red blocking state [ 768.703157][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.711504][T14957] device bridge_slave_1 entered promiscuous mode [ 768.733975][T14957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.745945][T14957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.771759][T14957] team0: Port device team_slave_0 added [ 768.827127][T14957] team0: Port device team_slave_1 added [ 768.906821][T14957] device hsr_slave_0 entered promiscuous mode [ 768.952560][T14957] device hsr_slave_1 entered promiscuous mode [ 769.012099][T14957] debugfs: Directory 'hsr0' with parent '/' already present! [ 769.039278][T14957] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.046577][T14957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.054290][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.061408][T14957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.128916][T14957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.148225][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 769.158076][ T3381] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.168517][ T3381] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.189627][T14957] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.202297][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 769.211224][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.218458][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.233889][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 769.242787][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.249872][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.274524][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 769.284381][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 769.306114][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 769.317169][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 769.335308][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 769.348946][T14957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.377910][T14957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.515447][T14963] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 769.525973][T14963] CPU: 0 PID: 14963 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 769.533891][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.543950][T14963] Call Trace: [ 769.547262][T14963] dump_stack+0x191/0x1f0 [ 769.551618][T14963] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 769.557526][T14963] dump_header+0x1e7/0xd00 [ 769.561965][T14963] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 769.568132][T14963] ? ___ratelimit+0x542/0x720 [ 769.572822][T14963] ? task_will_free_mem+0x14c/0x810 [ 769.578042][T14963] oom_kill_process+0x210/0x560 [ 769.582912][T14963] out_of_memory+0x1796/0x1c70 [ 769.587710][T14963] ? kmsan_internal_set_origin+0x6a/0xb0 [ 769.593394][T14963] memory_max_write+0x90b/0xb60 [ 769.598272][T14963] ? memory_max_show+0x1b0/0x1b0 [ 769.603220][T14963] cgroup_file_write+0x41a/0x8e0 [ 769.608180][T14963] ? cgroup_seqfile_stop+0x150/0x150 [ 769.613471][T14963] kernfs_fop_write+0x55f/0x840 [ 769.618341][T14963] ? kernfs_fop_read+0x9a0/0x9a0 [ 769.623282][T14963] __vfs_write+0x1a9/0xcb0 [ 769.627719][T14963] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 769.633978][T14963] ? __sb_start_write+0x10b/0x230 [ 769.639023][T14963] vfs_write+0x481/0x920 [ 769.643296][T14963] ksys_write+0x265/0x430 [ 769.647690][T14963] __se_sys_write+0x92/0xb0 [ 769.652267][T14963] __x64_sys_write+0x4a/0x70 [ 769.656894][T14963] do_syscall_64+0xb6/0x160 [ 769.661418][T14963] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.667315][T14963] RIP: 0033:0x459f39 [ 769.671270][T14963] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.690909][T14963] RSP: 002b:00007fe0b72aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 769.699372][T14963] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 769.707351][T14963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 769.715334][T14963] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 769.723318][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe0b72ab6d4 [ 769.731314][T14963] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 769.745088][T14963] memory: usage 8556kB, limit 0kB, failcnt 464 [ 769.751360][T14963] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 769.758399][T14963] Memory cgroup stats for /syz0: [ 769.758717][T14963] anon 2277376 [ 769.758717][T14963] file 4595712 [ 769.758717][T14963] kernel_stack 196608 [ 769.758717][T14963] slab 1282048 [ 769.758717][T14963] sock 69632 [ 769.758717][T14963] shmem 4595712 [ 769.758717][T14963] file_mapped 0 [ 769.758717][T14963] file_dirty 0 [ 769.758717][T14963] file_writeback 0 [ 769.758717][T14963] anon_thp 2097152 [ 769.758717][T14963] inactive_anon 4595712 [ 769.758717][T14963] active_anon 2277376 [ 769.758717][T14963] inactive_file 0 [ 769.758717][T14963] active_file 0 [ 769.758717][T14963] unevictable 0 [ 769.758717][T14963] slab_reclaimable 135168 [ 769.758717][T14963] slab_unreclaimable 1146880 [ 769.758717][T14963] pgfault 36399 [ 769.758717][T14963] pgmajfault 0 [ 769.758717][T14963] workingset_refault 0 [ 769.758717][T14963] workingset_activate 0 [ 769.758717][T14963] workingset_nodereclaim 0 [ 769.758717][T14963] pgrefill 0 [ 769.758717][T14963] pgscan 0 [ 769.758717][T14963] pgsteal 0 [ 769.758717][T14963] pgactivate 0 17:19:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/191, 0xbf}, {0x0}], 0x2}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000040), 0x1000000000000267) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r8, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r7, 0x0) r9 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r9, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) shutdown(r8, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 17:19:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, &(0x7f00000001c0)) 17:19:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000040), 0x18, 0x46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r2 = dup(r1) accept(r0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r2, r3) clock_gettime(0x0, &(0x7f0000000040)) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 17:19:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffeb8, 0x0, 0x0, 0x800e00565) shutdown(r0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40) 17:19:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/193, 0xc1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) shutdown(r3, 0x0) shutdown(r2, 0x0) [ 769.854674][T14963] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14961,uid=0 [ 769.870497][T14963] Memory cgroup out of memory: Killed process 14961 (syz-executor.0) total-vm:72720kB, anon-rss:2156kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 769.892679][ T1829] oom_reaper: reaped process 14961 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 769.969548][T14957] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 769.979793][T14957] CPU: 0 PID: 14957 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 769.987744][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.997866][T14957] Call Trace: [ 770.001243][T14957] dump_stack+0x191/0x1f0 [ 770.005660][T14957] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 770.011633][T14957] dump_header+0x1e7/0xd00 [ 770.016141][T14957] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 770.022383][T14957] ? ___ratelimit+0x542/0x720 [ 770.027139][T14957] ? task_will_free_mem+0x2c9/0x810 [ 770.032436][T14957] oom_kill_process+0x210/0x560 [ 770.037375][T14957] out_of_memory+0x1796/0x1c70 [ 770.042225][T14957] ? kmsan_internal_set_origin+0x6a/0xb0 [ 770.047958][T14957] try_charge+0x2889/0x3d70 [ 770.052554][T14957] ? __module_address+0x68/0x5e0 [ 770.057618][T14957] mem_cgroup_try_charge+0xa29/0xe40 [ 770.063017][T14957] mem_cgroup_try_charge_delay+0x7e/0x140 [ 770.068783][T14957] wp_page_copy+0x776/0x26d0 [ 770.073415][T14957] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 770.079361][T14957] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 770.085572][T14957] ? kmsan_internal_set_origin+0x6a/0xb0 [ 770.091247][T14957] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 770.097283][T14957] do_wp_page+0x1e8c/0x37f0 [ 770.101829][T14957] ? kmsan_internal_set_origin+0x6a/0xb0 [ 770.107500][T14957] handle_mm_fault+0x46e3/0x9f70 [ 770.112500][T14957] do_user_addr_fault+0x905/0x1510 [ 770.117659][T14957] __do_page_fault+0x1a2/0x410 [ 770.122455][T14957] do_page_fault+0xbb/0x500 [ 770.126992][T14957] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 770.132396][T14957] page_fault+0x4e/0x60 [ 770.136597][T14957] RIP: 0033:0x4329fe [ 770.140519][T14957] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 770.160145][T14957] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 770.166236][T14957] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 770.174226][T14957] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 770.182225][T14957] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001a55940 [ 770.190211][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 770.198208][T14957] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 770.207300][T14957] memory: usage 6088kB, limit 0kB, failcnt 479 [ 770.213653][T14957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 770.220534][T14957] Memory cgroup stats for /syz0: [ 770.220826][T14957] anon 53248 [ 770.220826][T14957] file 4595712 [ 770.220826][T14957] kernel_stack 0 [ 770.220826][T14957] slab 1282048 [ 770.220826][T14957] sock 69632 [ 770.220826][T14957] shmem 4595712 [ 770.220826][T14957] file_mapped 0 [ 770.220826][T14957] file_dirty 0 [ 770.220826][T14957] file_writeback 0 [ 770.220826][T14957] anon_thp 0 [ 770.220826][T14957] inactive_anon 4595712 [ 770.220826][T14957] active_anon 53248 [ 770.220826][T14957] inactive_file 0 [ 770.220826][T14957] active_file 0 [ 770.220826][T14957] unevictable 0 [ 770.220826][T14957] slab_reclaimable 135168 [ 770.220826][T14957] slab_unreclaimable 1146880 [ 770.220826][T14957] pgfault 36432 [ 770.220826][T14957] pgmajfault 0 [ 770.220826][T14957] workingset_refault 0 [ 770.220826][T14957] workingset_activate 0 [ 770.220826][T14957] workingset_nodereclaim 0 [ 770.220826][T14957] pgrefill 0 [ 770.220826][T14957] pgscan 0 [ 770.220826][T14957] pgsteal 0 [ 770.220826][T14957] pgactivate 0 [ 770.316658][T14957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=14957,uid=0 [ 770.332453][T14957] Memory cgroup out of memory: Killed process 14957 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 770.355806][ T1829] oom_reaper: reaped process 14957 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, 0x0, 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/13, 0xd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe79, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, &(0x7f0000000100)={0x0, {{0xffffffffffffff3a, 0x2}}}, 0x31b) recvfrom$inet(r4, 0x0, 0x4a8, 0x0, 0x0, 0x800e0051d) shutdown(r3, 0x0) 17:19:08 executing program 1: poll(&(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x808000000000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x5f6, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {0x0}, {0x0, 0xfffffffffffffd38}, {0x0}, {0x0}, {0x0, 0x7f}, {0x0, 0x392}, {0x0}, {0x0}], 0x9, 0x0, 0x335}, 0x0) shutdown(r2, 0x0) 17:19:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/88, 0x58}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000200)=""/203, 0xcb}, {0x0}, {0x0}, {0x0}, {0x0}], 0x3c3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x93f1, 0x0, 0x0, 0x800e0054f) shutdown(r4, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:19:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, 0x0, 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4e}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet(r1, 0x0, 0x10000002c, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:19:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000080)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff46, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r2}, {}, {r2}], 0x3, 0x3c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xa4d, 0x0, 0x0, 0x800e0050d) r4 = dup(r3) poll(&(0x7f00000013c0)=[{r2}], 0x1, 0xff) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xe126, 0x0, 0x0, 0x800e00529) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x10000}, 0x10) recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) 17:19:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, 0x0, 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2}, 0x10) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:19:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) readv(r5, &(0x7f0000002ac0)=[{&(0x7f0000000040)=""/204, 0xcc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/99, 0x2f1}, {0x0}], 0x100000000000000b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfff7, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) r2 = dup(r1) shutdown(r2, 0x0) 17:19:10 executing program 2: poll(0x0, 0x0, 0x4a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) shutdown(r0, 0x0) poll(&(0x7f0000000000), 0x2000000000000016, 0x46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r2 = dup(r1) recvfrom$inet(0xffffffffffffffff, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:19:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/122, 0x7a}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1e25bc8, 0x0, 0x0, 0x800e006a9) shutdown(r1, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r2, 0x0) 17:19:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000180)={0x800}, 0x5e3a8bc2548f6a93) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffc5d, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:19:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/249, 0xf9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) readv(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}], 0x1) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r2, 0x0) 17:19:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xf59, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{0x0}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) [ 773.273817][T13808] device bridge_slave_1 left promiscuous mode [ 773.280233][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.334407][T13808] device bridge_slave_0 left promiscuous mode [ 773.340777][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.053260][T13808] device hsr_slave_0 left promiscuous mode [ 774.104217][T13808] device hsr_slave_1 left promiscuous mode [ 774.169304][T13808] team0 (unregistering): Port device team_slave_1 removed [ 774.185091][T13808] team0 (unregistering): Port device team_slave_0 removed [ 774.205899][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.231217][T16396] IPVS: ftp: loaded support on port[0] = 21 [ 774.258034][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.341186][T13808] bond0 (unregistering): Released all slaves [ 774.522456][T16396] chnl_net:caif_netlink_parms(): no params data found [ 774.565018][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.572313][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.581133][T16396] device bridge_slave_0 entered promiscuous mode [ 774.591094][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.598616][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.607751][T16396] device bridge_slave_1 entered promiscuous mode [ 774.696698][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.712812][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.749957][T16396] team0: Port device team_slave_0 added [ 774.759760][T16396] team0: Port device team_slave_1 added [ 774.835907][T16396] device hsr_slave_0 entered promiscuous mode [ 774.882799][T16396] device hsr_slave_1 entered promiscuous mode [ 774.922281][T16396] debugfs: Directory 'hsr0' with parent '/' already present! [ 774.952281][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.959470][T16396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.967237][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.974733][T16396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.062544][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.083397][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 775.093178][ T3381] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.101344][ T3381] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.117551][T16396] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.131246][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 775.140401][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.147600][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.177208][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 775.187077][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.194338][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.204582][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 775.215598][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 775.241466][T16396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 775.254331][T16396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 775.272578][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 775.282776][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 775.293244][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 775.303112][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 775.334525][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.481407][T16401] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 775.491770][T16401] CPU: 0 PID: 16401 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 775.499702][T16401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.509791][T16401] Call Trace: [ 775.513152][T16401] dump_stack+0x191/0x1f0 [ 775.517552][T16401] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 775.524457][T16401] dump_header+0x1e7/0xd00 [ 775.528908][T16401] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 775.535097][T16401] ? ___ratelimit+0x542/0x720 [ 775.539793][T16401] ? task_will_free_mem+0x14c/0x810 [ 775.545022][T16401] oom_kill_process+0x210/0x560 [ 775.550006][T16401] out_of_memory+0x1796/0x1c70 [ 775.554798][T16401] ? kmsan_internal_set_origin+0x6a/0xb0 [ 775.560490][T16401] memory_max_write+0x90b/0xb60 [ 775.565417][T16401] ? memory_max_show+0x1b0/0x1b0 [ 775.570399][T16401] cgroup_file_write+0x41a/0x8e0 [ 775.575478][T16401] ? cgroup_seqfile_stop+0x150/0x150 [ 775.580822][T16401] kernfs_fop_write+0x55f/0x840 [ 775.585898][T16401] ? kernfs_fop_read+0x9a0/0x9a0 [ 775.590883][T16401] __vfs_write+0x1a9/0xcb0 [ 775.595414][T16401] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 775.601551][T16401] ? __sb_start_write+0x10b/0x230 [ 775.606599][T16401] vfs_write+0x481/0x920 [ 775.610876][T16401] ksys_write+0x265/0x430 [ 775.615271][T16401] __se_sys_write+0x92/0xb0 [ 775.619893][T16401] __x64_sys_write+0x4a/0x70 [ 775.624508][T16401] do_syscall_64+0xb6/0x160 [ 775.629042][T16401] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 775.634967][T16401] RIP: 0033:0x459f39 [ 775.638904][T16401] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.658559][T16401] RSP: 002b:00007f2e66979c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.667023][T16401] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 775.675044][T16401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 775.683050][T16401] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 775.691036][T16401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e6697a6d4 [ 775.699053][T16401] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 775.710863][T16401] memory: usage 7476kB, limit 0kB, failcnt 488 [ 775.717137][T16401] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 775.724073][T16401] Memory cgroup stats for /syz0: [ 775.724410][T16401] anon 2215936 [ 775.724410][T16401] file 3420160 [ 775.724410][T16401] kernel_stack 196608 [ 775.724410][T16401] slab 1282048 [ 775.724410][T16401] sock 69632 [ 775.724410][T16401] shmem 3420160 [ 775.724410][T16401] file_mapped 0 [ 775.724410][T16401] file_dirty 0 [ 775.724410][T16401] file_writeback 0 [ 775.724410][T16401] anon_thp 2097152 [ 775.724410][T16401] inactive_anon 3514368 [ 775.724410][T16401] active_anon 2215936 [ 775.724410][T16401] inactive_file 0 [ 775.724410][T16401] active_file 0 [ 775.724410][T16401] unevictable 0 [ 775.724410][T16401] slab_reclaimable 135168 [ 775.724410][T16401] slab_unreclaimable 1146880 [ 775.724410][T16401] pgfault 36498 [ 775.724410][T16401] pgmajfault 0 [ 775.724410][T16401] workingset_refault 0 [ 775.724410][T16401] workingset_activate 0 [ 775.724410][T16401] workingset_nodereclaim 0 [ 775.724410][T16401] pgrefill 0 [ 775.724410][T16401] pgscan 0 [ 775.724410][T16401] pgsteal 0 [ 775.724410][T16401] pgactivate 0 [ 775.820494][T16401] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16399,uid=0 [ 775.836223][T16401] Memory cgroup out of memory: Killed process 16399 (syz-executor.0) total-vm:72720kB, anon-rss:2160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 775.857922][ T1829] oom_reaper: reaped process 16399 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 775.897158][T16396] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 775.907328][T16396] CPU: 0 PID: 16396 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 775.915284][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.925400][T16396] Call Trace: [ 775.928784][T16396] dump_stack+0x191/0x1f0 [ 775.933199][T16396] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 775.939164][T16396] dump_header+0x1e7/0xd00 17:19:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xcd44, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) 17:19:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b9f, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r2, &(0x7f0000002e00)=[{&(0x7f0000002b00)=""/143, 0x8f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r1) shutdown(r3, 0x0) 17:19:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b0", 0x27, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:13 executing program 5: poll(&(0x7f0000000000)=[{}], 0x2128, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) setsockopt$inet_msfilter(r0, 0x0, 0x4a, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x56e1, 0x2, 0x0, 0x800e0050e) shutdown(r0, 0x0) 17:19:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/50, 0x32}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/111, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 775.943665][T16396] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 775.949905][T16396] ? ___ratelimit+0x542/0x720 [ 775.954646][T16396] ? task_will_free_mem+0x2c9/0x810 [ 775.959934][T16396] oom_kill_process+0x210/0x560 [ 775.964866][T16396] out_of_memory+0x1796/0x1c70 [ 775.969702][T16396] ? kmsan_internal_set_origin+0x6a/0xb0 [ 775.975428][T16396] try_charge+0x2889/0x3d70 [ 775.980018][T16396] ? __module_address+0x68/0x5e0 [ 775.985091][T16396] mem_cgroup_try_charge+0xa29/0xe40 [ 775.990485][T16396] mem_cgroup_try_charge_delay+0x7e/0x140 [ 775.996295][T16396] wp_page_copy+0x776/0x26d0 [ 776.001007][T16396] ? kmsan_internal_set_origin+0x6a/0xb0 [ 776.006743][T16396] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 776.012812][T16396] do_wp_page+0x1e8c/0x37f0 [ 776.017392][T16396] ? kmsan_internal_set_origin+0x6a/0xb0 [ 776.023158][T16396] handle_mm_fault+0x46e3/0x9f70 [ 776.028231][T16396] do_user_addr_fault+0x905/0x1510 [ 776.033630][T16396] __do_page_fault+0x1a2/0x410 [ 776.038502][T16396] do_page_fault+0xbb/0x500 [ 776.043100][T16396] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 776.048736][T16396] page_fault+0x4e/0x60 [ 776.052948][T16396] RIP: 0033:0x4329fe [ 776.056910][T16396] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 776.076578][T16396] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 776.082951][T16396] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 776.090977][T16396] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 776.099005][T16396] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000016bf940 [ 776.107036][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 776.115072][T16396] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 776.125558][T16396] memory: usage 5008kB, limit 0kB, failcnt 497 [ 776.131813][T16396] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 776.138880][T16396] Memory cgroup stats for /syz0: [ 776.139151][T16396] anon 53248 [ 776.139151][T16396] file 3420160 [ 776.139151][T16396] kernel_stack 0 [ 776.139151][T16396] slab 1282048 [ 776.139151][T16396] sock 69632 [ 776.139151][T16396] shmem 3420160 [ 776.139151][T16396] file_mapped 0 [ 776.139151][T16396] file_dirty 0 [ 776.139151][T16396] file_writeback 0 [ 776.139151][T16396] anon_thp 0 [ 776.139151][T16396] inactive_anon 3514368 [ 776.139151][T16396] active_anon 53248 [ 776.139151][T16396] inactive_file 0 [ 776.139151][T16396] active_file 0 [ 776.139151][T16396] unevictable 0 [ 776.139151][T16396] slab_reclaimable 135168 [ 776.139151][T16396] slab_unreclaimable 1146880 [ 776.139151][T16396] pgfault 36498 [ 776.139151][T16396] pgmajfault 0 [ 776.139151][T16396] workingset_refault 0 [ 776.139151][T16396] workingset_activate 0 [ 776.139151][T16396] workingset_nodereclaim 0 [ 776.139151][T16396] pgrefill 0 [ 776.139151][T16396] pgscan 0 [ 776.139151][T16396] pgsteal 0 [ 776.139151][T16396] pgactivate 0 [ 776.235461][T16396] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16396,uid=0 [ 776.251213][T16396] Memory cgroup out of memory: Killed process 16396 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 776.277524][ T1829] oom_reaper: reaped process 16396 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b0", 0x27, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000011c0)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) fdatasync(0xffffffffffffffff) recvfrom$inet(r2, 0x0, 0xb5962e0fc0aac99, 0x2, 0x0, 0x800e0050f) shutdown(r2, 0x0) 17:19:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001700)=[{&(0x7f0000000100)=""/104, 0x68}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xc8ec, 0x0, 0x0, 0x800e00525) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:19:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) listen(r0, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x187bd3a3, 0x0, 0x0, 0x800e00802) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r1, 0x0) 17:19:14 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b0", 0x27, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/43, 0x2b}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r7, &(0x7f0000000580)=[{&(0x7f0000000100)=""/53, 0x35}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r6, 0x0) shutdown(r3, 0x0) 17:19:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) recvfrom$inet(r0, 0x0, 0xfc47, 0x0, 0x0, 0x800e00796) shutdown(r0, 0x0) 17:19:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/65, 0x41}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/225, 0xe1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r6, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x8000}, 0x0, 0x0) shutdown(r7, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)=""/150, 0x96}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x339, 0xa2de248888181d36, 0x0, 0x800e00515) recvfrom$inet(r1, 0x0, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x0) getpeername(r1, 0x0, &(0x7f0000000040)) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:19:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {0x0}], 0x3}, 0x40002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfded, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000003c0)={0x6}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:19:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0xcc, 0x7e, 0x0, 0x800e005ed) shutdown(r0, 0x0) 17:19:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x89, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_int(r2, 0xffff, 0x2000, 0x0, &(0x7f0000000080)) recvfrom$inet(r1, 0x0, 0xd373, 0x6, 0x0, 0x800e00520) shutdown(r1, 0x0) 17:19:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab", 0x3a, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:15 executing program 4: poll(&(0x7f0000000180)=[{}], 0x7, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x58d, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) r3 = dup2(r0, r1) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x32}, 0x10) setitimer(0x0, &(0x7f0000000040), 0x0) recvfrom$inet(r3, 0x0, 0x105, 0x0, 0x0, 0x800e004e1) shutdown(r1, 0x0) 17:19:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/87, 0x57}, {0x0}, {0x0}], 0x3) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x3, 0x0, 0x0, 0x800e00516) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xa4d, 0x0, 0x0, 0x800e003c8) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/29, 0x1d}], 0xec}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0054d) shutdown(r1, 0x0) 17:19:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000000)=[{r4}], 0x1, &(0x7f0000000080)={0x9}, 0x0, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:19:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf922", 0x44, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) writev(r0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x2af4, 0x0, 0x0, 0x800e00738) shutdown(r0, 0x0) 17:19:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xe9, 0x0, 0x0, 0x800e008bd) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2d79, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x1000000003, 0x84) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000040)=""/49, 0x31}, {0x0}], 0x2) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf922", 0x44, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) [ 779.133327][T13807] device bridge_slave_1 left promiscuous mode [ 779.139938][T13807] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.193842][T13807] device bridge_slave_0 left promiscuous mode [ 779.200448][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.902908][T13807] device hsr_slave_0 left promiscuous mode [ 779.942292][T13807] device hsr_slave_1 left promiscuous mode [ 779.999048][T13807] team0 (unregistering): Port device team_slave_1 removed [ 780.016551][T13807] team0 (unregistering): Port device team_slave_0 removed [ 780.030837][T13807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.072337][T13807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.179916][T13807] bond0 (unregistering): Released all slaves [ 780.204033][T17992] IPVS: ftp: loaded support on port[0] = 21 [ 780.378927][T17992] chnl_net:caif_netlink_parms(): no params data found [ 780.421696][T17992] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.430020][T17992] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.438713][T17992] device bridge_slave_0 entered promiscuous mode [ 780.447453][T17992] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.454725][T17992] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.463464][T17992] device bridge_slave_1 entered promiscuous mode [ 780.487917][T17992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.500167][T17992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.585557][T17992] team0: Port device team_slave_0 added [ 780.595814][T17992] team0: Port device team_slave_1 added [ 780.679247][T17992] device hsr_slave_0 entered promiscuous mode [ 780.713128][T17992] device hsr_slave_1 entered promiscuous mode [ 780.772317][T17992] debugfs: Directory 'hsr0' with parent '/' already present! [ 780.802174][T17992] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.809399][T17992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.817202][T17992] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.824424][T17992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.912661][T17992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.935400][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 780.945664][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.954864][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.970568][T17992] 8021q: adding VLAN 0 to HW filter on device team0 [ 780.984723][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 780.993705][T30475] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.000858][T30475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.024906][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 781.034491][T30475] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.041595][T30475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.064860][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 781.079105][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 781.090124][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 781.111920][T17992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 781.123810][T17992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 781.139963][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 781.149885][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 781.160321][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 781.187724][T17992] 8021q: adding VLAN 0 to HW filter on device batadv0 17:19:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:19 executing program 2: poll(&(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x6008fdfa26bc9e03, 0x0, 0x0, 0x800e00519) poll(0x0, 0x0, 0x3f) shutdown(r0, 0x0) 17:19:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/135, 0x87}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) recvfrom$inet(r2, 0x0, 0xff06, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:19:19 executing program 1: poll(0x0, 0x0, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000040)={0x8}, 0x10) accept4$inet6(r3, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:19:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf922", 0x44, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:19 executing program 5: poll(0x0, 0x0, 0x4a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fchmod(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf74", 0x49, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/243, 0xf3}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000300)={0x6}, 0x10) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) read(r1, &(0x7f0000000140)=""/169, 0xa3) shutdown(r1, 0x0) 17:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/54, 0x36}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffdb1, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0xffff}, 0x10) setsockopt$inet_group_source_req(r3, 0x0, 0x55, &(0x7f00000001c0)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r2, 0x0, 0xfc9, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:19:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x4e}, 0x10) accept(r0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x10000002c, 0x2, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:19:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000200)=""/27, 0x1b}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf74", 0x49, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) [ 782.135887][T18393] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 782.146341][T18393] CPU: 0 PID: 18393 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 782.155233][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.165310][T18393] Call Trace: [ 782.168644][T18393] dump_stack+0x191/0x1f0 [ 782.173976][T18393] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 782.179898][T18393] dump_header+0x1e7/0xd00 [ 782.184350][T18393] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 782.190534][T18393] ? ___ratelimit+0x542/0x720 [ 782.195243][T18393] ? task_will_free_mem+0x2c9/0x810 [ 782.200478][T18393] oom_kill_process+0x210/0x560 [ 782.206315][T18393] out_of_memory+0x1796/0x1c70 [ 782.211105][T18393] ? kmsan_internal_set_origin+0x6a/0xb0 [ 782.216817][T18393] memory_max_write+0x90b/0xb60 [ 782.221730][T18393] ? memory_max_show+0x1b0/0x1b0 [ 782.226702][T18393] cgroup_file_write+0x41a/0x8e0 [ 782.231693][T18393] ? cgroup_seqfile_stop+0x150/0x150 [ 782.237031][T18393] kernfs_fop_write+0x55f/0x840 [ 782.241932][T18393] ? kernfs_fop_read+0x9a0/0x9a0 [ 782.246986][T18393] __vfs_write+0x1a9/0xcb0 [ 782.251449][T18393] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 782.257539][T18393] ? __sb_start_write+0x10b/0x230 [ 782.262602][T18393] vfs_write+0x481/0x920 [ 782.266880][T18393] ksys_write+0x265/0x430 [ 782.271243][T18393] __se_sys_write+0x92/0xb0 [ 782.275776][T18393] __x64_sys_write+0x4a/0x70 [ 782.280403][T18393] do_syscall_64+0xb6/0x160 [ 782.284936][T18393] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 782.290842][T18393] RIP: 0033:0x459f39 [ 782.294762][T18393] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.314384][T18393] RSP: 002b:00007ff4b2bfac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.322822][T18393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 782.330805][T18393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 782.338798][T18393] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 782.346963][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4b2bfb6d4 [ 782.354949][T18393] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 782.363139][T18393] memory: usage 2712kB, limit 0kB, failcnt 498 [ 782.369339][T18393] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 782.376300][T18393] Memory cgroup stats for /syz0: [ 782.376639][T18393] anon 196608 [ 782.376639][T18393] file 675840 [ 782.376639][T18393] kernel_stack 196608 [ 782.376639][T18393] slab 1282048 [ 782.376639][T18393] sock 69632 [ 782.376639][T18393] shmem 675840 [ 782.376639][T18393] file_mapped 0 [ 782.376639][T18393] file_dirty 0 [ 782.376639][T18393] file_writeback 0 [ 782.376639][T18393] anon_thp 0 [ 782.376639][T18393] inactive_anon 540672 [ 782.376639][T18393] active_anon 114688 [ 782.376639][T18393] inactive_file 0 [ 782.376639][T18393] active_file 0 [ 782.376639][T18393] unevictable 0 [ 782.376639][T18393] slab_reclaimable 135168 [ 782.376639][T18393] slab_unreclaimable 1146880 [ 782.376639][T18393] pgfault 36894 [ 782.376639][T18393] pgmajfault 0 [ 782.376639][T18393] workingset_refault 0 [ 782.376639][T18393] workingset_activate 0 [ 782.376639][T18393] workingset_nodereclaim 0 [ 782.376639][T18393] pgrefill 0 [ 782.376639][T18393] pgscan 0 [ 782.376639][T18393] pgsteal 0 [ 782.376639][T18393] pgactivate 0 [ 782.471623][T18393] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17992,uid=0 17:19:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/129, 0x81}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff98, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0054f) shutdown(r2, 0x0) shutdown(r3, 0x0) [ 782.487296][T18393] Memory cgroup out of memory: Killed process 17992 (syz-executor.0) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 782.514389][ T1829] oom_reaper: reaped process 17992 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 782.533034][T18337] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 782.545432][T18337] CPU: 1 PID: 18337 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 782.553356][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.563423][T18337] Call Trace: [ 782.566753][T18337] dump_stack+0x191/0x1f0 [ 782.571114][T18337] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 782.577035][T18337] dump_header+0x1e7/0xd00 [ 782.581482][T18337] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 782.587678][T18337] ? ___ratelimit+0x542/0x720 [ 782.592382][T18337] ? task_will_free_mem+0x14c/0x810 [ 782.597611][T18337] oom_kill_process+0x210/0x560 [ 782.602491][T18337] out_of_memory+0x1796/0x1c70 [ 782.607291][T18337] ? kmsan_internal_set_origin+0x6a/0xb0 [ 782.612961][T18337] try_charge+0x2889/0x3d70 [ 782.617556][T18337] mem_cgroup_try_charge+0xa29/0xe40 [ 782.622884][T18337] mem_cgroup_try_charge_delay+0x7e/0x140 [ 782.628636][T18337] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 782.634642][T18337] shmem_getpage_gfp+0x1f48/0x3f80 [ 782.639800][T18337] ? do_page_fault+0xbb/0x500 [ 782.644526][T18337] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 782.650444][T18337] shmem_write_begin+0x1ac/0x310 [ 782.655413][T18337] ? shmem_writepage+0x18f0/0x18f0 [ 782.660542][T18337] generic_perform_write+0x424/0x990 [ 782.665849][T18337] ? shmem_write_begin+0x310/0x310 [ 782.671005][T18337] __generic_file_write_iter+0x44e/0xa50 [ 782.676673][T18337] generic_file_write_iter+0x770/0xad0 [ 782.682170][T18337] ? __generic_file_write_iter+0xa50/0xa50 [ 782.687989][T18337] __vfs_write+0xa2c/0xcb0 [ 782.692459][T18337] vfs_write+0x481/0x920 [ 782.696734][T18337] ksys_write+0x265/0x430 [ 782.701104][T18337] __se_sys_write+0x92/0xb0 [ 782.705633][T18337] __x64_sys_write+0x4a/0x70 [ 782.710245][T18337] do_syscall_64+0xb6/0x160 [ 782.714785][T18337] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 782.720691][T18337] RIP: 0033:0x459f39 [ 782.724615][T18337] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.744231][T18337] RSP: 002b:00007ff4b2c1bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 782.752662][T18337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 782.760646][T18337] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 782.768632][T18337] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 782.776635][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff4b2c1c6d4 [ 782.784636][T18337] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 782.793271][T18337] memory: usage 2684kB, limit 0kB, failcnt 524 [ 782.799497][T18337] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 782.806463][T18337] Memory cgroup stats for /syz0: [ 782.806770][T18337] anon 196608 [ 782.806770][T18337] file 675840 [ 782.806770][T18337] kernel_stack 196608 [ 782.806770][T18337] slab 1282048 [ 782.806770][T18337] sock 69632 [ 782.806770][T18337] shmem 675840 [ 782.806770][T18337] file_mapped 0 [ 782.806770][T18337] file_dirty 0 [ 782.806770][T18337] file_writeback 0 [ 782.806770][T18337] anon_thp 0 [ 782.806770][T18337] inactive_anon 540672 [ 782.806770][T18337] active_anon 114688 [ 782.806770][T18337] inactive_file 0 [ 782.806770][T18337] active_file 0 [ 782.806770][T18337] unevictable 0 [ 782.806770][T18337] slab_reclaimable 135168 [ 782.806770][T18337] slab_unreclaimable 1146880 [ 782.806770][T18337] pgfault 36894 [ 782.806770][T18337] pgmajfault 0 [ 782.806770][T18337] workingset_refault 0 [ 782.806770][T18337] workingset_activate 0 [ 782.806770][T18337] workingset_nodereclaim 0 [ 782.806770][T18337] pgrefill 0 [ 782.806770][T18337] pgscan 0 [ 782.806770][T18337] pgsteal 0 [ 782.806770][T18337] pgactivate 0 [ 782.901836][T18337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=18332,uid=0 [ 782.917522][T18337] Memory cgroup out of memory: Killed process 18332 (syz-executor.0) total-vm:72716kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 17:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)=""/204, 0xcc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x8000}, 0x10) recvfrom$inet(r2, 0x0, 0x73a0dd6, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$inet_mreqsrc(r3, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xffffffea, 0x0, 0x0, 0x800e0054f) shutdown(r3, 0x0) 17:19:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x1dd, &(0x7f0000000300)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x100000000000000f, 0x0, 0x258}, 0x40042) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) shutdown(r1, 0x0) [ 782.937838][ T1829] oom_reaper: reaped process 18332 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 17:19:21 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000040)=[{}, {}, {r0}, {r0}], 0x4, 0x800000000004b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x58d, 0x0, 0x0, 0x800e004e5) r2 = dup(r1) r3 = dup2(r2, r1) r4 = dup(r3) setsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x105, 0x2, 0x0, 0x800e004e1) shutdown(r4, 0x0) 17:19:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000002700)=[{&(0x7f0000000140)=""/186, 0xba}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) shutdown(r1, 0x1) recvfrom$inet(r2, 0x0, 0x530e, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) 