e/0x210 [ 2706.533148] ? memory_oom_group_write+0x160/0x160 [ 2706.533161] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2706.533184] ? page_counter_try_charge+0x1c1/0x220 [ 2706.533204] try_charge+0xdcd/0x1720 [ 2706.533248] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2706.533269] ? kasan_check_read+0x11/0x20 [ 2706.533318] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2706.541680] print_req_error: I/O error, dev loop3, sector 101 [ 2706.545347] ? rcu_read_unlock_special+0x370/0x370 [ 2706.549831] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 2706.554255] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2706.554276] ? lock_page_memcg+0x350/0x350 [ 2706.554298] ? lock_acquire+0x1ed/0x520 [ 2706.554316] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2706.554334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2706.560358] print_req_error: I/O error, dev loop3, sector 105 [ 2706.564078] ? check_preemption_disabled+0x48/0x280 [ 2706.564105] memcg_kmem_charge_memcg+0x7c/0x120 [ 2706.564120] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2706.564137] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2706.564154] ? rcu_pm_notify+0xc0/0xc0 [ 2706.570023] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 2706.574509] memcg_kmem_charge+0x149/0x350 [ 2706.574529] __alloc_pages_nodemask+0x89c/0xdd0 [ 2706.574543] ? retint_kernel+0x2d/0x2d [ 2706.574565] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2706.574603] ? __alloc_skb+0x4c1/0x770 [ 2706.582742] print_req_error: I/O error, dev loop3, sector 101 [ 2706.585770] ? debug_smp_processor_id+0x1c/0x20 [ 2706.591716] Buffer I/O error on dev loop3p2, logical block 0, async page read [ 2706.596378] ? perf_trace_lock+0x14d/0x7a0 [ 2706.604203] Buffer I/O error on dev loop3p2, logical block 1, async page read [ 2706.608207] ? debug_smp_processor_id+0x1c/0x20 [ 2706.797461] ? perf_trace_lock_acquire+0x15b/0x800 [ 2706.802398] ? lock_is_held_type+0x210/0x210 [ 2706.806805] ? perf_trace_lock+0x7a0/0x7a0 [ 2706.811053] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2706.816629] alloc_pages_current+0x173/0x350 [ 2706.821056] alloc_skb_with_frags+0x258/0x7d0 [ 2706.825564] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2706.830359] sock_alloc_send_pskb+0x87a/0xaf0 [ 2706.834866] ? kasan_check_read+0x11/0x20 [ 2706.839023] ? sock_wmalloc+0x1f0/0x1f0 [ 2706.843027] ? sk_send_sigurg+0x3c0/0x3c0 [ 2706.847177] ? kasan_check_read+0x11/0x20 [ 2706.851341] ? do_raw_spin_trylock+0x270/0x270 [ 2706.855930] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2706.861052] unix_stream_sendmsg+0x6f7/0xd40 [ 2706.865476] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2706.870167] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2706.875109] ? apparmor_socket_sendmsg+0x29/0x30 [ 2706.879884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2706.885419] ? security_socket_sendmsg+0x94/0xc0 [ 2706.890237] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2706.894923] sock_sendmsg+0xd5/0x120 [ 2706.898635] sock_write_iter+0x35e/0x5c0 [ 2706.902704] ? sock_sendmsg+0x120/0x120 [ 2706.906760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2706.912299] ? iov_iter_init+0xe5/0x210 [ 2706.916276] __vfs_write+0x6b8/0x9f0 [ 2706.919998] ? kernel_read+0x120/0x120 [ 2706.923884] ? apparmor_path_rmdir+0x30/0x30 [ 2706.928305] ? apparmor_file_permission+0x24/0x30 [ 2706.933155] ? rw_verify_area+0x118/0x360 [ 2706.937314] vfs_write+0x1fc/0x560 [ 2706.940870] ksys_write+0x101/0x260 [ 2706.944524] ? __ia32_sys_read+0xb0/0xb0 [ 2706.948607] ? trace_hardirqs_off_caller+0x300/0x300 [ 2706.953770] __x64_sys_write+0x73/0xb0 [ 2706.957655] do_syscall_64+0x1b9/0x820 [ 2706.961541] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2706.966940] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2706.971871] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2706.976743] ? trace_hardirqs_on_caller+0x310/0x310 [ 2706.981768] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2706.986780] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2706.991799] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2706.996642] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2707.001822] RIP: 0033:0x457569 [ 2707.005072] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2707.023971] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2707.031698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2707.038974] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2707.046252] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2707.053525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2707.060794] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2707.211158] Task in /syz1 killed as a result of limit of /syz1 [ 2707.219624] memory: usage 307028kB, limit 307200kB, failcnt 1345 [ 2707.232593] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.278347] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.289818] Memory cgroup stats for /syz1: cache:11020KB rss:253380KB rss_huge:231424KB shmem:4676KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:235784KB inactive_file:204KB active_file:64KB unevictable:22408KB [ 2707.313164] Memory cgroup out of memory: Kill process 28253 (syz-executor1) score 1106 or sacrifice child 11:08:56 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000ec000000000400005ce8f6af88325e96c77eeed74bd3161ab4114a4eccdb43b94d038984528fcfef9accf58cc061354f3b0a60fd5afe53450308b98ffcbd8e7c08239e65bd3ae99c16354a848d18b29ca778bf9cf4640eee088a40bfcb06f1dda9b23e8e20f67c21eee0feade55465095cff5f50ec4164edbc9f9fb93abe45adfe787b9a93931e28aa4e83340f32e403323549e44ab77f03570bf9becf3d0a57686b757a947c747c41a1ae8f84017d55fd9305b94221f86b2173d27e62b812e3c8abb9fde0b96057250b16fc28b52a86ff1bba69b21604f4dbfae10000007ca9b10a068568f98ce9ba512a10ea684e21f4b58ddcccf165f364b2353fcacf112574c00422eb47e5a2e3ff2e4f7305b26e377e55002f12e48262d8fe2b9f4fe990ccc5c42e3a471ccb3cb05b6e726ce1c81a2e6ac487a0bb1add058796a49218c76f32cc864b30838d6092b109fe6d331b65c77b05d1e7e22e"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) 11:08:56 executing program 3: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:08:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x8}, 0x80) 11:08:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000), &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) [ 2707.323419] Killed process 28253 (syz-executor1) total-vm:70468kB, anon-rss:3060kB, file-rss:32768kB, shmem-rss:0kB [ 2707.360559] oom_reaper: reaped process 7276 (syz-executor1), now anon-rss:0kB, file-rss:32748kB, shmem-rss:0kB 11:08:56 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5a) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) syncfs(0xffffffffffffffff) 11:08:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000), &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) [ 2707.432405] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2707.529788] loop3: p1 p2 p3 p4 < > 11:08:56 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5a) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) syncfs(0xffffffffffffffff) 11:08:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x8}, 0x80) 11:08:56 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2707.701634] __loop_clr_fd: partition scan of loop3 failed (rc=-22) [ 2707.751101] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2707.824593] syz-executor5 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 2707.849972] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2707.866363] CPU: 0 PID: 7310 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2707.874869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2707.884234] Call Trace: [ 2707.886853] dump_stack+0x244/0x39d [ 2707.890513] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2707.895725] dump_header+0x27b/0xf72 [ 2707.899478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2707.905040] ? check_preemption_disabled+0x48/0x280 [ 2707.910082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2707.915653] ? pagefault_out_of_memory+0x197/0x197 [ 2707.920590] ? debug_smp_processor_id+0x1c/0x20 [ 2707.925278] ? perf_trace_lock+0x14d/0x7a0 [ 2707.929511] ? debug_smp_processor_id+0x1c/0x20 [ 2707.934173] ? perf_trace_lock_acquire+0x15b/0x800 [ 2707.939132] ? lock_is_held_type+0x210/0x210 [ 2707.943537] ? perf_trace_lock+0x7a0/0x7a0 [ 2707.947777] ? debug_smp_processor_id+0x1c/0x20 [ 2707.952456] ? perf_trace_lock+0x14d/0x7a0 [ 2707.956697] ? graph_lock+0x270/0x270 [ 2707.960532] ? print_usage_bug+0xc0/0xc0 [ 2707.964593] ? lock_is_held_type+0x210/0x210 [ 2707.969018] ? perf_trace_lock+0x7a0/0x7a0 [ 2707.973258] ? find_held_lock+0x36/0x1c0 [ 2707.977343] ? mark_held_locks+0xc7/0x130 [ 2707.981526] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2707.986637] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2707.991736] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2707.996317] ? trace_hardirqs_on+0xbd/0x310 [ 2708.000656] ? kasan_check_read+0x11/0x20 [ 2708.004807] ? ___ratelimit+0x3b4/0x672 [ 2708.008778] ? trace_hardirqs_off_caller+0x300/0x300 [ 2708.013891] ? trace_hardirqs_on+0x310/0x310 [ 2708.018320] ? lock_downgrade+0x900/0x900 [ 2708.022489] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2708.027600] ? ___ratelimit+0x3b9/0x672 [ 2708.031573] ? idr_get_free+0xf70/0xf70 [ 2708.035542] ? _raw_spin_unlock_irq+0x27/0x80 [ 2708.040034] ? _raw_spin_unlock_irq+0x27/0x80 [ 2708.044550] oom_kill_process.cold.27+0x10/0x903 [ 2708.049308] ? _raw_spin_unlock_irq+0x27/0x80 [ 2708.053817] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2708.058420] ? oom_evaluate_task+0x540/0x540 [ 2708.062822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2708.068379] ? cgroup_procs_next+0x70/0x70 [ 2708.072645] ? _raw_spin_unlock_irq+0x60/0x80 [ 2708.077138] ? oom_badness+0xaa0/0xaa0 [ 2708.081039] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2708.085796] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2708.091332] ? mem_cgroup_iter_break+0x30/0x30 [ 2708.095925] ? cgroup_file_notify+0x226/0x2f0 [ 2708.100421] out_of_memory+0xa7f/0x1430 [ 2708.104422] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2708.109030] ? kasan_check_read+0x11/0x20 [ 2708.113210] ? oom_killer_disable+0x3a0/0x3a0 [ 2708.117744] mem_cgroup_out_of_memory+0x15e/0x210 [ 2708.122586] ? memory_oom_group_write+0x160/0x160 [ 2708.127432] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2708.132304] ? page_counter_try_charge+0x1c1/0x220 [ 2708.137250] try_charge+0xdcd/0x1720 [ 2708.141014] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2708.145714] ? kasan_check_read+0x11/0x20 [ 2708.149864] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2708.155144] ? rcu_read_unlock_special+0x370/0x370 [ 2708.160102] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2708.165643] ? lock_page_memcg+0x350/0x350 [ 2708.169898] ? lock_acquire+0x1ed/0x520 [ 2708.173877] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2708.179265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2708.184825] ? check_preemption_disabled+0x48/0x280 [ 2708.189875] memcg_kmem_charge_memcg+0x7c/0x120 [ 2708.194550] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2708.199064] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2708.204607] ? rcu_pm_notify+0xc0/0xc0 [ 2708.208504] memcg_kmem_charge+0x149/0x350 [ 2708.212777] __alloc_pages_nodemask+0x89c/0xdd0 [ 2708.217476] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2708.222493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2708.228041] ? __alloc_skb+0x4c1/0x770 [ 2708.231935] ? debug_smp_processor_id+0x1c/0x20 [ 2708.236603] ? perf_trace_lock+0x14d/0x7a0 [ 2708.240841] ? debug_smp_processor_id+0x1c/0x20 [ 2708.245533] ? perf_trace_lock_acquire+0x15b/0x800 [ 2708.250463] ? lock_is_held_type+0x210/0x210 [ 2708.254900] ? perf_trace_lock+0x7a0/0x7a0 [ 2708.259160] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2708.264704] alloc_pages_current+0x173/0x350 [ 2708.269118] alloc_skb_with_frags+0x258/0x7d0 [ 2708.273644] ? retint_kernel+0x2d/0x2d [ 2708.277549] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2708.282497] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2708.287262] sock_alloc_send_pskb+0x87a/0xaf0 [ 2708.291760] ? kasan_check_read+0x11/0x20 [ 2708.295911] ? sock_wmalloc+0x1f0/0x1f0 [ 2708.299916] ? sock_def_readable+0x296/0x710 [ 2708.304360] ? sk_send_sigurg+0x3c0/0x3c0 [ 