17:19:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/116, 0x74}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc8f4, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) getsockopt$sock_linger(r2, 0xffff, 0x80, 0x0, &(0x7f0000000040)) recvfrom$inet(r3, 0x0, 0xffffff51, 0x0, 0x0, 0x800e00511) shutdown(r2, 0x0) 17:19:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf74", 0x49, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:21 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000100)=[{r0}, {}, {}, {}, {}, {r0}], 0x6, 0x49) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/94, 0x5e}, {0x0}], 0x2}, 0x2) shutdown(r1, 0x0) 17:19:21 executing program 2: poll(0x0, 0x0, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) poll(0x0, 0xfffffffffffffe76, 0x5a) recvfrom$inet(r0, 0x0, 0x100000271, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:19:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:21 executing program 4: poll(&(0x7f0000000000)=[{}, {}], 0x2, 0x49) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) recvfrom$inet(r0, 0x0, 0xea1ca13a, 0x0, 0x0, 0x800e00516) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xff1d, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:19:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x261) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) getsockopt$sock_int(r0, 0xffff, 0x20, 0x0, &(0x7f0000000080)) recvfrom$inet(r4, 0x0, 0xd09a, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) shutdown(r4, 0x0) 17:19:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec", 0x4b, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/169, 0xa9}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0d56, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getitimer(0x1, &(0x7f0000000000)) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00551) shutdown(r3, 0x0) 17:19:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/58, 0x3a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000180)=""/74, 0x4a}, {0x0}], 0x2) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000200)=""/139, 0x8b}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec", 0x4b, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:22 executing program 5: poll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0xdb) shutdown(r0, 0x0) 17:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/236, 0xec}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1}, 0x40002) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xd057, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) read(r2, &(0x7f00000000c0)=""/100, 0x64) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:22 executing program 4: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/20, 0x8f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7, 0x0, 0xfffffffffffffe7e}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=""/35, 0x23}, {0x0}], 0x2) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:19:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec", 0x4b, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000), 0x2000000000000035, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xceb5ab17, 0x0, 0x0, 0x800e0082e) dup(r0) r2 = socket$inet6_sctp(0x1c, 0x100000000003, 0x84) readv(r2, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1) shutdown(r1, 0x0) 17:19:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x35a) recvfrom$inet(r0, 0x0, 0x10000044c, 0x2, 0x0, 0x800e007f6) shutdown(r0, 0x0) 17:19:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/60, 0x3c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x3, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x2d79, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r8, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r7, 0x0) poll(0x0, 0x0, 0x200000000000ff) shutdown(r8, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:23 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66", 0x4c, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080)={0xd50}, 0x10) shutdown(r0, 0x0) r3 = dup(r2) fcntl$getown(r1, 0x5) recvfrom$inet(r2, 0x0, 0xfffffeca, 0x0, 0x0, 0x800e0053f) shutdown(r3, 0x0) 17:19:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0xccf3, 0x0, 0x0, 0x800e00599) shutdown(r0, 0x0) [ 785.973269][ T367] device bridge_slave_1 left promiscuous mode [ 785.979657][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.043907][ T367] device bridge_slave_0 left promiscuous mode [ 786.050254][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.833461][ T367] device hsr_slave_0 left promiscuous mode [ 786.884394][ T367] device hsr_slave_1 left promiscuous mode [ 786.891224][T19818] IPVS: ftp: loaded support on port[0] = 21 [ 786.920764][ T367] team0 (unregistering): Port device team_slave_1 removed [ 786.933764][ T367] team0 (unregistering): Port device team_slave_0 removed [ 786.945944][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.988711][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.060406][ T367] bond0 (unregistering): Released all slaves [ 787.239032][T19818] chnl_net:caif_netlink_parms(): no params data found [ 787.281360][T19818] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.288615][T19818] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.297034][T19818] device bridge_slave_0 entered promiscuous mode [ 787.305594][T19818] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.312905][T19818] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.321063][T19818] device bridge_slave_1 entered promiscuous mode [ 787.343936][T19818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.355674][T19818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.383852][T19818] team0: Port device team_slave_0 added [ 787.435188][T19818] team0: Port device team_slave_1 added [ 787.526881][T19818] device hsr_slave_0 entered promiscuous mode [ 787.572832][T19818] device hsr_slave_1 entered promiscuous mode [ 787.622262][T19818] debugfs: Directory 'hsr0' with parent '/' already present! [ 787.650991][T19818] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.658179][T19818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.665914][T19818] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.673150][T19818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.755415][T19818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.777274][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 787.787821][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.796158][T30475] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.811803][T19818] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.824559][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 787.833588][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.840735][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.863795][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 787.873308][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.880453][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.898302][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 787.908104][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 787.943053][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 787.952678][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 787.961820][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 787.976369][T19818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 788.005328][T19818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.128973][T19823] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 788.139394][T19823] CPU: 1 PID: 19823 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 788.147314][T19823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.157482][T19823] Call Trace: [ 788.160832][T19823] dump_stack+0x191/0x1f0 [ 788.165192][T19823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 788.171096][T19823] dump_header+0x1e7/0xd00 [ 788.175532][T19823] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 788.181800][T19823] ? ___ratelimit+0x542/0x720 [ 788.186488][T19823] ? task_will_free_mem+0x14c/0x810 [ 788.191699][T19823] oom_kill_process+0x210/0x560 [ 788.197367][T19823] out_of_memory+0x1796/0x1c70 [ 788.202156][T19823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 788.207900][T19823] memory_max_write+0x90b/0xb60 [ 788.212842][T19823] ? memory_max_show+0x1b0/0x1b0 [ 788.217940][T19823] cgroup_file_write+0x41a/0x8e0 [ 788.223031][T19823] ? cgroup_seqfile_stop+0x150/0x150 [ 788.228345][T19823] kernfs_fop_write+0x55f/0x840 [ 788.233249][T19823] ? kernfs_fop_read+0x9a0/0x9a0 [ 788.238218][T19823] __vfs_write+0x1a9/0xcb0 [ 788.242664][T19823] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 788.248742][T19823] ? __sb_start_write+0x10b/0x230 [ 788.253798][T19823] vfs_write+0x481/0x920 [ 788.258081][T19823] ksys_write+0x265/0x430 [ 788.262427][T19823] __se_sys_write+0x92/0xb0 [ 788.266942][T19823] __x64_sys_write+0x4a/0x70 [ 788.271540][T19823] do_syscall_64+0xb6/0x160 [ 788.276093][T19823] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 788.282019][T19823] RIP: 0033:0x459f39 [ 788.285949][T19823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.305565][T19823] RSP: 002b:00007f64e15adc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.313991][T19823] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 788.322000][T19823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 788.329996][T19823] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 788.337973][T19823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64e15ae6d4 [ 788.345974][T19823] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 788.355349][T19823] memory: usage 7980kB, limit 0kB, failcnt 541 [ 788.361548][T19823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 788.368476][T19823] Memory cgroup stats for /syz0: [ 788.368798][T19823] anon 2318336 [ 788.368798][T19823] file 3915776 [ 788.368798][T19823] kernel_stack 196608 [ 788.368798][T19823] slab 1282048 [ 788.368798][T19823] sock 69632 [ 788.368798][T19823] shmem 3915776 [ 788.368798][T19823] file_mapped 0 [ 788.368798][T19823] file_dirty 0 [ 788.368798][T19823] file_writeback 0 [ 788.368798][T19823] anon_thp 2097152 [ 788.368798][T19823] inactive_anon 3784704 [ 788.368798][T19823] active_anon 2236416 [ 788.368798][T19823] inactive_file 0 [ 788.368798][T19823] active_file 0 [ 788.368798][T19823] unevictable 0 [ 788.368798][T19823] slab_reclaimable 135168 [ 788.368798][T19823] slab_unreclaimable 1146880 [ 788.368798][T19823] pgfault 36927 [ 788.368798][T19823] pgmajfault 0 [ 788.368798][T19823] workingset_refault 0 [ 788.368798][T19823] workingset_activate 0 [ 788.368798][T19823] workingset_nodereclaim 0 [ 788.368798][T19823] pgrefill 0 [ 788.368798][T19823] pgscan 0 [ 788.368798][T19823] pgsteal 0 [ 788.368798][T19823] pgactivate 0 [ 788.464862][T19823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19821,uid=0 [ 788.480638][T19823] Memory cgroup out of memory: Killed process 19821 (syz-executor.0) total-vm:72720kB, anon-rss:2160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 788.501667][ T1829] oom_reaper: reaped process 19821 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:19:26 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x97, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) fcntl$setstatus(r0, 0x4, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00c0e) 17:19:26 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66", 0x4c, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:26 executing program 1: poll(&(0x7f0000000040), 0x2000000000000074, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffee9, 0x0, 0x0, 0x800e00a21) ppoll(&(0x7f0000000000)=[{r0}, {r0}, {r0}], 0x3, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:19:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00346) 17:19:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000286}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000340)=""/173, 0x327}], 0x1) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 788.542956][T19818] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 788.553007][T19818] CPU: 1 PID: 19818 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 788.560941][T19818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.571037][T19818] Call Trace: [ 788.574385][T19818] dump_stack+0x191/0x1f0 [ 788.578775][T19818] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 788.584725][T19818] dump_header+0x1e7/0xd00 [ 788.589210][T19818] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 788.595438][T19818] ? ___ratelimit+0x542/0x720 [ 788.600168][T19818] ? task_will_free_mem+0x2c9/0x810 [ 788.605439][T19818] oom_kill_process+0x210/0x560 [ 788.610356][T19818] out_of_memory+0x1796/0x1c70 [ 788.615181][T19818] ? kmsan_internal_set_origin+0x6a/0xb0 [ 788.620890][T19818] try_charge+0x2889/0x3d70 [ 788.625464][T19818] ? __module_address+0x68/0x5e0 [ 788.630524][T19818] mem_cgroup_try_charge+0xa29/0xe40 [ 788.635893][T19818] mem_cgroup_try_charge_delay+0x7e/0x140 [ 788.641690][T19818] wp_page_copy+0x776/0x26d0 [ 788.646344][T19818] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 788.653430][T19818] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 788.659694][T19818] ? kmsan_internal_set_origin+0x6a/0xb0 [ 788.665532][T19818] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 788.671620][T19818] do_wp_page+0x1e8c/0x37f0 [ 788.676224][T19818] ? kmsan_internal_set_origin+0x6a/0xb0 [ 788.681969][T19818] handle_mm_fault+0x46e3/0x9f70 [ 788.688094][T19818] do_user_addr_fault+0x905/0x1510 [ 788.693288][T19818] __do_page_fault+0x1a2/0x410 [ 788.698233][T19818] do_page_fault+0xbb/0x500 [ 788.702859][T19818] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 788.708294][T19818] page_fault+0x4e/0x60 [ 788.712485][T19818] RIP: 0033:0x4329fe [ 788.716416][T19818] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 788.736045][T19818] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 788.742164][T19818] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 788.750168][T19818] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 788.758163][T19818] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000011cf940 [ 788.766155][T19818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 788.774161][T19818] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 788.785341][T19818] memory: usage 5524kB, limit 0kB, failcnt 556 [ 788.791621][T19818] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 788.798658][T19818] Memory cgroup stats for /syz0: [ 788.798985][T19818] anon 147456 [ 788.798985][T19818] file 3915776 [ 788.798985][T19818] kernel_stack 0 [ 788.798985][T19818] slab 1282048 [ 788.798985][T19818] sock 69632 [ 788.798985][T19818] shmem 3915776 [ 788.798985][T19818] file_mapped 0 [ 788.798985][T19818] file_dirty 0 [ 788.798985][T19818] file_writeback 0 [ 788.798985][T19818] anon_thp 0 [ 788.798985][T19818] inactive_anon 3919872 [ 788.798985][T19818] active_anon 65536 [ 788.798985][T19818] inactive_file 0 [ 788.798985][T19818] active_file 0 [ 788.798985][T19818] unevictable 0 [ 788.798985][T19818] slab_reclaimable 135168 [ 788.798985][T19818] slab_unreclaimable 1146880 [ 788.798985][T19818] pgfault 36927 [ 788.798985][T19818] pgmajfault 0 [ 788.798985][T19818] workingset_refault 0 [ 788.798985][T19818] workingset_activate 0 [ 788.798985][T19818] workingset_nodereclaim 0 [ 788.798985][T19818] pgrefill 0 [ 788.798985][T19818] pgscan 0 [ 788.798985][T19818] pgsteal 0 [ 788.798985][T19818] pgactivate 0 17:19:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66", 0x4c, 0xe, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) [ 788.894492][T19818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=19818,uid=0 [ 788.911115][T19818] Memory cgroup out of memory: Killed process 19818 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 788.930590][ T1829] oom_reaper: reaped process 19818 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x7fffffff, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0039e) 17:19:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockname$inet6(r1, 0x0, &(0x7f00000000c0)) recvfrom$inet(r0, 0x0, 0xfc85, 0x2, 0x0, 0x800e0068e) shutdown(r0, 0x0) 17:19:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x4d, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000080)=""/171, 0xab}, {0x0}, {0x0}, {0x0}], 0x4) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000200)=""/19, 0x13}, {0x0}, {0x0}, {0x0}], 0x4) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) read(r2, &(0x7f0000000000)=""/22, 0x16) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x4d, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/145, 0x91}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) r3 = dup(r1) fchown(r3, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x2, 0x0, 0x800e00519) shutdown(r2, 0x0) 17:19:27 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f00000000c0)=[{r0}, {}, {r0}], 0x3, 0x52) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e0070d) poll(&(0x7f0000000040)=[{r0, 0x80}], 0x1, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7cf) shutdown(r1, 0x0) 17:19:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x4d, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f00000001c0)) 17:19:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{}, {r0}, {}], 0x3, 0x800000000004f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd54, 0x0, 0x0, 0x800e0080d) recvfrom$inet(r1, 0x0, 0x71, 0x40042, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:19:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/171, 0xab}, {0x0}, {0x0}, {0x0}], 0x4) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1000000000000068}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r3, 0x0) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/89, 0x59}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0092d) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/224, 0xe0}], 0x1}, 0x0) shutdown(r1, 0x0) 17:19:28 executing program 4: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x1356699bbe3a1579, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, 0x0) 17:19:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000200)=""/231, 0xe7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00542) shutdown(r1, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r2, 0x0) 17:19:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00629) shutdown(r0, 0x0) r2 = dup(r1) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000002d80)=[{0x0}], 0x3}, 0x0) shutdown(r2, 0x0) 17:19:28 executing program 4: poll(&(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x10000}, 0x10) socketpair(0xac41c9d13584b544, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:19:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r0) poll(&(0x7f00000000c0), 0x19, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000000)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r2 = dup(r1) shutdown(r2, 0x0) 17:19:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/86, 0x56}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)=""/60, 0x3c}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:28 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, 0x0) [ 791.873020][ T367] device bridge_slave_1 left promiscuous mode [ 791.879418][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.923263][ T367] device bridge_slave_0 left promiscuous mode [ 791.929630][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.695984][T20980] IPVS: ftp: loaded support on port[0] = 21 [ 792.792775][ T367] device hsr_slave_0 left promiscuous mode [ 792.852442][ T367] device hsr_slave_1 left promiscuous mode [ 792.901184][ T367] team0 (unregistering): Port device team_slave_1 removed [ 792.913511][ T367] team0 (unregistering): Port device team_slave_0 removed [ 792.925583][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.967284][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.040400][ T367] bond0 (unregistering): Released all slaves [ 793.208472][T20980] chnl_net:caif_netlink_parms(): no params data found [ 793.252483][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.259823][T20980] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.268877][T20980] device bridge_slave_0 entered promiscuous mode [ 793.277433][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.284730][T20980] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.293138][T20980] device bridge_slave_1 entered promiscuous mode [ 793.317338][T20980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.329256][T20980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.412335][T20980] team0: Port device team_slave_0 added [ 793.421764][T20980] team0: Port device team_slave_1 added [ 793.486856][T20980] device hsr_slave_0 entered promiscuous mode [ 793.532947][T20980] device hsr_slave_1 entered promiscuous mode [ 793.572204][T20980] debugfs: Directory 'hsr0' with parent '/' already present! [ 793.600379][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.607543][T20980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.615271][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.622512][T20980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.705212][T20980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.727296][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 793.735948][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.744477][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.760648][T20980] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.773638][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 793.782608][T30475] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.789777][T30475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.816435][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 793.826207][T30475] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.833416][T30475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.843079][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 793.854013][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 793.871524][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 793.893678][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 793.902679][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 793.914945][T20980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 793.940640][T20980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.075625][T20985] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 794.085911][T20985] CPU: 1 PID: 20985 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 794.093803][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.103914][T20985] Call Trace: [ 794.107350][T20985] dump_stack+0x191/0x1f0 [ 794.112397][T20985] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 794.118300][T20985] dump_header+0x1e7/0xd00 [ 794.122730][T20985] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 794.128895][T20985] ? ___ratelimit+0x542/0x720 [ 794.133578][T20985] ? task_will_free_mem+0x14c/0x810 [ 794.138813][T20985] oom_kill_process+0x210/0x560 [ 794.143698][T20985] out_of_memory+0x1796/0x1c70 [ 794.148475][T20985] ? kmsan_internal_set_origin+0x6a/0xb0 [ 794.154126][T20985] memory_max_write+0x90b/0xb60 [ 794.159016][T20985] ? memory_max_show+0x1b0/0x1b0 [ 794.164567][T20985] cgroup_file_write+0x41a/0x8e0 [ 794.169546][T20985] ? cgroup_seqfile_stop+0x150/0x150 [ 794.174840][T20985] kernfs_fop_write+0x55f/0x840 [ 794.179705][T20985] ? kernfs_fop_read+0x9a0/0x9a0 [ 794.184655][T20985] __vfs_write+0x1a9/0xcb0 [ 794.189106][T20985] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 794.195179][T20985] ? __sb_start_write+0x10b/0x230 [ 794.200220][T20985] vfs_write+0x481/0x920 [ 794.204518][T20985] ksys_write+0x265/0x430 [ 794.208860][T20985] __se_sys_write+0x92/0xb0 [ 794.213381][T20985] __x64_sys_write+0x4a/0x70 [ 794.217996][T20985] do_syscall_64+0xb6/0x160 [ 794.222529][T20985] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 794.228429][T20985] RIP: 0033:0x459f39 [ 794.232341][T20985] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.251961][T20985] RSP: 002b:00007fcc68522c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 794.260388][T20985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 794.268359][T20985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 794.276371][T20985] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 794.284344][T20985] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc685236d4 [ 794.292342][T20985] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 794.305257][T20985] memory: usage 8384kB, limit 0kB, failcnt 565 [ 794.311452][T20985] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 794.318376][T20985] Memory cgroup stats for /syz0: [ 794.318721][T20985] anon 2248704 [ 794.318721][T20985] file 4214784 [ 794.318721][T20985] kernel_stack 196608 [ 794.318721][T20985] slab 1282048 [ 794.318721][T20985] sock 69632 [ 794.318721][T20985] shmem 4214784 [ 794.318721][T20985] file_mapped 0 [ 794.318721][T20985] file_dirty 0 [ 794.318721][T20985] file_writeback 0 [ 794.318721][T20985] anon_thp 2097152 [ 794.318721][T20985] inactive_anon 4190208 [ 794.318721][T20985] active_anon 2248704 [ 794.318721][T20985] inactive_file 0 [ 794.318721][T20985] active_file 0 [ 794.318721][T20985] unevictable 0 [ 794.318721][T20985] slab_reclaimable 135168 [ 794.318721][T20985] slab_unreclaimable 1146880 [ 794.318721][T20985] pgfault 37026 [ 794.318721][T20985] pgmajfault 0 [ 794.318721][T20985] workingset_refault 0 [ 794.318721][T20985] workingset_activate 0 [ 794.318721][T20985] workingset_nodereclaim 0 [ 794.318721][T20985] pgrefill 0 [ 794.318721][T20985] pgscan 0 [ 794.318721][T20985] pgsteal 0 [ 794.318721][T20985] pgactivate 0 17:19:32 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000000)=""/222, 0xde}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f0000000100)={0x0, 0x0, 0x2fc4}, 0xc) ppoll(&(0x7f0000000100), 0x1, &(0x7f0000000140)={0x4}, 0x0, 0x0) dup2(r2, r3) shutdown(r3, 0x0) 17:19:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x2, 0x0, 0x800e00506) shutdown(r1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:19:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00cc5) 17:19:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01"], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="af332182cbea54a7137b50a70a53b22bd9b125ac150618ad888a591adebecfdf9eb1e33c00fdc3f2fd74db2202d9421ef647bff4ee743f47ba07609b86b9", 0x3e, 0x20850, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) clock_settime(0x0, 0x0) 17:19:32 executing program 2: poll(&(0x7f00000000c0)=[{}], 0x1, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000840)=""/4096, 0x36a}], 0x1000000000000175) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000080)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 794.414647][T20985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20983,uid=0 [ 794.430421][T20985] Memory cgroup out of memory: Killed process 20983 (syz-executor.0) total-vm:72720kB, anon-rss:2160kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 794.450530][ T1829] oom_reaper: reaped process 20983 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 794.489418][T20980] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 794.500680][T20980] CPU: 1 PID: 20980 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 794.508617][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.518709][T20980] Call Trace: [ 794.522061][T20980] dump_stack+0x191/0x1f0 [ 794.526455][T20980] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 794.532408][T20980] dump_header+0x1e7/0xd00 [ 794.536915][T20980] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 794.543133][T20980] ? ___ratelimit+0x542/0x720 [ 794.547863][T20980] ? task_will_free_mem+0x2c9/0x810 [ 794.553136][T20980] oom_kill_process+0x210/0x560 [ 794.558057][T20980] out_of_memory+0x1796/0x1c70 [ 794.562884][T20980] ? kmsan_internal_set_origin+0x6a/0xb0 [ 794.568598][T20980] try_charge+0x2889/0x3d70 [ 794.573169][T20980] ? __module_address+0x68/0x5e0 [ 794.578224][T20980] mem_cgroup_try_charge+0xa29/0xe40 [ 794.583592][T20980] mem_cgroup_try_charge_delay+0x7e/0x140 [ 794.590425][T20980] wp_page_copy+0x776/0x26d0 [ 794.595080][T20980] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 794.601053][T20980] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 794.607258][T20980] ? kmsan_internal_set_origin+0x6a/0xb0 [ 794.612931][T20980] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 794.618939][T20980] do_wp_page+0x1e8c/0x37f0 [ 794.623469][T20980] ? kmsan_internal_set_origin+0x6a/0xb0 [ 794.629144][T20980] handle_mm_fault+0x46e3/0x9f70 [ 794.634143][T20980] do_user_addr_fault+0x905/0x1510 [ 794.639298][T20980] __do_page_fault+0x1a2/0x410 [ 794.644094][T20980] do_page_fault+0xbb/0x500 [ 794.648624][T20980] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 794.654023][T20980] page_fault+0x4e/0x60 [ 794.658197][T20980] RIP: 0033:0x4329fe [ 794.662114][T20980] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 794.681735][T20980] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 794.687819][T20980] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 794.695810][T20980] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 794.703793][T20980] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000002555940 [ 794.711776][T20980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 794.719772][T20980] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 794.728913][T20980] memory: usage 5928kB, limit 0kB, failcnt 580 [ 794.735185][T20980] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 794.742124][T20980] Memory cgroup stats for /syz0: [ 794.742445][T20980] anon 45056 [ 794.742445][T20980] file 4214784 [ 794.742445][T20980] kernel_stack 0 [ 794.742445][T20980] slab 1282048 [ 794.742445][T20980] sock 69632 [ 794.742445][T20980] shmem 4214784 [ 794.742445][T20980] file_mapped 0 [ 794.742445][T20980] file_dirty 0 [ 794.742445][T20980] file_writeback 0 [ 794.742445][T20980] anon_thp 0 [ 794.742445][T20980] inactive_anon 4325376 [ 794.742445][T20980] active_anon 45056 [ 794.742445][T20980] inactive_file 0 [ 794.742445][T20980] active_file 0 [ 794.742445][T20980] unevictable 0 [ 794.742445][T20980] slab_reclaimable 135168 [ 794.742445][T20980] slab_unreclaimable 1146880 [ 794.742445][T20980] pgfault 37026 [ 794.742445][T20980] pgmajfault 0 [ 794.742445][T20980] workingset_refault 0 [ 794.742445][T20980] workingset_activate 0 [ 794.742445][T20980] workingset_nodereclaim 0 [ 794.742445][T20980] pgrefill 0 [ 794.742445][T20980] pgscan 0 [ 794.742445][T20980] pgsteal 0 [ 794.742445][T20980] pgactivate 0 [ 794.837067][T20980] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20980,uid=0 [ 794.852706][T20980] Memory cgroup out of memory: Killed process 20980 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 794.871606][ T1829] oom_reaper: reaped process 20980 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000034c0)=[{&(0x7f0000000040)=""/163, 0xa3}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e007e2) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001100)={0x10, 0x2}, 0x10) shutdown(r0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x123}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r3) shutdown(r3, 0x0) 17:19:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x0, 0xffff}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x100000211, 0x2, 0x0, 0x800e005a8) shutdown(r0, 0x0) 17:19:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/171, 0xab}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xbd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) listen(r2, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x2, 0x0, 0x800e00519) shutdown(r2, 0x0) 17:19:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/217, 0x25}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/24, 0x18}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f0000000700)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:19:33 executing program 5: poll(&(0x7f0000000140)=[{}], 0x20d1, 0x51) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xff0b, 0x0, 0x0, 0x800e00360) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/197, 0xc5}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r0, 0x0) 17:19:33 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x377, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000100)={@empty, @loopback, @local={0xac, 0x14, 0x0}}, 0xc) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00997) 17:19:33 executing program 1: poll(0x0, 0x0, 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) r1 = dup2(r0, r0) dup(r1) recvfrom$inet(r0, 0x0, 0xd162, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 17:19:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r3, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) openat$cgroup(r2, 0x0, 0x200002, 0x0) write$cgroup_int(r1, 0x0, 0x0) 17:19:33 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20011, r0, 0x0) 17:19:33 executing program 4: poll(&(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x4e, 0x0, 0x0, 0x800e004de) r1 = dup(r0) poll(0x0, 0x0, 0x90) shutdown(r1, 0x0) 17:19:33 executing program 5: poll(&(0x7f00000000c0), 0x2029, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:19:34 executing program 2: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002980)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x200000000005, 0x84) readv(r3, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/79, 0x4f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r2, 0x0) 17:19:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000001c0)=""/42, 0x2a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1008d, 0x2, 0x0, 0x800e00527) shutdown(r1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x44, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:19:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000080), 0x6, 0x800000000004c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd9b, 0x0, 0x0, 0x800e004de) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, 0x0) getresuid(0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfffffe8c, 0x0, 0x0, 0x800e004e1) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:19:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/145, 0x91}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r3}, {r3}], 0x2, 0x4e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) poll(0x0, 0x0, 0x1ff) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/125, 0x7d}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/85, 0x55}, {0x0}, {0x0}], 0x3}, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:34 executing program 4: poll(&(0x7f0000000040), 0x2432, 0x4d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x160d, 0x0, 0x0, 0x800e0097e) poll(&(0x7f0000000040)=[{r0}], 0x4, 0x40004ad) shutdown(r0, 0x0) 17:19:34 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) close(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x8000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:19:35 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c109000000000400fffe141aac14", 0xe}], 0x1}, 0x0) [ 797.513058][ T367] device bridge_slave_1 left promiscuous mode [ 797.519473][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.574043][ T367] device bridge_slave_0 left promiscuous mode [ 797.580474][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.313708][ T367] device hsr_slave_0 left promiscuous mode [ 798.354472][ T367] device hsr_slave_1 left promiscuous mode [ 798.410434][ T367] team0 (unregistering): Port device team_slave_1 removed [ 798.430008][ T367] team0 (unregistering): Port device team_slave_0 removed [ 798.447515][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.458155][T22399] IPVS: ftp: loaded support on port[0] = 21 [ 798.497103][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.572837][ T367] bond0 (unregistering): Released all slaves [ 798.754108][T22399] chnl_net:caif_netlink_parms(): no params data found [ 798.793446][T22399] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.800554][T22399] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.808871][T22399] device bridge_slave_0 entered promiscuous mode [ 798.817077][T22399] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.824315][T22399] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.834894][T22399] device bridge_slave_1 entered promiscuous mode [ 798.860509][T22399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.873420][T22399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.946425][T22399] team0: Port device team_slave_0 added [ 798.955731][T22399] team0: Port device team_slave_1 added [ 799.028569][T22399] device hsr_slave_0 entered promiscuous mode [ 799.062565][T22399] device hsr_slave_1 entered promiscuous mode [ 799.102149][T22399] debugfs: Directory 'hsr0' with parent '/' already present! [ 799.130302][T22399] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.137487][T22399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.145268][T22399] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.152403][T22399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.230494][T22399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.252438][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 799.262757][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.270734][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.286956][T22399] 8021q: adding VLAN 0 to HW filter on device team0 [ 799.298827][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 799.307918][T30475] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.315120][T30475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 799.334901][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 799.343980][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.351073][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.370820][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 799.381267][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 799.397922][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 799.424249][T22399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 799.434963][T22399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 799.448263][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 799.457290][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.466936][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 799.492817][T22399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.581883][T22403] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 799.592514][T22403] CPU: 1 PID: 22403 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 799.600429][T22403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.610489][T22403] Call Trace: [ 799.613828][T22403] dump_stack+0x191/0x1f0 [ 799.618185][T22403] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 799.624124][T22403] dump_header+0x1e7/0xd00 [ 799.628579][T22403] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 799.634748][T22403] ? ___ratelimit+0x542/0x720 [ 799.639457][T22403] ? task_will_free_mem+0x14c/0x810 [ 799.644692][T22403] oom_kill_process+0x210/0x560 [ 799.649591][T22403] out_of_memory+0x1796/0x1c70 [ 799.654382][T22403] ? kmsan_internal_set_origin+0x6a/0xb0 [ 799.660065][T22403] memory_max_write+0x90b/0xb60 [ 799.664960][T22403] ? memory_max_show+0x1b0/0x1b0 [ 799.669921][T22403] cgroup_file_write+0x41a/0x8e0 [ 799.674903][T22403] ? cgroup_seqfile_stop+0x150/0x150 [ 799.680221][T22403] kernfs_fop_write+0x55f/0x840 [ 799.685134][T22403] ? kernfs_fop_read+0x9a0/0x9a0 [ 799.690085][T22403] __vfs_write+0x1a9/0xcb0 [ 799.694545][T22403] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 799.700629][T22403] ? __sb_start_write+0x10b/0x230 [ 799.705797][T22403] vfs_write+0x481/0x920 [ 799.710093][T22403] ksys_write+0x265/0x430 [ 799.714463][T22403] __se_sys_write+0x92/0xb0 [ 799.718984][T22403] __x64_sys_write+0x4a/0x70 [ 799.723666][T22403] do_syscall_64+0xb6/0x160 [ 799.728194][T22403] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 799.734114][T22403] RIP: 0033:0x459f39 [ 799.738042][T22403] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.757768][T22403] RSP: 002b:00007f4b5a873c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 799.766366][T22403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 799.774368][T22403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 799.782382][T22403] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 799.790563][T22403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4b5a8746d4 [ 799.798569][T22403] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 799.806732][T22403] memory: usage 3964kB, limit 0kB, failcnt 581 [ 799.813021][T22403] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 799.819888][T22403] Memory cgroup stats for /syz0: [ 799.820211][T22403] anon 2269184 [ 799.820211][T22403] file 0 [ 799.820211][T22403] kernel_stack 131072 [ 799.820211][T22403] slab 1282048 [ 799.820211][T22403] sock 69632 [ 799.820211][T22403] shmem 0 [ 799.820211][T22403] file_mapped 0 [ 799.820211][T22403] file_dirty 0 [ 799.820211][T22403] file_writeback 0 [ 799.820211][T22403] anon_thp 2097152 [ 799.820211][T22403] inactive_anon 0 [ 799.820211][T22403] active_anon 2269184 [ 799.820211][T22403] inactive_file 0 [ 799.820211][T22403] active_file 0 [ 799.820211][T22403] unevictable 0 [ 799.820211][T22403] slab_reclaimable 135168 [ 799.820211][T22403] slab_unreclaimable 1146880 [ 799.820211][T22403] pgfault 37092 [ 799.820211][T22403] pgmajfault 0 [ 799.820211][T22403] workingset_refault 0 [ 799.820211][T22403] workingset_activate 0 [ 799.820211][T22403] workingset_nodereclaim 0 [ 799.820211][T22403] pgrefill 0 [ 799.820211][T22403] pgscan 0 [ 799.820211][T22403] pgsteal 0 [ 799.820211][T22403] pgactivate 0 [ 799.914735][T22403] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22402,uid=0 [ 799.930425][T22403] Memory cgroup out of memory: Killed process 22402 (syz-executor.0) total-vm:72588kB, anon-rss:2156kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 799.950619][ T1829] oom_reaper: reaped process 22402 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:19:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:38 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c109000000002000fffe141aac141412e0", 0x11}], 0x1}, 0x0) 17:19:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @perf_config_ext={0x8ab, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x667a}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000a40)='memory.stat\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000a80)) gettid() r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="39000000140081ae00003c0005000187110008abca1b4e7db89c40ebb37358582bdbb7d553b4e921556b3d5df500c202000000000000000000", 0x39}], 0x1}, 0x0) 17:19:38 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nfc={0x3b, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c109000000002900fffe141aac141412e0000001f5de6a0c15961ff499f27015a1f0080000000000", 0x28}], 0x1}, 0x0) 17:19:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000002700050ad25a80648c63940d0124fc00100009400a000000053582c137153e3709000800000000000020", 0x2e}], 0x1}, 0x0) 17:19:38 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="77ed389fe9a9", @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x29, 0x0, @remote, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x2], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x4100}, @mcast2}}}}}}}, 0x0) [ 799.991176][T22399] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 800.002469][T22399] CPU: 1 PID: 22399 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 800.010426][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.020542][T22399] Call Trace: [ 800.023911][T22399] dump_stack+0x191/0x1f0 [ 800.028317][T22399] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.034286][T22399] dump_header+0x1e7/0xd00 [ 800.038784][T22399] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 800.045015][T22399] ? ___ratelimit+0x542/0x720 [ 800.049763][T22399] ? task_will_free_mem+0x2c9/0x810 [ 800.055051][T22399] oom_kill_process+0x210/0x560 [ 