2708.308548] ? kasan_check_read+0x11/0x20 [ 2708.312725] ? do_raw_spin_trylock+0x270/0x270 [ 2708.317357] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2708.322463] unix_stream_sendmsg+0x6f7/0xd40 [ 2708.326897] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2708.331599] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2708.336524] ? apparmor_socket_sendmsg+0x29/0x30 [ 2708.341272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2708.346806] ? security_socket_sendmsg+0x94/0xc0 [ 2708.351581] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2708.356254] sock_sendmsg+0xd5/0x120 [ 2708.360005] sock_write_iter+0x35e/0x5c0 [ 2708.364067] ? sock_sendmsg+0x120/0x120 [ 2708.368051] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2708.373597] ? iov_iter_init+0xe5/0x210 [ 2708.377576] __vfs_write+0x6b8/0x9f0 [ 2708.381322] ? kernel_read+0x120/0x120 [ 2708.385233] ? apparmor_path_rmdir+0x30/0x30 [ 2708.389666] ? trace_hardirqs_off_caller+0x300/0x300 [ 2708.394790] ? apparmor_file_permission+0x24/0x30 [ 2708.399639] ? rw_verify_area+0x118/0x360 [ 2708.403799] vfs_write+0x1fc/0x560 [ 2708.407347] ksys_write+0x101/0x260 [ 2708.410986] ? __ia32_sys_read+0xb0/0xb0 [ 2708.415049] ? trace_hardirqs_off_caller+0x300/0x300 [ 2708.420175] __x64_sys_write+0x73/0xb0 [ 2708.424119] do_syscall_64+0x1b9/0x820 [ 2708.428027] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2708.433409] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2708.438355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2708.443213] ? trace_hardirqs_on_caller+0x310/0x310 [ 2708.448232] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2708.453256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2708.458104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2708.463307] RIP: 0033:0x457569 [ 2708.466497] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2708.485393] RSP: 002b:00007feb19bb8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2708.493105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2708.500568] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2708.507844] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2708.515103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007feb19bb96d4 [ 2708.522375] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2708.562020] Task in /syz5 killed as a result of limit of /syz5 [ 2708.575460] memory: usage 307132kB, limit 307200kB, failcnt 1348 [ 2708.591078] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2708.604975] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2708.612206] Memory cgroup stats for /syz5: cache:200KB rss:258160KB rss_huge:241664KB shmem:192KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:8KB active_anon:258204KB inactive_file:0KB active_file:0KB unevictable:28KB [ 2708.634049] Memory cgroup out of memory: Kill process 7308 (syz-executor5) score 1117 or sacrifice child [ 2708.644132] Killed process 7310 (syz-executor5) total-vm:70468kB, anon-rss:6312kB, file-rss:33592kB, shmem-rss:0kB 11:08:57 executing program 3: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:08:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000), &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 11:08:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) bind(r0, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev, 0x8}, 0x80) 11:08:57 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5a) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) syncfs(0xffffffffffffffff) 11:08:57 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2708.658421] oom_reaper: reaped process 7310 (syz-executor5), now anon-rss:0kB, file-rss:32824kB, shmem-rss:0kB 11:08:57 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2708.740286] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 2708.792881] loop3: p1 p2 p3 p4 < > 11:08:57 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x5a) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") unshare(0x400) syncfs(0xffffffffffffffff) 11:08:57 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) 11:08:57 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000]}, 0x2c8) 11:08:57 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2708.943072] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 11:08:57 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000ec000000000400005ce8f6af88325e96c77eeed74bd3161ab4114a4eccdb43b94d038984528fcfef9accf58cc061354f3b0a60fd5afe53450308b98ffcbd8e7c08239e65bd3ae99c16354a848d18b29ca778bf9cf4640eee088a40bfcb06f1dda9b23e8e20f67c21eee0feade55465095cff5f50ec4164edbc9f9fb93abe45adfe787b9a93931e28aa4e83340f32e403323549e44ab77f03570bf9becf3d0a57686b757a947c747c41a1ae8f84017d55fd9305b94221f86b2173d27e62b812e3c8abb9fde0b96057250b16fc28b52a86ff1bba69b21604f4dbfae10000007ca9b10a068568f98ce9ba512a10ea684e21f4b58ddcccf165f364b2353fcacf112574c00422eb47e5a2e3ff2e4f7305b26e377e55002f12e48262d8fe2b9f4fe990ccc5c42e3a471ccb3cb05b6e726ce1c81a2e6ac487a0bb1add058796a49218c76f32cc864b30838d6092b109fe6d331b65c77b05d1e7e22e"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) 11:08:57 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 11:08:57 executing program 3: syz_read_part_table(0xfffffffffffffffe, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e51532000000000200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 11:08:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r3 = socket(0x10, 0x6, 0x0) sendto$inet6(r3, &(0x7f0000000a00), 0x0, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r6, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") ioctl$RTC_PIE_ON(r7, 0x7005) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xfffffffffffffe70}], 0x1000000000000030, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x3, &(0x7f0000000440)=""/108) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r6, 0x0, &(0x7f0000000340)) poll(&(0x7f00000004c0)=[{r1, 0x2030}, {0xffffffffffffffff, 0x408}, {r6, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000000c0)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 11:08:57 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) 11:08:57 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000]}, 0x2c8) 11:08:58 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2709.403871] loop3: p1 p2 p3 p4 < > 11:08:58 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x168}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000005c0)=0x79) r1 = socket(0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2502, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0x9, 0x52, 0x3, 0x400000bff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000040), 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffc, 0x4, 0x2, 0x1, 0xa3}, 0x98) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000040)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x9, 0x0, 0xb1, 0xa, 0xffffffffffffffff, 0x2}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x11, @dev, 0x0, 0x0, 'lblcr\x00'}, 0xc43935a5b5fa5f40) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x7, 0x1f}}, 0x10) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x100, 0x40) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x0, {"e8341503c25ca23f5aa3cf2ef99e8ab3"}}}}, 0x90) [ 2709.521342] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 11:08:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r3 = socket(0x10, 0x6, 0x0) sendto$inet6(r3, &(0x7f0000000a00), 0x0, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r6, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") ioctl$RTC_PIE_ON(r7, 0x7005) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xfffffffffffffe70}], 0x1000000000000030, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x3, &(0x7f0000000440)=""/108) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r6, 0x0, &(0x7f0000000340)) poll(&(0x7f00000004c0)=[{r1, 0x2030}, {0xffffffffffffffff, 0x408}, {r6, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000000c0)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 11:08:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000]}, 0x2c8) 11:08:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r3 = socket(0x10, 0x6, 0x0) sendto$inet6(r3, &(0x7f0000000a00), 0x0, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r6, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") ioctl$RTC_PIE_ON(r7, 0x7005) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xfffffffffffffe70}], 0x1000000000000030, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x3, &(0x7f0000000440)=""/108) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r6, 0x0, &(0x7f0000000340)) poll(&(0x7f00000004c0)=[{r1, 0x2030}, {0xffffffffffffffff, 0x408}, {r6, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000000c0)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 11:08:58 executing program 2: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000]}, 0x2c8) 11:08:58 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x1, r1, 0x0, 0x2000000008, 0x0) 11:08:58 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 11:08:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4000000000000277, &(0x7f0000000240)=[0x0]) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 11:08:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000009500000000000000"], 0x0, 0x80000001, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) 11:08:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) r3 = socket(0x10, 0x6, 0x0) sendto$inet6(r3, &(0x7f0000000a00), 0x0, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r0) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f0000000380)=""/135) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/116, 0x184) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) ioctl(r6, 0x0, &(0x7f0000000100)="1333cd31a0a5a0bf89980d73eae26c92d05728e12b72ac9d5a76e06fcf6974ef9609818ba4bb191d36039050f2073696d0") ioctl$RTC_PIE_ON(r7, 0x7005) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x4}, {&(0x7f0000000580), 0xfc5d}, {&(0x7f00000005c0)=""/81, 0x51}, {&(0x7f0000000640)=""/232, 0xfffffffffffffe70}], 0x1000000000000030, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0x3, &(0x7f0000000440)=""/108) chroot(&(0x7f0000000140)='./file0\x00') clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) getsockname(r6, 0x0, &(0x7f0000000340)) poll(&(0x7f00000004c0)=[{r1, 0x2030}, {0xffffffffffffffff, 0x408}, {r6, 0x8088}], 0x3, 0xfffffffffffffe01) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000080)) ioctl$EVIOCGABS20(r7, 0x80184560, &(0x7f0000000800)=""/117) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f00000000c0)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000580)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 11:08:58 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x1, r1, 0x0, 0x2000000008, 0x0) 11:08:58 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) 11:08:58 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 11:08:58 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) close(r2) close(r0) 11:08:58 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) 11:08:58 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x1, r1, 0x0, 0x2000000008, 0x0) 11:08:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x7ffe}) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xfffffffbfffffffc, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0fbc"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:08:59 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) waitid(0x1, r1, 0x0, 0x2000000008, 0x0) [ 2710.932558] syz-executor1 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2710.944752] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2710.950147] CPU: 1 PID: 7457 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2710.958663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2710.968043] Call Trace: [ 2710.970653] dump_stack+0x244/0x39d [ 2710.974302] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2710.979529] dump_header+0x27b/0xf72 [ 2710.983253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2710.988802] ? check_preemption_disabled+0x48/0x280 [ 2710.993836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2710.999377] ? pagefault_out_of_memory+0x197/0x197 [ 2711.004322] ? debug_smp_processor_id+0x1c/0x20 [ 2711.008998] ? perf_trace_lock+0x14d/0x7a0 [ 2711.013245] ? debug_smp_processor_id+0x1c/0x20 [ 2711.017918] ? perf_trace_lock_acquire+0x15b/0x800 [ 2711.022882] ? lock_is_held_type+0x210/0x210 [ 