800.060025][T22399] out_of_memory+0x1796/0x1c70 [ 800.064894][T22399] ? kmsan_internal_set_origin+0x6a/0xb0 [ 800.070629][T22399] try_charge+0x2889/0x3d70 [ 800.075227][T22399] ? __module_address+0x68/0x5e0 [ 800.080299][T22399] mem_cgroup_try_charge+0xa29/0xe40 [ 800.085732][T22399] mem_cgroup_try_charge_delay+0x7e/0x140 17:19:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c134108fe74950f9b93a5ea0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b9ce916a7036c13c8b86314219123c233beca448dd9f82c124c7"], 0xad) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 800.091583][T22399] wp_page_copy+0x776/0x26d0 [ 800.096252][T22399] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 800.102218][T22399] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 800.108457][T22399] ? kmsan_internal_set_origin+0x6a/0xb0 [ 800.114174][T22399] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 800.120227][T22399] do_wp_page+0x1e8c/0x37f0 [ 800.124794][T22399] ? kmsan_internal_set_origin+0x6a/0xb0 [ 800.130521][T22399] handle_mm_fault+0x46e3/0x9f70 [ 800.135582][T22399] do_user_addr_fault+0x905/0x1510 [ 800.140804][T22399] __do_page_fault+0x1a2/0x410 [ 800.145651][T22399] do_page_fault+0xbb/0x500 [ 800.150258][T22399] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 800.155674][T22399] page_fault+0x4e/0x60 [ 800.159871][T22399] RIP: 0033:0x4329fe [ 800.163796][T22399] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 800.183420][T22399] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 800.189523][T22399] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 800.197509][T22399] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 800.205494][T22399] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000014f1940 [ 800.213479][T22399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 800.221466][T22399] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 800.229620][T22399] memory: usage 1576kB, limit 0kB, failcnt 589 [ 800.235889][T22399] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 800.242852][T22399] Memory cgroup stats for /syz0: [ 800.243186][T22399] anon 49152 [ 800.243186][T22399] file 0 [ 800.243186][T22399] kernel_stack 0 [ 800.243186][T22399] slab 1282048 [ 800.243186][T22399] sock 69632 [ 800.243186][T22399] shmem 0 [ 800.243186][T22399] file_mapped 0 [ 800.243186][T22399] file_dirty 0 [ 800.243186][T22399] file_writeback 0 [ 800.243186][T22399] anon_thp 0 [ 800.243186][T22399] inactive_anon 0 [ 800.243186][T22399] active_anon 49152 [ 800.243186][T22399] inactive_file 0 [ 800.243186][T22399] active_file 0 [ 800.243186][T22399] unevictable 0 [ 800.243186][T22399] slab_reclaimable 135168 [ 800.243186][T22399] slab_unreclaimable 1146880 [ 800.243186][T22399] pgfault 37092 [ 800.243186][T22399] pgmajfault 0 [ 800.243186][T22399] workingset_refault 0 [ 800.243186][T22399] workingset_activate 0 [ 800.243186][T22399] workingset_nodereclaim 0 [ 800.243186][T22399] pgrefill 0 [ 800.243186][T22399] pgscan 0 [ 800.243186][T22399] pgsteal 0 [ 800.243186][T22399] pgactivate 0 [ 800.243186][T22399] pgdeactivate 0 [ 800.340654][T22399] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22399,uid=0 [ 800.356343][T22399] Memory cgroup out of memory: Killed process 22399 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 800.378056][ T1829] oom_reaper: reaped process 22399 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x10101, 0x0, 0x0, 0x800e00a18) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:19:38 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r2, r2, 0x0, 0x8080fffffffe) open(0x0, 0x0, 0x0) 17:19:38 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$team(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 17:19:38 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="6653a8990785363940aed12f0000db2f00400022f1f169bf000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c92465e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221afe72590f1bf41d20d4c000000279bd612cbc5d1093fda811df1fcaac4fed1a49ea72e0da9ca8fd2dad697c20c177cafbf00000000a82ac15822930d592c510aa2ea94a2986ad0787200"/163, 0xa3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 17:19:38 executing program 3: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d000000000000000000000000000000000000e5000000000020380003000000c763bf000079be7a2ce3c134108fe74950f9b93a5ea0cee7257225501bfbd9a2d7a0ec8c06b51e67f4fee76b6eb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b9ce916a7036c13c8b86314219123c233beca448dd9f82c124c7"], 0xad) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17:19:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:38 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160002008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 17:19:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2b, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="006d656d6f727920195e470b36bb2f995d26e5446eadc4538f35d347a29fe8a8cc6e90c77fa8c4d75a28e983814d9bddcabec1395b6010dccb85fdffa1bffbf75b9d08e1ef5c2c3023457e6a201a75ca41c1390448aa6e8b165634f8e850893dbc088f49d0f8a02594294d9657642bc879cf72c198edfef2c8ccc69b64d91e22c1eee54dcd6084f8c0dd5cfc801472bffa1999fa9f87fbebd1ef9c599c77078e3928046a922f011e36c568c7eb375349cdf8e7691914b9a3dabc7c4f3997c75fd56d7e0678b7277c51bc96a94459126fffe1b2c44c8da2778218a8b738781214d8041d5df463ca5ce395785b265212468cb226440d74aef2f0200a4791cf35c1784f380cf5128649de8b572ae1aeea7c548c6f3666db539ccb9048379be6e5733da2f6b1b6cd9fd17de3b6747b5bc97482065401b50e563ecc50ccb8f94e821251d16df581fb7e4005e3c7202e4487e901e129bc3c3bd9c693d0fb5665555dc7d9b1efa0aacc1144c4ebb2f6a206ba8df9a668afd42ac6456f72eacd540273391557f2247a5b8143f0c06c9820abc219defd30b7c8a9"], 0xfdef) 17:19:39 executing program 3: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 17:19:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2b, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="006d656d6f727920195e470b36bb2f995d26e5446eadc4538f35d347a29fe8a8cc6e90c77fa8c4d75a28e983814d9bddcabec1395b6010dccb85fdffa1bffbf75b9d08e1ef5c2c3023457e6a201a75ca41c1390448aa6e8b165634f8e850893dbc088f49d0f8a02594294d9657642bc879cf72c198edfef2c8ccc69b64d91e22c1eee54dcd6084f8c0dd5cfc801472bffa1999fa9f87fbebd1ef9c599c77078e3928046a922f011e36c568c7eb375349cdf8e7691914b9a3dabc7c4f3997c75fd56d7e0678b7277c51bc96a94459126fffe1b2c44c8da2778218a8b738781214d8041d5df463ca5ce395785b265212468cb226440d74aef2f0200a4791cf35c1784f380cf5128649de8b572ae1aeea7c548c6f3666db539ccb9048379be6e5733da2f6b1b6cd9fd17de3b6747b5bc97482065401b50e563ecc50ccb8f94e821251d16df581fb7e4005e3c7202e4487e901e129bc3c3bd9c693d0fb5665555dc7d9b1efa0aacc1144c4ebb2f6a206ba8df9a668afd42ac6456f72eacd540273391557f2247a5b8143f0c06c9820abc219defd30b7c8a9"], 0xfdef) 17:19:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2b, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x12e) 17:19:39 executing program 2: futex(&(0x7f0000001a00), 0x800000000009, 0x4, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0xe, 0xfffffffffffffd53) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x8000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000500)=""/209, 0xa78f}) getpgrp(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r2, &(0x7f00000002c0)=0x202, 0xdd) 17:19:39 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x48}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 801.622442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 801.628566][ C0] protocol 88fb is buggy, dev hsr_slave_1 17:19:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002fc0)="dffbfd1d879401a2537e3d9ddee826d15345677050de310ac3b87938c8ec45ed8112492d5cfe1867271a61340569c884bf2d24bbe253a234b49bf78e2a553258c862deb23b1b695a1c63a9055344ec458dc1422c3cfbe5d7f0e7ae29ab49c67488190f15df59caad40e85e5f460b6155a2d82ca4fe6e393c7037b56920dc8510d4b3321a56379fb5665608f319dd8f2b42114b1727ab219a471997e56c10ba0aae9289a3d1bb3276a8360ed729080d74f1edbf42bed5c01b9a66f105d3d43fc28764d809563201c1410c16006499e57d1a8b2a7462", 0xd5}, {&(0x7f0000000500)="68b6adbc028895dc1292dd2a2daf14fda009950c999daf0a4933b18b03f4965d5f27e81ad65e396533cb29224be13f587f1bab37ccb35a921384012e548583e5c4c8f5ff1f672e7b1af4aa132ee50a09136fecbdaa0136651f7b46ffb71017c37b082c22092473af084008d2a76a9d5427d05ca9cbfea4af8538fc849e8bc363002201bf86a9a25e794efd01361df05e389ff1c46221d0a51070e7001da78d75403a06cf9f5477623e18faf2bf192a9ab8dc861d0a9c05f8b7278532b6966db6411103f736602183154285003caa51fd2f91d2c91ebbdb364f570d8b1e682ac2aad287", 0xe3}, {&(0x7f0000000140)="3d81289fb33841b4b0fc083bdb49f6064b006ff674b741db2641fc34059fbcdfaf14b4e5219c43c8eab2e358ffa8fa731e752ccbc87a942a48192116f68f13612545070f351b1ea151643ebe24f6ab6f90", 0x51}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000700)="357b47e3b675ae925937af17ec7905571b784b1083f0ab1baa9dffdf801ffd4259a5dfed80bae1d6a31d9fe38a40d4375f8995725d56a4b1d8d0228fb209f8534702cbd115a9febadbb0992b73ce4639d3c7615b97d39e9afc5f7f9fcf1f34ac0038f39a6292c29e445b2695eacc2315418d0360894bc2d73cdd94d5a1feb6e5ff93a8a1dbc426a778bafe15eca10ec697c12b20949c327e", 0x98}, {&(0x7f0000000900)="490ad2fbda1f4ec06bdf90359969593a9088afb1f87020d6be64ba8ce1bf3f069845319bfaece60f43849ef16103b63a5ab90906e6f292", 0x37}, {&(0x7f0000000940)="fadb1e284e8c3a39b47c9dde37727e819895a4c0bb851b7340f569152a8709cb0b592ed8bfa2fc7a2c6b38fce258292c1d7bb22857148bcd19fff794", 0x3c}, {&(0x7f0000000b80)="cd1d0a01829b97fc5adb34187927652e6bfb524a7ad52500bb90380d06a1986cba8f54c5ae36429a737c5ebfa428eef813bc1137fbc5426ccd308d6419af4a59696b4eed8df8ce6520f921e652e5b1beb6f13981244e1577a36efc5a75dc47707d1c564057f9", 0x66}], 0x4}}], 0x2, 0x0) 17:19:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RREADLINK(r1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0xffffff9d) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) lseek(r1, 0x0, 0x4) syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in6=@mcast1}}, {{@in=@local}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) stat(0x0, 0x0) lstat(0x0, 0x0) 17:19:39 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$team(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 17:19:40 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$team(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 17:19:40 executing program 3: r0 = socket$inet(0x2, 0x4000020000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000005c0)="dc43161aee459dadad7836578d2ac9259fa5a96c056a5a2277306b5a2801859d2a839cb5eb915239180781e50668143e12cbbbe442b2ae6e2314970aca3d08afcfb98b6c7afd744dc2cdae73244a2c369ba5e9009183d7abc237a5cb3c1207ae605c64491b5ee3209a42ce7a09c0990000000000000000701c4e1cc1bc29dd34ab5679e22e68c00ae2fa894ae4ed367cda0b7a4f060b566cf9bc5713851c63854c5c8c36c555ae701db6b14817e8f2a76b9f0131628a8486250800639a1f69100405695a9709ba640cc62705213be00ae68d880be5c2da42146c7837ce8f1e1f13e42d9660a39a6ebb72a35ea2d6", 0xfffffffffffffe0b) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xab0584bc5a06b18d, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) 17:19:40 executing program 4: futex(&(0x7f0000001a00), 0x800000000009, 0x4, 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000001c0)=0xe, 0xfffffffffffffd53) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x8000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000500)=""/209, 0xa78f}) r3 = getpgrp(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) setpgid(r3, r4) fchdir(r2) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd) 17:19:40 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$team(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 17:19:40 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) madvise(&(0x7f0000003000/0xc000)=nil, 0xc000, 0xc) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) clone(0x40000000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) [ 802.858808][T23382] IPVS: ftp: loaded support on port[0] = 21 [ 803.443080][ T367] device bridge_slave_1 left promiscuous mode [ 803.449442][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.503216][ T367] device bridge_slave_0 left promiscuous mode [ 803.509608][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.092490][T23613] IPVS: ftp: loaded support on port[0] = 21 [ 804.372946][ T367] device hsr_slave_0 left promiscuous mode [ 804.412282][ T367] device hsr_slave_1 left promiscuous mode [ 804.460353][ T367] team0 (unregistering): Port device team_slave_1 removed [ 804.472073][ T367] team0 (unregistering): Port device team_slave_0 removed [ 804.483871][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.536381][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.620332][ T367] bond0 (unregistering): Released all slaves [ 804.794121][T23613] chnl_net:caif_netlink_parms(): no params data found [ 804.835813][T23613] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.842986][T23613] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.851026][T23613] device bridge_slave_0 entered promiscuous mode [ 804.859610][T23613] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.866818][T23613] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.875665][T23613] device bridge_slave_1 entered promiscuous mode [ 804.946446][T23613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.961483][T23613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.994400][T23613] team0: Port device team_slave_0 added [ 805.003844][T23613] team0: Port device team_slave_1 added [ 805.095522][T23613] device hsr_slave_0 entered promiscuous mode [ 805.142633][T23613] device hsr_slave_1 entered promiscuous mode [ 805.182145][T23613] debugfs: Directory 'hsr0' with parent '/' already present! [ 805.210909][T23613] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.218116][T23613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.225830][T23613] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.233000][T23613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.313180][T23613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.335405][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.344585][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.354118][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.369977][T23613] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.385504][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.394415][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.401508][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.415596][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.424706][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.431846][T14791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.464047][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 805.484014][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 805.493722][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 805.503176][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.518228][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.531651][T23613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 805.558075][T23613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.698580][T23618] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 805.708894][T23618] CPU: 0 PID: 23618 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 805.716790][T23618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.726851][T23618] Call Trace: [ 805.730179][T23618] dump_stack+0x191/0x1f0 [ 805.734522][T23618] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 805.740424][T23618] dump_header+0x1e7/0xd00 [ 805.744860][T23618] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 805.751029][T23618] ? ___ratelimit+0x542/0x720 [ 805.755710][T23618] ? task_will_free_mem+0x14c/0x810 [ 805.761013][T23618] oom_kill_process+0x210/0x560 [ 805.765909][T23618] out_of_memory+0x1796/0x1c70 [ 805.770683][T23618] ? kmsan_internal_set_origin+0x6a/0xb0 [ 805.776338][T23618] memory_max_write+0x90b/0xb60 [ 805.781211][T23618] ? memory_max_show+0x1b0/0x1b0 [ 805.786168][T23618] cgroup_file_write+0x41a/0x8e0 [ 805.791120][T23618] ? cgroup_seqfile_stop+0x150/0x150 [ 805.796426][T23618] kernfs_fop_write+0x55f/0x840 [ 805.801287][T23618] ? kernfs_fop_read+0x9a0/0x9a0 [ 805.806257][T23618] __vfs_write+0x1a9/0xcb0 [ 805.810751][T23618] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 805.816847][T23618] ? __sb_start_write+0x10b/0x230 [ 805.821884][T23618] vfs_write+0x481/0x920 [ 805.826152][T23618] ksys_write+0x265/0x430 [ 805.830494][T23618] __se_sys_write+0x92/0xb0 [ 805.835000][T23618] __x64_sys_write+0x4a/0x70 [ 805.839597][T23618] do_syscall_64+0xb6/0x160 [ 805.844110][T23618] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 805.850004][T23618] RIP: 0033:0x459f39 [ 805.853914][T23618] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.873521][T23618] RSP: 002b:00007fa66d6dec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 805.881958][T23618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 805.889952][T23618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 805.897927][T23618] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 805.905934][T23618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa66d6df6d4 [ 805.913940][T23618] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 805.922110][T23618] memory: usage 5940kB, limit 0kB, failcnt 598 [ 805.928300][T23618] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 805.935258][T23618] Memory cgroup stats for /syz0: [ 805.935592][T23618] anon 49152 [ 805.935592][T23618] file 3887104 [ 805.935592][T23618] kernel_stack 196608 [ 805.935592][T23618] slab 1282048 [ 805.935592][T23618] sock 69632 [ 805.935592][T23618] shmem 3887104 [ 805.935592][T23618] file_mapped 0 [ 805.935592][T23618] file_dirty 0 [ 805.935592][T23618] file_writeback 0 [ 805.935592][T23618] anon_thp 0 [ 805.935592][T23618] inactive_anon 3919872 [ 805.935592][T23618] active_anon 49152 [ 805.935592][T23618] inactive_file 0 [ 805.935592][T23618] active_file 0 [ 805.935592][T23618] unevictable 0 [ 805.935592][T23618] slab_reclaimable 135168 [ 805.935592][T23618] slab_unreclaimable 1146880 [ 805.935592][T23618] pgfault 37686 [ 805.935592][T23618] pgmajfault 0 [ 805.935592][T23618] workingset_refault 0 [ 805.935592][T23618] workingset_activate 0 [ 805.935592][T23618] workingset_nodereclaim 0 [ 805.935592][T23618] pgrefill 0 [ 805.935592][T23618] pgscan 0 [ 805.935592][T23618] pgsteal 0 [ 805.935592][T23618] pgactivate 0 [ 806.030603][T23618] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23616,uid=0 17:19:44 executing program 5: 17:19:44 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r0, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) syz_genetlink_get_family_id$team(0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0xfffffffffffffe51, 0x0, 0x9}, 0x1f1) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r2, r2, 0x0, 0x8080fffffffe) 17:19:44 executing program 2: 17:19:44 executing program 4: 17:19:44 executing program 3: 17:19:44 executing program 0: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 806.046336][T23618] Memory cgroup out of memory: Killed process 23616 (syz-executor.0) total-vm:72720kB, anon-rss:104kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 806.069726][ T1829] oom_reaper: reaped process 23616 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:19:44 executing program 3: [ 806.141500][T23613] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 806.152375][T23613] CPU: 0 PID: 23613 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 806.160309][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.170405][T23613] Call Trace: [ 806.173751][T23613] dump_stack+0x191/0x1f0 [ 806.178139][T23613] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 806.184093][T23613] dump_header+0x1e7/0xd00 [ 806.188559][T23613] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 806.194750][T23613] ? ___ratelimit+0x542/0x720 [ 806.199480][T23613] ? task_will_free_mem+0x2c9/0x810 [ 806.204750][T23613] oom_kill_process+0x210/0x560 [ 806.209734][T23613] out_of_memory+0x1796/0x1c70 [ 806.214526][T23613] ? kmsan_internal_set_origin+0x6a/0xb0 [ 806.220199][T23613] try_charge+0x2889/0x3d70 [ 806.224749][T23613] ? __module_address+0x68/0x5e0 [ 806.229754][T23613] mem_cgroup_try_charge+0xa29/0xe40 [ 806.235097][T23613] mem_cgroup_try_charge_delay+0x7e/0x140 [ 806.240849][T23613] wp_page_copy+0x776/0x26d0 [ 806.245468][T23613] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 806.251402][T23613] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 806.257604][T23613] ? kmsan_internal_set_origin+0x6a/0xb0 [ 806.263277][T23613] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 806.269278][T23613] do_wp_page+0x1e8c/0x37f0 [ 806.273802][T23613] ? kmsan_internal_set_origin+0x6a/0xb0 [ 806.279470][T23613] handle_mm_fault+0x46e3/0x9f70 [ 806.284472][T23613] do_user_addr_fault+0x905/0x1510 [ 806.289639][T23613] __do_page_fault+0x1a2/0x410 [ 806.294454][T23613] do_page_fault+0xbb/0x500 [ 806.298986][T23613] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 806.304387][T23613] page_fault+0x4e/0x60 [ 806.308558][T23613] RIP: 0033:0x4329fe [ 806.312474][T23613] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 806.332090][T23613] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 806.338185][T23613] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 806.346187][T23613] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 806.354179][T23613] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001a61940 [ 806.362173][T23613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 806.370166][T23613] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 806.378420][T23613] memory: usage 5520kB, limit 0kB, failcnt 613 [ 806.384712][T23613] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:19:44 executing program 4: [ 806.391577][T23613] Memory cgroup stats for /syz0: [ 806.391877][T23613] anon 0 [ 806.391877][T23613] file 3887104 [ 806.391877][T23613] kernel_stack 0 [ 806.391877][T23613] slab 1282048 [ 806.391877][T23613] sock 69632 [ 806.391877][T23613] shmem 3887104 [ 806.391877][T23613] file_mapped 0 [ 806.391877][T23613] file_dirty 0 [ 806.391877][T23613] file_writeback 0 [ 806.391877][T23613] anon_thp 0 [ 806.391877][T23613] inactive_anon 3919872 [ 806.391877][T23613] active_anon 0 [ 806.391877][T23613] inactive_file 0 [ 806.391877][T23613] active_file 0 [ 806.391877][T23613] unevictable 0 [ 806.391877][T23613] slab_reclaimable 135168 [ 806.391877][T23613] slab_unreclaimable 1146880 [ 806.391877][T23613] pgfault 37686 [ 806.391877][T23613] pgmajfault 0 [ 806.391877][T23613] workingset_refault 0 [ 806.391877][T23613] workingset_activate 0 [ 806.391877][T23613] workingset_nodereclaim 0 [ 806.391877][T23613] pgrefill 0 [ 806.391877][T23613] pgscan 0 [ 806.391877][T23613] pgsteal 0 [ 806.391877][T23613] pgactivate 0 [ 806.486902][T23613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=23613,uid=0 [ 806.502557][T23613] Memory cgroup out of memory: Killed process 23613 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 806.528771][ T1829] oom_reaper: reaped process 23613 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)=""/53, 0x35}, {0x0}], 0x2}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) recvmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000500)=""/197, 0xc5}, {0x0}], 0x2}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000100)={0x0, 0x10003}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffe09, 0x2, 0x0, 0x800e00545) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xc68, 0x0, 0x0, 0x800e00357) shutdown(r2, 0x0) 17:19:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e003b5) 17:19:44 executing program 4: readv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000240)=""/39, 0x27}], 0x1) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e008b5) shutdown(r0, 0x0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000040)=""/115}, {&(0x7f00000000c0)=""/222}, {&(0x7f00000001c0)=""/102}, {&(0x7f0000000280)=""/164}, {&(0x7f0000000340)=""/2}, {&(0x7f0000000600)=""/236}, {&(0x7f0000000440)=""/108}, {&(0x7f0000002ac0)=""/4096}, {&(0x7f0000000700)=""/129}, {&(0x7f00000007c0)=""/102}], 0x10000000000000a6) shutdown(r1, 0x0) 17:19:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x47, &(0x7f0000000080)={@remote={0xac, 0x14, 0x0}, @rand_addr=0x6}, 0xc) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e006d7) shutdown(0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 17:19:45 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0), 0x1000000000000164, 0x0, 0xfffffffffffffdec}, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/210, 0xd2}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000002d80)=[{0x0}], 0x1}, 0x0) shutdown(r1, 0x0) 17:19:45 executing program 0: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/69, 0x45}], 0x1}, 0x80) recvfrom$inet(r0, 0x0, 0xfcf6, 0x2, 0x0, 0x800e007f8) shutdown(r0, 0x0) 17:19:45 executing program 5: poll(0x0, 0x0, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) readv(r2, &(0x7f0000000780)=[{&(0x7f0000000040)=""/103, 0x67}, {0x0}, {0x0}], 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/182, 0xb6}, {0x0}], 0x2}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r5, 0x0) r7 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r7, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r6, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:19:45 executing program 0: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/113, 0x71}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff59, 0x0, 0x0, 0x800e00518) shutdown(r1, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000340)={0x7ff}, 0x0) shutdown(r2, 0x0) 17:19:45 executing program 1: poll(&(0x7f0000000040), 0x200000000000001b, 0x840000000004d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffdfe, 0x0, 0x0, 0x800e00ac5) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:19:45 executing program 2: poll(&(0x7f0000000140), 0x22f1, 0x840000000004d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffdfe, 0x0, 0x0, 0x800e00af1) poll(&(0x7f0000000040)=[{r0, 0x1}], 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:19:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x79d1, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000380)=""/93, 0x5d}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) read(r5, &(0x7f0000000000)=""/135, 0x87) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpgid(0x0) recvfrom$inet(r0, 0x0, 0x24f, 0x2, 0x0, 0x800e00368) shutdown(r0, 0x0) 17:19:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/188, 0xbc}, {0x0}], 0x2}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/20, 0x14}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:19:46 executing program 1: poll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000), 0x10) recvfrom$inet(r1, 0x0, 0xa2, 0x0, 0x0, 0x800e004ea) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0xd, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x100000211, 0x0, 0x0, 0x800e0055d) shutdown(r0, 0x0) 17:19:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/41, 0x29}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r6, &(0x7f0000002d00)=[{&(0x7f0000001940)=""/237, 0xed}], 0x1) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/21, 0x15}], 0x100000000000000c) r1 = dup(r0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/172, 0xac}], 0x1}, 0x0) shutdown(r3, 0x0) 17:19:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvfrom$inet(r0, 0x0, 0xffffffea, 0x2, 0x0, 0x800e0054f) shutdown(r1, 0x0) [ 809.523474][ T367] device bridge_slave_1 left promiscuous mode [ 809.529850][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.583970][ T367] device bridge_slave_0 left promiscuous mode [ 809.590371][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.198482][T24823] IPVS: ftp: loaded support on port[0] = 21 [ 810.433086][ T367] device hsr_slave_0 left promiscuous mode [ 810.482235][ T367] device hsr_slave_1 left promiscuous mode [ 810.530497][ T367] team0 (unregistering): Port device team_slave_1 removed [ 810.542039][ T367] team0 (unregistering): Port device team_slave_0 removed [ 810.554289][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.586377][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.650705][ T367] bond0 (unregistering): Released all slaves [ 810.813704][T24823] chnl_net:caif_netlink_parms(): no params data found [ 810.853604][T24823] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.860715][T24823] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.869348][T24823] device bridge_slave_0 entered promiscuous mode [ 810.877789][T24823] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.885073][T24823] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.893902][T24823] device bridge_slave_1 entered promiscuous mode [ 810.976698][T24823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.991764][T24823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 811.028790][T24823] team0: Port device team_slave_0 added [ 811.038561][T24823] team0: Port device team_slave_1 added [ 811.115456][T24823] device hsr_slave_0 entered promiscuous mode [ 811.152948][T24823] device hsr_slave_1 entered promiscuous mode [ 811.202189][T24823] debugfs: Directory 'hsr0' with parent '/' already present! [ 811.231271][T24823] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.238467][T24823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.246189][T24823] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.253429][T24823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.332927][T24823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.354839][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 811.363582][ T3381] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.371546][ T3381] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.389333][T24823] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.402616][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 811.411401][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.418602][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.449737][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 811.459296][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.466545][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.477028][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 811.487815][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 811.502428][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 811.516231][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 811.533635][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 811.547586][T24823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.573717][T24823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.711200][T24828] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 811.724228][T24828] CPU: 0 PID: 24828 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 811.732139][T24828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.742217][T24828] Call Trace: [ 811.745522][T24828] dump_stack+0x191/0x1f0 [ 811.749883][T24828] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 811.755831][T24828] dump_header+0x1e7/0xd00 [ 811.760265][T24828] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 811.766475][T24828] ? ___ratelimit+0x542/0x720 [ 811.771162][T24828] ? task_will_free_mem+0x14c/0x810 [ 811.776380][T24828] oom_kill_process+0x210/0x560 [ 811.781244][T24828] out_of_memory+0x1796/0x1c70 [ 811.786043][T24828] ? kmsan_internal_set_origin+0x6a/0xb0 [ 811.791716][T24828] memory_max_write+0x90b/0xb60 [ 811.796590][T24828] ? memory_max_show+0x1b0/0x1b0 [ 811.801540][T24828] cgroup_file_write+0x41a/0x8e0 [ 811.806500][T24828] ? cgroup_seqfile_stop+0x150/0x150 [ 811.811788][T24828] kernfs_fop_write+0x55f/0x840 [ 811.816681][T24828] ? kernfs_fop_read+0x9a0/0x9a0 [ 811.821621][T24828] __vfs_write+0x1a9/0xcb0 [ 811.826060][T24828] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 811.832167][T24828] ? __sb_start_write+0x10b/0x230 [ 811.837196][T24828] vfs_write+0x481/0x920 [ 811.841479][T24828] ksys_write+0x265/0x430 [ 811.845818][T24828] __se_sys_write+0x92/0xb0 [ 811.850330][T24828] __x64_sys_write+0x4a/0x70 [ 811.854956][T24828] do_syscall_64+0xb6/0x160 [ 811.859522][T24828] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 811.865428][T24828] RIP: 0033:0x459f39 [ 811.869351][T24828] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.889225][T24828] RSP: 002b:00007f2e1c225c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 811.897661][T24828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 811.905638][T24828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 811.913616][T24828] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 811.921603][T24828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2e1c2266d4 [ 811.929590][T24828] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 811.941145][T24828] memory: usage 5684kB, limit 0kB, failcnt 622 [ 811.947458][T24828] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 811.954407][T24828] Memory cgroup stats for /syz0: [ 811.954739][T24828] anon 0 [ 811.954739][T24828] file 3665920 [ 811.954739][T24828] kernel_stack 196608 [ 811.954739][T24828] slab 1282048 [ 811.954739][T24828] sock 69632 [ 811.954739][T24828] shmem 3665920 [ 811.954739][T24828] file_mapped 0 [ 811.954739][T24828] file_dirty 0 [ 811.954739][T24828] file_writeback 0 [ 811.954739][T24828] anon_thp 0 [ 811.954739][T24828] inactive_anon 3649536 [ 811.954739][T24828] active_anon 0 [ 811.954739][T24828] inactive_file 0 [ 811.954739][T24828] active_file 0 [ 811.954739][T24828] unevictable 0 [ 811.954739][T24828] slab_reclaimable 135168 [ 811.954739][T24828] slab_unreclaimable 1146880 [ 811.954739][T24828] pgfault 38247 [ 811.954739][T24828] pgmajfault 0 [ 811.954739][T24828] workingset_refault 0 [ 811.954739][T24828] workingset_activate 0 [ 811.954739][T24828] workingset_nodereclaim 0 [ 811.954739][T24828] pgrefill 0 [ 811.954739][T24828] pgscan 0 [ 811.954739][T24828] pgsteal 0 [ 811.954739][T24828] pgactivate 0 [ 812.049068][T24828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24826,uid=0 [ 812.064777][T24828] Memory cgroup out of memory: Killed process 24826 (syz-executor.0) total-vm:72720kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 812.089733][ T1829] oom_reaper: reaped process 24826 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:19:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/168, 0xa8}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/148, 0x94}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r1, 0x0) 17:19:50 executing program 1: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x8000000000005, 0x84) readv(r4, &(0x7f0000001740)=[{0x0}, {&(0x7f0000000200)=""/11, 0xb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:19:50 executing program 2: poll(0x0, 0x0, 0x20080000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2928, 0x0, 0x0, 0x800e00507) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x7}, 0x10) fcntl$getflags(0xffffffffffffffff, 0x3) recvfrom$inet(r0, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 17:19:50 executing program 4: mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000009000/0x1000)=nil, 0x1000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/5, 0x5}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) recvmsg(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {0x0}], 0x2}, 0x0) shutdown(r2, 0x0) 17:19:50 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x2000000000007, &(0x7f0000000080)=0x17, 0x4) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000040)=0x7f, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x20, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e005cf) [ 812.130016][T24823] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 812.141385][T24823] CPU: 0 PID: 24823 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 812.149326][T24823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.159423][T24823] Call Trace: [ 812.162771][T24823] dump_stack+0x191/0x1f0 [ 812.167169][T24823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 812.173131][T24823] dump_header+0x1e7/0xd00 [ 812.177613][T24823] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 812.183825][T24823] ? ___ratelimit+0x542/0x720 [ 812.188575][T24823] ? task_will_free_mem+0x2c9/0x810 [ 812.193856][T24823] oom_kill_process+0x210/0x560 [ 812.198773][T24823] out_of_memory+0x1796/0x1c70 [ 812.203604][T24823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 812.209415][T24823] try_charge+0x2889/0x3d70 [ 812.213987][T24823] ? __module_address+0x68/0x5e0 [ 812.219040][T24823] mem_cgroup_try_charge+0xa29/0xe40 [ 812.224407][T24823] mem_cgroup_try_charge_delay+0x7e/0x140 [ 812.230209][T24823] wp_page_copy+0x776/0x26d0 [ 812.234868][T24823] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 812.240835][T24823] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 812.247079][T24823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 812.252791][T24823] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 812.258849][T24823] do_wp_page+0x1e8c/0x37f0 [ 812.263416][T24823] ? kmsan_internal_set_origin+0x6a/0xb0 [ 812.269130][T24823] handle_mm_fault+0x46e3/0x9f70 [ 812.274184][T24823] do_user_addr_fault+0x905/0x1510 [ 812.279386][T24823] __do_page_fault+0x1a2/0x410 [ 812.284218][T24823] do_page_fault+0xbb/0x500 [ 812.289745][T24823] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 812.295178][T24823] page_fault+0x4e/0x60 [ 812.299375][T24823] RIP: 0033:0x4329fe [ 812.303331][T24823] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 812.323956][T24823] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 812.330066][T24823] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 812.338167][T24823] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 812.346179][T24823] RBP: 0000000000008030 R08: 0000000000000001 R09: 000000000260e940 [ 812.354193][T24823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 812.362207][T24823] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 812.370409][T24823] memory: usage 5260kB, limit 0kB, failcnt 631 17:19:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/243, 0xf3}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r2, 0x0) recvfrom$inet(r1, 0x0, 0xfe34, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) [ 812.376675][T24823] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 812.383611][T24823] Memory cgroup stats for /syz0: [ 812.383921][T24823] anon 0 [ 812.383921][T24823] file 3665920 [ 812.383921][T24823] kernel_stack 0 [ 812.383921][T24823] slab 1282048 [ 812.383921][T24823] sock 69632 [ 812.383921][T24823] shmem 3665920 [ 812.383921][T24823] file_mapped 0 [ 812.383921][T24823] file_dirty 0 [ 812.383921][T24823] file_writeback 0 [ 812.383921][T24823] anon_thp 0 [ 812.383921][T24823] inactive_anon 3649536 [ 812.383921][T24823] active_anon 0 [ 812.383921][T24823] inactive_file 0 [ 812.383921][T24823] active_file 0 [ 812.383921][T24823] unevictable 0 [ 812.383921][T24823] slab_reclaimable 135168 [ 812.383921][T24823] slab_unreclaimable 1146880 [ 812.383921][T24823] pgfault 38247 [ 812.383921][T24823] pgmajfault 0 [ 812.383921][T24823] workingset_refault 0 [ 812.383921][T24823] workingset_activate 0 [ 812.383921][T24823] workingset_nodereclaim 0 [ 812.383921][T24823] pgrefill 0 [ 812.383921][T24823] pgscan 0 [ 812.383921][T24823] pgsteal 0 [ 812.383921][T24823] pgactivate 0 17:19:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x18, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xa05cab67485aa48, 0x0, 0x0, 0x800e005f9) shutdown(r2, 0x0) 17:19:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x2, 0x0, 0x800e00519) shutdown(r2, 0x0) [ 812.477971][T24823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24823,uid=0 [ 812.493618][T24823] Memory cgroup out of memory: Killed process 24823 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 812.516359][ T1829] oom_reaper: reaped process 24823 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{}, {r0}, {}], 0x3, 0x800000048) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2f4aa68b0ce3e88d, 0x0, 0x0, 0x800e00507) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/183, 0xb7}], 0x1) shutdown(r1, 0x0) 17:19:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x245, 0x0, 0x0, 0x800e00512) shutdown(r1, 0x0) fstat(r0, &(0x7f0000000180)) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:19:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x100000007, 0x0, 0x0, 0x800e00536) shutdown(r0, 0x0) 17:19:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/244, 0xf4}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00496) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:19:51 executing program 2: poll(&(0x7f0000000040)=[{}], 0x1, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e0070d) poll(&(0x7f0000000000)=[{r0}], 0x37, 0xff) shutdown(r0, 0x0) 17:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/228, 0xe4}, {0x0}, {0x0}, {0x0, 0x145}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae) shutdown(r0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000900)=""/146, 0x92}, {0x0}, {0x0}, {0x0, 0x24a}, {0x0}], 0x5) shutdown(r1, 0x0) 17:19:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000a40)=[{&(0x7f0000000240)=""/39, 0x27}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/205, 0xcd}], 0x1}, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r1, r3) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:51 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000000), 0x2ff, 0x0) poll(&(0x7f0000000300)=[{r0, 0x40}], 0x1, 0x4b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffde, 0x0, 0x0, 0x800e00b16) shutdown(r1, 0x0) 17:19:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/68, 0x44}, {0x0, 0xb3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x3}, 0x10) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000040), 0x8) recvfrom$inet(r2, 0x0, 0xd324, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) 17:19:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f0000000040)=[{}, {r0}, {}, {r0}], 0x4, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffd29, 0x0, 0x0, 0x800e00515) fchdir(r1) recvfrom$inet(r1, 0x0, 0xff06, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:19:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/114, 0x72}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x57b676f6, 0x0, 0x0, 0x800e005ae) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000300)=""/220, 0xdc}, {0x0}], 0x3) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005b9) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) recvfrom$inet(r7, 0x0, 0x6a2d6b65, 0x0, 0x0, 0x800e0092e) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:19:51 executing program 2: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f00000000c0)=[{r0}, {}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) poll(0x0, 0x0, 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffff31, 0x0, 0x0, 0x800e0083e) ppoll(&(0x7f0000000040)=[{}], 0x15, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 17:19:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{}, {r0}], 0x2, 0x44) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x578c96c34028f057, 0x0, 0x0, 0x800e00525) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x7d) shutdown(r1, 0x0) 17:19:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) semget$private(0x0, 0x7, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0083f) 17:19:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000280)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffe3, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = dup(r0) dup2(r0, r2) recvfrom$inet(r1, 0x0, 0x100000114, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:19:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@empty, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x0}, @multicast2}, @udp}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00bb6) 17:19:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/209, 0xd1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) ppoll(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x1d8) shutdown(r1, 0x0) 17:19:52 executing program 4: poll(&(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x20000000000000f6, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) readv(r0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/105, 0x69}], 0x7) shutdown(r1, 0x0) shutdown(r0, 0x0) 17:19:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x400001006, &(0x7f0000000000)={0x0, 0x10004}, 0x10) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001340)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r1, r0) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e004ae) readv(r0, &(0x7f0000000100), 0x1000000000000129) shutdown(r2, 0x0) 17:19:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000180)=""/3, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)=""/213, 0xd5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1) shutdown(r4, 0x0) r5 = dup(r2) shutdown(r5, 0x0) [ 815.284579][ T658] device bridge_slave_1 left promiscuous mode [ 815.291049][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.354598][ T658] device bridge_slave_0 left promiscuous mode [ 815.361245][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.973445][T26461] IPVS: ftp: loaded support on port[0] = 21 [ 816.233358][ T658] device hsr_slave_0 left promiscuous mode [ 816.272654][ T658] device hsr_slave_1 left promiscuous mode [ 816.322068][ T658] team0 (unregistering): Port device team_slave_1 removed [ 816.335088][ T658] team0 (unregistering): Port device team_slave_0 removed [ 816.348230][ T658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.387620][ T658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.472234][ T658] bond0 (unregistering): Released all slaves [ 816.627862][T26461] chnl_net:caif_netlink_parms(): no params data found [ 816.672530][T26461] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.679755][T26461] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.688339][T26461] device bridge_slave_0 entered promiscuous mode [ 816.696816][T26461] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.704118][T26461] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.712730][T26461] device bridge_slave_1 entered promiscuous mode [ 816.776962][T26461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.792285][T26461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.830243][T26461] team0: Port device team_slave_0 added [ 816.839959][T26461] team0: Port device team_slave_1 added [ 816.915609][T26461] device hsr_slave_0 entered promiscuous mode [ 816.953003][T26461] device hsr_slave_1 entered promiscuous mode [ 817.002187][T26461] debugfs: Directory 'hsr0' with parent '/' already present! [ 817.031475][T26461] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.038711][T26461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.046433][T26461] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.053587][T26461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.139974][T26461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.161117][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 817.171201][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.179651][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.195781][T26461] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.209050][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 817.218490][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.225795][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.254560][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 817.264351][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.271505][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.280968][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 817.292827][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 817.313203][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 817.322631][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 817.345745][T26461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 817.357964][T26461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 817.368530][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 817.397094][T26461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.506485][T26465] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 817.516779][T26465] CPU: 1 PID: 26465 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 817.524712][T26465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.534786][T26465] Call Trace: [ 817.538218][T26465] dump_stack+0x191/0x1f0 [ 817.542613][T26465] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 817.548593][T26465] dump_header+0x1e7/0xd00 [ 817.553067][T26465] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 817.559252][T26465] ? ___ratelimit+0x542/0x720 [ 817.563967][T26465] ? task_will_free_mem+0x14c/0x810 [ 817.569190][T26465] oom_kill_process+0x210/0x560 [ 817.574101][T26465] out_of_memory+0x1796/0x1c70 [ 817.578895][T26465] ? kmsan_internal_set_origin+0x6a/0xb0 [ 817.584554][T26465] memory_max_write+0x90b/0xb60 [ 817.589438][T26465] ? memory_max_show+0x1b0/0x1b0 [ 817.594395][T26465] cgroup_file_write+0x41a/0x8e0 [ 817.599363][T26465] ? cgroup_seqfile_stop+0x150/0x150 [ 817.604674][T26465] kernfs_fop_write+0x55f/0x840 [ 817.609562][T26465] ? kernfs_fop_read+0x9a0/0x9a0 [ 817.614523][T26465] __vfs_write+0x1a9/0xcb0 [ 817.619016][T26465] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 817.625152][T26465] ? __sb_start_write+0x10b/0x230 [ 817.630205][T26465] vfs_write+0x481/0x920 [ 817.634482][T26465] ksys_write+0x265/0x430 [ 817.638865][T26465] __se_sys_write+0x92/0xb0 [ 817.643439][T26465] __x64_sys_write+0x4a/0x70 [ 817.648063][T26465] do_syscall_64+0xb6/0x160 [ 817.652588][T26465] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 817.658490][T26465] RIP: 0033:0x459f39 [ 817.662425][T26465] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.682173][T26465] RSP: 002b:00007f688c895c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.690648][T26465] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 817.698672][T26465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 817.706681][T26465] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 817.714660][T26465] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f688c8966d4 [ 817.722656][T26465] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 817.730864][T26465] memory: usage 1920kB, limit 0kB, failcnt 632 [ 817.737114][T26465] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 817.744073][T26465] Memory cgroup stats for /syz0: [ 817.744395][T26465] anon 45056 [ 817.744395][T26465] file 12288 [ 817.744395][T26465] kernel_stack 131072 [ 817.744395][T26465] slab 1282048 [ 817.744395][T26465] sock 69632 [ 817.744395][T26465] shmem 12288 [ 817.744395][T26465] file_mapped 0 [ 817.744395][T26465] file_dirty 0 [ 817.744395][T26465] file_writeback 0 [ 817.744395][T26465] anon_thp 0 [ 817.744395][T26465] inactive_anon 0 [ 817.744395][T26465] active_anon 49152 [ 817.744395][T26465] inactive_file 0 [ 817.744395][T26465] active_file 0 [ 817.744395][T26465] unevictable 0 [ 817.744395][T26465] slab_reclaimable 135168 [ 817.744395][T26465] slab_unreclaimable 1146880 [ 817.744395][T26465] pgfault 38313 [ 817.744395][T26465] pgmajfault 0 [ 817.744395][T26465] workingset_refault 0 [ 817.744395][T26465] workingset_activate 0 [ 817.744395][T26465] workingset_nodereclaim 0 [ 817.744395][T26465] pgrefill 0 [ 817.744395][T26465] pgscan 0 [ 817.744395][T26465] pgsteal 0 [ 817.744395][T26465] pgactivate 0 [ 817.838630][T26465] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26464,uid=0 [ 817.854291][T26465] Memory cgroup out of memory: Killed process 26464 (syz-executor.0) total-vm:72588kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 817.877610][ T1829] oom_reaper: reaped process 26464 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:19:55 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:55 executing program 2: poll(&(0x7f0000001400)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x80000000004e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r0, 0x0) 17:19:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) poll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, 0x4f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/88, 0x58}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) shutdown(r1, 0x0) 17:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002740)=[{&(0x7f0000001180)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) readv(r2, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) shutdown(r2, 0x0) 17:19:55 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000000)=[{r0}, {}], 0x2, 0x4a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e00988) poll(&(0x7f0000000200)=[{}, {r1}, {r1}], 0x3, 0xdf) shutdown(r1, 0x0) 17:19:55 executing program 5: poll(0x0, 0x0, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x3}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00565) shutdown(r0, 0x0) [ 817.920077][T26461] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 817.930157][T26461] CPU: 1 PID: 26461 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 817.938099][T26461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.948234][T26461] Call Trace: [ 817.951605][T26461] dump_stack+0x191/0x1f0 [ 817.956013][T26461] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 817.961968][T26461] dump_header+0x1e7/0xd00 [ 817.966456][T26461] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 817.972683][T26461] ? ___ratelimit+0x542/0x720 [ 817.977419][T26461] ? task_will_free_mem+0x2c9/0x810 [ 817.982694][T26461] oom_kill_process+0x210/0x560 [ 817.987620][T26461] out_of_memory+0x1796/0x1c70 [ 817.992450][T26461] ? kmsan_internal_set_origin+0x6a/0xb0 [ 817.998193][T26461] try_charge+0x2889/0x3d70 [ 818.002773][T26461] ? __module_address+0x68/0x5e0 [ 818.007837][T26461] mem_cgroup_try_charge+0xa29/0xe40 [ 818.013209][T26461] mem_cgroup_try_charge_delay+0x7e/0x140 [ 818.019004][T26461] wp_page_copy+0x776/0x26d0 [ 818.023661][T26461] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 818.029641][T26461] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 818.035874][T26461] ? kmsan_internal_set_origin+0x6a/0xb0 [ 818.041591][T26461] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 818.047652][T26461] do_wp_page+0x1e8c/0x37f0 [ 818.052215][T26461] ? kmsan_internal_set_origin+0x6a/0xb0 [ 818.057930][T26461] handle_mm_fault+0x46e3/0x9f70 [ 818.062988][T26461] do_user_addr_fault+0x905/0x1510 [ 818.068200][T26461] __do_page_fault+0x1a2/0x410 [ 818.073048][T26461] do_page_fault+0xbb/0x500 [ 818.077631][T26461] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 818.083085][T26461] page_fault+0x4e/0x60 [ 818.087292][T26461] RIP: 0033:0x4329fe [ 818.091255][T26461] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 818.110926][T26461] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 818.117063][T26461] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 818.125096][T26461] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 818.133126][T26461] RBP: 0000000000008030 R08: 0000000000000001 R09: 000000000190c940 [ 818.141161][T26461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 818.149203][T26461] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 818.157391][T26461] memory: usage 1608kB, limit 0kB, failcnt 640 [ 818.163717][T26461] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 818.170594][T26461] Memory cgroup stats for /syz0: [ 818.170899][T26461] anon 45056 [ 818.170899][T26461] file 12288 [ 818.170899][T26461] kernel_stack 0 [ 818.170899][T26461] slab 1282048 [ 818.170899][T26461] sock 69632 [ 818.170899][T26461] shmem 12288 [ 818.170899][T26461] file_mapped 0 [ 818.170899][T26461] file_dirty 0 [ 818.170899][T26461] file_writeback 0 [ 818.170899][T26461] anon_thp 0 [ 818.170899][T26461] inactive_anon 0 [ 818.170899][T26461] active_anon 49152 [ 818.170899][T26461] inactive_file 0 [ 818.170899][T26461] active_file 0 [ 818.170899][T26461] unevictable 0 [ 818.170899][T26461] slab_reclaimable 135168 [ 818.170899][T26461] slab_unreclaimable 1146880 [ 818.170899][T26461] pgfault 38313 [ 818.170899][T26461] pgmajfault 0 [ 818.170899][T26461] workingset_refault 0 [ 818.170899][T26461] workingset_activate 0 [ 818.170899][T26461] workingset_nodereclaim 0 [ 818.170899][T26461] pgrefill 0 [ 818.170899][T26461] pgscan 0 [ 818.170899][T26461] pgsteal 0 [ 818.170899][T26461] pgactivate 0 17:19:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000200)=""/162, 0xa2}, {0x0}], 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x8) shutdown(r2, 0x0) [ 818.265024][T26461] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26461,uid=0 [ 818.280728][T26461] Memory cgroup out of memory: Killed process 26461 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 818.299998][ T1829] oom_reaper: reaped process 26461 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:19:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/248, 0xf8}, {0x0}], 0x2}, 0x42) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000000)=""/48, 0x11) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10471, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x503, 0x0, 0x0, 0x800e0051d) shutdown(r2, 0x0) 17:19:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/68, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:19:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f00000010c0)=[{r0}], 0x1, 0x800000000004d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa6a, 0x0, 0x0, 0x800e004de) r2 = dup(r1) accept4$inet(r0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe3f, 0x40002, 0x0, 0x800e004e5) shutdown(r2, 0x0) 17:19:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x1ee, &(0x7f0000000240)=[{&(0x7f0000002800)=""/4096, 0x1000}], 0xa, 0x0, 0x3bc}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x51e, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/247, 0xf7}, {0x0}], 0x2) shutdown(r1, 0x0) 17:19:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/98, 0x62}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff23, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/159, 0xfffffd89}], 0xd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) recvmsg(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)=""/247, 0xf7}, {0x0}], 0x2}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:19:56 executing program 5: poll(0x0, 0x0, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1}, 0x2) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x2769, 0x0, 0x0, 0x800e00505) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/23, 0x17}], 0x93) recvfrom$inet(r5, 0x0, 0x245, 0x0, 0x0, 0x800e00512) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000740)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1) shutdown(r5, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:19:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:19:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x197b7b0, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) recvfrom$inet(r1, 0x0, 0x3c7, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) 17:19:57 executing program 2: socket$inet6_sctp(0xa, 0x0, 0x84) 17:19:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/115, 0x73}], 0x1}, 0xa786641cc6380b32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x93d0, 0x0, 0x0, 0x800e00509) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r2, r3) fdatasync(r3) recvfrom$inet(r3, 0x0, 0xce34, 0x40042, 0x0, 0x800e0050e) shutdown(r3, 0x0) 17:19:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/28, 0x1c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) recvfrom$inet(r2, 0x0, 0x20e6d29dfb76313f, 0x20002, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:19:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/36, 0x24}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:19:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/223, 0xdf}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcf1c, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x3, 0x84) recvmsg(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000002c0)=""/208, 0xd0}, {0x0}, {0x0}], 0x100000000000000d}, 0x0) shutdown(r1, 0x0) 17:19:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x100000242, 0x0, 0x0, 0x800e00716) shutdown(r1, 0x0) poll(&(0x7f0000000080)=[{r1, 0x2000}, {}], 0x2, 0x81) shutdown(r2, 0x0) 17:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)=""/173, 0xad}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x2) shutdown(r2, 0x0) 17:19:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r0, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x117b5c940f0bd65, 0x0, 0x0, 0x800e004c6) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/203, 0xcb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r1, 0x0) 17:19:58 executing program 1: setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x5c4, 0x0, 0x0, 0x800e003b6) poll(&(0x7f0000000100)=[{r0, 0x180}], 0x1, 0x95f07bf) shutdown(r0, 0x0) 17:19:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) read(r0, &(0x7f0000000140)=""/23, 0x17) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 820.873126][ T367] device bridge_slave_1 left promiscuous mode [ 820.879614][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.923227][ T367] device bridge_slave_0 left promiscuous mode [ 820.929741][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.788391][T27998] IPVS: ftp: loaded support on port[0] = 21 [ 821.843274][ T367] device hsr_slave_0 left promiscuous mode [ 821.882481][ T367] device hsr_slave_1 left promiscuous mode [ 821.931258][ T367] team0 (unregistering): Port device team_slave_1 removed [ 821.944193][ T367] team0 (unregistering): Port device team_slave_0 removed [ 821.955490][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 822.028466][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.100198][ T367] bond0 (unregistering): Released all slaves [ 822.288851][T27998] chnl_net:caif_netlink_parms(): no params data found [ 822.332116][T27998] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.339313][T27998] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.347684][T27998] device bridge_slave_0 entered promiscuous mode [ 822.355921][T27998] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.363536][T27998] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.371573][T27998] device bridge_slave_1 entered promiscuous mode [ 822.399141][T27998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.466290][T27998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.498100][T27998] team0: Port device team_slave_0 added [ 822.507548][T27998] team0: Port device team_slave_1 added [ 822.588859][T27998] device hsr_slave_0 entered promiscuous mode [ 822.622655][T27998] device hsr_slave_1 entered promiscuous mode [ 822.682160][T27998] debugfs: Directory 'hsr0' with parent '/' already present! [ 822.710830][T27998] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.718062][T27998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.725813][T27998] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.733006][T27998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.813627][T27998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.835463][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.845145][T13688] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.853723][T13688] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.870158][T27998] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.883128][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.892130][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.899234][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.913561][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.922588][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.929854][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.959802][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 822.970428][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 822.986771][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 822.999865][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.015215][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.027732][T27998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.054012][T27998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.130491][T28002] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 823.140979][T28002] CPU: 1 PID: 28002 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 823.148901][T28002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.158956][T28002] Call Trace: [ 823.162261][T28002] dump_stack+0x191/0x1f0 [ 823.166610][T28002] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.172515][T28002] dump_header+0x1e7/0xd00 [ 823.176944][T28002] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 823.184062][T28002] ? ___ratelimit+0x542/0x720 [ 823.188744][T28002] ? task_will_free_mem+0x14c/0x810 [ 823.193957][T28002] oom_kill_process+0x210/0x560 [ 823.198815][T28002] out_of_memory+0x1796/0x1c70 [ 823.203596][T28002] ? kmsan_internal_set_origin+0x6a/0xb0 [ 823.209270][T28002] memory_max_write+0x90b/0xb60 [ 823.214168][T28002] ? memory_max_show+0x1b0/0x1b0 [ 823.219120][T28002] cgroup_file_write+0x41a/0x8e0 [ 823.224079][T28002] ? cgroup_seqfile_stop+0x150/0x150 [ 823.229397][T28002] kernfs_fop_write+0x55f/0x840 [ 823.234264][T28002] ? kernfs_fop_read+0x9a0/0x9a0 [ 823.239209][T28002] __vfs_write+0x1a9/0xcb0 [ 823.243651][T28002] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 823.249770][T28002] ? __sb_start_write+0x10b/0x230 [ 823.254829][T28002] vfs_write+0x481/0x920 [ 823.259110][T28002] ksys_write+0x265/0x430 [ 823.263463][T28002] __se_sys_write+0x92/0xb0 [ 823.267976][T28002] __x64_sys_write+0x4a/0x70 [ 823.272578][T28002] do_syscall_64+0xb6/0x160 [ 823.277093][T28002] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 823.283100][T28002] RIP: 0033:0x459f39 [ 823.287025][T28002] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.306630][T28002] RSP: 002b:00007f0b56193c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 823.315046][T28002] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 823.323021][T28002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 823.330995][T28002] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 823.339008][T28002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0b561946d4 [ 823.346980][T28002] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 823.355153][T28002] memory: usage 1924kB, limit 0kB, failcnt 641 [ 823.361349][T28002] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 823.368312][T28002] Memory cgroup stats for /syz0: [ 823.368650][T28002] anon 180224 [ 823.368650][T28002] file 12288 [ 823.368650][T28002] kernel_stack 131072 [ 823.368650][T28002] slab 1282048 [ 823.368650][T28002] sock 69632 [ 823.368650][T28002] shmem 12288 [ 823.368650][T28002] file_mapped 0 [ 823.368650][T28002] file_dirty 0 [ 823.368650][T28002] file_writeback 0 [ 823.368650][T28002] anon_thp 0 [ 823.368650][T28002] inactive_anon 0 [ 823.368650][T28002] active_anon 184320 [ 823.368650][T28002] inactive_file 0 [ 823.368650][T28002] active_file 0 [ 823.368650][T28002] unevictable 0 [ 823.368650][T28002] slab_reclaimable 135168 [ 823.368650][T28002] slab_unreclaimable 1146880 [ 823.368650][T28002] pgfault 38379 [ 823.368650][T28002] pgmajfault 0 [ 823.368650][T28002] workingset_refault 0 [ 823.368650][T28002] workingset_activate 0 [ 823.368650][T28002] workingset_nodereclaim 0 [ 823.368650][T28002] pgrefill 0 [ 823.368650][T28002] pgscan 0 [ 823.368650][T28002] pgsteal 0 [ 823.368650][T28002] pgactivate 0 [ 823.463055][T28002] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=28001,uid=0 [ 823.478695][T28002] Memory cgroup out of memory: Killed process 28001 (syz-executor.0) total-vm:72588kB, anon-rss:104kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 823.498644][ T1829] oom_reaper: reaped process 28001 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:01 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:01 executing program 4: poll(&(0x7f0000000040), 0x30, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x60675e50801dd551, 0x0, 0x0, 0x800e00750) poll(0x0, 0x0, 0x4e) poll(0x0, 0x0, 0x1fd) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r0, 0x0) 17:20:01 executing program 3: poll(&(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x6, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) recvfrom$inet(r1, 0x0, 0xfec3, 0x0, 0x0, 0x800e004e1) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000480)=""/227, 0xe3}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/78, 0x4e}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/166, 0xa6}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x5e36, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/117, 0x75}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/50, 0x32}], 0x1}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:01 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) poll(&(0x7f0000000080)=[{}, {}, {}, {r0}], 0x4, 0x8000000000045) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) [ 823.537899][T27998] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 823.549259][T27998] CPU: 1 PID: 27998 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 823.557199][T27998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.567290][T27998] Call Trace: [ 823.570661][T27998] dump_stack+0x191/0x1f0 [ 823.575081][T27998] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.581030][T27998] dump_header+0x1e7/0xd00 [ 823.585514][T27998] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 823.591727][T27998] ? ___ratelimit+0x542/0x720 [ 823.596461][T27998] ? task_will_free_mem+0x2c9/0x810 [ 823.601749][T27998] oom_kill_process+0x210/0x560 [ 823.606666][T27998] out_of_memory+0x1796/0x1c70 [ 823.611489][T27998] ? kmsan_internal_set_origin+0x6a/0xb0 [ 823.617206][T27998] try_charge+0x2889/0x3d70 [ 823.621781][T27998] ? __module_address+0x68/0x5e0 [ 823.626825][T27998] mem_cgroup_try_charge+0xa29/0xe40 [ 823.632193][T27998] mem_cgroup_try_charge_delay+0x7e/0x140 [ 823.637978][T27998] wp_page_copy+0x776/0x26d0 [ 823.642627][T27998] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 823.648583][T27998] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 823.654811][T27998] ? kmsan_internal_set_origin+0x6a/0xb0 [ 823.660559][T27998] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 823.666597][T27998] do_wp_page+0x1e8c/0x37f0 [ 823.671155][T27998] ? kmsan_internal_set_origin+0x6a/0xb0 [ 823.676862][T27998] handle_mm_fault+0x46e3/0x9f70 [ 823.681925][T27998] do_user_addr_fault+0x905/0x1510 [ 823.687134][T27998] __do_page_fault+0x1a2/0x410 [ 823.691968][T27998] do_page_fault+0xbb/0x500 [ 823.696532][T27998] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 823.701964][T27998] page_fault+0x4e/0x60 [ 823.706157][T27998] RIP: 0033:0x4329fe [ 823.710121][T27998] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 823.729770][T27998] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 823.736055][T27998] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 823.744069][T27998] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 823.752089][T27998] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000023cf940 [ 823.760098][T27998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 823.768106][T27998] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 823.776278][T27998] memory: usage 1588kB, limit 0kB, failcnt 649 17:20:01 executing program 4: link(&(0x7f0000000080)='.\x00', 0x0) [ 823.782541][T27998] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 823.789408][T27998] Memory cgroup stats for /syz0: [ 823.789713][T27998] anon 28672 [ 823.789713][T27998] file 12288 [ 823.789713][T27998] kernel_stack 0 [ 823.789713][T27998] slab 1282048 [ 823.789713][T27998] sock 69632 [ 823.789713][T27998] shmem 12288 [ 823.789713][T27998] file_mapped 0 [ 823.789713][T27998] file_dirty 0 [ 823.789713][T27998] file_writeback 0 [ 823.789713][T27998] anon_thp 0 [ 823.789713][T27998] inactive_anon 0 [ 823.789713][T27998] active_anon 49152 [ 823.789713][T27998] inactive_file 0 [ 823.789713][T27998] active_file 0 [ 823.789713][T27998] unevictable 0 [ 823.789713][T27998] slab_reclaimable 135168 [ 823.789713][T27998] slab_unreclaimable 1146880 [ 823.789713][T27998] pgfault 38379 [ 823.789713][T27998] pgmajfault 0 [ 823.789713][T27998] workingset_refault 0 [ 823.789713][T27998] workingset_activate 0 [ 823.789713][T27998] workingset_nodereclaim 0 [ 823.789713][T27998] pgrefill 0 [ 823.789713][T27998] pgscan 0 [ 823.789713][T27998] pgsteal 0 [ 823.789713][T27998] pgactivate 0 17:20:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/112, 0x70}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000240)=""/142, 0x8e}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/1, 0x1}, {0x0}], 0x2}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 823.883553][T27998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=27998,uid=0 [ 823.899195][T27998] Memory cgroup out of memory: Killed process 27998 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 823.917966][ T1829] oom_reaper: reaped process 27998 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:02 executing program 3: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x0, 0x0) msgrcv(r0, &(0x7f0000001680)={0x0, ""/4096}, 0x1008, 0x0, 0x0) 17:20:02 executing program 5: poll(&(0x7f00000000c0)=[{}], 0x1, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00707) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) recvmsg(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001340)=""/227, 0xe3}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r0, 0x0) 17:20:02 executing program 4: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000040)=[{}, {r0}], 0x2, 0x0) poll(&(0x7f0000000040), 0x18, 0x46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e007f8) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) r2 = dup(r1) shutdown(r2, 0x0) 17:20:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/20, 0x14}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000080)=""/123, 0x7b}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:02 executing program 1: poll(0x0, 0x0, 0x7d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000024c0)=""/8, 0x8}], 0x1}, 0x40002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/206, 0xce}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000100)=""/96, 0x60}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x100000279, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) 17:20:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000100)={0x403d}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x530e, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) 17:20:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/185, 0xb9}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffd00, 0x0, 0x0, 0x800e006ef) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) shutdown(r2, 0x0) 17:20:02 executing program 3: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/225, 0xe1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/169, 0xa9}, {0x0}], 0x2}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/128, 0x80}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:02 executing program 1: poll(&(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x0, 0x0, 0x800e0075d) r1 = dup(r0) recvfrom$inet(r0, 0x0, 0x100000242, 0x2, 0x0, 0x800e00722) shutdown(r1, 0x0) 17:20:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x3}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, [{[{}]}], {@ipv6={0x86dd, {0x0, 0x6, "0ed234", 0x10, 0x0, 0x0, @mcast1, @ipv4, {[@routing], @udp}}}}}, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00ca5) 17:20:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x29}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@un=@abs={0x8}, 0x8, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000001640)}, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2d79, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/171, 0xab}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e0051a) shutdown(r1, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000000)) recvfrom$inet(r2, 0x0, 0x1180, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:20:03 executing program 4: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000440)=[{}, {0x0, 0x8001}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x0, 0x3}], 0x2) 17:20:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/150, 0x96}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x56c8, 0x0, 0x0, 0x800e00891) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r2, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) shutdown(r1, 0x0) 17:20:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000140)=""/220, 0xdc, 0x2, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x309, 0x2}, 0xe399) recvfrom$inet(r2, 0x0, 0xb5962e0fc0aae43, 0x0, 0x0, 0x800e0050f) shutdown(r2, 0x0) 17:20:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000140)=""/48, 0x30) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) poll(&(0x7f0000000140)=[{}, {}, {}], 0x3, 0x8000000000049) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000100)=""/164, 0xa4}, {0x0}], 0x2) dup2(r2, r3) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) poll(&(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) recvmsg(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/35, 0x23}], 0x4}, 0x40002) shutdown(r2, 0x0) [ 826.533349][ T6251] device bridge_slave_1 left promiscuous mode [ 826.539799][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.584101][ T6251] device bridge_slave_0 left promiscuous mode [ 826.590520][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.425756][ T6251] device hsr_slave_0 left promiscuous mode [ 827.473652][ T6251] device hsr_slave_1 left promiscuous mode [ 827.492433][T29444] IPVS: ftp: loaded support on port[0] = 21 [ 827.541371][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 827.556242][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 827.567831][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.606902][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.682972][ T6251] bond0 (unregistering): Released all slaves [ 827.838232][T29444] chnl_net:caif_netlink_parms(): no params data found [ 827.881070][T29444] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.888458][T29444] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.897053][T29444] device bridge_slave_0 entered promiscuous mode [ 827.905877][T29444] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.913511][T29444] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.922402][T29444] device bridge_slave_1 entered promiscuous mode [ 827.987120][T29444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.002275][T29444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.037465][T29444] team0: Port device team_slave_0 added [ 828.047371][T29444] team0: Port device team_slave_1 added [ 828.117262][T29444] device hsr_slave_0 entered promiscuous mode [ 828.172828][T29444] device hsr_slave_1 entered promiscuous mode [ 828.212191][T29444] debugfs: Directory 'hsr0' with parent '/' already present! [ 828.241259][T29444] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.248453][T29444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.256186][T29444] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.263373][T29444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.338915][T29444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.361074][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.371285][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.381035][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.399535][T29444] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.413533][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 828.422827][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.429971][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.445903][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 828.455067][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.462348][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.490316][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 828.513366][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 828.522879][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 828.539973][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 828.555450][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 828.568414][T29444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 828.594330][T29444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.686960][T29450] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 828.697392][T29450] CPU: 1 PID: 29450 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 828.705344][T29450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.715407][T29450] Call Trace: [ 828.718762][T29450] dump_stack+0x191/0x1f0 [ 828.723120][T29450] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 828.729024][T29450] dump_header+0x1e7/0xd00 [ 828.733490][T29450] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 828.739705][T29450] ? ___ratelimit+0x542/0x720 [ 828.744408][T29450] ? task_will_free_mem+0x14c/0x810 [ 828.749623][T29450] oom_kill_process+0x210/0x560 [ 828.754494][T29450] out_of_memory+0x1796/0x1c70 [ 828.759331][T29450] ? kmsan_internal_set_origin+0x6a/0xb0 [ 828.765000][T29450] memory_max_write+0x90b/0xb60 [ 828.769876][T29450] ? memory_max_show+0x1b0/0x1b0 [ 828.774879][T29450] cgroup_file_write+0x41a/0x8e0 [ 828.779840][T29450] ? cgroup_seqfile_stop+0x150/0x150 [ 828.785132][T29450] kernfs_fop_write+0x55f/0x840 [ 828.790009][T29450] ? kernfs_fop_read+0x9a0/0x9a0 [ 828.794950][T29450] __vfs_write+0x1a9/0xcb0 [ 828.799395][T29450] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 828.805473][T29450] ? __sb_start_write+0x10b/0x230 [ 828.810529][T29450] vfs_write+0x481/0x920 [ 828.814808][T29450] ksys_write+0x265/0x430 [ 828.819147][T29450] __se_sys_write+0x92/0xb0 [ 828.823656][T29450] __x64_sys_write+0x4a/0x70 [ 828.828253][T29450] do_syscall_64+0xb6/0x160 [ 828.832796][T29450] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 828.838712][T29450] RIP: 0033:0x459f39 [ 828.842626][T29450] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.862249][T29450] RSP: 002b:00007ff18fa44c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.870696][T29450] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 828.878689][T29450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 828.886674][T29450] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.894650][T29450] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff18fa456d4 [ 828.902638][T29450] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 828.910803][T29450] memory: usage 1920kB, limit 0kB, failcnt 650 [ 828.917034][T29450] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 828.923945][T29450] Memory cgroup stats for /syz0: [ 828.924267][T29450] anon 163840 [ 828.924267][T29450] file 12288 [ 828.924267][T29450] kernel_stack 131072 [ 828.924267][T29450] slab 1282048 [ 828.924267][T29450] sock 69632 [ 828.924267][T29450] shmem 12288 [ 828.924267][T29450] file_mapped 0 [ 828.924267][T29450] file_dirty 0 [ 828.924267][T29450] file_writeback 0 [ 828.924267][T29450] anon_thp 0 [ 828.924267][T29450] inactive_anon 0 [ 828.924267][T29450] active_anon 184320 [ 828.924267][T29450] inactive_file 0 [ 828.924267][T29450] active_file 0 [ 828.924267][T29450] unevictable 0 [ 828.924267][T29450] slab_reclaimable 135168 [ 828.924267][T29450] slab_unreclaimable 1146880 [ 828.924267][T29450] pgfault 38445 [ 828.924267][T29450] pgmajfault 0 [ 828.924267][T29450] workingset_refault 0 [ 828.924267][T29450] workingset_activate 0 [ 828.924267][T29450] workingset_nodereclaim 0 [ 828.924267][T29450] pgrefill 0 [ 828.924267][T29450] pgscan 0 [ 828.924267][T29450] pgsteal 0 [ 828.924267][T29450] pgactivate 0 [ 829.020030][T29450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29449,uid=0 17:20:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:07 executing program 5: syz_emit_ethernet(0x68, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x32, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "000100", 0x0, 0x0, 0x0, @empty, @mcast2, [], "0200"}}}}}}}, 0x0) 17:20:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)=""/132, 0x84}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/161, 0xa1}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000080)=""/93}], 0x8c) shutdown(r4, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:20:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/205, 0xcd}, {0x0}, {0x0}, {0x0}, {0x0}], 0x3ac}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xffffff21, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = dup(r3) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000200)=""/159, 0x9f}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:07 executing program 4: poll(0x0, 0x0, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) setsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:20:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000000)=[{r0}, {}, {}, {r0}, {}], 0x5, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x35b1fb9b03bbddb0, 0x0, 0x0, 0x800e00a19) shutdown(r1, 0x0) [ 829.035655][T29450] Memory cgroup out of memory: Killed process 29449 (syz-executor.0) total-vm:72588kB, anon-rss:104kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 829.055809][ T1829] oom_reaper: reaped process 29449 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 829.097254][T29444] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 829.107294][T29444] CPU: 1 PID: 29444 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 829.115222][T29444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.125311][T29444] Call Trace: [ 829.128663][T29444] dump_stack+0x191/0x1f0 [ 829.133058][T29444] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.139011][T29444] dump_header+0x1e7/0xd00 [ 829.143494][T29444] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 829.149717][T29444] ? ___ratelimit+0x542/0x720 [ 829.154446][T29444] ? task_will_free_mem+0x2c9/0x810 [ 829.159737][T29444] oom_kill_process+0x210/0x560 [ 829.164651][T29444] out_of_memory+0x1796/0x1c70 [ 829.169486][T29444] ? kmsan_internal_set_origin+0x6a/0xb0 [ 829.175189][T29444] try_charge+0x2889/0x3d70 [ 829.179764][T29444] ? __module_address+0x68/0x5e0 [ 829.184820][T29444] mem_cgroup_try_charge+0xa29/0xe40 [ 829.190182][T29444] mem_cgroup_try_charge_delay+0x7e/0x140 [ 829.195967][T29444] wp_page_copy+0x776/0x26d0 [ 829.200613][T29444] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 829.206577][T29444] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 829.212816][T29444] ? kmsan_internal_set_origin+0x6a/0xb0 [ 829.218536][T29444] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 829.224584][T29444] do_wp_page+0x1e8c/0x37f0 [ 829.229230][T29444] ? kmsan_internal_set_origin+0x6a/0xb0 [ 829.234946][T29444] handle_mm_fault+0x46e3/0x9f70 [ 829.239991][T29444] do_user_addr_fault+0x905/0x1510 17:20:07 executing program 5: select(0x0, 0x0, &(0x7f0000000100)={0x80, 0x10c0be3e, 0x5, 0x4, 0x80000000, 0x101, 0x4, 0xff}, &(0x7f0000000140)={0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x2}, &(0x7f0000000180)={0x0, 0x9}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000000)=[{r0}, {}, {}, {}], 0x4, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x4e, 0x0, 0x0, 0x800e004de) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000080)={0xffffffffffffffff}, 0x10) recvfrom$inet(r1, 0x0, 0x1000001ab, 0x0, 0x0, 0x800e004e1) shutdown(r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x2, 0x1f, 0x40}) [ 829.245196][T29444] __do_page_fault+0x1a2/0x410 [ 829.250036][T29444] do_page_fault+0xbb/0x500 [ 829.254606][T29444] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 829.260035][T29444] page_fault+0x4e/0x60 [ 829.264224][T29444] RIP: 0033:0x4329fe [ 829.268199][T29444] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 829.287853][T29444] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 829.293977][T29444] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 829.301988][T29444] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 