2711.027300] ? perf_trace_lock+0x7a0/0x7a0 [ 2711.031552] ? debug_smp_processor_id+0x1c/0x20 [ 2711.036238] ? perf_trace_lock+0x14d/0x7a0 [ 2711.040477] ? graph_lock+0x270/0x270 [ 2711.044283] ? print_usage_bug+0xc0/0xc0 [ 2711.048346] ? lock_is_held_type+0x210/0x210 [ 2711.052785] ? perf_trace_lock+0x7a0/0x7a0 [ 2711.057030] ? find_held_lock+0x36/0x1c0 [ 2711.061119] ? mark_held_locks+0xc7/0x130 [ 2711.065291] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2711.070401] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2711.075508] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2711.080100] ? trace_hardirqs_on+0xbd/0x310 [ 2711.084433] ? kasan_check_read+0x11/0x20 [ 2711.088589] ? ___ratelimit+0x3b4/0x672 [ 2711.092573] ? trace_hardirqs_off_caller+0x300/0x300 [ 2711.097682] ? trace_hardirqs_on+0x310/0x310 [ 2711.102115] ? lock_downgrade+0x900/0x900 [ 2711.106297] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2711.111415] ? ___ratelimit+0x3b9/0x672 [ 2711.115390] ? idr_get_free+0xf70/0xf70 [ 2711.119361] ? _raw_spin_unlock_irq+0x27/0x80 [ 2711.123873] ? _raw_spin_unlock_irq+0x27/0x80 [ 2711.128374] oom_kill_process.cold.27+0x10/0x903 [ 2711.133144] ? _raw_spin_unlock_irq+0x27/0x80 [ 2711.137654] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2711.142275] ? oom_evaluate_task+0x540/0x540 [ 2711.146708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2711.152254] ? cgroup_procs_next+0x70/0x70 [ 2711.156498] ? _raw_spin_unlock_irq+0x60/0x80 [ 2711.160998] ? oom_badness+0xaa0/0xaa0 [ 2711.164890] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2711.169647] ? mem_cgroup_iter_break+0x30/0x30 [ 2711.174244] ? out_of_memory+0x1d5/0x1430 [ 2711.178408] out_of_memory+0xa7f/0x1430 [ 2711.182381] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2711.186981] ? kasan_check_read+0x11/0x20 [ 2711.191149] ? oom_killer_disable+0x3a0/0x3a0 [ 2711.195669] mem_cgroup_out_of_memory+0x15e/0x210 [ 2711.200520] ? memory_oom_group_write+0x160/0x160 [ 2711.205394] ? try_charge+0xa6c/0x1720 [ 2711.209288] try_charge+0xdcd/0x1720 [ 2711.213031] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2711.217754] ? kasan_check_read+0x11/0x20 [ 2711.221900] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2711.227175] ? rcu_read_unlock_special+0x370/0x370 [ 2711.232127] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2711.237668] ? lock_page_memcg+0x350/0x350 [ 2711.241916] ? lock_acquire+0x1ed/0x520 [ 2711.245903] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2711.251263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2711.256797] ? check_preemption_disabled+0x48/0x280 [ 2711.261826] memcg_kmem_charge_memcg+0x7c/0x120 [ 2711.266511] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2711.271008] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2711.276550] ? rcu_pm_notify+0xc0/0xc0 [ 2711.280444] memcg_kmem_charge+0x149/0x350 [ 2711.284707] __alloc_pages_nodemask+0x89c/0xdd0 [ 2711.289405] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2711.294414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2711.299956] ? __alloc_skb+0x4c1/0x770 [ 2711.303849] ? debug_smp_processor_id+0x1c/0x20 [ 2711.308513] ? perf_trace_lock+0x14d/0x7a0 [ 2711.312741] ? debug_smp_processor_id+0x1c/0x20 [ 2711.317429] ? perf_trace_lock_acquire+0x15b/0x800 [ 2711.322390] ? lock_is_held_type+0x210/0x210 [ 2711.326808] ? perf_trace_lock+0x7a0/0x7a0 [ 2711.331043] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2711.336585] alloc_pages_current+0x173/0x350 [ 2711.340996] alloc_skb_with_frags+0x258/0x7d0 [ 2711.345498] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2711.350263] sock_alloc_send_pskb+0x87a/0xaf0 [ 2711.354762] ? kasan_check_read+0x11/0x20 [ 2711.358911] ? sock_wmalloc+0x1f0/0x1f0 [ 2711.362916] ? sk_send_sigurg+0x3c0/0x3c0 [ 2711.367071] ? kasan_check_read+0x11/0x20 [ 2711.371254] ? do_raw_spin_trylock+0x270/0x270 [ 2711.375860] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2711.380973] unix_stream_sendmsg+0x6f7/0xd40 [ 2711.385390] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2711.390075] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2711.395008] ? apparmor_socket_sendmsg+0x29/0x30 [ 2711.399802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2711.405379] ? security_socket_sendmsg+0x94/0xc0 [ 2711.410181] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2711.414866] sock_sendmsg+0xd5/0x120 [ 2711.418598] sock_write_iter+0x35e/0x5c0 [ 2711.422665] ? sock_sendmsg+0x120/0x120 [ 2711.426658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2711.432201] ? iov_iter_init+0xe5/0x210 [ 2711.436204] __vfs_write+0x6b8/0x9f0 [ 2711.439927] ? kernel_read+0x120/0x120 [ 2711.443823] ? apparmor_path_rmdir+0x30/0x30 [ 2711.448250] ? trace_hardirqs_off_caller+0x300/0x300 [ 2711.453372] ? apparmor_file_permission+0x24/0x30 [ 2711.458242] ? rw_verify_area+0x118/0x360 [ 2711.462404] vfs_write+0x1fc/0x560 [ 2711.465956] ksys_write+0x101/0x260 [ 2711.469588] ? __ia32_sys_read+0xb0/0xb0 [ 2711.473655] ? trace_hardirqs_off_caller+0x300/0x300 [ 2711.478765] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2711.484309] __x64_sys_write+0x73/0xb0 [ 2711.488227] do_syscall_64+0x1b9/0x820 [ 2711.492139] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2711.497519] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2711.502532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2711.507375] ? trace_hardirqs_on_caller+0x310/0x310 [ 2711.512390] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2711.517405] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2711.522436] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2711.527294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2711.532492] RIP: 0033:0x457569 [ 2711.535681] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2711.554596] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2711.562296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2711.569571] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2711.576843] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2711.584122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2711.591383] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2711.632013] Task in /syz1 killed as a result of limit of /syz1 [ 2711.638610] memory: usage 307076kB, limit 307200kB, failcnt 1379 [ 2711.645015] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2711.651829] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2711.657987] Memory cgroup stats for /syz1: cache:11020KB rss:250936KB rss_huge:229376KB shmem:4676KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:233284KB inactive_file:204KB active_file:68KB unevictable:22408KB 11:09:00 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 11:09:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc02c5341, &(0x7f0000000340)) 11:09:00 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) 11:09:00 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, 0x0) 11:09:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) close(r2) close(r0) 11:09:00 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 2711.680855] Memory cgroup out of memory: Kill process 28277 (syz-executor1) score 1106 or sacrifice child [ 2711.690845] Killed process 28277 (syz-executor1) total-vm:70468kB, anon-rss:3060kB, file-rss:32768kB, shmem-rss:0kB [ 2711.703605] oom_reaper: reaped process 28277 (syz-executor1), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB 11:09:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x4ea) read$FUSE(r0, 0x0, 0x0) lstat(&(0x7f0000000600)='./file0/file0/file0\x00', 0x0) r1 = dup(r0) read$FUSE(r0, &(0x7f0000008000), 0x139f) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000180)="eae7bb07b0da03027825b43b23c421d27f1afd43883008bb77a53e3a88f2b3dbd0c2ffa152c05fa525371e8623f8") openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x5, 0xffff, 0x1, 0x0, 0x2, 0x1e8400, 0x624, 0x3eb4]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) 11:09:00 executing program 2: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x4e20}, 0x1c) 11:09:00 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000540)={0x14}, 0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 11:09:00 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) close(r2) close(r0) [ 2711.949154] audit: type=1800 audit(1543748940.609:5338): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16771 res=0 [ 2712.065084] audit: type=1804 audit(1543748940.639:5339): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/36/file0" dev="sda1" ino=16771 res=1 11:09:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cgroup\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2712.249725] audit: type=1804 audit(1543748940.639:5340): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/36/file0" dev="sda1" ino=16771 res=1 [ 2712.322864] audit: type=1804 audit(1543748940.799:5341): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/36/file0" dev="sda1" ino=16771 res=1 [ 2712.434550] audit: type=1804 audit(1543748940.839:5342): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/36/file0" dev="sda1" ino=16771 res=1 [ 2712.708071] syz-executor1 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2712.719665] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2712.725897] CPU: 0 PID: 7514 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2712.734411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2712.743757] Call Trace: [ 2712.746342] dump_stack+0x244/0x39d [ 2712.749976] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2712.755202] ? mark_held_locks+0x130/0x130 [ 2712.759438] dump_header+0x27b/0xf72 [ 2712.763158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2712.768698] ? check_preemption_disabled+0x48/0x280 [ 2712.773731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2712.779268] ? pagefault_out_of_memory+0x197/0x197 [ 2712.784212] ? debug_smp_processor_id+0x1c/0x20 [ 2712.788875] ? perf_trace_lock+0x14d/0x7a0 [ 2712.793124] ? debug_smp_processor_id+0x1c/0x20 [ 2712.797794] ? perf_trace_lock_acquire+0x15b/0x800 [ 2712.802735] ? lock_is_held_type+0x210/0x210 [ 2712.807147] ? perf_trace_lock+0x7a0/0x7a0 [ 2712.811405] ? debug_smp_processor_id+0x1c/0x20 [ 2712.816077] ? perf_trace_lock+0x14d/0x7a0 [ 2712.820321] ? graph_lock+0x270/0x270 [ 2712.824127] ? print_usage_bug+0xc0/0xc0 [ 2712.828200] ? lock_is_held_type+0x210/0x210 [ 2712.832652] ? find_held_lock+0x36/0x1c0 [ 2712.836744] ? mark_held_locks+0xc7/0x130 [ 2712.840901] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2712.846063] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2712.851161] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2712.855743] ? trace_hardirqs_on+0xbd/0x310 [ 2712.860079] ? kasan_check_read+0x11/0x20 [ 2712.864226] ? ___ratelimit+0x3b4/0x672 [ 2712.868195] ? trace_hardirqs_off_caller+0x300/0x300 [ 2712.873294] ? trace_hardirqs_on+0x310/0x310 [ 2712.877713] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2712.882809] ? ___ratelimit+0x3b9/0x672 [ 2712.886777] ? idr_get_free+0xf70/0xf70 [ 2712.890751] ? do_raw_spin_unlock+0x2e/0x330 [ 2712.895184] oom_kill_process.cold.27+0x10/0x903 [ 2712.899952] ? _raw_spin_unlock_irq+0x56/0x80 [ 2712.904472] ? oom_evaluate_task+0x540/0x540 [ 2712.908898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2712.914440] ? cgroup_procs_next+0x70/0x70 [ 2712.918714] ? _raw_spin_unlock_irq+0x60/0x80 [ 2712.923248] ? oom_badness+0xaa0/0xaa0 [ 2712.927145] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2712.931918] ? mem_cgroup_iter_break+0x30/0x30 [ 2712.936547] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2712.941496] out_of_memory+0xa7f/0x1430 [ 2712.945472] ? retint_kernel+0x2d/0x2d [ 2712.949356] ? oom_killer_disable+0x3a0/0x3a0 [ 2712.953872] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2712.959031] mem_cgroup_out_of_memory+0x15e/0x210 [ 2712.963892] ? memory_oom_group_write+0x160/0x160 [ 2712.968793] ? mem_cgroup_try_charge+0x627/0xe20 [ 2712.973579] ? page_counter_try_charge+0x1c1/0x220 [ 2712.978517] try_charge+0xdcd/0x1720 [ 2712.982232] ? kasan_check_read+0x11/0x20 [ 2712.986388] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2712.991091] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2712.996631] ? lock_page_memcg+0x350/0x350 [ 2713.000891] ? lock_acquire+0x1ed/0x520 [ 2713.004868] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2713.010233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.015782] ? check_preemption_disabled+0x48/0x280 [ 2713.020802] ? kasan_check_read+0x11/0x20 [ 2713.024969] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2713.030262] ? rcu_softirq_qs+0x20/0x20 [ 2713.034251] mem_cgroup_try_charge+0x627/0xe20 [ 2713.038832] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2713.043853] ? mem_cgroup_protected+0xa60/0xa60 [ 2713.048545] ? wp_page_copy+0x187b/0x24f0 [ 2713.052701] ? lock_downgrade+0x900/0x900 [ 2713.056856] ? do_raw_spin_unlock+0xa7/0x330 [ 2713.061265] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2713.066806] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2713.071734] wp_page_copy+0x51d/0x24f0 [ 2713.075647] ? follow_pfn+0x2e0/0x2e0 [ 2713.079472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.085036] ? check_preemption_disabled+0x48/0x280 [ 2713.090056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.095654] ? debug_smp_processor_id+0x1c/0x20 [ 2713.100335] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.105898] ? check_preemption_disabled+0x48/0x280 [ 2713.110916] ? mark_held_locks+0xc7/0x130 [ 2713.115075] ? debug_smp_processor_id+0x1c/0x20 [ 2713.119744] ? perf_trace_lock+0x14d/0x7a0 [ 2713.123980] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2713.128562] ? retint_kernel+0x2d/0x2d [ 2713.132464] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2713.137393] ? lock_is_held_type+0x210/0x210 [ 2713.141803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.147442] ? check_preemption_disabled+0x48/0x280 [ 2713.152476] ? graph_lock+0x270/0x270 [ 2713.156279] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2713.161042] ? retint_kernel+0x2d/0x2d [ 2713.164968] ? find_held_lock+0x36/0x1c0 [ 2713.169037] ? do_wp_page+0x518/0x2920 [ 2713.172937] ? lock_downgrade+0x900/0x900 [ 2713.177094] ? kasan_check_read+0x11/0x20 [ 2713.181233] ? do_raw_spin_unlock+0xa7/0x330 [ 2713.185640] ? do_raw_spin_trylock+0x270/0x270 [ 2713.190246] ? __pte_alloc_kernel+0x220/0x220 [ 2713.194786] do_wp_page+0x520/0x2920 [ 2713.198524] ? finish_mkwrite_fault+0x650/0x650 [ 2713.203229] ? __lock_acquire+0x62f/0x4c20 [ 2713.207477] ? perf_event_namespaces_output+0x490/0x490 [ 2713.212862] ? __lock_acquire+0x62f/0x4c20 [ 2713.217096] ? __asan_poison_stack_memory+0x37/0x40 [ 2713.222135] ? mark_held_locks+0x130/0x130 [ 2713.226364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.231899] ? check_preemption_disabled+0x48/0x280 [ 2713.236927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.242475] ? print_usage_bug+0xc0/0xc0 [ 2713.246536] ? debug_smp_processor_id+0x1c/0x20 [ 2713.251197] ? perf_trace_lock+0x14d/0x7a0 [ 2713.255447] ? debug_smp_processor_id+0x1c/0x20 [ 2713.260115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.265644] ? check_preemption_disabled+0x48/0x280 [ 2713.270684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.276225] ? check_preemption_disabled+0x48/0x280 [ 2713.281258] ? debug_smp_processor_id+0x1c/0x20 [ 2713.285928] ? perf_trace_lock_acquire+0x15b/0x800 [ 2713.290866] ? print_usage_bug+0xc0/0xc0 [ 2713.294919] ? print_usage_bug+0xc0/0xc0 [ 2713.298976] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2713.303744] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2713.309203] ? find_held_lock+0x36/0x1c0 [ 2713.313290] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2713.318078] ? __lock_acquire+0x62f/0x4c20 [ 2713.322312] ? lock_acquire+0x1ed/0x520 [ 2713.326278] ? __handle_mm_fault+0x1fa9/0x5be0 [ 2713.330876] ? kasan_check_write+0x14/0x20 [ 2713.335137] ? do_raw_spin_lock+0x14f/0x350 [ 2713.339486] ? rwlock_bug.part.2+0x90/0x90 [ 2713.343739] __handle_mm_fault+0x3be9/0x5be0 [ 2713.348150] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2713.352999] ? lock_is_held_type+0x210/0x210 [ 2713.357422] ? perf_trace_lock+0x7a0/0x7a0 [ 2713.361655] ? perf_trace_lock+0x7a0/0x7a0 [ 2713.365891] ? print_usage_bug+0xc0/0xc0 [ 2713.369984] ? graph_lock+0x270/0x270 [ 2713.373783] ? graph_lock+0x270/0x270 [ 2713.377613] ? find_held_lock+0x36/0x1c0 [ 2713.381710] ? handle_mm_fault+0x42a/0xc70 [ 2713.385951] ? lock_downgrade+0x900/0x900 [ 2713.390118] ? check_preemption_disabled+0x48/0x280 [ 2713.395148] ? kasan_check_read+0x11/0x20 [ 2713.399302] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2713.404587] ? rcu_read_unlock_special+0x370/0x370 [ 2713.409520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2713.415059] ? check_preemption_disabled+0x48/0x280 [ 2713.420082] handle_mm_fault+0x54f/0xc70 [ 2713.424164] ? __handle_mm_fault+0x5be0/0x5be0 [ 2713.428756] ? find_vma+0x34/0x190 [ 2713.432304] __do_page_fault+0x5d6/0xe40 [ 2713.436410] do_page_fault+0xed/0x7d1 [ 2713.440226] ? vmalloc_sync_all+0x30/0x30 [ 2713.444375] ? error_entry+0x76/0xd0 [ 2713.448098] ? trace_hardirqs_off_caller+0xbb/0x300 [ 2713.453138] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2713.458068] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2713.462909] ? trace_hardirqs_on_caller+0x310/0x310 [ 2713.467926] ? find_held_lock+0x36/0x1c0 [ 2713.472046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2713.476913] page_fault+0x1e/0x30 [ 2713.480372] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 2713.486257] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 2713.505153] RSP: 0018:ffff88012127f298 EFLAGS: 00010206 [ 2713.510508] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000ac0 [ 2713.517772] RDX: 0000000000001000 RSI: ffff8801b9581540 RDI: 000000002082d000 [ 2713.525037] RBP: ffff88012127f2d0 R08: 0000000000000000 R09: 0000000000000040 [ 2713.532316] R10: ffffed00372b03ff R11: ffff8801b9581fff R12: 000000002082dac0 [ 2713.539597] R13: 000000002082cac0 R14: ffff8801b9581000 R15: 00007ffffffff000 [ 2713.546885] ? copyout+0xe4/0x100 [ 2713.550355] copy_page_to_iter+0x447/0x1000 [ 2713.554702] ? _copy_to_iter+0x1440/0x1440 [ 2713.558952] ? __lock_is_held+0xb5/0x140 [ 2713.563078] skb_copy_datagram_iter+0x653/0xc10 [ 2713.567868] ? __sk_queue_drop_skb+0x1f0/0x1f0 [ 2713.572449] ? refcount_dec_checked+0x70/0x70 [ 2713.576939] ? kasan_check_read+0x11/0x20 [ 2713.581084] ? do_raw_spin_unlock+0xa7/0x330 [ 2713.585482] ? do_raw_spin_trylock+0x270/0x270 [ 2713.590070] unix_stream_read_actor+0x7e/0xc0 [ 2713.594598] unix_stream_read_generic+0xb6a/0x1f50 [ 2713.599560] ? unix_bind+0xf90/0xf90 [ 2713.603283] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2713.608751] ? lock_downgrade+0x900/0x900 [ 2713.612934] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2713.617718] ? perf_trace_sched_process_exec+0x860/0x860 [ 2713.623169] ? rw_copy_check_uvector+0x214/0x3e0 [ 2713.627928] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2713.633679] ? aa_label_sk_perm+0x91/0x100 [ 2713.637943] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2713.642883] ? aa_sk_perm+0x22b/0x8e0 [ 2713.646677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2713.652218] ? import_iovec+0x2a3/0x4b0 [ 2713.656203] ? aa_af_perm+0x5a0/0x5a0 [ 2713.660009] unix_stream_recvmsg+0x1c3/0x2e0 [ 2713.664461] ? unix_stream_splice_read+0x480/0x480 [ 2713.669386] ? unix_set_peek_off+0x90/0x90 [ 2713.673625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2713.679171] ? security_socket_recvmsg+0x9c/0xc0 [ 2713.683926] ? unix_stream_splice_read+0x480/0x480 [ 2713.688855] sock_recvmsg+0xd0/0x110 [ 2713.692562] ? __sock_recv_ts_and_drops+0x420/0x420 [ 2713.697573] ___sys_recvmsg+0x2b6/0x680 [ 2713.701553] ? ___sys_sendmsg+0x930/0x930 [ 2713.705726] ? __fget_light+0x2e9/0x430 [ 2713.709732] ? fget_raw+0x20/0x20 [ 2713.713183] ? __might_fault+0x12b/0x1e0 [ 2713.717238] ? lock_downgrade+0x900/0x900 [ 2713.721389] ? lock_release+0xa10/0xa10 [ 2713.725392] ? perf_trace_sched_process_exec+0x860/0x860 [ 2713.730861] ? trace_hardirqs_off_caller+0x300/0x300 [ 2713.735985] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2713.741561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2713.747107] ? sockfd_lookup_light+0xc5/0x160 [ 2713.751616] __sys_recvmsg+0x11a/0x280 [ 2713.755530] ? __ia32_sys_sendmmsg+0x100/0x100 [ 2713.760179] ? do_syscall_64+0x9a/0x820 [ 2713.764152] ? do_syscall_64+0x9a/0x820 [ 2713.768140] ? trace_hardirqs_off_caller+0x300/0x300 [ 2713.773284] __x64_sys_recvmsg+0x78/0xb0 [ 2713.777382] do_syscall_64+0x1b9/0x820 [ 2713.781269] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2713.786650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2713.791606] ? trace_hardirqs_on_caller+0x310/0x310 [ 2713.796619] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2713.801652] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2713.808319] ? __switch_to_asm+0x40/0x70 [ 2713.812393] ? __switch_to_asm+0x34/0x70 [ 2713.816492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2713.821341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2713.826542] RIP: 0033:0x457569 [ 2713.829736] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2713.848631] RSP: 002b:00007fc12fe32c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2713.856332] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2713.863591] RDX: 0000000000003f00 RSI: 0000000020000200 RDI: 0000000000000005 [ 2713.870863] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2713.878123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe336d4 [ 2713.885381] R13: 00000000004c39a7 R14: 00000000004d5f50 R15: 00000000ffffffff [ 2713.908416] Task in /syz1 killed as a result of limit of /syz1 [ 2713.915097] memory: usage 307180kB, limit 307200kB, failcnt 1446 [ 2713.921366] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2713.928121] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2713.934386] Memory cgroup stats for /syz1: cache:11020KB rss:249304KB rss_huge:229376KB shmem:4676KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:231608KB inactive_file:204KB active_file:68KB unevictable:22408KB 11:09:02 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000140)="a8412f78ef87025c4f072b6835923c92e952fc71e19d62b536669a1842b5375ab18d6206bc0c4fd206df156b56829fddaa5bb1ff54d2bb699e10939fbaad2fc66ccb2226d4b5ab56ea1ee493f655ea1b6c") creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 11:09:02 executing program 2: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 11:09:02 executing program 1: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) 11:09:02 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:02 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) close(r2) close(r0) 11:09:02 executing program 4: openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x50, &(0x7f0000000600)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)="2e760d30a0", 0x1ff) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000ac0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socketpair(0x1f, 0x0, 0xb36, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r3, &(0x7f0000000980), 0xffffff4d) close(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0xfc0}, 0x98) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) [ 2713.956652] Memory cgroup out of memory: Kill process 21347 (syz-executor1) score 1106 or sacrifice child [ 2713.966531] Killed process 21347 (syz-executor1) total-vm:70336kB, anon-rss:2196kB, file-rss:33624kB, shmem-rss:0kB [ 2713.977777] oom_reaper: reaped process 21347 (syz-executor1), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB [ 2714.053140] audit: type=1800 audit(1543748942.719:5343): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16661 res=0 11:09:02 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000140)="a8412f78ef87025c4f072b6835923c92e952fc71e19d62b536669a1842b5375ab18d6206bc0c4fd206df156b56829fddaa5bb1ff54d2bb699e10939fbaad2fc66ccb2226d4b5ab56ea1ee493f655ea1b6c") creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 11:09:02 executing program 2: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) [ 2714.117935] audit: type=1804 audit(1543748942.749:5344): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/37/file0" dev="sda1" ino=16661 res=1 11:09:02 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:02 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) [ 2714.266861] audit: type=1804 audit(1543748942.759:5345): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir636133487/syzkaller.WQVjz7/37/file0" dev="sda1" ino=16661 res=1 11:09:03 executing program 2: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 11:09:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000140)="a8412f78ef87025c4f072b6835923c92e952fc71e19d62b536669a1842b5375ab18d6206bc0c4fd206df156b56829fddaa5bb1ff54d2bb699e10939fbaad2fc66ccb2226d4b5ab56ea1ee493f655ea1b6c") creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) [ 2714.403667] audit: type=1800 audit(1543748943.069:5346): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16761 res=0 [ 2714.440289] audit: type=1804 audit(1543748943.099:5347): pid=7559 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir108271952/syzkaller.lMQCMY/2513/file0" dev="sda1" ino=16761 res=1 11:09:03 executing program 2: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) [ 2714.976426] syz-executor1 invoked oom-killer: gfp_mask=0x6146c0(GFP_KERNEL|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_NOMEMALLOC), nodemask=(null), order=1, oom_score_adj=0 [ 2715.008789] syz-executor1 cpuset=syz1 mems_allowed=0 [ 2715.015627] CPU: 0 PID: 7546 Comm: syz-executor1 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2715.024138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2715.033489] Call Trace: [ 2715.036088] dump_stack+0x244/0x39d [ 2715.039733] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2715.044941] ? mark_held_locks+0x130/0x130 [ 2715.049167] dump_header+0x27b/0xf72 [ 2715.052914] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2715.057505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2715.063042] ? check_preemption_disabled+0x48/0x280 [ 2715.068035] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2715.073555] ? pagefault_out_of_memory+0x197/0x197 [ 2715.078489] ? print_usage_bug+0xc0/0xc0 [ 2715.082574] ? perf_trace_lock+0x14d/0x7a0 [ 2715.086808] ? debug_smp_processor_id+0x1c/0x20 [ 2715.091475] ? perf_trace_lock_acquire+0x15b/0x800 [ 2715.096389] ? lock_is_held_type+0x210/0x210 [ 2715.100781] ? perf_trace_lock+0x7a0/0x7a0 [ 2715.104996] ? debug_smp_processor_id+0x1c/0x20 [ 2715.109648] ? mark_held_locks+0xc7/0x130 [ 2715.113774] ? print_usage_bug+0xc0/0xc0 [ 2715.117817] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.122557] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2715.127138] ? retint_kernel+0x2d/0x2d [ 2715.131024] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2715.135990] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.140766] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2715.146212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.150967] ? retint_kernel+0x2d/0x2d [ 2715.154898] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2715.159985] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2715.165075] ? ___ratelimit+0x3b9/0x672 [ 2715.169059] ? idr_get_free+0xf70/0xf70 [ 2715.173025] oom_kill_process.cold.27+0x10/0x903 [ 2715.177777] ? mark_held_locks+0xc7/0x130 [ 2715.181913] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.186653] ? oom_evaluate_task+0x540/0x540 [ 2715.191058] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2715.195985] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.200739] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2715.206227] ? _raw_spin_unlock_irq+0x56/0x80 [ 2715.210712] ? _raw_spin_unlock_irq+0x60/0x80 [ 2715.215192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2715.219933] ? retint_kernel+0x2d/0x2d [ 2715.223830] out_of_memory+0xa7f/0x1430 [ 2715.227781] ? preempt_schedule+0x4d/0x60 [ 2715.231912] ? oom_killer_disable+0x3a0/0x3a0 [ 2715.236386] ? preempt_schedule+0x4d/0x60 [ 2715.240513] ? ___preempt_schedule+0x16/0x18 [ 2715.244911] mem_cgroup_out_of_memory+0x15e/0x210 [ 2715.249731] ? memory_oom_group_write+0x160/0x160 [ 2715.254556] ? page_counter_try_charge+0x1c1/0x220 [ 2715.259466] try_charge+0xdcd/0x1720 [ 2715.263181] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2715.267834] ? rcu_pm_notify+0xc0/0xc0 [ 2715.271717] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2715.276717] ? __alloc_pages_nodemask+0xbf1/0xdd0 [ 2715.281541] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2715.286106] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 2715.291126] memcg_kmem_charge_memcg+0x7c/0x120 [ 2715.295792] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2715.300274] cache_grow_begin+0x280/0x8c0 [ 2715.304402] ? do_raw_spin_unlock+0xa7/0x330 [ 2715.308794] fallback_alloc+0x204/0x2e0 [ 2715.312778] ____cache_alloc_node+0x1c7/0x1e0 [ 2715.317271] kmem_cache_alloc_node_trace+0xe7/0x740 [ 2715.322291] __kmalloc_node_track_caller+0x3c/0x70 [ 2715.327202] __kmalloc_reserve.isra.38+0x41/0xe0 [ 2715.331955] __alloc_skb+0x150/0x770 [ 2715.335671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2715.341213] ? netdev_alloc_frag+0x1f0/0x1f0 [ 2715.345622] ? debug_smp_processor_id+0x1c/0x20 [ 2715.350272] ? perf_trace_lock+0x14d/0x7a0 [ 2715.354485] ? debug_smp_processor_id+0x1c/0x20 [ 2715.359135] ? perf_trace_lock_acquire+0x15b/0x800 [ 2715.364078] ? mark_held_locks+0x130/0x130 [ 2715.368296] ? lock_is_held_type+0x210/0x210 [ 2715.372709] ? perf_trace_lock+0x7a0/0x7a0 [ 2715.376924] ? check_preemption_disabled+0x48/0x280 [ 2715.381922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2715.387438] ? graph_lock+0x270/0x270 [ 2715.391253] alloc_skb_with_frags+0x133/0x7d0 [ 2715.395739] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 2715.400491] sock_alloc_send_pskb+0x87a/0xaf0 [ 2715.405031] ? kasan_check_read+0x11/0x20 [ 2715.409171] ? sock_wmalloc+0x1f0/0x1f0 [ 2715.413144] ? sk_send_sigurg+0x3c0/0x3c0 [ 2715.417278] ? kasan_check_read+0x11/0x20 [ 2715.421412] ? do_raw_spin_trylock+0x270/0x270 [ 2715.425980] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2715.431098] unix_stream_sendmsg+0x6f7/0xd40 [ 2715.435511] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2715.440167] ? aa_sock_msg_perm.isra.14+0xba/0x160 [ 2715.445079] ? apparmor_socket_sendmsg+0x29/0x30 [ 2715.449818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2715.455353] ? security_socket_sendmsg+0x94/0xc0 [ 2715.460092] ? unix_stream_sendpage+0xdf0/0xdf0 [ 2715.464746] sock_sendmsg+0xd5/0x120 [ 2715.468474] sock_write_iter+0x35e/0x5c0 [ 2715.472518] ? sock_sendmsg+0x120/0x120 [ 2715.476483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2715.482019] ? iov_iter_init+0xe5/0x210 [ 2715.485995] __vfs_write+0x6b8/0x9f0 [ 2715.489699] ? kernel_read+0x120/0x120 [ 2715.493603] ? apparmor_path_rmdir+0x30/0x30 [ 2715.497990] ? trace_hardirqs_off_caller+0x300/0x300 [ 2715.503100] ? apparmor_file_permission+0x24/0x30 [ 2715.507930] ? rw_verify_area+0x118/0x360 [ 2715.512064] vfs_write+0x1fc/0x560 [ 2715.515607] ksys_write+0x101/0x260 [ 2715.519219] ? __ia32_sys_read+0xb0/0xb0 [ 2715.523262] ? trace_hardirqs_off_caller+0x300/0x300 [ 2715.528363] __x64_sys_write+0x73/0xb0 [ 2715.532252] do_syscall_64+0x1b9/0x820 [ 2715.536144] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2715.541504] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2715.546409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2715.551231] ? trace_hardirqs_on_caller+0x310/0x310 [ 2715.556223] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2715.561255] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2715.566256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2715.571085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2715.576263] RIP: 0033:0x457569 [ 2715.579433] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2715.598311] RSP: 002b:00007fc12fe53c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2715.606012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 2715.613261] RDX: 00000000ffffff4d RSI: 0000000020000980 RDI: 0000000000000006 [ 2715.620509] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2715.627772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc12fe546d4 [ 2715.635164] R13: 00000000004c5d2a R14: 00000000004da0f0 R15: 00000000ffffffff [ 2715.644723] Task in /syz1 killed as a result of limit of /syz1 [ 2715.651097] memory: usage 307080kB, limit 307200kB, failcnt 1499 [ 2715.657253] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2715.664068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:04 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:04 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:04 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@sr0='/dev/sr0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f0000000140)="a8412f78ef87025c4f072b6835923c92e952fc71e19d62b536669a1842b5375ab18d6206bc0c4fd206df156b56829fddaa5bb1ff54d2bb699e10939fbaad2fc66ccb2226d4b5ab56ea1ee493f655ea1b6c") creat(&(0x7f0000000100)='./file0/bus\x00', 0x0) mount(&(0x7f0000033ff4), &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) 11:09:04 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) [ 2715.670213] Memory cgroup stats for /syz1: cache:11020KB rss:247416KB rss_huge:227328KB shmem:4676KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:6136KB active_anon:229760KB inactive_file:204KB active_file:68KB unevictable:22408KB [ 2715.692463] Memory cgroup out of memory: Kill process 21362 (syz-executor1) score 1106 or sacrifice child [ 2715.702236] Killed process 21362 (syz-executor1) total-vm:70336kB, anon-rss:2196kB, file-rss:33624kB, shmem-rss:0kB [ 2715.714804] oom_reaper: reaped process 21362 (syz-executor1), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 11:09:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$evdev(r1, &(0x7f0000000000)=[{}], 0xffad) 11:09:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:09:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)="03", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r1, &(0x7f0000001880)="960ced1d72b3617b6f6ecb2879c7fe4b72628c5d08a2836f15f74a10a7a118023f7589b1175a2fc2927414f0eae30a42d52b7260761d3d735ee0416d417e9ce902f0ff831db039b98b7249d8e4b5d1e1ee7547ff", 0x54, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7c0, 0x0, 0x0, 0x0, @link_local}, 0x80) [ 2715.842943] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 11:09:04 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:04 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) 11:09:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:09:04 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "fb561e", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "90846b", 0x0, "02ee62"}}}}}}}, 0x0) 11:09:04 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r2, 0x0, 0x0, 0x10001) fallocate(r0, 0x11, 0x401, 0x10000) sendfile(r0, r1, 0x0, 0xffffffff000) [ 2716.104849] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 11:09:04 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "fb561e", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "90846b", 0x0, "02ee62"}}}}}}}, 0x0) 11:09:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:09:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 11:09:04 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "fb561e", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "90846b", 0x0, "02ee62"}}}}}}}, 0x0) [ 2716.393634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 11:09:05 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 11:09:05 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="08cf44", 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f0000000180)='./file0\x00', 0x400201, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000e00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 11:09:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 11:09:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)="03", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r1, &(0x7f0000001880)="960ced1d72b3617b6f6ecb2879c7fe4b72628c5d08a2836f15f74a10a7a118023f7589b1175a2fc2927414f0eae30a42d52b7260761d3d735ee0416d417e9ce902f0ff831db039b98b7249d8e4b5d1e1ee7547ff", 0x54, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7c0, 0x0, 0x0, 0x0, @link_local}, 0x80) 11:09:05 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "fb561e", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "90846b", 0x0, "02ee62"}}}}}}}, 0x0) 11:09:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:09:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 11:09:05 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) [ 2716.709668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 11:09:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb888de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) 11:09:05 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="08cf44", 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f0000000180)='./file0\x00', 0x400201, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000e00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 