829.309991][T29444] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001a36940 [ 829.317980][T29444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 829.325968][T29444] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 829.334100][T29444] memory: usage 1588kB, limit 0kB, failcnt 658 [ 829.340287][T29444] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 829.347221][T29444] Memory cgroup stats for /syz0: [ 829.347530][T29444] anon 24576 [ 829.347530][T29444] file 12288 [ 829.347530][T29444] kernel_stack 0 [ 829.347530][T29444] slab 1282048 [ 829.347530][T29444] sock 69632 [ 829.347530][T29444] shmem 12288 [ 829.347530][T29444] file_mapped 0 [ 829.347530][T29444] file_dirty 0 [ 829.347530][T29444] file_writeback 0 [ 829.347530][T29444] anon_thp 0 [ 829.347530][T29444] inactive_anon 0 [ 829.347530][T29444] active_anon 49152 [ 829.347530][T29444] inactive_file 0 [ 829.347530][T29444] active_file 0 [ 829.347530][T29444] unevictable 0 [ 829.347530][T29444] slab_reclaimable 135168 [ 829.347530][T29444] slab_unreclaimable 1146880 [ 829.347530][T29444] pgfault 38445 [ 829.347530][T29444] pgmajfault 0 [ 829.347530][T29444] workingset_refault 0 [ 829.347530][T29444] workingset_activate 0 [ 829.347530][T29444] workingset_nodereclaim 0 [ 829.347530][T29444] pgrefill 0 [ 829.347530][T29444] pgscan 0 [ 829.347530][T29444] pgsteal 0 [ 829.347530][T29444] pgactivate 0 17:20:07 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) poll(&(0x7f00000000c0)=[{r0}, {r0}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00a97) r2 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r1, 0x0) [ 829.441565][T29444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29444,uid=0 [ 829.457235][T29444] Memory cgroup out of memory: Killed process 29444 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 829.477580][ T1829] oom_reaper: reaped process 29444 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:07 executing program 3: poll(&(0x7f0000000080), 0x200000000000001a, 0x42) dup(0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e004b7) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x101) shutdown(r0, 0x0) 17:20:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000140)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvfrom$inet(r1, 0x0, 0x3c1, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r1, 0x0, 0xff1d, 0x2, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:20:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) recvfrom$inet(r1, 0x0, 0xff4c, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:20:07 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/101, 0x65}], 0x1}, 0x42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xf2da, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/18, 0x12}, {0x0}], 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r2, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000280)=""/243, 0xf3}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/188, 0xbc}, {0x0, 0xffffffbe}, {0x0, 0xfffffffffffffe5e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r2, 0x0, 0xfe86, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/37, 0x25}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e0059e) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:08 executing program 2: readv(0xffffffffffffffff, &(0x7f0000000600)=[{0x0}], 0x1) poll(&(0x7f0000000040), 0x2000000000000035, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1148, 0x0, 0x0, 0x800e008c6) ppoll(&(0x7f0000000240)=[{}, {}], 0x2000000000000015, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:20:08 executing program 3: poll(&(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x800000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2f4aa68b0ce3e88d, 0x0, 0x0, 0x800e00507) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000180)={0x8}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 17:20:08 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1044e, 0x2, 0x0, 0x800e00527) shutdown(r0, 0x0) setsockopt$inet_buf(r0, 0x0, 0xd, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xff1d5344, 0x2, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:20:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/200, 0xc8}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xff59, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) readv(r2, &(0x7f0000000900)=[{&(0x7f00000009c0)=""/10, 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r2, 0x0) 17:20:08 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0xda8d2ed1a8af186}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/123, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1016c, 0x0, 0x0, 0x800e00818) shutdown(r0, 0x0) poll(&(0x7f00000000c0)=[{}], 0x1, 0x200) shutdown(r1, 0x0) 17:20:08 executing program 4: poll(&(0x7f0000000080)=[{}, {}], 0x25e, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x8c3e, 0x0, 0x0, 0x800e00635) poll(&(0x7f00000001c0), 0x200000000000002b, 0xff) shutdown(r0, 0x0) 17:20:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) poll(&(0x7f0000000000)=[{}, {}, {}, {r0}], 0x4, 0x40800000000004c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x51, &(0x7f00000000c0)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r2, 0x0, 0x28d, 0x40042, 0x0, 0x800e004e1) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000080)=""/191, 0xbf}], 0x1}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000001a40)=[{&(0x7f0000000140)=""/165, 0xa5}, {0x0}], 0x2) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r8, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r7, 0x0) r9 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r9, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/48, 0x30}, {0x0}], 0x2) shutdown(r8, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 17:20:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, &(0x7f0000000040)) recvfrom$inet(r0, 0x0, 0xff15, 0x2, 0x0, 0x800e00505) shutdown(r0, 0x0) 17:20:09 executing program 2: getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, &(0x7f0000000080)=0xffffffffffffff32) poll(&(0x7f0000000080), 0x6, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xa2, 0x0, 0x0, 0x800e004e1) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000540)=""/227, 0xe3}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x205, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) setsockopt$inet6_group_source_req(r1, 0x29, 0x52, &(0x7f00000000c0)={0x0, {{0x1c, 0xffffffffffffffff}}, {{0x1c, 0xffffffffffffffff}}}, 0x108) recvfrom$inet(r0, 0x0, 0xd64, 0x42, 0x0, 0x800e00321) shutdown(r0, 0x0) [ 832.113097][T13807] device bridge_slave_1 left promiscuous mode [ 832.119483][T13807] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.163140][T13807] device bridge_slave_0 left promiscuous mode [ 832.169492][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.873210][T13807] device hsr_slave_0 left promiscuous mode [ 832.922313][T13807] device hsr_slave_1 left promiscuous mode [ 832.979102][T13807] team0 (unregistering): Port device team_slave_1 removed [ 832.996644][T13807] team0 (unregistering): Port device team_slave_0 removed [ 833.016382][T13807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.050296][T31090] IPVS: ftp: loaded support on port[0] = 21 [ 833.066355][T13807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.141578][T13807] bond0 (unregistering): Released all slaves [ 833.299157][T31090] chnl_net:caif_netlink_parms(): no params data found [ 833.335525][T31090] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.342969][T31090] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.351113][T31090] device bridge_slave_0 entered promiscuous mode [ 833.360542][T31090] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.367789][T31090] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.376251][T31090] device bridge_slave_1 entered promiscuous mode [ 833.469096][T31090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.482759][T31090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.517995][T31090] team0: Port device team_slave_0 added [ 833.528158][T31090] team0: Port device team_slave_1 added [ 833.599141][T31090] device hsr_slave_0 entered promiscuous mode [ 833.642748][T31090] device hsr_slave_1 entered promiscuous mode [ 833.682086][T31090] debugfs: Directory 'hsr0' with parent '/' already present! [ 833.711064][T31090] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.718260][T31090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.725959][T31090] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.733207][T31090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.813240][T31090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.835038][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.843857][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.851721][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.868953][T31090] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.881173][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.890180][ T3381] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.897296][ T3381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.926712][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 833.936824][ T3381] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.944021][ T3381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.966010][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 833.975879][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 833.994005][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 834.014637][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.023423][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.036019][T31090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.060649][T31090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.207852][T31095] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 834.218456][T31095] CPU: 1 PID: 31095 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 834.226369][T31095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.236426][T31095] Call Trace: [ 834.239725][T31095] dump_stack+0x191/0x1f0 [ 834.244093][T31095] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 834.250020][T31095] dump_header+0x1e7/0xd00 [ 834.254456][T31095] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 834.260651][T31095] ? ___ratelimit+0x542/0x720 [ 834.265354][T31095] ? task_will_free_mem+0x14c/0x810 [ 834.270566][T31095] oom_kill_process+0x210/0x560 [ 834.275433][T31095] out_of_memory+0x1796/0x1c70 [ 834.280215][T31095] ? kmsan_internal_set_origin+0x6a/0xb0 [ 834.285869][T31095] memory_max_write+0x90b/0xb60 [ 834.290743][T31095] ? memory_max_show+0x1b0/0x1b0 [ 834.295737][T31095] cgroup_file_write+0x41a/0x8e0 [ 834.300694][T31095] ? cgroup_seqfile_stop+0x150/0x150 [ 834.305985][T31095] kernfs_fop_write+0x55f/0x840 [ 834.310862][T31095] ? kernfs_fop_read+0x9a0/0x9a0 [ 834.315841][T31095] __vfs_write+0x1a9/0xcb0 [ 834.320281][T31095] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 834.326362][T31095] ? __sb_start_write+0x10b/0x230 [ 834.331393][T31095] vfs_write+0x481/0x920 [ 834.335658][T31095] ksys_write+0x265/0x430 [ 834.340022][T31095] __se_sys_write+0x92/0xb0 [ 834.344587][T31095] __x64_sys_write+0x4a/0x70 [ 834.349237][T31095] do_syscall_64+0xb6/0x160 [ 834.353794][T31095] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 834.359689][T31095] RIP: 0033:0x459f39 [ 834.363594][T31095] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.383220][T31095] RSP: 002b:00007fbe57e99c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.391642][T31095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 834.399618][T31095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 834.407600][T31095] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 834.415601][T31095] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe57e9a6d4 [ 834.423607][T31095] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 834.434582][T31095] memory: usage 5492kB, limit 0kB, failcnt 667 [ 834.440877][T31095] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 834.447814][T31095] Memory cgroup stats for /syz0: [ 834.447999][T31095] anon 24576 [ 834.447999][T31095] file 3391488 [ 834.447999][T31095] kernel_stack 196608 [ 834.447999][T31095] slab 1282048 [ 834.447999][T31095] sock 69632 [ 834.447999][T31095] shmem 3391488 [ 834.447999][T31095] file_mapped 0 [ 834.447999][T31095] file_dirty 0 [ 834.447999][T31095] file_writeback 0 [ 834.447999][T31095] anon_thp 0 [ 834.447999][T31095] inactive_anon 3379200 [ 834.447999][T31095] active_anon 49152 [ 834.447999][T31095] inactive_file 0 [ 834.447999][T31095] active_file 0 [ 834.447999][T31095] unevictable 0 [ 834.447999][T31095] slab_reclaimable 135168 [ 834.447999][T31095] slab_unreclaimable 1146880 [ 834.447999][T31095] pgfault 39039 [ 834.447999][T31095] pgmajfault 0 [ 834.447999][T31095] workingset_refault 0 [ 834.447999][T31095] workingset_activate 0 [ 834.447999][T31095] workingset_nodereclaim 0 [ 834.447999][T31095] pgrefill 0 [ 834.447999][T31095] pgscan 0 [ 834.447999][T31095] pgsteal 0 [ 834.447999][T31095] pgactivate 0 [ 834.543066][T31095] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=31093,uid=0 [ 834.559142][T31095] Memory cgroup out of memory: Killed process 31093 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 834.579196][ T1829] oom_reaper: reaped process 31093 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:12 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002740)=[{&(0x7f0000001180)=""/208, 0xd0}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = dup(r1) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x51, &(0x7f00000000c0)={0x0, {{0x10, 0x2}}}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) ppoll(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x1d8) shutdown(r3, 0x0) 17:20:12 executing program 4: poll(&(0x7f0000000080)=[{}], 0x1, 0x8000000000045) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000000)=""/21, 0x15}, {0x0}, {0x0}], 0x3}, 0x40042) r2 = dup(r1) shutdown(r0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r2, 0x0) recvfrom$inet(r3, 0x0, 0x1789836bed9020c0, 0x2, 0x0, 0x800e0050e) shutdown(r3, 0x0) 17:20:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f00000001c0)=""/211, 0xd3, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000780)=[{&(0x7f0000000180)=""/159, 0x9f}, {0x0}, {0x0}], 0x3) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/34, 0x22}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x103bd, 0x0, 0x0, 0x800e0051f) r2 = socket$inet6_sctp(0x1c, 0x3, 0x84) shutdown(r0, 0x0) readv(r2, &(0x7f0000002800)=[{&(0x7f0000000180)=""/109, 0x6d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r1, 0x0) 17:20:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/116, 0xffb9}, {0x0, 0x344}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e005a1) shutdown(r1, 0x0) shutdown(r2, 0x0) [ 834.623483][T31090] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 834.633573][T31090] CPU: 1 PID: 31090 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 834.641498][T31090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.651589][T31090] Call Trace: [ 834.654948][T31090] dump_stack+0x191/0x1f0 [ 834.659346][T31090] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 834.665302][T31090] dump_header+0x1e7/0xd00 [ 834.669784][T31090] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 834.675997][T31090] ? ___ratelimit+0x542/0x720 [ 834.680731][T31090] ? task_will_free_mem+0x2c9/0x810 [ 834.686001][T31090] oom_kill_process+0x210/0x560 [ 834.690919][T31090] out_of_memory+0x1796/0x1c70 [ 834.695862][T31090] ? kmsan_internal_set_origin+0x6a/0xb0 [ 834.701607][T31090] try_charge+0x2889/0x3d70 [ 834.706208][T31090] ? __module_address+0x68/0x5e0 [ 834.711281][T31090] mem_cgroup_try_charge+0xa29/0xe40 [ 834.716686][T31090] mem_cgroup_try_charge_delay+0x7e/0x140 [ 834.722501][T31090] wp_page_copy+0x776/0x26d0 [ 834.727205][T31090] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 834.733215][T31090] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 834.739471][T31090] ? kmsan_internal_set_origin+0x6a/0xb0 [ 834.745218][T31090] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 834.751294][T31090] do_wp_page+0x1e8c/0x37f0 [ 834.755885][T31090] ? kmsan_internal_set_origin+0x6a/0xb0 [ 834.761613][T31090] handle_mm_fault+0x46e3/0x9f70 [ 834.766679][T31090] do_user_addr_fault+0x905/0x1510 [ 834.771904][T31090] __do_page_fault+0x1a2/0x410 [ 834.776747][T31090] do_page_fault+0xbb/0x500 [ 834.781333][T31090] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 834.786785][T31090] page_fault+0x4e/0x60 [ 834.790992][T31090] RIP: 0033:0x4329fe [ 834.794958][T31090] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 834.814637][T31090] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 834.820781][T31090] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 834.828828][T31090] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 834.836873][T31090] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000011ca940 [ 834.844915][T31090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 834.852958][T31090] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 834.863010][T31090] memory: usage 5072kB, limit 0kB, failcnt 676 17:20:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001640)=""/212, 0xd2}], 0x3a) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) ftruncate(0xffffffffffffffff, 0x0) recvfrom$inet(r2, 0x0, 0x10201, 0x2, 0x0, 0x800e0051d) shutdown(r2, 0x0) [ 834.869237][T31090] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 834.876224][T31090] Memory cgroup stats for /syz0: [ 834.876549][T31090] anon 24576 [ 834.876549][T31090] file 3391488 [ 834.876549][T31090] kernel_stack 0 [ 834.876549][T31090] slab 1282048 [ 834.876549][T31090] sock 69632 [ 834.876549][T31090] shmem 3391488 [ 834.876549][T31090] file_mapped 0 [ 834.876549][T31090] file_dirty 0 [ 834.876549][T31090] file_writeback 0 [ 834.876549][T31090] anon_thp 0 [ 834.876549][T31090] inactive_anon 3379200 [ 834.876549][T31090] active_anon 49152 [ 834.876549][T31090] inactive_file 0 [ 834.876549][T31090] active_file 0 [ 834.876549][T31090] unevictable 0 [ 834.876549][T31090] slab_reclaimable 135168 [ 834.876549][T31090] slab_unreclaimable 1146880 [ 834.876549][T31090] pgfault 39039 [ 834.876549][T31090] pgmajfault 0 [ 834.876549][T31090] workingset_refault 0 [ 834.876549][T31090] workingset_activate 0 [ 834.876549][T31090] workingset_nodereclaim 0 [ 834.876549][T31090] pgrefill 0 [ 834.876549][T31090] pgscan 0 [ 834.876549][T31090] pgsteal 0 [ 834.876549][T31090] pgactivate 0 17:20:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10062, 0x0, 0x0, 0x800e00585) shutdown(r0, 0x0) shutdown(r1, 0x0) [ 834.971263][T31090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=31090,uid=0 [ 834.986956][T31090] Memory cgroup out of memory: Killed process 31090 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 835.006142][ T1829] oom_reaper: reaped process 31090 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/184, 0xb8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) close(0xffffffffffffffff) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:20:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}], 0x1) shutdown(r4, 0x0) r6 = dup(r1) shutdown(r6, 0x0) 17:20:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffe3, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000000)=""/166, 0xa6}, {0x0}], 0x2) shutdown(r1, 0x0) 17:20:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) recvfrom$inet(r2, 0x0, 0x10201, 0x0, 0x0, 0x800e0051d) shutdown(r2, 0x0) 17:20:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e007a6) shutdown(r0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe75, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:13 executing program 5: poll(&(0x7f0000000100)=[{}], 0x1, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x38, 0x0, 0x0, 0x800e0050e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/60, 0x3c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r2, 0x0) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f00000000c0)=[{r4}, {}, {}], 0x3, 0x4e) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:20:13 executing program 1: poll(&(0x7f0000000100)=[{}], 0x1, 0x80000000004e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080)={0x1}, &(0x7f00000000c0), 0x8) shutdown(r0, 0x0) 17:20:13 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:13 executing program 4: r0 = socket$inet6(0x1c, 0x3, 0x0) poll(&(0x7f0000000100)=[{}, {r0}, {}], 0x3, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x301, 0x0, 0x0, 0x800e005d8) poll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0x82) shutdown(r1, 0x0) 17:20:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/224, 0xe0}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000005c0)=""/104, 0x68}], 0x6) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000400)=""/79, 0x4f}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/194, 0xc2}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r3, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001600), 0xa}, 0x0) shutdown(r2, 0x0) 17:20:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x1000000000000035}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x50, &(0x7f0000000140)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 17:20:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000080)=[{}, {}, {r0, 0x2}], 0x3, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x17, 0x0, 0x0, 0x800e003be) ppoll(&(0x7f0000000500)=[{r1}], 0x1, &(0x7f0000000540)={0x800}, 0x0, 0x0) shutdown(r1, 0x0) 17:20:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/112, 0x70}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r3) shutdown(r3, 0x0) 17:20:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(0x0, 0x0, 0x8000000000041) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1c7, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) recvfrom$inet(r1, 0x0, 0x65793ee0, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:20:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000000)=""/106, 0x6a) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) read(r3, &(0x7f0000000240)=""/178, 0xb2) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) readv(r2, &(0x7f0000001640)=[{&(0x7f0000000180)=""/169, 0xa9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0}, {0x0}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc4, 0x0, 0x0, 0x800e00607) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4096, 0x1000}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc8f4, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000)={0x5}, 0x10) fchdir(r0) recvfrom$inet(r3, 0x0, 0xffffff66, 0x0, 0x0, 0x800e00511) shutdown(r2, 0x0) [ 837.613618][ T367] device bridge_slave_1 left promiscuous mode [ 837.620012][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.673992][ T367] device bridge_slave_0 left promiscuous mode [ 837.680346][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.434949][ T367] device hsr_slave_0 left promiscuous mode [ 838.474370][ T367] device hsr_slave_1 left promiscuous mode [ 838.540299][ T367] team0 (unregistering): Port device team_slave_1 removed [ 838.558210][ T367] team0 (unregistering): Port device team_slave_0 removed [ 838.577170][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.596759][T32426] IPVS: ftp: loaded support on port[0] = 21 [ 838.627916][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.712957][ T367] bond0 (unregistering): Released all slaves [ 838.857881][T32426] chnl_net:caif_netlink_parms(): no params data found [ 838.898683][T32426] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.905954][T32426] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.914228][T32426] device bridge_slave_0 entered promiscuous mode [ 838.922732][T32426] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.929838][T32426] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.938134][T32426] device bridge_slave_1 entered promiscuous mode [ 838.958994][T32426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.973230][T32426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.035296][T32426] team0: Port device team_slave_0 added [ 839.044646][T32426] team0: Port device team_slave_1 added [ 839.136848][T32426] device hsr_slave_0 entered promiscuous mode [ 839.182924][T32426] device hsr_slave_1 entered promiscuous mode [ 839.232130][T32426] debugfs: Directory 'hsr0' with parent '/' already present! [ 839.260290][T32426] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.267485][T32426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.275200][T32426] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.282353][T32426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.353971][T32426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.371416][T32426] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.382259][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 839.391680][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.401435][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.433597][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 839.442547][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.449692][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.457572][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 839.466365][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.473539][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.488729][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 839.499142][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 839.524275][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 839.534198][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 839.544021][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.556848][T32426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 839.592011][T32426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.721713][T32431] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 839.732158][T32431] CPU: 1 PID: 32431 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 839.740090][T32431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.750367][T32431] Call Trace: [ 839.753754][T32431] dump_stack+0x191/0x1f0 [ 839.758135][T32431] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 839.764059][T32431] dump_header+0x1e7/0xd00 [ 839.768502][T32431] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 839.774730][T32431] ? ___ratelimit+0x542/0x720 [ 839.779481][T32431] ? task_will_free_mem+0x14c/0x810 [ 839.784744][T32431] oom_kill_process+0x210/0x560 [ 839.789638][T32431] out_of_memory+0x1796/0x1c70 [ 839.794482][T32431] ? kmsan_internal_set_origin+0x6a/0xb0 [ 839.800197][T32431] memory_max_write+0x90b/0xb60 [ 839.805143][T32431] ? memory_max_show+0x1b0/0x1b0 [ 839.810113][T32431] cgroup_file_write+0x41a/0x8e0 [ 839.815131][T32431] ? cgroup_seqfile_stop+0x150/0x150 [ 839.820437][T32431] kernfs_fop_write+0x55f/0x840 [ 839.825330][T32431] ? kernfs_fop_read+0x9a0/0x9a0 [ 839.830277][T32431] __vfs_write+0x1a9/0xcb0 [ 839.834770][T32431] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 839.840891][T32431] ? __sb_start_write+0x10b/0x230 [ 839.845942][T32431] vfs_write+0x481/0x920 [ 839.850207][T32431] ksys_write+0x265/0x430 [ 839.854581][T32431] __se_sys_write+0x92/0xb0 [ 839.859099][T32431] __x64_sys_write+0x4a/0x70 [ 839.863795][T32431] do_syscall_64+0xb6/0x160 [ 839.868323][T32431] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 839.874227][T32431] RIP: 0033:0x459f39 [ 839.878143][T32431] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 839.898754][T32431] RSP: 002b:00007fa296df3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.907192][T32431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 839.915179][T32431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 839.923162][T32431] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 839.931146][T32431] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa296df46d4 [ 839.939136][T32431] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 839.948134][T32431] memory: usage 5952kB, limit 0kB, failcnt 685 [ 839.954386][T32431] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 839.961230][T32431] Memory cgroup stats for /syz0: [ 839.961424][T32431] anon 24576 [ 839.961424][T32431] file 3964928 [ 839.961424][T32431] kernel_stack 196608 [ 839.961424][T32431] slab 1282048 [ 839.961424][T32431] sock 69632 [ 839.961424][T32431] shmem 3964928 [ 839.961424][T32431] file_mapped 0 [ 839.961424][T32431] file_dirty 0 [ 839.961424][T32431] file_writeback 0 [ 839.961424][T32431] anon_thp 0 [ 839.961424][T32431] inactive_anon 4055040 [ 839.961424][T32431] active_anon 49152 [ 839.961424][T32431] inactive_file 0 [ 839.961424][T32431] active_file 0 [ 839.961424][T32431] unevictable 0 [ 839.961424][T32431] slab_reclaimable 135168 [ 839.961424][T32431] slab_unreclaimable 1146880 [ 839.961424][T32431] pgfault 39600 [ 839.961424][T32431] pgmajfault 0 [ 839.961424][T32431] workingset_refault 0 [ 839.961424][T32431] workingset_activate 0 [ 839.961424][T32431] workingset_nodereclaim 0 [ 839.961424][T32431] pgrefill 0 [ 839.961424][T32431] pgscan 0 [ 839.961424][T32431] pgsteal 0 [ 839.961424][T32431] pgactivate 0 17:20:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/157, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfded, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000003c0)={0x6}, 0x10) dup(r1) recvfrom$inet(r1, 0x0, 0xd172, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/65, 0x41}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4e5cc83, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080), 0x10) recvfrom$inet(r2, 0x0, 0x3c7, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) 17:20:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/183, 0xb7}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4ce, 0x42, 0x0, 0x800e00506) shutdown(r1, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/182, 0xb6}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x4fe7196, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) getsockname(r2, 0x0, &(0x7f0000000080)) recvfrom$inet(r2, 0x0, 0x530e, 0x0, 0x0, 0x800e00648) shutdown(r2, 0x0) 17:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/199, 0xc7}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffe3, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x8001}, 0x10) recvfrom$inet(r1, 0x0, 0xfffffda3, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) [ 840.058683][T32431] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32429,uid=0 [ 840.074352][T32431] Memory cgroup out of memory: Killed process 32429 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 840.096901][ T1829] oom_reaper: reaped process 32429 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 840.172813][T32426] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 840.183006][T32426] CPU: 1 PID: 32426 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 840.190950][T32426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.201061][T32426] Call Trace: [ 840.204434][T32426] dump_stack+0x191/0x1f0 [ 840.208810][T32426] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 840.214752][T32426] dump_header+0x1e7/0xd00 [ 840.219423][T32426] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 840.225652][T32426] ? ___ratelimit+0x542/0x720 [ 840.230400][T32426] ? task_will_free_mem+0x2c9/0x810 [ 840.235686][T32426] oom_kill_process+0x210/0x560 [ 840.240611][T32426] out_of_memory+0x1796/0x1c70 [ 840.245448][T32426] ? kmsan_internal_set_origin+0x6a/0xb0 [ 840.251170][T32426] try_charge+0x2889/0x3d70 [ 840.255756][T32426] ? __module_address+0x68/0x5e0 [ 840.260820][T32426] mem_cgroup_try_charge+0xa29/0xe40 [ 840.266196][T32426] mem_cgroup_try_charge_delay+0x7e/0x140 [ 840.271982][T32426] wp_page_copy+0x776/0x26d0 [ 840.276642][T32426] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 840.282609][T32426] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 840.288841][T32426] ? kmsan_internal_set_origin+0x6a/0xb0 [ 840.294559][T32426] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 840.300607][T32426] do_wp_page+0x1e8c/0x37f0 [ 840.305175][T32426] ? kmsan_internal_set_origin+0x6a/0xb0 [ 840.310901][T32426] handle_mm_fault+0x46e3/0x9f70 [ 840.315962][T32426] do_user_addr_fault+0x905/0x1510 [ 840.321203][T32426] __do_page_fault+0x1a2/0x410 [ 840.326047][T32426] do_page_fault+0xbb/0x500 [ 840.330630][T32426] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 840.336068][T32426] page_fault+0x4e/0x60 [ 840.340279][T32426] RIP: 0033:0x4329fe [ 840.344238][T32426] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 840.363908][T32426] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 840.370038][T32426] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 840.378068][T32426] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 840.386090][T32426] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000002546940 [ 840.394114][T32426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 840.402133][T32426] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 840.411677][T32426] memory: usage 5536kB, limit 0kB, failcnt 694 [ 840.417973][T32426] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 840.424920][T32426] Memory cgroup stats for /syz0: [ 840.425239][T32426] anon 24576 [ 840.425239][T32426] file 3964928 [ 840.425239][T32426] kernel_stack 0 [ 840.425239][T32426] slab 1282048 [ 840.425239][T32426] sock 69632 [ 840.425239][T32426] shmem 3964928 [ 840.425239][T32426] file_mapped 0 [ 840.425239][T32426] file_dirty 0 [ 840.425239][T32426] file_writeback 0 [ 840.425239][T32426] anon_thp 0 [ 840.425239][T32426] inactive_anon 4055040 [ 840.425239][T32426] active_anon 49152 [ 840.425239][T32426] inactive_file 0 [ 840.425239][T32426] active_file 0 [ 840.425239][T32426] unevictable 0 [ 840.425239][T32426] slab_reclaimable 135168 [ 840.425239][T32426] slab_unreclaimable 1146880 [ 840.425239][T32426] pgfault 39600 [ 840.425239][T32426] pgmajfault 0 [ 840.425239][T32426] workingset_refault 0 [ 840.425239][T32426] workingset_activate 0 [ 840.425239][T32426] workingset_nodereclaim 0 [ 840.425239][T32426] pgrefill 0 [ 840.425239][T32426] pgscan 0 [ 840.425239][T32426] pgsteal 0 [ 840.425239][T32426] pgactivate 0 [ 840.519891][T32426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=32426,uid=0 [ 840.535653][T32426] Memory cgroup out of memory: Killed process 32426 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 17:20:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x0) connect(r1, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) recvfrom$inet(r0, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r0, 0x0) 17:20:18 executing program 1: poll(0x0, 0x0, 0x8000000000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x7}, 0x10) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xffffff3f, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:20:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x10201, 0x0, 0x0, 0x800e0051d) shutdown(r1, 0x0) [ 840.565051][ T1829] oom_reaper: reaped process 32426 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000180)=""/198, 0xc6, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) r5 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) readv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/27, 0x1b}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:18 executing program 5: open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180), 0x81f00}], 0x1000000000000075) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) execve(0x0, 0x0, &(0x7f00000004c0)=[&(0x7f0000000400)='\x00', &(0x7f0000000080)='\x00']) writev(r2, &(0x7f0000000280), 0x26) execve(0x0, 0x0, 0x0) 17:20:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/150, 0x96}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r2, 0x0) 17:20:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x9}, 0x10) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x10000032e, 0x0, 0x0, 0x800e00541) shutdown(r0, 0x0) 17:20:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f0000001780)=[{&(0x7f0000000040)=""/114, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r6) shutdown(r6, 0x0) 17:20:19 executing program 4: poll(0x0, 0x0, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000140)={0x7}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xa2, 0x0, 0x0, 0x800e004e1) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:19 executing program 5: poll(&(0x7f0000000140)=[{}], 0x2134, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2b36, 0x0, 0x0, 0x800e00946) r1 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000240)=[{r1, 0x1000000000000001}], 0x1, 0x7fff) shutdown(r0, 0x0) 17:20:19 executing program 2: poll(&(0x7f0000000100)=[{}, {}], 0x2160, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x8}, 0x10) getsockopt$inet_mreq(r1, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:20:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, &(0x7f0000000040)=""/81, 0x51, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000000c0)={0x5}, 0x10) r3 = dup(r2) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) shutdown(r4, 0x0) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) 17:20:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:19 executing program 4: poll(&(0x7f0000000140)=[{}, {}], 0x2, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) readv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) recvfrom$inet(r0, 0x0, 0xfffffe80, 0x0, 0x0, 0x800e00521) shutdown(r0, 0x0) 17:20:19 executing program 3: poll(&(0x7f0000000000), 0x5, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e0070d) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17:20:19 executing program 2: poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000980)={0x0, 0x175, &(0x7f0000000480)=[{&(0x7f0000000000)=""/248, 0xf8}], 0x1000000000000255}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) readv(r0, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}], 0x2) shutdown(r5, 0x0) shutdown(r2, 0x0) r6 = dup(r0) shutdown(r6, 0x0) 17:20:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/56, 0x38}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x8c35, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x54, &(0x7f0000000200)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r2, 0x0, 0x10275, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getflags(0xffffffffffffffff, 0x1) recvfrom$inet(r0, 0x0, 0xf03558b9, 0x2, 0x0, 0x800e005cd) shutdown(r0, 0x0) 17:20:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/97, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00730) shutdown(r0, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/61, 0x3d}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r1, 0x0) 17:20:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xff4c, 0x80002, 0x0, 0x800e00575) shutdown(r0, 0x0) 17:20:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x365, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) semop(0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xff4c, 0x0, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:20:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000140)=""/99, 0x63, 0x2, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x10233, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002500)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/107, 0x6b}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) fchmod(r3, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) 17:20:20 executing program 4: clock_settime(0x0, &(0x7f0000000000)) [ 843.333856][ T6251] device bridge_slave_1 left promiscuous mode [ 843.340246][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.394220][ T6251] device bridge_slave_0 left promiscuous mode [ 843.400696][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.273371][ T6251] device hsr_slave_0 left promiscuous mode [ 844.302472][ T1688] IPVS: ftp: loaded support on port[0] = 21 [ 844.313008][ T6251] device hsr_slave_1 left promiscuous mode [ 844.361538][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 844.374628][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 844.386255][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.427671][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.501825][ T6251] bond0 (unregistering): Released all slaves [ 844.685881][ T1688] chnl_net:caif_netlink_parms(): no params data found [ 844.727421][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.734682][ T1688] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.744175][ T1688] device bridge_slave_0 entered promiscuous mode [ 844.753028][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.760145][ T1688] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.768815][ T1688] device bridge_slave_1 entered promiscuous mode [ 844.847269][ T1688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.860498][ T1688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.898515][ T1688] team0: Port device team_slave_0 added [ 844.912951][ T1688] team0: Port device team_slave_1 added [ 844.995920][ T1688] device hsr_slave_0 entered promiscuous mode [ 845.042680][ T1688] device hsr_slave_1 entered promiscuous mode [ 845.082140][ T1688] debugfs: Directory 'hsr0' with parent '/' already present! [ 845.111267][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.118481][ T1688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.126248][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.133398][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.220485][ T1688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.240403][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.249929][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.258417][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.276470][ T1688] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.289019][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.298097][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.305356][T14791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.336016][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 845.345798][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.353027][T14791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.374233][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 845.384399][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 845.397118][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 845.410462][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 845.426678][ T1688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 845.438864][ T1688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 845.449236][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 845.478248][ T1688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.612707][ T1693] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 845.623096][ T1693] CPU: 1 PID: 1693 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 845.630912][ T1693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.640981][ T1693] Call Trace: [ 845.644310][ T1693] dump_stack+0x191/0x1f0 [ 845.648676][ T1693] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 845.654640][ T1693] dump_header+0x1e7/0xd00 [ 845.659083][ T1693] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 845.665256][ T1693] ? ___ratelimit+0x542/0x720 [ 845.669949][ T1693] ? task_will_free_mem+0x14c/0x810 [ 845.675167][ T1693] oom_kill_process+0x210/0x560 [ 845.680034][ T1693] out_of_memory+0x1796/0x1c70 [ 845.684816][ T1693] ? kmsan_internal_set_origin+0x6a/0xb0 [ 845.690479][ T1693] memory_max_write+0x90b/0xb60 [ 845.695384][ T1693] ? memory_max_show+0x1b0/0x1b0 [ 845.700357][ T1693] cgroup_file_write+0x41a/0x8e0 [ 845.705328][ T1693] ? cgroup_seqfile_stop+0x150/0x150 [ 845.710630][ T1693] kernfs_fop_write+0x55f/0x840 [ 845.715502][ T1693] ? kernfs_fop_read+0x9a0/0x9a0 [ 845.720464][ T1693] __vfs_write+0x1a9/0xcb0 [ 845.724953][ T1693] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 845.731058][ T1693] ? __sb_start_write+0x10b/0x230 [ 845.736121][ T1693] vfs_write+0x481/0x920 [ 845.740416][ T1693] ksys_write+0x265/0x430 [ 845.744798][ T1693] __se_sys_write+0x92/0xb0 [ 845.750272][ T1693] __x64_sys_write+0x4a/0x70 [ 845.754885][ T1693] do_syscall_64+0xb6/0x160 [ 845.759407][ T1693] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 845.765314][ T1693] RIP: 0033:0x459f39 [ 845.769226][ T1693] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.788860][ T1693] RSP: 002b:00007fe94f313c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 845.797319][ T1693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 845.805302][ T1693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 845.813315][ T1693] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 845.821318][ T1693] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe94f3146d4 [ 845.829297][ T1693] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 845.843298][ T1693] memory: usage 5784kB, limit 0kB, failcnt 703 [ 845.849505][ T1693] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 845.856456][ T1693] Memory cgroup stats for /syz0: [ 845.856793][ T1693] anon 24576 [ 845.856793][ T1693] file 3784704 [ 845.856793][ T1693] kernel_stack 196608 [ 845.856793][ T1693] slab 1282048 [ 845.856793][ T1693] sock 69632 [ 845.856793][ T1693] shmem 3784704 [ 845.856793][ T1693] file_mapped 0 [ 845.856793][ T1693] file_dirty 0 [ 845.856793][ T1693] file_writeback 0 [ 845.856793][ T1693] anon_thp 0 [ 845.856793][ T1693] inactive_anon 3784704 [ 845.856793][ T1693] active_anon 49152 [ 845.856793][ T1693] inactive_file 0 [ 845.856793][ T1693] active_file 0 [ 845.856793][ T1693] unevictable 0 [ 845.856793][ T1693] slab_reclaimable 135168 [ 845.856793][ T1693] slab_unreclaimable 1146880 [ 845.856793][ T1693] pgfault 40194 [ 845.856793][ T1693] pgmajfault 0 [ 845.856793][ T1693] workingset_refault 0 [ 845.856793][ T1693] workingset_activate 0 [ 845.856793][ T1693] workingset_nodereclaim 0 [ 845.856793][ T1693] pgrefill 0 [ 845.856793][ T1693] pgscan 0 [ 845.856793][ T1693] pgsteal 0 [ 845.856793][ T1693] pgactivate 0 [ 845.952059][ T1693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1691,uid=0 [ 845.967723][ T1693] Memory cgroup out of memory: Killed process 1691 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 845.988292][ T1829] oom_reaper: reaped process 1691 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:24 executing program 5: poll(0x0, 0x0, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$inet6_buf(r3, 0x29, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xd09a, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000001c0)=""/29, 0x1d}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x100000069, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) poll(0x0, 0x0, 0x4c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfb, 0x0, 0x0, 0x800e00a86) poll(0x0, 0x0, 0x1ff) r3 = dup(r1) r4 = dup(r3) shutdown(r4, 0x0) 17:20:24 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000040)=[{r1, 0x1}, {}], 0x2, 0x4b) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffffde, 0x0, 0x0, 0x800e00861) poll(&(0x7f0000001200)=[{r0}, {}, {r0}], 0x3, 0x81) shutdown(r2, 0x0) 17:20:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000000)=""/135, 0x267, 0x91f9b11907ae2756, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000200)=[{}, {}, {}], 0x264, 0xff) shutdown(r2, 0x0) 17:20:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a002e2ff14d5db530005c0e6970341a0a16c0e0fd0f66368c98"], 0xa) recvfrom$inet(r0, 0x0, 0x2ef5, 0x0, 0x0, 0x800e0057f) shutdown(r0, 0x0) [ 846.029336][ T1688] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 846.040999][ T1688] CPU: 1 PID: 1688 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 846.048872][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.059932][ T1688] Call Trace: [ 846.063295][ T1688] dump_stack+0x191/0x1f0 [ 846.067711][ T1688] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 846.073667][ T1688] dump_header+0x1e7/0xd00 [ 846.078142][ T1688] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 846.084368][ T1688] ? ___ratelimit+0x542/0x720 [ 846.089128][ T1688] ? task_will_free_mem+0x2c9/0x810 [ 846.094394][ T1688] oom_kill_process+0x210/0x560 [ 846.099321][ T1688] out_of_memory+0x1796/0x1c70 [ 846.104240][ T1688] ? kmsan_internal_set_origin+0x6a/0xb0 [ 846.109963][ T1688] try_charge+0x2889/0x3d70 [ 846.114550][ T1688] ? __module_address+0x68/0x5e0 [ 846.119614][ T1688] mem_cgroup_try_charge+0xa29/0xe40 [ 846.124983][ T1688] mem_cgroup_try_charge_delay+0x7e/0x140 [ 846.130779][ T1688] wp_page_copy+0x776/0x26d0 [ 846.135441][ T1688] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 846.141408][ T1688] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 846.147662][ T1688] ? kmsan_internal_set_origin+0x6a/0xb0 [ 846.153384][ T1688] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 846.159472][ T1688] do_wp_page+0x1e8c/0x37f0 [ 846.164041][ T1688] ? kmsan_internal_set_origin+0x6a/0xb0 [ 846.169765][ T1688] handle_mm_fault+0x46e3/0x9f70 [ 846.174816][ T1688] do_user_addr_fault+0x905/0x1510 [ 846.180023][ T1688] __do_page_fault+0x1a2/0x410 [ 846.184855][ T1688] do_page_fault+0xbb/0x500 [ 846.189424][ T1688] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 846.194857][ T1688] page_fault+0x4e/0x60 [ 846.199049][ T1688] RIP: 0033:0x4329fe [ 846.203005][ T1688] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 846.222665][ T1688] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 846.228791][ T1688] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 846.236833][ T1688] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 846.244861][ T1688] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000023db940 [ 846.252893][ T1688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 846.261042][ T1688] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 846.269233][ T1688] memory: usage 5376kB, limit 0kB, failcnt 718 17:20:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/101, 0x65}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000180), 0x8) shutdown(r2, 0x0) [ 846.275515][ T1688] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 846.282458][ T1688] Memory cgroup stats for /syz0: [ 846.282795][ T1688] anon 24576 [ 846.282795][ T1688] file 3784704 [ 846.282795][ T1688] kernel_stack 0 [ 846.282795][ T1688] slab 1282048 [ 846.282795][ T1688] sock 69632 [ 846.282795][ T1688] shmem 3784704 [ 846.282795][ T1688] file_mapped 0 [ 846.282795][ T1688] file_dirty 0 [ 846.282795][ T1688] file_writeback 0 [ 846.282795][ T1688] anon_thp 0 [ 846.282795][ T1688] inactive_anon 3784704 [ 846.282795][ T1688] active_anon 49152 [ 846.282795][ T1688] inactive_file 0 [ 846.282795][ T1688] active_file 0 [ 846.282795][ T1688] unevictable 0 [ 846.282795][ T1688] slab_reclaimable 135168 [ 846.282795][ T1688] slab_unreclaimable 1146880 [ 846.282795][ T1688] pgfault 40194 [ 846.282795][ T1688] pgmajfault 0 [ 846.282795][ T1688] workingset_refault 0 [ 846.282795][ T1688] workingset_activate 0 [ 846.282795][ T1688] workingset_nodereclaim 0 [ 846.282795][ T1688] pgrefill 0 [ 846.282795][ T1688] pgscan 0 [ 846.282795][ T1688] pgsteal 0 [ 846.282795][ T1688] pgactivate 0 [ 846.377438][ T1688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=1688,uid=0 [ 846.392992][ T1688] Memory cgroup out of memory: Killed process 1688 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 846.412392][ T1829] oom_reaper: reaped process 1688 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/175, 0xaf}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/228, 0xe4}, {0x0}], 0x2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000004fc0)=[{&(0x7f0000003b40)=""/206, 0xce}], 0x1}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x8}, 0x10) recvfrom$inet(r0, 0x0, 0x100000211, 0x0, 0x0, 0x800e0055d) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000240)=""/207, 0xcf, 0x0, 0x0, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/114, 0x72}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r5, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:20:24 executing program 4: r0 = socket$inet6(0x1c, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001dc0)={0x1c, 0x1c}, 0x1c) 17:20:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/100, 0x64}, {0x0}, {0x0}, {0x0, 0x93}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff46, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x101c7, 0x6, 0x0, 0x800e00520) shutdown(r1, 0x0) 17:20:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000140)=[{r0}, {}, {}], 0x3, 0x8020000000047) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x7760cef5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:20:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/25, 0x19}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x7607e5e, 0x0, 0x0, 0x800e00699) shutdown(r0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r1, 0x0) 17:20:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/90, 0x5a}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup2(r2, r3) fsync(0xffffffffffffffff) recvfrom$inet(r4, 0x0, 0xffffff27, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:25 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}], 0x2}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000002880)=[{&(0x7f00000001c0)=""/131, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/167, 0xa7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:25 executing program 3: poll(&(0x7f0000000080)=[{}, {}], 0x2, 0x40000000000004e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xffffff07, 0x0, 0x0, 0x800e004c1) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000001600), 0x3, 0x0, 0xffffff32}, 0x0) shutdown(r0, 0x0) 17:20:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x6c7d5d662e1c3e84, &(0x7f0000000200), 0x100000000000008c}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/90, 0x5a}], 0x1}, 0x2) recvfrom$inet(r2, 0x0, 0xea1ca13a, 0x2, 0x0, 0x800e00516) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r3, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xff1d, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:25 executing program 5: 17:20:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unlinkat(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xd248eaae, 0x0, 0x0, 0x800e006ea) shutdown(r0, 0x0) 17:20:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom(r0, &(0x7f0000000240)=""/221, 0xfffffd1b, 0x2, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x50, &(0x7f0000000180)={0x0, {{0xfffffffffffffe5f}}}, 0x90) clock_gettime(0x0, &(0x7f0000000000)) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0xcb, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/166, 0xa6}, {0x0, 0x156}], 0x100000000000000d, 0x0, 0x3d3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/18, 0x12}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:26 executing program 3: poll(0x0, 0x0, 0x3e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2686, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) accept$inet6(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x30f, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0xec4f}, 0x10) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)=""/166, 0xa6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x40042) recvfrom$inet(r0, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r1, 0x0) 17:20:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) shutdown(r1, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x3}, 0x10) getsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, &(0x7f0000000480)) recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:26 executing program 1: poll(0x0, 0x0, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000180)={0xf8}, 0x35c) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) shutdown(r1, 0x0) [ 848.933145][ T6251] device bridge_slave_1 left promiscuous mode [ 848.939590][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.994262][ T6251] device bridge_slave_0 left promiscuous mode [ 849.000684][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.743744][ T6251] device hsr_slave_0 left promiscuous mode [ 849.792247][ T6251] device hsr_slave_1 left promiscuous mode [ 849.834769][ T3145] IPVS: ftp: loaded support on port[0] = 21 [ 849.848957][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 849.863058][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 849.876160][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.937239][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.010091][ T6251] bond0 (unregistering): Released all slaves [ 850.173007][ T3145] chnl_net:caif_netlink_parms(): no params data found [ 850.213255][ T3145] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.220459][ T3145] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.229248][ T3145] device bridge_slave_0 entered promiscuous mode [ 850.238631][ T3145] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.245951][ T3145] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.254107][ T3145] device bridge_slave_1 entered promiscuous mode [ 850.277381][ T3145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 850.289826][ T3145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.367224][ T3145] team0: Port device team_slave_0 added [ 850.376753][ T3145] team0: Port device team_slave_1 added [ 850.459511][ T3145] device hsr_slave_0 entered promiscuous mode [ 850.493103][ T3145] device hsr_slave_1 entered promiscuous mode [ 850.532265][ T3145] debugfs: Directory 'hsr0' with parent '/' already present! [ 850.560162][ T3145] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.567349][ T3145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.575057][ T3145] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.582293][ T3145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.662011][ T3145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.683796][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.693088][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.701125][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.718477][ T3145] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.731811][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.741054][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.748304][T13688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.775734][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.786182][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.793441][T13688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.804348][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.814951][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.846888][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.860246][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.869119][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.883588][ T3145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.911392][ T3145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.046293][ T3150] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 851.056792][ T3150] CPU: 0 PID: 3150 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 851.064634][ T3150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.074704][ T3150] Call Trace: [ 851.078021][ T3150] dump_stack+0x191/0x1f0 [ 851.082372][ T3150] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 851.088280][ T3150] dump_header+0x1e7/0xd00 [ 851.092754][ T3150] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 851.098947][ T3150] ? ___ratelimit+0x542/0x720 [ 851.103640][ T3150] ? task_will_free_mem+0x14c/0x810 [ 851.108853][ T3150] oom_kill_process+0x210/0x560 [ 851.113841][ T3150] out_of_memory+0x1796/0x1c70 [ 851.118635][ T3150] ? kmsan_internal_set_origin+0x6a/0xb0 [ 851.124303][ T3150] memory_max_write+0x90b/0xb60 [ 851.129180][ T3150] ? memory_max_show+0x1b0/0x1b0 [ 851.134134][ T3150] cgroup_file_write+0x41a/0x8e0 [ 851.139093][ T3150] ? cgroup_seqfile_stop+0x150/0x150 [ 851.144420][ T3150] kernfs_fop_write+0x55f/0x840 [ 851.149317][ T3150] ? kernfs_fop_read+0x9a0/0x9a0 [ 851.154278][ T3150] __vfs_write+0x1a9/0xcb0 [ 851.158723][ T3150] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 851.164808][ T3150] ? __sb_start_write+0x10b/0x230 [ 851.169867][ T3150] vfs_write+0x481/0x920 [ 851.174131][ T3150] ksys_write+0x265/0x430 [ 851.178479][ T3150] __se_sys_write+0x92/0xb0 [ 851.183033][ T3150] __x64_sys_write+0x4a/0x70 [ 851.187669][ T3150] do_syscall_64+0xb6/0x160 [ 851.192220][ T3150] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 851.198142][ T3150] RIP: 0033:0x459f39 [ 851.202072][ T3150] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 851.221709][ T3150] RSP: 002b:00007f1203078c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.230144][ T3150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 851.238134][ T3150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 851.246119][ T3150] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 851.254103][ T3150] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12030796d4 [ 851.262099][ T3150] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 851.271751][ T3150] memory: usage 6132kB, limit 0kB, failcnt 727 [ 851.278037][ T3150] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 851.284985][ T3150] Memory cgroup stats for /syz0: [ 851.285332][ T3150] anon 159744 [ 851.285332][ T3150] file 4317184 [ 851.285332][ T3150] kernel_stack 196608 [ 851.285332][ T3150] slab 1282048 [ 851.285332][ T3150] sock 69632 [ 851.285332][ T3150] shmem 4317184 [ 851.285332][ T3150] file_mapped 0 [ 851.285332][ T3150] file_dirty 0 [ 851.285332][ T3150] file_writeback 0 [ 851.285332][ T3150] anon_thp 0 [ 851.285332][ T3150] inactive_anon 4190208 [ 851.285332][ T3150] active_anon 184320 [ 851.285332][ T3150] inactive_file 0 [ 851.285332][ T3150] active_file 0 [ 851.285332][ T3150] unevictable 0 [ 851.285332][ T3150] slab_reclaimable 135168 [ 851.285332][ T3150] slab_unreclaimable 1146880 [ 851.285332][ T3150] pgfault 40788 [ 851.285332][ T3150] pgmajfault 0 [ 851.285332][ T3150] workingset_refault 0 [ 851.285332][ T3150] workingset_activate 0 [ 851.285332][ T3150] workingset_nodereclaim 0 [ 851.285332][ T3150] pgrefill 0 [ 851.285332][ T3150] pgscan 0 [ 851.285332][ T3150] pgsteal 0 [ 851.285332][ T3150] pgactivate 0 [ 851.381514][ T3150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=3148,uid=0 [ 851.397126][ T3150] Memory cgroup out of memory: Killed process 3148 (syz-executor.0) total-vm:72720kB, anon-rss:104kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 851.418716][ T1829] oom_reaper: reaped process 3148 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:29 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002a40)=[{&(0x7f0000000680)=""/220, 0xdc}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000400)={0x2a55}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r2, 0x0, r2) close(r2) recvfrom$inet(r1, 0x0, 0xffb1, 0x0, 0x0, 0x800e00520) shutdown(r1, 0x0) 17:20:29 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10101, 0x0, 0x0, 0x800e008c0) poll(&(0x7f0000000000)=[{r1}, {r1, 0x1}, {r0}], 0x3, 0xec1e) shutdown(r1, 0x0) 17:20:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpid() recvfrom$inet(r0, 0x0, 0xd66, 0x2, 0x0, 0x800e00471) shutdown(r0, 0x0) 17:20:29 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 17:20:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/72, 0x48}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) shutdown(r1, 0x0) [ 851.461017][ T3145] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 851.471175][ T3145] CPU: 0 PID: 3145 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 851.479034][ T3145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.489145][ T3145] Call Trace: [ 851.492511][ T3145] dump_stack+0x191/0x1f0 [ 851.496923][ T3145] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 851.502883][ T3145] dump_header+0x1e7/0xd00 [ 851.507376][ T3145] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 851.513597][ T3145] ? ___ratelimit+0x542/0x720 [ 851.518327][ T3145] ? task_will_free_mem+0x2c9/0x810 [ 851.523594][ T3145] oom_kill_process+0x210/0x560 [ 851.528520][ T3145] out_of_memory+0x1796/0x1c70 [ 851.533352][ T3145] ? kmsan_internal_set_origin+0x6a/0xb0 [ 851.539076][ T3145] try_charge+0x2889/0x3d70 [ 851.543657][ T3145] ? __module_address+0x68/0x5e0 [ 851.548730][ T3145] mem_cgroup_try_charge+0xa29/0xe40 [ 851.554121][ T3145] mem_cgroup_try_charge_delay+0x7e/0x140 [ 851.559925][ T3145] wp_page_copy+0x776/0x26d0 [ 851.564592][ T3145] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 851.570570][ T3145] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 851.576817][ T3145] ? kmsan_internal_set_origin+0x6a/0xb0 [ 851.582541][ T3145] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 851.588602][ T3145] do_wp_page+0x1e8c/0x37f0 [ 851.593184][ T3145] ? kmsan_internal_set_origin+0x6a/0xb0 [ 851.598909][ T3145] handle_mm_fault+0x46e3/0x9f70 [ 851.603972][ T3145] do_user_addr_fault+0x905/0x1510 [ 851.609194][ T3145] __do_page_fault+0x1a2/0x410 [ 851.614034][ T3145] do_page_fault+0xbb/0x500 [ 851.618611][ T3145] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 851.624047][ T3145] page_fault+0x4e/0x60 [ 851.628268][ T3145] RIP: 0033:0x4329fe [ 851.632221][ T3145] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 851.653277][ T3145] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 851.659415][ T3145] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 851.667453][ T3145] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 851.675507][ T3145] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000000e77940 [ 851.683550][ T3145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 851.691582][ T3145] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 851.699833][ T3145] memory: usage 5704kB, limit 0kB, failcnt 738 [ 851.706126][ T3145] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 851.713273][ T3145] Memory cgroup stats for /syz0: [ 851.713601][ T3145] anon 24576 [ 851.713601][ T3145] file 4317184 [ 851.713601][ T3145] kernel_stack 0 [ 851.713601][ T3145] slab 1282048 [ 851.713601][ T3145] sock 69632 [ 851.713601][ T3145] shmem 4317184 [ 851.713601][ T3145] file_mapped 0 [ 851.713601][ T3145] file_dirty 0 [ 851.713601][ T3145] file_writeback 0 [ 851.713601][ T3145] anon_thp 0 [ 851.713601][ T3145] inactive_anon 4325376 [ 851.713601][ T3145] active_anon 49152 [ 851.713601][ T3145] inactive_file 0 [ 851.713601][ T3145] active_file 0 [ 851.713601][ T3145] unevictable 0 [ 851.713601][ T3145] slab_reclaimable 135168 [ 851.713601][ T3145] slab_unreclaimable 1146880 [ 851.713601][ T3145] pgfault 40788 [ 851.713601][ T3145] pgmajfault 0 [ 851.713601][ T3145] workingset_refault 0 [ 851.713601][ T3145] workingset_activate 0 [ 851.713601][ T3145] workingset_nodereclaim 0 [ 851.713601][ T3145] pgrefill 0 [ 851.713601][ T3145] pgscan 0 [ 851.713601][ T3145] pgsteal 0 [ 851.713601][ T3145] pgactivate 0 17:20:29 executing program 3: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=""/224, 0xe0}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) poll(0x0, 0x0, 0x8000000000047) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) r4 = dup(r3) poll(&(0x7f00000000c0)=[{r4}, {}, {r4}], 0x3, 0x1ff) shutdown(r2, 0x0) [ 851.808667][ T3145] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=3145,uid=0 [ 851.824246][ T3145] Memory cgroup out of memory: Killed process 3145 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 17:20:29 executing program 1: poll(0x0, 0x0, 0x800000000004f) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f00000001c0)={0x0, {{0xfed3, 0x2}}}, 0x8d) recvfrom$inet(r0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:20:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00718) 17:20:29 executing program 2: poll(0x0, 0x0, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xa4d, 0x0, 0x0, 0x800e003ce) recvfrom$inet(r0, &(0x7f00000000c0)=""/224, 0xe0, 0x42, 0x0, 0x0) shutdown(r0, 0x0) [ 851.893098][ T1829] oom_reaper: reaped process 3145 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/199, 0xc7}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) fcntl$dupfd(r2, 0x0, r2) recvfrom$inet(r1, 0x0, 0x8, 0x0, 0x0, 0x800e0054d) shutdown(r2, 0x0) 17:20:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/150, 0x96}, {0x0}, {0x0}], 0x3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xea1ca13a, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) recvfrom$inet(r1, 0x0, 0xff1d, 0x2, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:20:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/146, 0x92}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1a2, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/235, 0xeb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000040)=""/108, 0x6c}], 0x1) shutdown(r1, 0x0) shutdown(r3, 0x0) 17:20:30 executing program 2: poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x698b7810fe38dc0c}, {0xffffffffffffffff, 0x2008}, {}], 0x4, 0x50) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x95, 0x0, 0x0, 0x800e00531) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r0, 0x0) 17:20:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f00000000c0)=""/82, 0x52, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) setsockopt$sock_linger(r1, 0xffff, 0x80, &(0x7f0000000000), 0x8) recvfrom$inet(r1, 0x0, 0x100000279, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) 17:20:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f00000014c0)={0x8}, 0x10) recvfrom$inet(r1, &(0x7f0000000180)=""/95, 0x5f, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x9457, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) dup2(r0, r0) recvfrom$inet(r2, 0x0, 0xff06, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:31 executing program 3: shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r3, &(0x7f0000000800)=[{&(0x7f0000000040)=""/19, 0x13}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r2, 0x0) 17:20:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2ea3, 0x2, 0x0, 0x800e00519) r3 = dup(r2) shutdown(r1, 0x0) preadv(r3, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = dup(r0) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000000c0)={0x4021}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000000240)) recvfrom$inet(r0, 0x0, 0xd324, 0x0, 0x0, 0x800e0054d) shutdown(r1, 0x0) 17:20:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/109, 0x6d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) poll(&(0x7f0000000240), 0x2000000000000009, 0xc4) shutdown(r2, 0x0) 17:20:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000280)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffe3, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) poll(0x0, 0x0, 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xcfb3abb5, 0x0, 0x0, 0x800e00a4f) poll(&(0x7f0000000000), 0x2000000000000011, 0x1ff) shutdown(r1, 0x0) 17:20:31 executing program 4: poll(&(0x7f0000000000), 0x2000000000000035, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffebf, 0x0, 0x0, 0x800e0082e) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/106, 0x6a}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r0, 0x0) 17:20:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002840)=[{&(0x7f0000000240)=""/221, 0xdd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x1, 0xffffffffffffffff) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:31 executing program 3: 17:20:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/80, 0x50}, {0x0}, {0x0}], 0x100000000000000d) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/213, 0xd5}], 0x1) shutdown(r2, 0x0) 17:20:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000180)=""/13, 0xd}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x5e36, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xf263aaa569d5e4a, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) [ 854.363311][T13807] device bridge_slave_1 left promiscuous mode [ 854.369725][T13807] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.433647][T13807] device bridge_slave_0 left promiscuous mode [ 854.440333][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.236863][ T4301] IPVS: ftp: loaded support on port[0] = 21 [ 855.403269][T13807] device hsr_slave_0 left promiscuous mode [ 855.462686][T13807] device hsr_slave_1 left promiscuous mode [ 855.511817][T13807] team0 (unregistering): Port device team_slave_1 removed [ 855.525243][T13807] team0 (unregistering): Port device team_slave_0 removed [ 855.538660][T13807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.577691][T13807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.662461][T13807] bond0 (unregistering): Released all slaves [ 855.836789][ T4301] chnl_net:caif_netlink_parms(): no params data found [ 855.875190][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.882636][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.891277][ T4301] device bridge_slave_0 entered promiscuous mode [ 855.900414][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.907752][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.916154][ T4301] device bridge_slave_1 entered promiscuous mode [ 855.988562][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.002201][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.035308][ T4301] team0: Port device team_slave_0 added [ 856.044792][ T4301] team0: Port device team_slave_1 added [ 856.117224][ T4301] device hsr_slave_0 entered promiscuous mode [ 856.163080][ T4301] device hsr_slave_1 entered promiscuous mode [ 856.202270][ T4301] debugfs: Directory 'hsr0' with parent '/' already present! [ 856.231300][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.238581][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.246317][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.253579][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.340291][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.360437][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.369290][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.378280][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.395149][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.408441][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.417574][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.424815][T13688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.444175][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 856.453697][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.460881][T13688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.484313][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 856.494901][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 856.512310][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 856.527917][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 856.547779][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 856.561482][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 856.588992][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.717902][ T4306] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 856.728200][ T4306] CPU: 0 PID: 4306 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 856.736013][ T4306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 856.746076][ T4306] Call Trace: [ 856.749391][ T4306] dump_stack+0x191/0x1f0 [ 856.753749][ T4306] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 856.759657][ T4306] dump_header+0x1e7/0xd00 [ 856.764099][ T4306] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 856.770275][ T4306] ? ___ratelimit+0x542/0x720 [ 856.774963][ T4306] ? task_will_free_mem+0x14c/0x810 [ 856.780177][ T4306] oom_kill_process+0x210/0x560 [ 856.785085][ T4306] out_of_memory+0x1796/0x1c70 [ 856.789884][ T4306] ? kmsan_internal_set_origin+0x6a/0xb0 [ 856.796504][ T4306] memory_max_write+0x90b/0xb60 [ 856.802494][ T4306] ? memory_max_show+0x1b0/0x1b0 [ 856.807474][ T4306] cgroup_file_write+0x41a/0x8e0 [ 856.812442][ T4306] ? cgroup_seqfile_stop+0x150/0x150 [ 856.817749][ T4306] kernfs_fop_write+0x55f/0x840 [ 856.822656][ T4306] ? kernfs_fop_read+0x9a0/0x9a0 [ 856.827626][ T4306] __vfs_write+0x1a9/0xcb0 [ 856.832102][ T4306] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 856.838204][ T4306] ? __sb_start_write+0x10b/0x230 [ 856.843272][ T4306] vfs_write+0x481/0x920 [ 856.847559][ T4306] ksys_write+0x265/0x430 [ 856.851935][ T4306] __se_sys_write+0x92/0xb0 [ 856.856482][ T4306] __x64_sys_write+0x4a/0x70 [ 856.861087][ T4306] do_syscall_64+0xb6/0x160 [ 856.865609][ T4306] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 856.871512][ T4306] RIP: 0033:0x459f39 [ 856.875424][ T4306] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 856.895091][ T4306] RSP: 002b:00007fd611283c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 856.903614][ T4306] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 856.911662][ T4306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 856.919673][ T4306] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 856.927665][ T4306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6112846d4 [ 856.935673][ T4306] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 856.943869][ T4306] memory: usage 5392kB, limit 0kB, failcnt 747 [ 856.950118][ T4306] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 856.957051][ T4306] Memory cgroup stats for /syz0: [ 856.957381][ T4306] anon 159744 [ 856.957381][ T4306] file 3584000 [ 856.957381][ T4306] kernel_stack 196608 [ 856.957381][ T4306] slab 1282048 [ 856.957381][ T4306] sock 69632 [ 856.957381][ T4306] shmem 3584000 [ 856.957381][ T4306] file_mapped 0 [ 856.957381][ T4306] file_dirty 0 [ 856.957381][ T4306] file_writeback 0 [ 856.957381][ T4306] anon_thp 0 [ 856.957381][ T4306] inactive_anon 3379200 [ 856.957381][ T4306] active_anon 184320 [ 856.957381][ T4306] inactive_file 0 [ 856.957381][ T4306] active_file 0 [ 856.957381][ T4306] unevictable 0 [ 856.957381][ T4306] slab_reclaimable 135168 [ 856.957381][ T4306] slab_unreclaimable 1146880 [ 856.957381][ T4306] pgfault 41349 [ 856.957381][ T4306] pgmajfault 0 [ 856.957381][ T4306] workingset_refault 0 [ 856.957381][ T4306] workingset_activate 0 [ 856.957381][ T4306] workingset_nodereclaim 0 [ 856.957381][ T4306] pgrefill 0 [ 856.957381][ T4306] pgscan 0 [ 856.957381][ T4306] pgsteal 0 [ 856.957381][ T4306] pgactivate 0 [ 857.053594][ T4306] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4304,uid=0 [ 857.069221][ T4306] Memory cgroup out of memory: Killed process 4304 (syz-executor.0) total-vm:72720kB, anon-rss:104kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 857.093573][ T1829] oom_reaper: reaped process 4304 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/134, 0x86}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/72, 0x48}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffd00, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/91, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) dup2(r1, r2) shutdown(r2, 0x0) 17:20:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)=""/145, 0x91}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f0000000800)=""/8, 0x8}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f00000019c0)=""/4096, 0x1000}, {0x0}], 0x8}, 0x0) shutdown(r1, 0x0) 17:20:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/170, 0xaa}, {0x0}], 0x2}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=""/4, 0xff3b}, {0x0}, {0x0, 0x2e5}], 0x100000000000007a) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef9, 0x0, 0x0, 0x800e00757) shutdown(r1, 0x0) recvfrom$inet(r2, 0x0, 0x259792d2992c924, 0x6, 0x0, 0x800e0050e) shutdown(r2, 0x0) [ 857.131828][ T4301] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 857.143525][ T4301] CPU: 0 PID: 4301 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 857.151426][ T4301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.161635][ T4301] Call Trace: [ 857.165013][ T4301] dump_stack+0x191/0x1f0 [ 857.169414][ T4301] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 857.175392][ T4301] dump_header+0x1e7/0xd00 [ 857.179904][ T4301] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 857.186154][ T4301] ? ___ratelimit+0x542/0x720 [ 857.190920][ T4301] ? task_will_free_mem+0x2c9/0x810 [ 857.196218][ T4301] oom_kill_process+0x210/0x560 [ 857.201152][ T4301] out_of_memory+0x1796/0x1c70 [ 857.205994][ T4301] ? kmsan_internal_set_origin+0x6a/0xb0 [ 857.211706][ T4301] try_charge+0x2889/0x3d70 [ 857.216282][ T4301] ? __module_address+0x68/0x5e0 [ 857.221366][ T4301] mem_cgroup_try_charge+0xa29/0xe40 [ 857.226702][ T4301] mem_cgroup_try_charge_delay+0x7e/0x140 [ 857.232475][ T4301] wp_page_copy+0x776/0x26d0 [ 857.237127][ T4301] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 857.243096][ T4301] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 857.249336][ T4301] ? kmsan_internal_set_origin+0x6a/0xb0 [ 857.255061][ T4301] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 857.261139][ T4301] do_wp_page+0x1e8c/0x37f0 [ 857.265715][ T4301] ? kmsan_internal_set_origin+0x6a/0xb0 [ 857.271498][ T4301] handle_mm_fault+0x46e3/0x9f70 [ 857.276563][ T4301] do_user_addr_fault+0x905/0x1510 [ 857.281785][ T4301] __do_page_fault+0x1a2/0x410 [ 857.286643][ T4301] do_page_fault+0xbb/0x500 [ 857.291234][ T4301] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 857.297645][ T4301] page_fault+0x4e/0x60 [ 857.301970][ T4301] RIP: 0033:0x4329fe [ 857.305923][ T4301] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 857.325587][ T4301] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 857.331724][ T4301] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 857.339758][ T4301] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 857.347820][ T4301] RBP: 0000000000008030 R08: 0000000000000001 R09: 000000000104b940 [ 857.355860][ T4301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 857.364003][ T4301] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 857.372193][ T4301] memory: usage 4972kB, limit 0kB, failcnt 756 [ 857.378400][ T4301] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 857.385387][ T4301] Memory cgroup stats for /syz0: [ 857.385702][ T4301] anon 20480 [ 857.385702][ T4301] file 3584000 [ 857.385702][ T4301] kernel_stack 0 [ 857.385702][ T4301] slab 1282048 [ 857.385702][ T4301] sock 69632 [ 857.385702][ T4301] shmem 3584000 [ 857.385702][ T4301] file_mapped 0 [ 857.385702][ T4301] file_dirty 0 [ 857.385702][ T4301] file_writeback 0 [ 857.385702][ T4301] anon_thp 0 [ 857.385702][ T4301] inactive_anon 3379200 [ 857.385702][ T4301] active_anon 49152 [ 857.385702][ T4301] inactive_file 0 [ 857.385702][ T4301] active_file 0 [ 857.385702][ T4301] unevictable 0 [ 857.385702][ T4301] slab_reclaimable 135168 [ 857.385702][ T4301] slab_unreclaimable 1146880 [ 857.385702][ T4301] pgfault 41349 [ 857.385702][ T4301] pgmajfault 0 [ 857.385702][ T4301] workingset_refault 0 [ 857.385702][ T4301] workingset_activate 0 [ 857.385702][ T4301] workingset_nodereclaim 0 [ 857.385702][ T4301] pgrefill 0 [ 857.385702][ T4301] pgscan 0 [ 857.385702][ T4301] pgsteal 0 [ 857.385702][ T4301] pgactivate 0 17:20:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/66, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) socketpair(0x2, 0x0, 0x7fff, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffdb1, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_timeval(r3, 0xffff, 0x1006, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x5680, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) [ 857.480369][ T4301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=4301,uid=0 [ 857.495976][ T4301] Memory cgroup out of memory: Killed process 4301 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 857.530179][ T1829] oom_reaper: reaped process 4301 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/66, 0x42}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x2, 0x0, 0x800e00506) shutdown(r1, 0x0) socketpair(0x2, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:20:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xefff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 17:20:36 executing program 4: syz_emit_ethernet(0xc0, &(0x7f0000015e15)={@broadcast, @local={[], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}, @mcast2}}}}}}}, 0x0) 17:20:36 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000015e15)={@broadcast, @local={[], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x29, 0x0, @remote, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3]}, @mcast2}}}}}}}, 0x0) 17:20:36 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000100)={0x7fff}, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x8000000000048) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 17:20:36 executing program 2: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0xc040563d, &(0x7f0000000040)) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) 17:20:36 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0xc040563d, &(0x7f0000000040)) 17:20:36 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpW0\x00'}) sysinfo(&(0x7f0000000000)=""/50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:20:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xefff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 17:20:36 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fallocate(r1, 0x0, 0x0, 0x2728) fallocate(r1, 0x1, 0x0, 0xfffb) 17:20:36 executing program 4: clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:20:36 executing program 3: sysinfo(0x0) 17:20:36 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xefff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) [ 858.822529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 858.828737][ C1] protocol 88fb is buggy, dev hsr_slave_1 17:20:36 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x2}) 17:20:36 executing program 3: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000001900d927e65de0875f188dfa1ce154dfeaa06ec4a86e8f32e00586f900000000000000006f0400000000", 0x2e}], 0x1}, 0x0) 17:20:36 executing program 4: poll(0x0, 0x0, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfe05, 0x0, 0x0, 0x800e00515) fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(r0, 0x0, 0xfffffd64, 0x0, 0x0, 0x800e00649) shutdown(r0, 0x0) 17:20:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x0, 'pids'}]}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff) 17:20:37 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 17:20:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xefff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 17:20:37 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x1) open$dir(&(0x7f0000001240)='./file0\x00', 0x0, 0x0) 17:20:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x1000003) 17:20:37 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000100)) 17:20:37 executing program 1: [ 860.203742][T13807] device bridge_slave_1 left promiscuous mode [ 860.210308][T13807] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.264094][T13807] device bridge_slave_0 left promiscuous mode [ 860.270567][T13807] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.993438][T13807] device hsr_slave_0 left promiscuous mode [ 861.054160][T13807] device hsr_slave_1 left promiscuous mode [ 861.109638][T13807] team0 (unregistering): Port device team_slave_1 removed [ 861.127444][T13807] team0 (unregistering): Port device team_slave_0 removed [ 861.146781][T13807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.174262][ T5496] IPVS: ftp: loaded support on port[0] = 21 [ 861.192031][T13807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.262888][T13807] bond0 (unregistering): Released all slaves [ 861.416525][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 861.455941][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.463309][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.471564][ T5496] device bridge_slave_0 entered promiscuous mode [ 861.480473][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.487713][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.496299][ T5496] device bridge_slave_1 entered promiscuous mode [ 861.568286][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.582173][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.618163][ T5496] team0: Port device team_slave_0 added [ 861.628976][ T5496] team0: Port device team_slave_1 added [ 861.697602][ T5496] device hsr_slave_0 entered promiscuous mode [ 861.743014][ T5496] device hsr_slave_1 entered promiscuous mode [ 861.792355][ T5496] debugfs: Directory 'hsr0' with parent '/' already present! [ 861.820836][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.828017][ T5496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.835771][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.842927][ T5496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.896032][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.917109][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.929104][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.938550][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.964190][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.986256][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 861.995043][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.002226][T14791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.010324][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 862.019084][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.026191][T14791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.050603][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 862.060446][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 862.074283][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 862.088664][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 862.104237][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 862.116375][ T5496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 862.148467][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 17:20:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:40 executing program 5: 17:20:40 executing program 2: 17:20:40 executing program 1: 17:20:40 executing program 3: 17:20:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000240)={0x56, 0x20}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xc1, 0x0, 0x1, 0x1f, 0x0, 0x80000001, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1000, 0xffffffffffff8000, 0x6, 0x8, 0x9, 0x6, 0x1c}, 0xffffffffffffffff, 0x8, r3, 0x9) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) getpeername(r0, 0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 17:20:40 executing program 3: 17:20:40 executing program 2: 17:20:40 executing program 5: 17:20:40 executing program 1: [ 862.711217][ T5513] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 862.721603][ T5513] CPU: 0 PID: 5513 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 862.729453][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.739546][ T5513] Call Trace: [ 862.742908][ T5513] dump_stack+0x191/0x1f0 [ 862.747302][ T5513] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 862.754226][ T5513] dump_header+0x1e7/0xd00 [ 862.758717][ T5513] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 862.764949][ T5513] ? ___ratelimit+0x542/0x720 [ 862.769684][ T5513] ? task_will_free_mem+0x2c9/0x810 [ 862.774954][ T5513] oom_kill_process+0x210/0x560 [ 862.779875][ T5513] out_of_memory+0x1796/0x1c70 [ 862.784702][ T5513] ? kmsan_internal_set_origin+0x6a/0xb0 [ 862.790429][ T5513] memory_max_write+0x90b/0xb60 [ 862.795376][ T5513] ? memory_max_show+0x1b0/0x1b0 [ 862.800383][ T5513] cgroup_file_write+0x41a/0x8e0 [ 862.805412][ T5513] ? cgroup_seqfile_stop+0x150/0x150 17:20:40 executing program 5: [ 862.810760][ T5513] kernfs_fop_write+0x55f/0x840 [ 862.815679][ T5513] ? kernfs_fop_read+0x9a0/0x9a0 [ 862.820663][ T5513] __vfs_write+0x1a9/0xcb0 [ 862.825170][ T5513] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 862.831302][ T5513] ? __sb_start_write+0x10b/0x230 [ 862.836384][ T5513] vfs_write+0x481/0x920 [ 862.840702][ T5513] ksys_write+0x265/0x430 [ 862.845110][ T5513] __se_sys_write+0x92/0xb0 [ 862.849674][ T5513] __x64_sys_write+0x4a/0x70 [ 862.854328][ T5513] do_syscall_64+0xb6/0x160 [ 862.858907][ T5513] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 862.864845][ T5513] RIP: 0033:0x459f39 [ 862.868789][ T5513] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 862.888590][ T5513] RSP: 002b:00007f38c6770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 862.897028][ T5513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 17:20:41 executing program 2: [ 862.905022][ T5513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 862.913013][ T5513] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 862.920998][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38c67716d4 [ 862.928998][ T5513] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 862.938371][ T5513] memory: usage 12280kB, limit 0kB, failcnt 757 [ 862.944716][ T5513] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 862.951584][ T5513] Memory cgroup stats for /syz0: [ 862.951918][ T5513] anon 155648 [ 862.951918][ T5513] file 10534912 [ 862.951918][ T5513] kernel_stack 196608 [ 862.951918][ T5513] slab 1282048 [ 862.951918][ T5513] sock 69632 [ 862.951918][ T5513] shmem 10534912 [ 862.951918][ T5513] file_mapped 0 [ 862.951918][ T5513] file_dirty 0 [ 862.951918][ T5513] file_writeback 0 [ 862.951918][ T5513] anon_thp 0 [ 862.951918][ T5513] inactive_anon 10543104 [ 862.951918][ T5513] active_anon 49152 [ 862.951918][ T5513] inactive_file 0 [ 862.951918][ T5513] active_file 0 [ 862.951918][ T5513] unevictable 0 [ 862.951918][ T5513] slab_reclaimable 135168 [ 862.951918][ T5513] slab_unreclaimable 1146880 [ 862.951918][ T5513] pgfault 42009 [ 862.951918][ T5513] pgmajfault 0 [ 862.951918][ T5513] workingset_refault 0 [ 862.951918][ T5513] workingset_activate 0 [ 862.951918][ T5513] workingset_nodereclaim 0 [ 862.951918][ T5513] pgrefill 0 [ 862.951918][ T5513] pgscan 0 [ 862.951918][ T5513] pgsteal 0 [ 862.951918][ T5513] pgactivate 0 [ 863.047548][ T5513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5496,uid=0 [ 863.063252][ T5513] Memory cgroup out of memory: Killed process 5496 (syz-executor.0) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 863.081013][ T5513] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 863.091282][ T5513] CPU: 0 PID: 5513 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 863.099107][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 863.109182][ T5513] Call Trace: [ 863.112506][ T5513] dump_stack+0x191/0x1f0 [ 863.116868][ T5513] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 863.122788][ T5513] dump_header+0x1e7/0xd00 [ 863.127235][ T5513] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 863.133413][ T5513] ? ___ratelimit+0x542/0x720 [ 863.138105][ T5513] ? task_will_free_mem+0x14c/0x810 [ 863.143359][ T5513] oom_kill_process+0x210/0x560 [ 863.148345][ T5513] out_of_memory+0x1796/0x1c70 [ 863.153307][ T5513] ? kmsan_internal_set_origin+0x6a/0xb0 [ 863.158993][ T5513] memory_max_write+0x90b/0xb60 [ 863.163906][ T5513] ? memory_max_show+0x1b0/0x1b0 [ 863.168866][ T5513] cgroup_file_write+0x41a/0x8e0 [ 863.173846][ T5513] ? cgroup_seqfile_stop+0x150/0x150 [ 863.179152][ T5513] kernfs_fop_write+0x55f/0x840 [ 863.184040][ T5513] ? kernfs_fop_read+0x9a0/0x9a0 [ 863.189018][ T5513] __vfs_write+0x1a9/0xcb0 [ 863.193491][ T5513] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 863.199598][ T5513] ? __sb_start_write+0x10b/0x230 [ 863.204670][ T5513] vfs_write+0x481/0x920 [ 863.208954][ T5513] ksys_write+0x265/0x430 [ 863.213410][ T5513] __se_sys_write+0x92/0xb0 [ 863.217943][ T5513] __x64_sys_write+0x4a/0x70 [ 863.222656][ T5513] do_syscall_64+0xb6/0x160 [ 863.227192][ T5513] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 863.233096][ T5513] RIP: 0033:0x459f39 [ 863.237036][ T5513] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 863.256656][ T5513] RSP: 002b:00007f38c6770c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 863.265087][ T5513] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 863.273084][ T5513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 863.281067][ T5513] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 863.289061][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f38c67716d4 [ 863.297048][ T5513] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 863.305160][ T5513] memory: usage 7360kB, limit 0kB, failcnt 757 [ 863.311385][ T5513] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 863.318363][ T5513] Memory cgroup stats for /syz0: [ 863.318685][ T5513] anon 155648 [ 863.318685][ T5513] file 5373952 [ 863.318685][ T5513] kernel_stack 196608 [ 863.318685][ T5513] slab 1282048 [ 863.318685][ T5513] sock 69632 [ 863.318685][ T5513] shmem 5373952 [ 863.318685][ T5513] file_mapped 0 [ 863.318685][ T5513] file_dirty 0 [ 863.318685][ T5513] file_writeback 0 [ 863.318685][ T5513] anon_thp 0 [ 863.318685][ T5513] inactive_anon 5541888 [ 863.318685][ T5513] active_anon 49152 [ 863.318685][ T5513] inactive_file 0 [ 863.318685][ T5513] active_file 0 [ 863.318685][ T5513] unevictable 0 [ 863.318685][ T5513] slab_reclaimable 135168 [ 863.318685][ T5513] slab_unreclaimable 1146880 [ 863.318685][ T5513] pgfault 42009 [ 863.318685][ T5513] pgmajfault 0 [ 863.318685][ T5513] workingset_refault 0 [ 863.318685][ T5513] workingset_activate 0 [ 863.318685][ T5513] workingset_nodereclaim 0 [ 863.318685][ T5513] pgrefill 0 [ 863.318685][ T5513] pgscan 0 [ 863.318685][ T5513] pgsteal 0 [ 863.318685][ T5513] pgactivate 0 [ 863.413877][ T5513] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=5509,uid=0 [ 863.429455][ T5513] Memory cgroup out of memory: Killed process 5509 (syz-executor.0) total-vm:72716kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 863.457332][ T1829] oom_reaper: reaped process 5509 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 863.494764][ T1829] oom_reaper: reaped process 5496 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 17:20:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000240)={0x56, 0x20}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xc1, 0x0, 0x1, 0x1f, 0x0, 0x80000001, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1000, 0xffffffffffff8000, 0x6, 0x8, 0x9, 0x6, 0x1c}, 0xffffffffffffffff, 0x8, r3, 0x9) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) getpeername(r0, 0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 17:20:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/77, 0x4d}, {0x0}], 0x2}, 0x0) recvfrom$inet(r2, 0x0, 0x192fb1, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000000c0)=""/59, 0x3b}, {0x0}], 0x6}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r4, 0x0) r6 = dup(r3) recvmsg(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/33, 0x21}, {0x0}], 0x2}, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 17:20:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r0}, {r0, 0x104}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00c58) ppoll(&(0x7f0000000040)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 17:20:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)=""/207, 0xcf}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x8}, 0x8) recvfrom$inet(r2, 0x0, 0x27c9, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x0, 0xe113}, 0x10) pwritev(r0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfc85, 0x2, 0x0, 0x800e0068e) shutdown(r0, 0x0) 17:20:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/225, 0xe1}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/169, 0xa9}, {0x0}], 0x2}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000080)=""/128, 0x80}, {0x0}], 0x2) shutdown(r7, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:42 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x0, 0x0, @remote, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@echo_reply}}}}}, 0x0) 17:20:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000340)=[{&(0x7f0000000100)=""/83, 0x53}], 0x1}, 0x2) recvfrom$inet(r2, 0x0, 0xdeae, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/250, 0xfa}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/119, 0x77}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000240)={0x56, 0x20}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xc1, 0x0, 0x1, 0x1f, 0x0, 0x80000001, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1000, 0xffffffffffff8000, 0x6, 0x8, 0x9, 0x6, 0x1c}, 0xffffffffffffffff, 0x8, r3, 0x9) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) getpeername(r0, 0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 17:20:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x2, 0x0, 0x800e00515) shutdown(r1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, &(0x7f0000000040)) recvfrom$inet(r2, 0x0, 0xff06, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10062, 0x0, 0x0, 0x800e00585) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000240)={0x56, 0x20}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0xc1, 0x0, 0x1, 0x1f, 0x0, 0x80000001, 0x10000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1000, 0xffffffffffff8000, 0x6, 0x8, 0x9, 0x6, 0x1c}, 0xffffffffffffffff, 0x8, r3, 0x9) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) getpeername(r0, 0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 17:20:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev//.\x00', 0x0, 0x0) r1 = dup(r0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0) 17:20:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffcf9, &(0x7f0000000600)=[{0x0, 0x384}, {&(0x7f00000000c0)=""/200, 0x79f2}], 0x2}, 0x2) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/96, 0x60}], 0x1}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xff59, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) fcntl$getown(r1, 0x5) recvfrom$inet(r0, 0x0, 0xa9, 0x40042, 0x0, 0x800e0051e) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:20:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000840)=[{&(0x7f0000000080)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000002a80)=[{&(0x7f00000003c0)=""/227, 0xe3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/113, 0x71}, {0x0}], 0x2}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getegid() recvfrom$inet(r0, 0x0, 0x26d2, 0x0, 0x0, 0x800e00640) shutdown(r0, 0x0) 17:20:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/20, 0x14}], 0x20d}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/163, 0xa3}, {0x0}, {0x0}], 0x3}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) readv(r1, &(0x7f0000000780)=[{&(0x7f0000000080)=""/123, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 865.773688][T13808] device bridge_slave_1 left promiscuous mode [ 865.780216][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.814471][T13808] device bridge_slave_0 left promiscuous mode [ 865.820881][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.545267][T13808] device hsr_slave_0 left promiscuous mode [ 866.592341][T13808] device hsr_slave_1 left promiscuous mode [ 866.649306][T13808] team0 (unregistering): Port device team_slave_1 removed [ 866.667090][T13808] team0 (unregistering): Port device team_slave_0 removed [ 866.687822][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.719942][ T6316] IPVS: ftp: loaded support on port[0] = 21 [ 866.736452][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.821545][T13808] bond0 (unregistering): Released all slaves [ 866.978000][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 867.020369][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.027684][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.036196][ T6316] device bridge_slave_0 entered promiscuous mode [ 867.044664][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.051767][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.062150][ T6316] device bridge_slave_1 entered promiscuous mode [ 867.090056][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.146282][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.180146][ T6316] team0: Port device team_slave_0 added [ 867.189671][ T6316] team0: Port device team_slave_1 added [ 867.259206][ T6316] device hsr_slave_0 entered promiscuous mode [ 867.302804][ T6316] device hsr_slave_1 entered promiscuous mode [ 867.342241][ T6316] debugfs: Directory 'hsr0' with parent '/' already present! [ 867.370365][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.377648][ T6316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.385410][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.392615][ T6316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.484576][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.504545][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.513689][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.521786][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.539389][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.553703][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 867.562864][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.570016][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.585396][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.594822][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.602106][T13688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.628236][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 867.637999][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 867.653135][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 867.668216][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 867.684955][ T6316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.697453][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 867.707900][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 867.735839][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.913052][ T6321] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 867.923830][ T6321] CPU: 1 PID: 6321 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 867.931647][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.941717][ T6321] Call Trace: [ 867.945081][ T6321] dump_stack+0x191/0x1f0 [ 867.949458][ T6321] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 867.955435][ T6321] dump_header+0x1e7/0xd00 [ 867.959874][ T6321] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 867.966083][ T6321] ? ___ratelimit+0x542/0x720 [ 867.970791][ T6321] ? task_will_free_mem+0x14c/0x810 [ 867.976077][ T6321] oom_kill_process+0x210/0x560 [ 867.980952][ T6321] out_of_memory+0x1796/0x1c70 [ 867.985765][ T6321] ? kmsan_internal_set_origin+0x6a/0xb0 [ 867.991449][ T6321] memory_max_write+0x90b/0xb60 [ 867.996343][ T6321] ? memory_max_show+0x1b0/0x1b0 [ 868.001303][ T6321] cgroup_file_write+0x41a/0x8e0 [ 868.007225][ T6321] ? cgroup_seqfile_stop+0x150/0x150 [ 868.012548][ T6321] kernfs_fop_write+0x55f/0x840 [ 868.017441][ T6321] ? kernfs_fop_read+0x9a0/0x9a0 [ 868.022417][ T6321] __vfs_write+0x1a9/0xcb0 [ 868.026878][ T6321] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 868.032988][ T6321] ? __sb_start_write+0x10b/0x230 [ 868.038048][ T6321] vfs_write+0x481/0x920 [ 868.042340][ T6321] ksys_write+0x265/0x430 [ 868.046702][ T6321] __se_sys_write+0x92/0xb0 [ 868.051218][ T6321] __x64_sys_write+0x4a/0x70 [ 868.055827][ T6321] do_syscall_64+0xb6/0x160 [ 868.060365][ T6321] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 868.066260][ T6321] RIP: 0033:0x459f39 [ 868.070179][ T6321] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 868.089816][ T6321] RSP: 002b:00007fe25c205c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.098259][ T6321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 868.106246][ T6321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 868.114229][ T6321] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 868.122557][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe25c2066d4 [ 868.131945][ T6321] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 868.140121][ T6321] memory: usage 5852kB, limit 0kB, failcnt 769 [ 868.146377][ T6321] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 868.153339][ T6321] Memory cgroup stats for /syz0: [ 868.153645][ T6321] anon 20480 [ 868.153645][ T6321] file 3846144 [ 868.153645][ T6321] kernel_stack 196608 [ 868.153645][ T6321] slab 1282048 [ 868.153645][ T6321] sock 69632 [ 868.153645][ T6321] shmem 3846144 [ 868.153645][ T6321] file_mapped 0 [ 868.153645][ T6321] file_dirty 0 [ 868.153645][ T6321] file_writeback 0 [ 868.153645][ T6321] anon_thp 0 [ 868.153645][ T6321] inactive_anon 3784704 [ 868.153645][ T6321] active_anon 49152 [ 868.153645][ T6321] inactive_file 0 [ 868.153645][ T6321] active_file 0 [ 868.153645][ T6321] unevictable 0 [ 868.153645][ T6321] slab_reclaimable 135168 [ 868.153645][ T6321] slab_unreclaimable 1146880 [ 868.153645][ T6321] pgfault 42570 [ 868.153645][ T6321] pgmajfault 0 [ 868.153645][ T6321] workingset_refault 0 [ 868.153645][ T6321] workingset_activate 0 [ 868.153645][ T6321] workingset_nodereclaim 0 [ 868.153645][ T6321] pgrefill 0 [ 868.153645][ T6321] pgscan 0 [ 868.153645][ T6321] pgsteal 0 [ 868.153645][ T6321] pgactivate 0 [ 868.248713][ T6321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=6319,uid=0 [ 868.264307][ T6321] Memory cgroup out of memory: Killed process 6319 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 868.284596][ T1829] oom_reaper: reaped process 6319 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:20:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/128, 0x80}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/101, 0x65}], 0x1}, 0x40042) recvfrom$inet(r2, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xfefc, 0x2, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:20:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/24, 0x18}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, &(0x7f0000000240)=""/239, 0xef, 0x0, 0x0, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=""/35, 0x23}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x4000000000000005, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x108, &(0x7f0000000100)={0x80000000001c00}, &(0x7f0000000040)=0x1e0) 17:20:46 executing program 3: poll(0x0, 0x0, 0x88000000000042) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e008a5) poll(&(0x7f0000000080), 0x200000000000002f, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd7eb7, 0x0, 0x0, 0x800e007fe) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001580)=""/171, 0xab}, {0x0}, {0x0}], 0x3}, 0x2) shutdown(r1, 0x0) 17:20:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/56, 0x38}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x4c8eebd, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) connect(0xffffffffffffffff, &(0x7f00000001c0)=@un=@abs={0x8}, 0x8) recvfrom$inet(r1, 0x0, 0xd172, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) [ 868.323642][ T6316] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 868.333717][ T6316] CPU: 1 PID: 6316 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 868.341564][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 868.351664][ T6316] Call Trace: [ 868.355018][ T6316] dump_stack+0x191/0x1f0 [ 868.359422][ T6316] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 868.365382][ T6316] dump_header+0x1e7/0xd00 [ 868.369868][ T6316] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 868.376099][ T6316] ? ___ratelimit+0x542/0x720 [ 868.380834][ T6316] ? task_will_free_mem+0x2c9/0x810 [ 868.386108][ T6316] oom_kill_process+0x210/0x560 [ 868.391033][ T6316] out_of_memory+0x1796/0x1c70 [ 868.395861][ T6316] ? kmsan_internal_set_origin+0x6a/0xb0 [ 868.401586][ T6316] try_charge+0x2889/0x3d70 [ 868.406163][ T6316] ? __module_address+0x68/0x5e0 [ 868.411318][ T6316] mem_cgroup_try_charge+0xa29/0xe40 [ 868.416699][ T6316] mem_cgroup_try_charge_delay+0x7e/0x140 [ 868.422580][ T6316] wp_page_copy+0x776/0x26d0 [ 868.427241][ T6316] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 868.433211][ T6316] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 868.439437][ T6316] ? kmsan_internal_set_origin+0x6a/0xb0 [ 868.445149][ T6316] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 868.451197][ T6316] do_wp_page+0x1e8c/0x37f0 [ 868.455774][ T6316] ? kmsan_internal_set_origin+0x6a/0xb0 [ 868.461504][ T6316] handle_mm_fault+0x46e3/0x9f70 [ 868.467530][ T6316] do_user_addr_fault+0x905/0x1510 [ 868.472749][ T6316] __do_page_fault+0x1a2/0x410 [ 868.477599][ T6316] do_page_fault+0xbb/0x500 [ 868.482185][ T6316] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 868.487632][ T6316] page_fault+0x4e/0x60 [ 868.492793][ T6316] RIP: 0033:0x4329fe [ 868.496753][ T6316] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 868.516461][ T6316] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 17:20:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvfrom(r1, &(0x7f00000000c0)=""/238, 0xee, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r4, 0xffff, 0x1006, &(0x7f0000000000)={0x5}, 0x10) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x8, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) shutdown(r4, 0x0) [ 868.522620][ T6316] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 868.530645][ T6316] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 868.538679][ T6316] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001284940 [ 868.546703][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 868.554729][ T6316] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 868.562911][ T6316] memory: usage 5444kB, limit 0kB, failcnt 784 [ 868.569161][ T6316] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 868.576136][ T6316] Memory cgroup stats for /syz0: [ 868.576484][ T6316] anon 20480 [ 868.576484][ T6316] file 3846144 [ 868.576484][ T6316] kernel_stack 0 [ 868.576484][ T6316] slab 1282048 [ 868.576484][ T6316] sock 69632 [ 868.576484][ T6316] shmem 3846144 [ 868.576484][ T6316] file_mapped 0 [ 868.576484][ T6316] file_dirty 0 [ 868.576484][ T6316] file_writeback 0 [ 868.576484][ T6316] anon_thp 0 [ 868.576484][ T6316] inactive_anon 3919872 [ 868.576484][ T6316] active_anon 49152 [ 868.576484][ T6316] inactive_file 0 [ 868.576484][ T6316] active_file 0 [ 868.576484][ T6316] unevictable 0 [ 868.576484][ T6316] slab_reclaimable 135168 [ 868.576484][ T6316] slab_unreclaimable 1146880 [ 868.576484][ T6316] pgfault 42603 [ 868.576484][ T6316] pgmajfault 0 [ 868.576484][ T6316] workingset_refault 0 [ 868.576484][ T6316] workingset_activate 0 [ 868.576484][ T6316] workingset_nodereclaim 0 [ 868.576484][ T6316] pgrefill 0 [ 868.576484][ T6316] pgscan 0 [ 868.576484][ T6316] pgsteal 0 [ 868.576484][ T6316] pgactivate 0 [ 868.671126][ T6316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=6316,uid=0 [ 868.686773][ T6316] Memory cgroup out of memory: Killed process 6316 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 868.705752][ T1829] oom_reaper: reaped process 6316 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/252, 0xfc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) fcntl$setown(r1, 0x6, 0x0) recvfrom$inet(r2, 0x0, 0xb5962e0fc0aac99, 0x0, 0x0, 0x800e0050f) shutdown(r2, 0x0) 17:20:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/56, 0x38}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000080)=""/109, 0x6d}, {0x0}, {0x0}, {0x0}], 0x4) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) recvmsg(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000002c0)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:20:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/223, 0xdf}, {0x0}, {0x0}, {0x0}], 0x100000000000000c}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) sendto$unix(r1, 0x0, 0xfffffffffffffd06, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64, @ANYPTR64, @ANYRES64, @ANYBLOB="1460c38a7a78d3a01fd284e2ae07061cc3a004bd6bbc78af1b9216e0289012038714fa4bf65c4a965d99fa1ba7cd4530304a5b07d84856c76b0540927e7d664812e5c78bd622989b01b382f8b1183dbb5f517f6659eb89cf798d61aac71f4cae"]], @ANYBLOB="3f7c623eeb3fc6af899affe10d48fdb2c7596182c50b8b3a53c80c960f16bf13792e5944ec098e363ffb98c5ccf2ae03bfacfa1cf7949e84d3c92015d9d50223a3c6159e15bb36489c45b31aa83ad094a3b6930b56d89eda2633be16fa790fffd01de7f76ecbe8a3d82ab907f6c2e6cf37f10257e669a785440b6edf4e6be84f7a54f35d67b1b684da8ac5baa2e9f8e601e858be871df588365fe3", @ANYPTR, @ANYRES16], 0x7) recvfrom$inet(r2, 0x0, 0x100000114, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:20:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/86, 0x56}, {0x0, 0xfffffffa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x100000000000000c) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getpeername$inet(r2, 0x0, &(0x7f0000000100)) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:20:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/129, 0x81}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r8, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/156, 0x9c}, {0x0}], 0x2) shutdown(r7, 0x0) shutdown(r4, 0x0) r9 = dup(r2) shutdown(r9, 0x0) 17:20:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/17, 0x11}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = dup2(r1, r0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe75, 0x1004007e, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040)={0x4}, 0x10) r1 = dup(r0) fcntl$getflags(r0, 0x0) recvfrom$inet(r1, 0x0, 0xfd31c799, 0x2, 0x0, 0x800e00621) shutdown(r1, 0x0) 17:20:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/165, 0xa5}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) r2 = dup(r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x400000000000003, 0x84) readv(r4, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/160, 0xa0}, {0x0}], 0x2) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/72, 0x48}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000900)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000200)=""/50, 0x32}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00606) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e003bd) 17:20:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000001c0)=""/42, 0x2a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1008d, 0x2, 0x0, 0x800e00527) shutdown(r1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x52, &(0x7f0000000200)={0x0, {{0x10, 0x2}}, {{0x10, 0x2}}}, 0x118) recvfrom$inet(r2, 0x0, 0xfffffdc4, 0x2, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x18, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800e00621) shutdown(r1, 0x0) 17:20:48 executing program 4: poll(0x0, 0x0, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = dup2(r1, r0) sendto$inet(r1, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7994d9f5e6c2ea0f, 0x2, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:20:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000080)=[{r0}, {}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e005f6) r2 = dup2(r1, r1) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/179, 0xb3}], 0x1}, 0x0) shutdown(r1, 0x0) 17:20:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/244, 0xf4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x2, 0x0, 0x800e00515) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2) shutdown(r0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) recvfrom$inet(r1, 0x0, 0xd172, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 17:20:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/60, 0x3c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x3, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/30, 0x1e}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r2, 0x0) 17:20:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/133, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1000000000000092, 0x0, 0xffff}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) read(r2, &(0x7f0000000000)=""/249, 0xf9) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 871.283928][ T6251] device bridge_slave_1 left promiscuous mode [ 871.290312][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.353802][ T6251] device bridge_slave_0 left promiscuous mode [ 871.360215][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.054048][ T6251] device hsr_slave_0 left promiscuous mode [ 872.092965][ T6251] device hsr_slave_1 left promiscuous mode [ 872.158284][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 872.175418][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 872.194454][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 872.199181][ T7736] IPVS: ftp: loaded support on port[0] = 21 [ 872.237553][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 872.310785][ T6251] bond0 (unregistering): Released all slaves [ 872.474166][ T7736] chnl_net:caif_netlink_parms(): no params data found [ 872.515142][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.522361][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.530336][ T7736] device bridge_slave_0 entered promiscuous mode [ 872.539024][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.546276][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.554942][ T7736] device bridge_slave_1 entered promiscuous mode [ 872.577069][ T7736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.589148][ T7736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.685648][ T7736] team0: Port device team_slave_0 added [ 872.695559][ T7736] team0: Port device team_slave_1 added [ 872.788869][ T7736] device hsr_slave_0 entered promiscuous mode [ 872.823501][ T7736] device hsr_slave_1 entered promiscuous mode [ 872.882599][ T7736] debugfs: Directory 'hsr0' with parent '/' already present! [ 872.910375][ T7736] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.917557][ T7736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.925273][ T7736] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.932513][ T7736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.012333][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.033854][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 873.043817][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.051765][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.069186][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.082632][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 873.091433][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.098647][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.113324][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.122712][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.130204][T13688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.169738][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 873.184132][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 873.194507][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 873.213533][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 873.222712][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 873.236465][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 873.263610][ T7736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.401637][ T7741] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 873.412927][ T7741] CPU: 0 PID: 7741 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 873.420729][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.430791][ T7741] Call Trace: [ 873.434119][ T7741] dump_stack+0x191/0x1f0 [ 873.438466][ T7741] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 873.444397][ T7741] dump_header+0x1e7/0xd00 [ 873.448858][ T7741] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 873.455047][ T7741] ? ___ratelimit+0x542/0x720 [ 873.459730][ T7741] ? task_will_free_mem+0x14c/0x810 [ 873.464940][ T7741] oom_kill_process+0x210/0x560 [ 873.469803][ T7741] out_of_memory+0x1796/0x1c70 [ 873.474572][ T7741] ? kmsan_internal_set_origin+0x6a/0xb0 [ 873.480257][ T7741] memory_max_write+0x90b/0xb60 [ 873.485171][ T7741] ? memory_max_show+0x1b0/0x1b0 [ 873.491079][ T7741] cgroup_file_write+0x41a/0x8e0 [ 873.496043][ T7741] ? cgroup_seqfile_stop+0x150/0x150 [ 873.501356][ T7741] kernfs_fop_write+0x55f/0x840 [ 873.506223][ T7741] ? kernfs_fop_read+0x9a0/0x9a0 [ 873.511166][ T7741] __vfs_write+0x1a9/0xcb0 [ 873.515641][ T7741] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 873.521728][ T7741] ? __sb_start_write+0x10b/0x230 [ 873.526753][ T7741] vfs_write+0x481/0x920 [ 873.531009][ T7741] ksys_write+0x265/0x430 [ 873.535350][ T7741] __se_sys_write+0x92/0xb0 [ 873.539856][ T7741] __x64_sys_write+0x4a/0x70 [ 873.544453][ T7741] do_syscall_64+0xb6/0x160 [ 873.548963][ T7741] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 873.554851][ T7741] RIP: 0033:0x459f39 [ 873.558759][ T7741] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 873.578364][ T7741] RSP: 002b:00007f29edd75c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.586800][ T7741] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 873.594806][ T7741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 873.602777][ T7741] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 873.610748][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29edd766d4 [ 873.618719][ T7741] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 873.626853][ T7741] memory: usage 4856kB, limit 0kB, failcnt 793 [ 873.633139][ T7741] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 873.640004][ T7741] Memory cgroup stats for /syz0: [ 873.640229][ T7741] anon 155648 [ 873.640229][ T7741] file 2850816 [ 873.640229][ T7741] kernel_stack 196608 [ 873.640229][ T7741] slab 1282048 [ 873.640229][ T7741] sock 69632 [ 873.640229][ T7741] shmem 2850816 [ 873.640229][ T7741] file_mapped 0 [ 873.640229][ T7741] file_dirty 0 [ 873.640229][ T7741] file_writeback 0 [ 873.640229][ T7741] anon_thp 0 [ 873.640229][ T7741] inactive_anon 2973696 [ 873.640229][ T7741] active_anon 184320 [ 873.640229][ T7741] inactive_file 0 [ 873.640229][ T7741] active_file 0 [ 873.640229][ T7741] unevictable 0 [ 873.640229][ T7741] slab_reclaimable 135168 [ 873.640229][ T7741] slab_unreclaimable 1146880 [ 873.640229][ T7741] pgfault 43164 [ 873.640229][ T7741] pgmajfault 0 [ 873.640229][ T7741] workingset_refault 0 [ 873.640229][ T7741] workingset_activate 0 [ 873.640229][ T7741] workingset_nodereclaim 0 [ 873.640229][ T7741] pgrefill 0 [ 873.640229][ T7741] pgscan 0 [ 873.640229][ T7741] pgsteal 0 [ 873.640229][ T7741] pgactivate 0 [ 873.735536][ T7741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=7739,uid=0 17:20:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}, {0x0}], 0x2) shutdown(r4, 0x0) r6 = dup(r1) shutdown(r6, 0x0) 17:20:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff7e, 0x0, 0x0, 0x800e00509) shutdown(r0, 0x0) r2 = dup(r1) getpeername$unix(r2, 0x0, &(0x7f00000000c0)) recvfrom$inet(r1, 0x0, 0x100000114, 0x2, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:20:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/170, 0xaa}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x78cf, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000040)=""/142, 0x8e}], 0x1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) read(r1, &(0x7f0000000000)=""/58, 0x3a) shutdown(r4, 0x0) r5 = dup(r1) shutdown(r5, 0x0) 17:20:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/86, 0x56}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) read(r4, &(0x7f0000000140)=""/36, 0x24) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000540)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:51 executing program 5: poll(&(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x200800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x58d, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r0, r1) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000), 0x10) recvfrom$inet(r1, 0x0, 0xa2, 0x0, 0x0, 0x800e004e1) shutdown(r1, 0x0) [ 873.751229][ T7741] Memory cgroup out of memory: Killed process 7739 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 873.775081][ T1829] oom_reaper: reaped process 7739 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 873.816227][ T7736] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 873.826365][ T7736] CPU: 1 PID: 7736 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 873.834228][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 873.844354][ T7736] Call Trace: [ 873.847725][ T7736] dump_stack+0x191/0x1f0 [ 873.852126][ T7736] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 873.858100][ T7736] dump_header+0x1e7/0xd00 [ 873.862626][ T7736] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 873.868874][ T7736] ? ___ratelimit+0x542/0x720 [ 873.873626][ T7736] ? task_will_free_mem+0x2c9/0x810 [ 873.878919][ T7736] oom_kill_process+0x210/0x560 [ 873.883862][ T7736] out_of_memory+0x1796/0x1c70 [ 873.888713][ T7736] ? kmsan_internal_set_origin+0x6a/0xb0 [ 873.894455][ T7736] try_charge+0x2889/0x3d70 [ 873.899060][ T7736] ? __module_address+0x68/0x5e0 [ 873.904143][ T7736] mem_cgroup_try_charge+0xa29/0xe40 [ 873.909550][ T7736] mem_cgroup_try_charge_delay+0x7e/0x140 [ 873.917292][ T7736] wp_page_copy+0x776/0x26d0 [ 873.921976][ T7736] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 873.927965][ T7736] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 873.934225][ T7736] ? kmsan_internal_set_origin+0x6a/0xb0 [ 873.939979][ T7736] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 873.946062][ T7736] do_wp_page+0x1e8c/0x37f0 [ 873.950655][ T7736] ? kmsan_internal_set_origin+0x6a/0xb0 [ 873.956416][ T7736] handle_mm_fault+0x46e3/0x9f70 [ 873.961808][ T7736] do_user_addr_fault+0x905/0x1510 [ 873.967048][ T7736] __do_page_fault+0x1a2/0x410 [ 873.971917][ T7736] do_page_fault+0xbb/0x500 [ 873.976518][ T7736] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 873.981977][ T7736] page_fault+0x4e/0x60 [ 873.986197][ T7736] RIP: 0033:0x4329fe [ 873.990162][ T7736] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 874.009836][ T7736] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 874.015987][ T7736] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 874.024044][ T7736] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 874.032100][ T7736] RBP: 0000000000008030 R08: 0000000000000001 R09: 00000000029d0940 [ 874.040146][ T7736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 874.048194][ T7736] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 874.059468][ T7736] memory: usage 4432kB, limit 0kB, failcnt 802 [ 874.066329][ T7736] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 874.073389][ T7736] Memory cgroup stats for /syz0: [ 874.073688][ T7736] anon 155648 [ 874.073688][ T7736] file 2850816 [ 874.073688][ T7736] kernel_stack 0 [ 874.073688][ T7736] slab 1282048 [ 874.073688][ T7736] sock 69632 [ 874.073688][ T7736] shmem 2850816 [ 874.073688][ T7736] file_mapped 0 [ 874.073688][ T7736] file_dirty 0 [ 874.073688][ T7736] file_writeback 0 [ 874.073688][ T7736] anon_thp 0 [ 874.073688][ T7736] inactive_anon 2973696 [ 874.073688][ T7736] active_anon 184320 [ 874.073688][ T7736] inactive_file 0 [ 874.073688][ T7736] active_file 0 [ 874.073688][ T7736] unevictable 0 [ 874.073688][ T7736] slab_reclaimable 135168 [ 874.073688][ T7736] slab_unreclaimable 1146880 [ 874.073688][ T7736] pgfault 43164 [ 874.073688][ T7736] pgmajfault 0 [ 874.073688][ T7736] workingset_refault 0 [ 874.073688][ T7736] workingset_activate 0 [ 874.073688][ T7736] workingset_nodereclaim 0 [ 874.073688][ T7736] pgrefill 0 [ 874.073688][ T7736] pgscan 0 [ 874.073688][ T7736] pgsteal 0 [ 874.073688][ T7736] pgactivate 0 17:20:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)=""/228, 0xe4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket(0x11, 0x3, 0x0) readv(r6, &(0x7f0000001800)=[{&(0x7f0000000100)=""/66, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:52 executing program 4: poll(&(0x7f0000000140)=[{}, {}, {}, {}], 0x4, 0x400080000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xffffff2b, 0x0, 0x0, 0x800e00519) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/118, 0x76}], 0x1) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/190, 0xbe}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r3, 0x0) shutdown(r0, 0x0) [ 874.168527][ T7736] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=7736,uid=0 [ 874.184149][ T7736] Memory cgroup out of memory: Killed process 7736 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 