11:09:05 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 11:09:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 11:09:05 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0xf, 0x6}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xffffffffffff2, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000f646a912c64697bf041cee61a24df63395ac559b82f351b0e0abea0826a3239683e5a4c0cbbb34ce52110384b35741916895f095d31020485169"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x9, 0x2, [0xffffffffffffffff, 0x1]}, &(0x7f0000000200)=0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000340)=""/9, &(0x7f0000000380)=0x9) 11:09:05 executing program 4: semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 11:09:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb888de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) 11:09:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)="03", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r1, &(0x7f0000001880)="960ced1d72b3617b6f6ecb2879c7fe4b72628c5d08a2836f15f74a10a7a118023f7589b1175a2fc2927414f0eae30a42d52b7260761d3d735ee0416d417e9ce902f0ff831db039b98b7249d8e4b5d1e1ee7547ff", 0x54, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7c0, 0x0, 0x0, 0x0, @link_local}, 0x80) 11:09:05 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="08cf44", 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f0000000180)='./file0\x00', 0x400201, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000e00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 11:09:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34068}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000005007a00}}]}]}, 0x2c}}, 0x0) 11:09:05 executing program 4: semget(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801, 0x0) io_setup(0xc01, &(0x7f0000000480)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) 11:09:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb888de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) [ 2717.269851] openvswitch: netlink: Key type 122 is out of range max 29 11:09:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0xf, 0x6}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xffffffffffff2, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000f646a912c64697bf041cee61a24df63395ac559b82f351b0e0abea0826a3239683e5a4c0cbbb34ce52110384b35741916895f095d31020485169"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x9, 0x2, [0xffffffffffffffff, 0x1]}, &(0x7f0000000200)=0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000340)=""/9, &(0x7f0000000380)=0x9) 11:09:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34068}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000005007a00}}]}]}, 0x2c}}, 0x0) 11:09:06 executing program 2: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="08cf44", 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8c) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x48) open$dir(&(0x7f0000000180)='./file0\x00', 0x400201, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0xc9, 0x300000000000e00}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 11:09:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) [ 2717.536791] openvswitch: netlink: Key type 122 is out of range max 29 11:09:06 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb888de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) 11:09:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34068}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000005007a00}}]}]}, 0x2c}}, 0x0) 11:09:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000017c0)="03", 0x1}], 0x1}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r1, &(0x7f0000001880)="960ced1d72b3617b6f6ecb2879c7fe4b72628c5d08a2836f15f74a10a7a118023f7589b1175a2fc2927414f0eae30a42d52b7260761d3d735ee0416d417e9ce902f0ff831db039b98b7249d8e4b5d1e1ee7547ff", 0x54, 0x0, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x7c0, 0x0, 0x0, 0x0, @link_local}, 0x80) 11:09:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) 11:09:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0xf, 0x6}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xffffffffffff2, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000f646a912c64697bf041cee61a24df63395ac559b82f351b0e0abea0826a3239683e5a4c0cbbb34ce52110384b35741916895f095d31020485169"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x9, 0x2, [0xffffffffffffffff, 0x1]}, &(0x7f0000000200)=0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000340)=""/9, &(0x7f0000000380)=0x9) [ 2717.766950] openvswitch: netlink: Key type 122 is out of range max 29 11:09:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34068}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000005007a00}}]}]}, 0x2c}}, 0x0) 11:09:06 executing program 2: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000500)=0x7d0, &(0x7f0000000140)=0xffffffffffffff55) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8, 0x0, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = memfd_create(&(0x7f0000000280)='^$posix_acl_access,\x00', 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x100000000000000, 0x100000000000000, 0x7, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f00}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/121) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket(0x0, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000400)={0xffffffffffffffff, 0xcfa2, 0x1, "6951052a0475f4339e71431b4a46f5b38c4dc2c9da77dd789e07136482c170a2bce1ebd88ce1d247bc5a8aae6f9d63dd5e0d9090b5c8a6443f47d85dbda19e37884eaf33a8fa050a9086ed46d4ac1c347ee7504b2bb944da99a571d86b8b92b1cd8bf24d4483120d8b4933f68d2d31f23692a872e45e340d043fd583d6be5ba86e7857b5fde681e3367f6b8b6a3e215a183f0ff9ba7afb311528129b6e5f4ded6c2614fdfc532240f8f5e73e6d1c0139a649f1bf5cbd9fee3f1b86edf7c881875b3ba93a35f9abfa1c5c601935c67f24f82d76c34d52870cfe2dc7c4ebe1ba632aa4c50e"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2800000003000000, 0xe, 0x0, &(0x7f0000000200)="a06ad876d56a0e64d082778c3938", 0x0, 0xb4b}, 0x28) 11:09:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) [ 2718.021318] openvswitch: netlink: Key type 122 is out of range max 29 11:09:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x7ffff, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70415, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "07d1f6", 0x0, "071ccd"}}}}}}, &(0x7f0000000000)) 11:09:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000440)=""/1) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, 0x0) 11:09:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x31, 0x829, 0x0, 0x0, {0x2801, 0x40000}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11:09:06 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000280)="8a6aa3614d44967b0f11d93cbae478aea70880989fab606298b001a435e6ad56430f01905cfd221f65bdf54b29ca2d8f3f2d050c512330c144a0e41c05b317933408ea5ba402989aa4724823042c3679fba773cd6061f3923d4fae0e646f9edf918cb55ca6ac2035590dfc4c996a98773f95b53183da1b792cebbcc1ba1464d0ed181b1373223f3f05cbccc64a9bbe72d7c1530d4f9b082d7f9ed8dfbeade17c2ea8bb9c50b91973714e7b7a1dfe27efa5ab848443bcd49273c1e1f547bd4165", 0xc0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x0, 0xf, 0x6}) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xffffffffffff2, 0x11011, r1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000240)=0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000f646a912c64697bf041cee61a24df63395ac559b82f351b0e0abea0826a3239683e5a4c0cbbb34ce52110384b35741916895f095d31020485169"], &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x9, 0x2, [0xffffffffffffffff, 0x1]}, &(0x7f0000000200)=0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000340)=""/9, &(0x7f0000000380)=0x9) 11:09:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x31, 0x829, 0x0, 0x0, {0x2801, 0x40000}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11:09:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], []]}, 0x258) 11:09:07 executing program 0: syz_emit_ethernet(0x1ff, 0x0, 0x0) 11:09:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x31, 0x829, 0x0, 0x0, {0x2801, 0x40000}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11:09:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:07 executing program 1: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000fff)={0x10000}) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0xffb3) 11:09:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={"62726f64256500056400", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400) 11:09:07 executing program 0: syz_emit_ethernet(0x1ff, 0x0, 0x0) 11:09:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x31, 0x829, 0x0, 0x0, {0x2801, 0x40000}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 11:09:07 executing program 2: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000500)=0x7d0, &(0x7f0000000140)=0xffffffffffffff55) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8, 0x0, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = memfd_create(&(0x7f0000000280)='^$posix_acl_access,\x00', 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x100000000000000, 0x100000000000000, 0x7, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f00}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/121) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket(0x0, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000400)={0xffffffffffffffff, 0xcfa2, 0x1, "6951052a0475f4339e71431b4a46f5b38c4dc2c9da77dd789e07136482c170a2bce1ebd88ce1d247bc5a8aae6f9d63dd5e0d9090b5c8a6443f47d85dbda19e37884eaf33a8fa050a9086ed46d4ac1c347ee7504b2bb944da99a571d86b8b92b1cd8bf24d4483120d8b4933f68d2d31f23692a872e45e340d043fd583d6be5ba86e7857b5fde681e3367f6b8b6a3e215a183f0ff9ba7afb311528129b6e5f4ded6c2614fdfc532240f8f5e73e6d1c0139a649f1bf5cbd9fee3f1b86edf7c881875b3ba93a35f9abfa1c5c601935c67f24f82d76c34d52870cfe2dc7c4ebe1ba632aa4c50e"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2800000003000000, 0xe, 0x0, &(0x7f0000000200)="a06ad876d56a0e64d082778c3938", 0x0, 0xb4b}, 0x28) [ 2718.820467] xt_bpf: check failed: parse error 11:09:07 executing program 0: syz_emit_ethernet(0x1ff, 0x0, 0x0) 11:09:07 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={"62726f64256500056400", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400) 11:09:07 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc1004111, &(0x7f0000000000)="3716b4d3ade4386097307bc1f5") 11:09:07 executing program 1: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000fff)={0x10000}) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0xffb3) 11:09:07 executing program 1: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000fff)={0x10000}) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0xffb3) 11:09:07 executing program 0: syz_emit_ethernet(0x1ff, 0x0, 0x0) [ 2719.018562] xt_bpf: check failed: parse error 11:09:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:08 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc1004111, &(0x7f0000000000)="3716b4d3ade4386097307bc1f5") 11:09:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={"62726f64256500056400", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400) 11:09:08 executing program 2: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000500)=0x7d0, &(0x7f0000000140)=0xffffffffffffff55) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8, 0x0, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = memfd_create(&(0x7f0000000280)='^$posix_acl_access,\x00', 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x100000000000000, 0x100000000000000, 0x7, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f00}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/121) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket(0x0, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000400)={0xffffffffffffffff, 0xcfa2, 0x1, "6951052a0475f4339e71431b4a46f5b38c4dc2c9da77dd789e07136482c170a2bce1ebd88ce1d247bc5a8aae6f9d63dd5e0d9090b5c8a6443f47d85dbda19e37884eaf33a8fa050a9086ed46d4ac1c347ee7504b2bb944da99a571d86b8b92b1cd8bf24d4483120d8b4933f68d2d31f23692a872e45e340d043fd583d6be5ba86e7857b5fde681e3367f6b8b6a3e215a183f0ff9ba7afb311528129b6e5f4ded6c2614fdfc532240f8f5e73e6d1c0139a649f1bf5cbd9fee3f1b86edf7c881875b3ba93a35f9abfa1c5c601935c67f24f82d76c34d52870cfe2dc7c4ebe1ba632aa4c50e"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2800000003000000, 0xe, 0x0, &(0x7f0000000200)="a06ad876d56a0e64d082778c3938", 0x0, 0xb4b}, 0x28) 11:09:08 executing program 1: r0 = socket(0xa, 0x2000000001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000fff)={0x10000}) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0xffb3) 11:09:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x0) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)={&(0x7f0000000580)='./file1\x00'}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000003c0)=@sco, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=""/189, 0xbd, 0x2}, 0x143) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000280)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000940)="4781a726bb55fb7c9ffe904a0415c91570f7682721967cb2efe36aaf4ce62cc9f33af6656d5a60a53511145b2020832c64a71227770738e647b42d053a9fbca860d357b7acd6ef8abce38c2eed65b8467dc2fd80effaee256729ede9363e308813cf8a52347854e6ffc7b8daae845ce7e2edfcca5103618e8597aea00e4003762bf870a8a220f286283bbcda307f68"}, 0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) recvmsg(0xffffffffffffffff, &(0x7f000000fa40)={&(0x7f000000d5c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f000000e9c0)=[{&(0x7f000000d700)=""/170, 0xaa}, {&(0x7f000000d7c0)=""/234, 0xea}, {&(0x7f000000d8c0)=""/4096, 0x1000}, {&(0x7f000000e8c0)=""/45, 0x2d}], 0x4, &(0x7f000000ea40)=""/4096, 0x1000, 0x80000001}, 0x10000) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000025c0)='cgroup.type\x00', 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb25, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 11:09:08 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x400c00, 0x0) recvmmsg(r0, &(0x7f0000004540), 0x0, 0x0, &(0x7f0000004640)={0x0, 0x989680}) exit(0x3fc000000000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x5d9d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000100)={0x8000}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x40000, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x213}, @local}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) fgetxattr(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="28fe5daa306fb76b1b6b3134633cde2f000000"], &(0x7f0000000580)=""/151, 0x97) openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x100, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) [ 2719.747223] xt_bpf: check failed: parse error 11:09:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={"62726f64256500056400", 0x20, 0x1, 0x388, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2f8, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x400) 11:09:08 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc1004111, &(0x7f0000000000)="3716b4d3ade4386097307bc1f5") [ 2719.970450] xt_bpf: check failed: parse error 11:09:08 executing program 2: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000500)=0x7d0, &(0x7f0000000140)=0xffffffffffffff55) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8, 0x0, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r0 = memfd_create(&(0x7f0000000280)='^$posix_acl_access,\x00', 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000240)={0x0, 0x0, 0x1}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x100011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x100000000000000, 0x100000000000000, 0x7, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x3f00}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000380)=""/121) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r3 = socket(0x0, 0x1, 0x0) syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000400)={0xffffffffffffffff, 0xcfa2, 0x1, "6951052a0475f4339e71431b4a46f5b38c4dc2c9da77dd789e07136482c170a2bce1ebd88ce1d247bc5a8aae6f9d63dd5e0d9090b5c8a6443f47d85dbda19e37884eaf33a8fa050a9086ed46d4ac1c347ee7504b2bb944da99a571d86b8b92b1cd8bf24d4483120d8b4933f68d2d31f23692a872e45e340d043fd583d6be5ba86e7857b5fde681e3367f6b8b6a3e215a183f0ff9ba7afb311528129b6e5f4ded6c2614fdfc532240f8f5e73e6d1c0139a649f1bf5cbd9fee3f1b86edf7c881875b3ba93a35f9abfa1c5c601935c67f24f82d76c34d52870cfe2dc7c4ebe1ba632aa4c50e"}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x2800000003000000, 0xe, 0x0, &(0x7f0000000200)="a06ad876d56a0e64d082778c3938", 0x0, 0xb4b}, 0x28) 11:09:08 executing program 4: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb}, 0x2c) 11:09:08 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc1004111, &(0x7f0000000000)="3716b4d3ade4386097307bc1f5") 11:09:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) dup3(r1, r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./control\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 11:09:09 executing program 4: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb}, 0x2c) 11:09:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0xf000000, 0xf5ffffff00000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev}]}, 0x2c}}, 0x0) 11:09:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1) [ 2720.657048] netlink: 'syz-executor2': attribute type 10 has an invalid length. 11:09:09 executing program 4: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb}, 0x2c) [ 2722.750680] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2725.760659] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2728.770635] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2731.780641] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2734.790636] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2737.800682] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2740.810650] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2743.820637] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2746.830661] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2749.840635] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2752.850619] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2755.860638] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2758.871189] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2759.020912] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2761.880664] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2764.890656] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2767.900733] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2770.910674] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2773.920687] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2776.930677] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2780.272060] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2783.280782] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2786.290669] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2789.300711] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2792.310636] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2795.320659] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2798.330637] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2801.340680] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2804.350648] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2807.360659] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2810.370697] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2813.380676] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2816.390665] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2819.400649] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2822.410657] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2825.420647] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2828.430639] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2831.440675] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2834.450625] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2837.460638] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2840.470657] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2840.941046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2843.480640] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2846.490646] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2849.500872] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2852.510656] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2855.520673] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2858.530654] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2861.540663] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2864.550650] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2867.560641] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2870.570663] syz-executor0(7805): getblk(): executed=9 bh_count=0 bh_state=0 [ 2871.021226] INFO: task syz-executor0:7808 blocked for more than 140 seconds. [ 2871.028463] Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2871.035965] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2871.044334] syz-executor0 D23336 7808 15308 0x00000004 [ 2871.049989] Call Trace: [ 2871.059553] __schedule+0x8cf/0x21d0 [ 2871.063756] ? __sched_text_start+0x8/0x8 [ 2871.067935] ? graph_lock+0x270/0x270 [ 2871.072183] ? print_usage_bug+0xc0/0xc0 [ 2871.076286] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2871.082065] ? find_held_lock+0x36/0x1c0 [ 2871.086164] ? mark_held_locks+0xc7/0x130 [ 2871.090330] schedule+0xef/0x370 [ 2871.094228] ? __schedule+0x21d0/0x21d0 [ 2871.098228] ? __rwsem_down_write_failed_common+0x9ba/0x15e0 [ 2871.104520] ? trace_hardirqs_off_caller+0x300/0x300 [ 2871.109640] ? rcu_read_unlock_special+0x370/0x370 [ 2871.115240] __rwsem_down_write_failed_common+0xc9a/0x15e0 [ 2871.121372] ? __lock_acquire+0x62f/0x4c20 [ 2871.125633] ? rwsem_spin_on_owner+0xa30/0xa30 [ 2871.130226] ? __lock_acquire+0x62f/0x4c20 [ 2871.135016] ? mark_held_locks+0x130/0x130 [ 2871.139280] ? mark_held_locks+0x130/0x130 [ 2871.144031] ? check_preemption_disabled+0x48/0x280 [ 2871.149084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.155123] ? debug_smp_processor_id+0x1c/0x20 [ 2871.159824] ? perf_trace_lock+0x14d/0x7a0 [ 2871.165702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.171675] ? check_preemption_disabled+0x48/0x280 [ 2871.176742] ? debug_smp_processor_id+0x1c/0x20 [ 2871.181881] ? perf_trace_lock_acquire+0x15b/0x800 [ 2871.186828] ? debug_smp_processor_id+0x1c/0x20 [ 2871.191983] ? lock_is_held_type+0x210/0x210 [ 2871.196411] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2871.202146] ? path_openat+0x220/0x5150 [ 2871.206152] ? graph_lock+0x270/0x270 [ 2871.209958] ? graph_lock+0x270/0x270 [ 2871.214250] ? find_held_lock+0x36/0x1c0 [ 2871.218377] ? lock_acquire+0x1ed/0x520 [ 2871.222822] ? path_openat+0x15c4/0x5150 [ 2871.226912] ? lock_release+0xa10/0xa10 [ 2871.231325] ? perf_trace_sched_process_exec+0x860/0x860 [ 2871.236826] rwsem_down_write_failed+0xe/0x10 [ 2871.241789] ? rwsem_down_write_failed+0xe/0x10 [ 2871.246486] call_rwsem_down_write_failed+0x17/0x30 [ 2871.252104] down_write+0xa5/0x130 [ 2871.255662] ? path_openat+0x15c4/0x5150 [ 2871.259755] ? down_read+0x120/0x120 [ 2871.263976] ? __sb_end_write+0xd9/0x110 [ 2871.268061] path_openat+0x15c4/0x5150 [ 2871.272423] ? lock_is_held_type+0x210/0x210 [ 2871.276868] ? path_lookupat.isra.43+0xc00/0xc00 [ 2871.282123] ? unwind_get_return_address+0x61/0xa0 [ 2871.287073] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2871.293839] ? expand_files.part.8+0x571/0x9a0 [ 2871.298453] ? find_held_lock+0x36/0x1c0 [ 2871.302957] ? __alloc_fd+0x347/0x6e0 [ 2871.306812] ? lock_downgrade+0x900/0x900 [ 2871.311404] ? kasan_check_read+0x11/0x20 [ 2871.315570] ? do_raw_spin_unlock+0xa7/0x330 [ 2871.319989] ? do_raw_spin_trylock+0x270/0x270 [ 2871.325002] ? __lock_is_held+0xb5/0x140 [ 2871.329136] ? __check_object_size+0xb1/0x782 [ 2871.334101] ? _raw_spin_unlock+0x2c/0x50 [ 2871.338266] ? __alloc_fd+0x347/0x6e0 [ 2871.342632] do_filp_open+0x255/0x380 [ 2871.346452] ? may_open_dev+0x100/0x100 [ 2871.350431] ? strncpy_from_user+0x411/0x5a0 [ 2871.355407] ? digsig_verify+0x1530/0x1530 [ 2871.359665] ? get_unused_fd_flags+0x122/0x1a0 [ 2871.364797] ? getname_flags+0x26e/0x590 [ 2871.368891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2871.374819] do_sys_open+0x568/0x700 [ 2871.378551] ? filp_open+0x80/0x80 [ 2871.382607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.388191] ? trace_hardirqs_off_caller+0x300/0x300 [ 2871.393695] __x64_sys_openat+0x9d/0x100 [ 2871.397846] do_syscall_64+0x1b9/0x820 [ 2871.402174] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2871.407558] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2871.412992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2871.417883] ? trace_hardirqs_on_caller+0x310/0x310 [ 2871.424595] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2871.429629] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2871.435056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2871.439929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2871.445598] RIP: 0033:0x457569 [ 2871.448816] Code: Bad RIP value. [ 2871.452581] RSP: 002b:00007f2e89cf9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2871.460302] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2871.468010] RDX: 0000000000002761 RSI: 0000000020000180 RDI: ffffffffffffffff [ 2871.475686] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2871.483349] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89cfa6d4 [ 2871.491035] R13: 00000000004c2e43 R14: 00000000004d4db0 R15: 00000000ffffffff [ 2871.498359] [ 2871.498359] Showing all locks held in the system: [ 2871.505732] 1 lock held by khungtaskd/1010: [ 2871.510062] #0: 000000005d43a286 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 2871.519203] 1 lock held by rsyslogd/5859: [ 2871.523828] #0: 0000000039cc90db (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 2871.532290] 2 locks held by getty/5949: [ 2871.536274] #0: 00000000a9f4ffe6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.544948] #1: 00000000d787593b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.555620] 2 locks held by getty/5950: [ 2871.559599] #0: 000000003b2ff74c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.568230] #1: 00000000868bdec3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.577499] 2 locks held by getty/5951: [ 2871.581976] #0: 000000006ad286a5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.590281] #1: 0000000076434276 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.599692] 2 locks held by getty/5952: [ 2871.604068] #0: 00000000e3e23cef (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.612679] #1: 000000002790152a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.622082] 2 locks held by getty/5953: [ 2871.626065] #0: 00000000801e9036 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.635238] #1: 00000000e639a828 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.644595] 2 locks held by getty/5954: [ 2871.648573] #0: 00000000f2f5748e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.657248] #1: 00000000cca8aef1 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.666662] 2 locks held by getty/5955: [ 2871.671040] #0: 000000003419efc8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 2871.679302] #1: 000000005c54833f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 2871.690160] 2 locks held by syz-executor0/7805: [ 2871.695256] 1 lock held by syz-executor0/7808: [ 2871.699849] #0: 000000009ac3624f (&sb->s_type->i_mutex_key#29){++++}, at: path_openat+0x15c4/0x5150 [ 2871.709625] [ 2871.711945] ============================================= [ 2871.711945] [ 2871.718988] NMI backtrace for cpu 1 [ 2871.722715] CPU: 1 PID: 1010 Comm: khungtaskd Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2871.730955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.740305] Call Trace: [ 2871.742901] dump_stack+0x244/0x39d [ 2871.746538] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2871.751751] ? check_preemption_disabled+0x48/0x280 [ 2871.756826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.762382] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 2871.767151] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 2871.772355] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 2871.777641] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2871.782835] watchdog+0xb4c/0x1060 [ 2871.786413] ? hungtask_pm_notify+0xb0/0xb0 [ 2871.790750] ? __kthread_parkme+0xce/0x1a0 [ 2871.794992] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2871.800100] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2871.805221] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2871.809830] ? trace_hardirqs_on+0xbd/0x310 [ 2871.814154] ? kasan_check_read+0x11/0x20 [ 2871.818334] ? __kthread_parkme+0xce/0x1a0 [ 2871.822595] ? trace_hardirqs_off_caller+0x300/0x300 [ 2871.827703] ? __schedule+0x21d0/0x21d0 [ 2871.831684] ? lockdep_init_map+0x9/0x10 [ 2871.835778] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2871.840884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2871.846428] ? __kthread_parkme+0xfb/0x1a0 [ 2871.850674] ? hungtask_pm_notify+0xb0/0xb0 [ 2871.855027] kthread+0x35a/0x440 [ 2871.858404] ? kthread_stop+0x8f0/0x8f0 [ 2871.862390] ret_from_fork+0x3a/0x50 [ 2871.866502] Sending NMI from CPU 1 to CPUs 0: [ 2871.872866] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.388 msecs [ 2871.873079] NMI backtrace for cpu 0 [ 2871.873087] CPU: 0 PID: 7805 Comm: syz-executor0 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2871.873110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2871.873129] RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50 [ 2871.873143] Code: 5d c3 66 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 08 45 82 7e 81 e2 00 01 1f 00 75 2b 8b 90 d8 12 00 00 <83> fa 02 75 20 48 8b 88 e0 12 00 00 8b 80 dc 12 00 00 48 8b 11 48 [ 2871.873148] RSP: 0018:ffff880127cfedc8 EFLAGS: 00000246 [ 2871.873173] RAX: ffff8801bf62e300 RBX: ffffea0006126bb4 RCX: ffffffff81e1e0e9 [ 2871.873179] RDX: 0000000000000002 RSI: ffffffff81e1e0fc RDI: 0000000000000005 [ 2871.873185] RBP: ffff880127cfedc8 R08: ffff8801bf62e300 R09: fffff94000c24d76 [ 2871.873191] R10: fffff94000c24d76 R11: ffffea0006126bb7 R12: 0000000000000001 [ 2871.873197] R13: ffffea0006126b80 R14: dffffc0000000000 R15: 1ffff10024f9fddd [ 2871.873218] FS: 00007f2e89d1b700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 2871.873224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2871.873230] CR2: ffffffffff600400 CR3: 000000019441b000 CR4: 00000000001426f0 [ 2871.873237] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2871.873243] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2871.873247] Call Trace: [ 2871.873251] __getblk_gfp+0xb0c/0x1030 [ 2871.873256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.873261] ? __find_get_block+0xf10/0xf10 [ 2871.873266] ? preempt_notifier_register+0x200/0x200 [ 2871.873270] ? __switch_to_asm+0x34/0x70 [ 2871.873274] ? __switch_to_asm+0x34/0x70 [ 2871.873278] ? __switch_to_asm+0x40/0x70 [ 2871.873283] ? __switch_to_asm+0x34/0x70 [ 2871.873287] ? __switch_to_asm+0x40/0x70 [ 2871.873291] ? __switch_to_asm+0x34/0x70 [ 2871.873296] ? __switch_to_asm+0x40/0x70 [ 2871.873300] ? __switch_to_asm+0x34/0x70 [ 2871.873304] ? __switch_to_asm+0x34/0x70 [ 2871.873323] ? __switch_to_asm+0x40/0x70 [ 2871.873328] ? __switch_to_asm+0x34/0x70 [ 2871.873332] ? __switch_to_asm+0x40/0x70 [ 2871.873337] ? __switch_to_asm+0x40/0x70 [ 2871.873341] ? __schedule+0x8d7/0x21d0 [ 2871.873346] ? perf_trace_lock+0x14d/0x7a0 [ 2871.873351] ? debug_smp_processor_id+0x1c/0x20 [ 2871.873355] ? __sched_text_start+0x8/0x8 [ 2871.873360] ? retint_kernel+0x2d/0x2d [ 2871.873364] __bread_gfp+0x2d/0x310 [ 2871.873368] fat__get_entry+0x5a6/0xa40 [ 2871.873373] ? preempt_schedule+0x4d/0x60 [ 2871.873377] ? copy_overflow+0x30/0x30 [ 2871.873382] ? __mutex_lock+0x68c/0x16f0 [ 2871.873386] ? vfat_lookup+0xf1/0x640 [ 2871.873405] ? print_usage_bug+0xc0/0xc0 [ 2871.873409] fat_search_long+0x33b/0x1570 [ 2871.873414] ? kasan_check_read+0x11/0x20 [ 2871.873419] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2871.873423] ? rcu_read_unlock_special+0x370/0x370 [ 2871.873428] ? fat_parse_short+0x2cc0/0x2cc0 [ 2871.873433] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2871.873438] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2871.873442] ? retint_kernel+0x2d/0x2d [ 2871.873446] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2871.873451] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2871.873456] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2871.873460] ? __d_lookup_rcu+0xaa0/0xaa0 [ 2871.873465] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2871.873469] ? retint_kernel+0x2d/0x2d [ 2871.873473] vfat_find+0x16d/0x1a0 [ 2871.873478] vfat_lookup+0x107/0x640 [ 2871.873502] ? __lockdep_init_map+0x105/0x590 [ 2871.873507] ? vfat_find_form+0x120/0x120 [ 2871.873511] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2871.873515] ? d_lookup+0x20d/0x300 [ 2871.873519] ? __d_lookup+0x9e0/0x9e0 [ 2871.873524] ? vfat_find_form+0x120/0x120 [ 2871.873528] lookup_open+0x72e/0x1b90 [ 2871.873547] ? __follow_mount_rcu.isra.33.part.34+0x890/0x890 [ 2871.873552] ? __sb_end_write+0xd9/0x110 [ 2871.873556] path_openat+0x15e4/0x5150 [ 2871.873560] ? lock_is_held_type+0x210/0x210 [ 2871.873565] ? path_lookupat.isra.43+0xc00/0xc00 [ 2871.873570] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2871.873574] ? find_held_lock+0x36/0x1c0 [ 2871.873578] ? __alloc_fd+0x347/0x6e0 [ 2871.873583] ? lock_downgrade+0x900/0x900 [ 2871.873587] ? kasan_check_read+0x11/0x20 [ 2871.873592] ? do_raw_spin_unlock+0xa7/0x330 [ 2871.873611] ? do_raw_spin_trylock+0x270/0x270 [ 2871.873615] ? _raw_spin_unlock+0x2c/0x50 [ 2871.873620] ? __alloc_fd+0x347/0x6e0 [ 2871.873623] do_filp_open+0x255/0x380 [ 2871.873627] ? may_open_dev+0x100/0x100 [ 2871.873632] ? strncpy_from_user+0x411/0x5a0 [ 2871.873636] ? digsig_verify+0x1530/0x1530 [ 2871.873641] ? get_unused_fd_flags+0x122/0x1a0 [ 2871.873645] ? getname_flags+0x26e/0x590 [ 2871.873650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2871.873654] do_sys_open+0x568/0x700 [ 2871.873658] ? filp_open+0x80/0x80 [ 2871.873663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2871.873668] ? trace_hardirqs_off_caller+0x300/0x300 [ 2871.873672] __x64_sys_openat+0x9d/0x100 [ 2871.873676] do_syscall_64+0x1b9/0x820 [ 2871.873681] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2871.873686] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2871.873691] ? trace_hardirqs_on_caller+0x310/0x310 [ 2871.873695] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2871.873701] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2871.873705] ? __switch_to_asm+0x40/0x70 [ 2871.873709] ? __switch_to_asm+0x34/0x70 [ 2871.873714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2871.873728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2871.873746] RIP: 0033:0x457569 [ 2871.873760] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2871.873765] RSP: 002b:00007f2e89d1ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2871.873776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569 [ 2871.873782] RDX: 0000000000002761 RSI: 0000000020000180 RDI: ffffffffffffffff [ 2871.873788] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.873794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e89d1b6d4 [ 2871.873800] R13: 00000000004c2e43 R14: 00000000004d4db0 R15: 00000000ffffffff [ 2871.883599] Kernel panic - not syncing: hung_task: blocked tasks [ 2872.461489] CPU: 1 PID: 1010 Comm: khungtaskd Not tainted 4.20.0-rc1-next-20181109+ #110 [ 2872.469730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2872.479086] Call Trace: [ 2872.481691] dump_stack+0x244/0x39d [ 2872.485337] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2872.490551] panic+0x2ad/0x55c [ 2872.493756] ? add_taint.cold.5+0x16/0x16 [ 2872.497937] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 2872.503404] ? nmi_trigger_cpumask_backtrace+0x1f9/0x22a [ 2872.508861] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 2872.514325] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 2872.519794] watchdog+0xb5d/0x1060 [ 2872.523374] ? hungtask_pm_notify+0xb0/0xb0 [ 2872.527706] ? __kthread_parkme+0xce/0x1a0 [ 2872.531963] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2872.537074] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2872.542195] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2872.546792] ? trace_hardirqs_on+0xbd/0x310 [ 2872.551130] ? kasan_check_read+0x11/0x20 [ 2872.555291] ? __kthread_parkme+0xce/0x1a0 [ 2872.559540] ? trace_hardirqs_off_caller+0x300/0x300 [ 2872.564655] ? __schedule+0x21d0/0x21d0 [ 2872.568636] ? lockdep_init_map+0x9/0x10 [ 2872.572712] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2872.577870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2872.583419] ? __kthread_parkme+0xfb/0x1a0 [ 2872.587683] ? hungtask_pm_notify+0xb0/0xb0 [ 2872.592017] kthread+0x35a/0x440 [ 2872.595414] ? kthread_stop+0x8f0/0x8f0 [ 2872.599398] ret_from_fork+0x3a/0x50 [ 2872.604229] Kernel Offset: disabled [ 2872.607862] Rebooting in 86400 seconds..