874.203367][ T1829] oom_reaper: reaped process 7736 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:52 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) poll(0x0, 0x0, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x317, 0x0, 0x0, 0x800e004de) r1 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/65, 0x41}, {0x0}], 0x2) recvfrom$inet(r0, 0x0, 0xfffffe80, 0x0, 0x0, 0x800e004e1) shutdown(r0, 0x0) 17:20:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/171, 0xab}, {0x0}, {0x0}, {0x0}, {0x0, 0x257}], 0x100000000000002b) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e0051a) shutdown(r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x50, &(0x7f0000000040)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r2, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:20:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/223, 0xdf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x100000000000020f}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/79, 0x4f}, {0x0}, {0x0}], 0x3) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r8, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r7, 0x0) poll(0x0, 0x0, 0xff) shutdown(r8, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}, {0x0}, {0x0}, {0x0}], 0x4}, 0x40002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 17:20:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000180)=""/34, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mlockall(0x0) recvfrom$inet(r2, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) shutdown(r2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 17:20:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/53, 0x35}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e007ee) shutdown(r0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) 17:20:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)=""/132, 0x84}, {0x0}, {0x0}], 0x4}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/161, 0xa1}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000280)=""/51, 0x33}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r4, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:20:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) sendmsg(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x518db98b, 0x0, 0x0, 0x800e007a6) shutdown(r1, 0x0) 17:20:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/238, 0xee}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) recvfrom$inet(r2, 0x0, 0xa5b0f89367e24cb, 0x2, 0x0, 0x800e0050f) shutdown(r2, 0x0) 17:20:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x9457, 0x0, 0x0, 0x800e00529) shutdown(r1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x46, &(0x7f0000000000)={@remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, 0xc) recvfrom$inet(r2, 0x0, 0x46e4, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) 17:20:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=""/115, 0x73}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa1720495f3f7edd, 0x0, 0x0, 0x800e0051e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x7c06, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) 17:20:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, 0x0, &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/37, 0x25}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000200)=""/85, 0x55}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/4, 0x4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) semget(0x1, 0x0, 0x100000607) recvfrom$inet(r0, 0x0, 0xb5962e0fc0aae43, 0x0, 0x0, 0x800e0068e) shutdown(r0, 0x0) 17:20:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/208, 0xd0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000002c0)=""/170, 0xaa}], 0x1}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000480)=""/110, 0x6e}, {0x0}], 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) setsockopt$sock_timeval(r1, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:20:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/32, 0x20}, {0x0}, {0x0, 0x1}, {0x0}], 0x4}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x5496, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) shutdown(0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x4e) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) poll(0x0, 0x0, 0x1ff) shutdown(r1, 0x0) 17:20:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/213, 0xfc35}, {0x0}], 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/41, 0x29}, {0x0}, {0x0}], 0x3}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000240)=""/115, 0x73}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/105, 0x69}, {0x0}], 0x2) shutdown(r7, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001b00)=""/23}, {&(0x7f0000000940)=""/4096}, {&(0x7f00000002c0)=""/233}, {&(0x7f0000000480)=""/46}, {&(0x7f00000004c0)=""/198, 0x14c}, {&(0x7f00000005c0)=""/78}, {&(0x7f0000000640), 0xf2}, {&(0x7f0000000700)=""/108}, {&(0x7f00000007c0)=""/207}, {&(0x7f0000001940)=""/200}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/114, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r2, 0x0) 17:20:54 executing program 1: poll(0x0, 0x0, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x4e) shutdown(r0, 0x0) 17:20:54 executing program 3: poll(0x0, 0x0, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x100000078, 0x0, 0x0, 0x800e00515) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/115, 0x73}, {0x0}, {0x0}], 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:20:54 executing program 4: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 17:20:54 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xff8c, 0x0, 0x0, 0x800e004d0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 877.013774][T13808] device bridge_slave_1 left promiscuous mode [ 877.020307][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.074196][T13808] device bridge_slave_0 left promiscuous mode [ 877.080764][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.066446][ T9489] IPVS: ftp: loaded support on port[0] = 21 [ 878.112866][T13808] device hsr_slave_0 left promiscuous mode [ 878.162556][T13808] device hsr_slave_1 left promiscuous mode [ 878.241193][T13808] team0 (unregistering): Port device team_slave_1 removed [ 878.253516][T13808] team0 (unregistering): Port device team_slave_0 removed [ 878.266583][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.307582][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.381616][T13808] bond0 (unregistering): Released all slaves [ 878.557817][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 878.595480][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.602795][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.611025][ T9489] device bridge_slave_0 entered promiscuous mode [ 878.674317][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.681574][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.690823][ T9489] device bridge_slave_1 entered promiscuous mode [ 878.724300][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.738027][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.773084][ T9489] team0: Port device team_slave_0 added [ 878.782715][ T9489] team0: Port device team_slave_1 added [ 878.865834][ T9489] device hsr_slave_0 entered promiscuous mode [ 878.912809][ T9489] device hsr_slave_1 entered promiscuous mode [ 878.952190][ T9489] debugfs: Directory 'hsr0' with parent '/' already present! [ 878.982840][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.990031][ T9489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.997912][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.005277][ T9489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.094461][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.116460][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 879.126001][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.134913][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.151807][ T9489] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.166755][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 879.175785][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.183071][T13688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 879.204052][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 879.213625][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.220882][T13688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.244536][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 879.265066][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.274287][T13688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.288887][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.305423][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.319735][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.349011][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.485948][ T9494] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 879.496387][ T9494] CPU: 0 PID: 9494 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 879.504529][ T9494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.514685][ T9494] Call Trace: [ 879.518054][ T9494] dump_stack+0x191/0x1f0 [ 879.522438][ T9494] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 879.528387][ T9494] dump_header+0x1e7/0xd00 [ 879.532872][ T9494] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 879.539078][ T9494] ? ___ratelimit+0x542/0x720 [ 879.543900][ T9494] ? task_will_free_mem+0x14c/0x810 [ 879.549184][ T9494] oom_kill_process+0x210/0x560 [ 879.554104][ T9494] out_of_memory+0x1796/0x1c70 [ 879.558899][ T9494] ? kmsan_internal_set_origin+0x6a/0xb0 [ 879.564587][ T9494] memory_max_write+0x90b/0xb60 [ 879.569509][ T9494] ? memory_max_show+0x1b0/0x1b0 [ 879.574512][ T9494] cgroup_file_write+0x41a/0x8e0 [ 879.579517][ T9494] ? cgroup_seqfile_stop+0x150/0x150 [ 879.584841][ T9494] kernfs_fop_write+0x55f/0x840 [ 879.589722][ T9494] ? kernfs_fop_read+0x9a0/0x9a0 [ 879.594676][ T9494] __vfs_write+0x1a9/0xcb0 [ 879.599129][ T9494] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 879.605241][ T9494] ? __sb_start_write+0x10b/0x230 [ 879.610421][ T9494] vfs_write+0x481/0x920 [ 879.614722][ T9494] ksys_write+0x265/0x430 [ 879.619166][ T9494] __se_sys_write+0x92/0xb0 [ 879.623740][ T9494] __x64_sys_write+0x4a/0x70 [ 879.628397][ T9494] do_syscall_64+0xb6/0x160 [ 879.632941][ T9494] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 879.638860][ T9494] RIP: 0033:0x459f39 [ 879.642772][ T9494] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 879.662415][ T9494] RSP: 002b:00007fa65a5edc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.670881][ T9494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 879.678871][ T9494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 879.686889][ T9494] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 879.694895][ T9494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa65a5ee6d4 [ 879.702900][ T9494] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 879.711090][ T9494] memory: usage 5324kB, limit 0kB, failcnt 811 [ 879.717386][ T9494] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 879.724350][ T9494] Memory cgroup stats for /syz0: [ 879.724543][ T9494] anon 20480 [ 879.724543][ T9494] file 3358720 [ 879.724543][ T9494] kernel_stack 196608 [ 879.724543][ T9494] slab 1282048 [ 879.724543][ T9494] sock 69632 [ 879.724543][ T9494] shmem 3358720 [ 879.724543][ T9494] file_mapped 0 [ 879.724543][ T9494] file_dirty 0 [ 879.724543][ T9494] file_writeback 0 [ 879.724543][ T9494] anon_thp 0 [ 879.724543][ T9494] inactive_anon 3379200 [ 879.724543][ T9494] active_anon 49152 [ 879.724543][ T9494] inactive_file 0 [ 879.724543][ T9494] active_file 0 [ 879.724543][ T9494] unevictable 0 [ 879.724543][ T9494] slab_reclaimable 135168 [ 879.724543][ T9494] slab_unreclaimable 1146880 [ 879.724543][ T9494] pgfault 43725 [ 879.724543][ T9494] pgmajfault 0 [ 879.724543][ T9494] workingset_refault 0 [ 879.724543][ T9494] workingset_activate 0 [ 879.724543][ T9494] workingset_nodereclaim 0 [ 879.724543][ T9494] pgrefill 0 [ 879.724543][ T9494] pgscan 0 [ 879.724543][ T9494] pgsteal 0 [ 879.724543][ T9494] pgactivate 0 [ 879.821516][ T9494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9492,uid=0 17:20:57 executing program 4: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/231, 0xe7}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/11, 0xb}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r1, 0x0) 17:20:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b9f, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/116, 0x74}, {0x0}], 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f0000002e00)=[{&(0x7f0000002b00)=""/143, 0x8f}], 0x1) shutdown(r3, 0x0) r5 = dup(r1) shutdown(r5, 0x0) 17:20:57 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0), &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:57 executing program 5: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) shutdown(r0, 0x0) poll(&(0x7f00000000c0)=[{}, {}, {r0}], 0x3, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xa4d, 0x0, 0x0, 0x800e003ce) shutdown(r1, 0x0) 17:20:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001740)=[{&(0x7f0000000100)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) ppoll(&(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = dup(r2) shutdown(r6, 0x0) 17:20:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x182b837acecab67d, 0x0, 0x0, 0x800e006ce) shutdown(r0, 0x0) [ 879.838032][ T9494] Memory cgroup out of memory: Killed process 9492 (syz-executor.0) total-vm:72720kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 879.861402][ T1829] oom_reaper: reaped process 9492 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 879.934556][ T9489] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 879.945962][ T9489] CPU: 0 PID: 9489 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 879.953844][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.963962][ T9489] Call Trace: [ 879.967353][ T9489] dump_stack+0x191/0x1f0 [ 879.971773][ T9489] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 879.977779][ T9489] dump_header+0x1e7/0xd00 [ 879.982302][ T9489] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 879.988551][ T9489] ? ___ratelimit+0x542/0x720 [ 879.993312][ T9489] ? task_will_free_mem+0x2c9/0x810 [ 879.998729][ T9489] oom_kill_process+0x210/0x560 [ 880.003686][ T9489] out_of_memory+0x1796/0x1c70 [ 880.008555][ T9489] ? kmsan_internal_set_origin+0x6a/0xb0 [ 880.014333][ T9489] try_charge+0x2889/0x3d70 [ 880.018939][ T9489] ? __module_address+0x68/0x5e0 [ 880.024021][ T9489] mem_cgroup_try_charge+0xa29/0xe40 [ 880.029424][ T9489] mem_cgroup_try_charge_delay+0x7e/0x140 [ 880.035245][ T9489] wp_page_copy+0x776/0x26d0 [ 880.039921][ T9489] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 880.045933][ T9489] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 880.052197][ T9489] ? kmsan_internal_set_origin+0x6a/0xb0 [ 880.057945][ T9489] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 880.064022][ T9489] do_wp_page+0x1e8c/0x37f0 [ 880.068617][ T9489] ? kmsan_internal_set_origin+0x6a/0xb0 [ 880.074448][ T9489] handle_mm_fault+0x46e3/0x9f70 [ 880.079520][ T9489] do_user_addr_fault+0x905/0x1510 [ 880.084754][ T9489] __do_page_fault+0x1a2/0x410 [ 880.089620][ T9489] do_page_fault+0xbb/0x500 [ 880.096923][ T9489] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 880.102673][ T9489] page_fault+0x4e/0x60 [ 880.106902][ T9489] RIP: 0033:0x4329fe [ 880.110942][ T9489] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 880.130930][ T9489] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 880.137074][ T9489] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 880.145116][ T9489] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 880.153242][ T9489] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000002a38940 [ 880.161283][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 880.169351][ T9489] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 880.179109][ T9489] memory: usage 4896kB, limit 0kB, failcnt 826 [ 880.185438][ T9489] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 880.192410][ T9489] Memory cgroup stats for /syz0: [ 880.192730][ T9489] anon 20480 [ 880.192730][ T9489] file 3358720 [ 880.192730][ T9489] kernel_stack 0 [ 880.192730][ T9489] slab 1282048 [ 880.192730][ T9489] sock 69632 [ 880.192730][ T9489] shmem 3358720 [ 880.192730][ T9489] file_mapped 0 [ 880.192730][ T9489] file_dirty 0 [ 880.192730][ T9489] file_writeback 0 [ 880.192730][ T9489] anon_thp 0 [ 880.192730][ T9489] inactive_anon 3514368 17:20:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/19, 0x13}, {0x0}, {0x0}], 0x3}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000001c40)=[{&(0x7f0000000000)=""/207, 0xcf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x2000000000005, 0x84) readv(r5, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/5, 0x5}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r1, 0x0) [ 880.192730][ T9489] active_anon 49152 [ 880.192730][ T9489] inactive_file 0 [ 880.192730][ T9489] active_file 0 [ 880.192730][ T9489] unevictable 0 [ 880.192730][ T9489] slab_reclaimable 135168 [ 880.192730][ T9489] slab_unreclaimable 1146880 [ 880.192730][ T9489] pgfault 43758 [ 880.192730][ T9489] pgmajfault 0 [ 880.192730][ T9489] workingset_refault 0 [ 880.192730][ T9489] workingset_activate 0 [ 880.192730][ T9489] workingset_nodereclaim 0 [ 880.192730][ T9489] pgrefill 0 [ 880.192730][ T9489] pgscan 0 [ 880.192730][ T9489] pgsteal 0 17:20:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/198, 0xc6}, {0x0}], 0x2}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/133, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 880.192730][ T9489] pgactivate 0 [ 880.288211][ T9489] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9489,uid=0 [ 880.303894][ T9489] Memory cgroup out of memory: Killed process 9489 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 17:20:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002640)=[{&(0x7f0000000440)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffdbe, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) write(r2, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0xff1d, 0x0, 0x0, 0x800e0051e) shutdown(r2, 0x0) [ 880.339979][ T1829] oom_reaper: reaped process 9489 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:20:58 executing program 2: accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) poll(&(0x7f0000000000), 0xe, 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) poll(0x0, 0x0, 0xff) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:20:58 executing program 1: r0 = semget$private(0x0, 0x9, 0x0) semop(r0, &(0x7f0000000480)=[{0x0, 0x1}], 0x1) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}], 0x1) 17:20:58 executing program 4: poll(0x0, 0x0, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/128, 0x80}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000024c0)=""/8, 0x8}], 0x2}, 0x0) r7 = dup(r6) r8 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r8, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r7, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/1, 0x1}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r8, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000200)=""/175, 0xaf}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) socket$inet6_udp(0x1c, 0x2, 0x0) shutdown(r3, 0x0) socket$inet6_sctp(0x1c, 0x3, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0x58d, 0x0, 0x0, 0x800e004e5) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x91, 0x0, 0x0, 0x800e004ed) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:20:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0), &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/84, 0x54}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xa1720495f3f7f40, 0x0, 0x0, 0x800e00516) shutdown(r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) recvfrom$inet(r2, 0x0, 0xfefc, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:20:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/250, 0xfa}, {0x0}], 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/119, 0x77}], 0x1}, 0x0) recvfrom$inet(r5, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r4, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) r6 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r6, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:20:59 executing program 4: poll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x5f6, 0x0, 0x0, 0x800e004e5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r1, 0x0, 0xd, &(0x7f0000000100)={@local={0xac, 0x14, 0x0}, @loopback}, 0x8) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) shutdown(r0, 0x0) shutdown(r1, 0x0) 17:20:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0), &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:20:59 executing program 3: poll(&(0x7f0000000100)=[{}, {}], 0x2, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xcf1c, 0x0, 0x0, 0x800e00551) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000000)={0x0, 0x2dc, &(0x7f0000001f00)=[{&(0x7f00000018c0)=""/152, 0x98}], 0x1000000000000042}, 0x0) shutdown(r3, 0x0) shutdown(r0, 0x0) 17:20:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xa4d, 0x2002, 0x0, 0x800e003d9) shutdown(r0, 0x0) 17:20:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000040)=[{r0}, {}], 0x2, 0x800000000004b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8c2, 0x0, 0x0, 0x800e004e5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='e0\a\x00\x00\x00\x00\x00\x00\x00'], 0xa) recvfrom$inet(r2, 0x0, 0x55c, 0x2, 0x0, 0x800e004e1) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:20:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/42}], 0x100000000000003a}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) fcntl$dupfd(r1, 0x0, r2) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 17:20:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x3}, 0x10) dup(r0) recvfrom$inet(r0, 0x0, 0x28, 0x42, 0x0, 0x800e005b7) shutdown(r0, 0x0) 17:20:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000002a40)=[{&(0x7f0000000080)=""/154, 0x9a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000140)=""/113, 0x71}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r3, 0x0) 17:21:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xff0b, 0x80002, 0x0, 0x800e003e1) shutdown(r0, 0x0) 17:21:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/98, 0x62}], 0x1}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) recvmsg(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 17:21:00 executing program 1: poll(&(0x7f00000000c0)=[{}], 0x1, 0x42) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, &(0x7f0000000100)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:21:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0xfffffffffffffffd}, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/123, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1016c, 0x0, 0x0, 0x800e00818) shutdown(r0, 0x0) poll(&(0x7f00000000c0)=[{}, {r0}], 0x2, 0x200) shutdown(r1, 0x0) 17:21:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x6}, 0x10) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040), 0x4) recvfrom$inet(r0, 0x0, 0x4a9, 0x2, 0x0, 0x800e00535) shutdown(r0, 0x0) [ 882.913679][T13808] device bridge_slave_1 left promiscuous mode [ 882.920310][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.963623][T13808] device bridge_slave_0 left promiscuous mode [ 882.969994][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.702807][T13808] device hsr_slave_0 left promiscuous mode [ 883.742494][T13808] device hsr_slave_1 left promiscuous mode [ 883.808517][T13808] team0 (unregistering): Port device team_slave_1 removed [ 883.825520][T13808] team0 (unregistering): Port device team_slave_0 removed [ 883.844092][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.908007][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.917579][T10918] IPVS: ftp: loaded support on port[0] = 21 [ 883.972100][T13808] bond0 (unregistering): Released all slaves [ 884.138474][T10918] chnl_net:caif_netlink_parms(): no params data found [ 884.180349][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.187517][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.195909][T10918] device bridge_slave_0 entered promiscuous mode [ 884.204857][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.212207][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.220392][T10918] device bridge_slave_1 entered promiscuous mode [ 884.286456][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.301440][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.334020][T10918] team0: Port device team_slave_0 added [ 884.343485][T10918] team0: Port device team_slave_1 added [ 884.426201][T10918] device hsr_slave_0 entered promiscuous mode [ 884.472505][T10918] device hsr_slave_1 entered promiscuous mode [ 884.512109][T10918] debugfs: Directory 'hsr0' with parent '/' already present! [ 884.540495][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.547715][T10918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.555461][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.562715][T10918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.647578][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.670177][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 884.680288][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.688801][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.708233][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.721281][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 884.730310][T30475] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.737498][T30475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.751394][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 884.760907][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.768177][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.793409][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 884.803349][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 884.821251][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 884.841933][T10918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 884.853464][T10918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 884.867833][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 884.877079][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 884.887668][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 884.915307][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.066734][T10923] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 885.077055][T10923] CPU: 0 PID: 10923 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 885.085472][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.095539][T10923] Call Trace: [ 885.098906][T10923] dump_stack+0x191/0x1f0 [ 885.103256][T10923] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 885.109163][T10923] dump_header+0x1e7/0xd00 [ 885.113594][T10923] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 885.119795][T10923] ? ___ratelimit+0x542/0x720 [ 885.124506][T10923] ? task_will_free_mem+0x14c/0x810 [ 885.129731][T10923] oom_kill_process+0x210/0x560 [ 885.134638][T10923] out_of_memory+0x1796/0x1c70 [ 885.139448][T10923] ? kmsan_internal_set_origin+0x6a/0xb0 [ 885.145114][T10923] memory_max_write+0x90b/0xb60 [ 885.149998][T10923] ? memory_max_show+0x1b0/0x1b0 [ 885.154950][T10923] cgroup_file_write+0x41a/0x8e0 [ 885.159914][T10923] ? cgroup_seqfile_stop+0x150/0x150 [ 885.165216][T10923] kernfs_fop_write+0x55f/0x840 [ 885.170088][T10923] ? kernfs_fop_read+0x9a0/0x9a0 [ 885.175045][T10923] __vfs_write+0x1a9/0xcb0 [ 885.179489][T10923] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 885.185586][T10923] ? __sb_start_write+0x10b/0x230 [ 885.190623][T10923] vfs_write+0x481/0x920 [ 885.194921][T10923] ksys_write+0x265/0x430 [ 885.199272][T10923] __se_sys_write+0x92/0xb0 [ 885.203786][T10923] __x64_sys_write+0x4a/0x70 [ 885.208396][T10923] do_syscall_64+0xb6/0x160 [ 885.212959][T10923] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 885.218878][T10923] RIP: 0033:0x459f39 [ 885.222785][T10923] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.242426][T10923] RSP: 002b:00007f64b09cec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 885.250888][T10923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 885.258878][T10923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 885.266855][T10923] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 885.276672][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f64b09cf6d4 [ 885.284662][T10923] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 885.292864][T10923] memory: usage 5888kB, limit 0kB, failcnt 835 [ 885.299074][T10923] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 885.306055][T10923] Memory cgroup stats for /syz0: [ 885.306349][T10923] anon 155648 [ 885.306349][T10923] file 3858432 [ 885.306349][T10923] kernel_stack 196608 [ 885.306349][T10923] slab 1282048 [ 885.306349][T10923] sock 69632 [ 885.306349][T10923] shmem 3858432 [ 885.306349][T10923] file_mapped 0 [ 885.306349][T10923] file_dirty 0 [ 885.306349][T10923] file_writeback 0 [ 885.306349][T10923] anon_thp 0 [ 885.306349][T10923] inactive_anon 3919872 [ 885.306349][T10923] active_anon 49152 [ 885.306349][T10923] inactive_file 0 [ 885.306349][T10923] active_file 0 [ 885.306349][T10923] unevictable 0 [ 885.306349][T10923] slab_reclaimable 135168 [ 885.306349][T10923] slab_unreclaimable 1146880 [ 885.306349][T10923] pgfault 44319 [ 885.306349][T10923] pgmajfault 0 [ 885.306349][T10923] workingset_refault 0 [ 885.306349][T10923] workingset_activate 0 [ 885.306349][T10923] workingset_nodereclaim 0 [ 885.306349][T10923] pgrefill 0 [ 885.306349][T10923] pgscan 0 [ 885.306349][T10923] pgsteal 0 [ 885.306349][T10923] pgactivate 0 [ 885.402041][T10923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10921,uid=0 [ 885.417819][T10923] Memory cgroup out of memory: Killed process 10921 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 885.441555][ T1829] oom_reaper: reaped process 10921 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:21:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/208, 0xd0}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1788142, 0x6, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) getrusage(0xd26c915c322c0696, 0x0) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00551) shutdown(r2, 0x0) 17:21:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x100000000000000f}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff97, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/47, 0x2f}, {0x0}, {0x0}, {0x0}], 0x4) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/112, 0x70}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:21:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/135, 0x87}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/196, 0xc4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r1, 0x0) 17:21:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/22, 0x16}, {0x0}, {0x0}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0d56, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000100)=""/111, 0x6f}], 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r4, 0x0) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0, 0x264}], 0x363, 0x0, 0x239}, 0x0) shutdown(r5, 0x0) shutdown(r3, 0x0) 17:21:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {0x0, 0xfffffffffffffeff}, {0x0}], 0x3, 0x0) recvfrom$inet(r0, 0x0, 0xf0355ebe, 0x0, 0x0, 0x800e0077f) shutdown(r0, 0x0) [ 885.483299][T10918] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 885.493513][T10918] CPU: 0 PID: 10918 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 885.501457][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.511643][T10918] Call Trace: [ 885.515015][T10918] dump_stack+0x191/0x1f0 [ 885.519420][T10918] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 885.525394][T10918] dump_header+0x1e7/0xd00 [ 885.529888][T10918] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 885.536115][T10918] ? ___ratelimit+0x542/0x720 [ 885.540864][T10918] ? task_will_free_mem+0x2c9/0x810 [ 885.546242][T10918] oom_kill_process+0x210/0x560 [ 885.551182][T10918] out_of_memory+0x1796/0x1c70 [ 885.565012][T10918] ? kmsan_internal_set_origin+0x6a/0xb0 [ 885.570743][T10918] try_charge+0x2889/0x3d70 [ 885.575289][T10918] ? __module_address+0x68/0x5e0 [ 885.580324][T10918] mem_cgroup_try_charge+0xa29/0xe40 [ 885.585714][T10918] mem_cgroup_try_charge_delay+0x7e/0x140 [ 885.591511][T10918] wp_page_copy+0x776/0x26d0 [ 885.597578][T10918] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 885.608361][T10918] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 885.615579][T10918] ? kmsan_internal_set_origin+0x6a/0xb0 [ 885.621337][T10918] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 885.627418][T10918] do_wp_page+0x1e8c/0x37f0 [ 885.632011][T10918] ? kmsan_internal_set_origin+0x6a/0xb0 [ 885.637741][T10918] handle_mm_fault+0x46e3/0x9f70 [ 885.642803][T10918] do_user_addr_fault+0x905/0x1510 [ 885.648120][T10918] __do_page_fault+0x1a2/0x410 [ 885.653151][T10918] do_page_fault+0xbb/0x500 [ 885.657734][T10918] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 885.663177][T10918] page_fault+0x4e/0x60 [ 885.667382][T10918] RIP: 0033:0x4329fe 17:21:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000180)=""/35, 0x23}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfff7, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) r2 = dup(r1) socketpair(0x1c, 0x0, 0x7e0000000, 0x0) recvfrom$inet(r1, 0x0, 0xcffa, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) [ 885.671340][T10918] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 885.691003][T10918] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 885.697148][T10918] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 885.705184][T10918] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 885.713494][T10918] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001dbd940 [ 885.721537][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 885.729567][T10918] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 885.737898][T10918] memory: usage 5464kB, limit 0kB, failcnt 850 [ 885.744214][T10918] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 885.751784][T10918] Memory cgroup stats for /syz0: [ 885.752248][T10918] anon 0 [ 885.752248][T10918] file 3858432 [ 885.752248][T10918] kernel_stack 0 [ 885.752248][T10918] slab 1282048 [ 885.752248][T10918] sock 69632 [ 885.752248][T10918] shmem 3858432 [ 885.752248][T10918] file_mapped 0 [ 885.752248][T10918] file_dirty 0 [ 885.752248][T10918] file_writeback 0 [ 885.752248][T10918] anon_thp 0 [ 885.752248][T10918] inactive_anon 3919872 [ 885.752248][T10918] active_anon 49152 [ 885.752248][T10918] inactive_file 0 [ 885.752248][T10918] active_file 0 [ 885.752248][T10918] unevictable 0 [ 885.752248][T10918] slab_reclaimable 135168 [ 885.752248][T10918] slab_unreclaimable 1146880 [ 885.752248][T10918] pgfault 44319 [ 885.752248][T10918] pgmajfault 0 [ 885.752248][T10918] workingset_refault 0 [ 885.752248][T10918] workingset_activate 0 [ 885.752248][T10918] workingset_nodereclaim 0 [ 885.752248][T10918] pgrefill 0 [ 885.752248][T10918] pgscan 0 [ 885.752248][T10918] pgsteal 0 [ 885.752248][T10918] pgactivate 0 [ 885.847279][T10918] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10918,uid=0 [ 885.863258][T10918] Memory cgroup out of memory: Killed process 10918 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 885.893432][ T1829] oom_reaper: reaped process 10918 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/116, 0x74}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/76, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2769, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x14, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x2, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:21:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000001740)=""/58, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(0xffffffffffffffff, 0x0, 0x10101, 0x0, 0x0, 0x800e0051f) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r1, 0x0) 17:21:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/251, 0xfb}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/246, 0xf6}, {0x0}], 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/11, 0xb}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:04 executing program 1: poll(&(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x800000000004d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x0, 0x0, 0x800e004de) r1 = dup(r0) recvfrom$inet(r0, 0x0, 0xfffffeba, 0x2, 0x0, 0x0) shutdown(r1, 0x0) 17:21:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0039d) 17:21:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/152, 0x98}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000002c0)={0x40000000}, 0x10) r2 = dup(r0) getsockopt$inet6_buf(r2, 0x29, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x9da6205d, 0x80002, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:21:04 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:04 executing program 5: poll(&(0x7f00000000c0)=[{}, {}, {}], 0x3, 0x8000000000047) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1c7, 0x0, 0x0, 0x800e00515) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfffffe87, 0x2, 0x0, 0x800e00510) shutdown(r0, 0x0) 17:21:04 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x40}, {r0}], 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x80}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x235, 0x0, 0x0, 0x800e004e5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x91, 0x0, 0x0, 0x800e004e1) shutdown(r3, 0x0) 17:21:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1) shutdown(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000040), 0x2000000000000014, 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x150f, 0x0, 0x0, 0x800e00810) poll(&(0x7f0000000000)=[{r1, 0x5}, {r1}], 0x2, 0x81) shutdown(r2, 0x0) 17:21:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000025c0)=[{&(0x7f0000000140)=""/101, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r1, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x10201, 0x2, 0x0, 0x800e0051d) shutdown(r2, 0x0) 17:21:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/77, 0x4d}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000240)=""/142, 0x8e}], 0x1000000000000144) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/1, 0x1}, {0x0}], 0x2}, 0x0) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:21:05 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f00000000c0)=[{}, {}, {r0}], 0x3, 0x8000000000047) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1c7, 0x0, 0x0, 0x800e00515) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe87, 0x2, 0x0, 0x800e00510) shutdown(r1, 0x0) 17:21:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {0x0}, {0x0, 0x207}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x192fb1, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) recvfrom$inet(r2, 0x0, 0xba, 0x2, 0x0, 0x800e00545) shutdown(r1, 0x0) 17:21:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0xb9}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe21, 0x0, 0x0, 0x800e00526) shutdown(r0, 0x0) socketpair(0x10, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd012, 0x0, 0x0, 0x800e0051e) shutdown(r1, 0x0) 17:21:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/23, 0x17}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x10000}, 0x10) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) recvfrom$inet(r4, 0x0, 0x1cd, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 17:21:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/142, 0x8e}, {0x0}, {0x0}, {0x0, 0x207}], 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x192fb1, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0) recvfrom$inet(r2, 0x0, 0xba, 0x2, 0x0, 0x800e00545) shutdown(r1, 0x0) 17:21:05 executing program 1: poll(0x0, 0x6700, 0x0) [ 888.413680][ T658] device bridge_slave_1 left promiscuous mode [ 888.420436][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.474031][ T658] device bridge_slave_0 left promiscuous mode [ 888.480381][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.243529][ T658] device hsr_slave_0 left promiscuous mode [ 889.284309][ T658] device hsr_slave_1 left promiscuous mode [ 889.339733][ T658] team0 (unregistering): Port device team_slave_1 removed [ 889.358520][ T658] team0 (unregistering): Port device team_slave_0 removed [ 889.378693][ T658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.382484][T12035] IPVS: ftp: loaded support on port[0] = 21 [ 889.437177][ T658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.502314][ T658] bond0 (unregistering): Released all slaves [ 889.675465][T12035] chnl_net:caif_netlink_parms(): no params data found [ 889.713036][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.720315][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.729386][T12035] device bridge_slave_0 entered promiscuous mode [ 889.772757][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.779995][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.789058][T12035] device bridge_slave_1 entered promiscuous mode [ 889.825757][T12035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.840689][T12035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.876833][T12035] team0: Port device team_slave_0 added [ 889.887963][T12035] team0: Port device team_slave_1 added [ 889.954871][T12035] device hsr_slave_0 entered promiscuous mode [ 889.992806][T12035] device hsr_slave_1 entered promiscuous mode [ 890.032213][T12035] debugfs: Directory 'hsr0' with parent '/' already present! [ 890.059861][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.067070][T12035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.074770][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.081881][T12035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.159926][T12035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.183285][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 890.193774][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.201788][T30475] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.219483][T12035] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.232680][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 890.241601][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.248816][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.262890][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.271697][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.278915][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.312951][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.329951][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 890.340007][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 890.360256][T12035] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 890.371966][T12035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 890.387536][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 890.396425][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 890.405844][T14791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.431152][T12035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.556991][T12040] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 890.567259][T12040] CPU: 0 PID: 12040 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 890.575150][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.585222][T12040] Call Trace: [ 890.588527][T12040] dump_stack+0x191/0x1f0 [ 890.592902][T12040] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 890.598825][T12040] dump_header+0x1e7/0xd00 [ 890.603272][T12040] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 890.609441][T12040] ? ___ratelimit+0x542/0x720 [ 890.614146][T12040] ? task_will_free_mem+0x14c/0x810 [ 890.619555][T12040] oom_kill_process+0x210/0x560 [ 890.624419][T12040] out_of_memory+0x1796/0x1c70 [ 890.629199][T12040] ? kmsan_internal_set_origin+0x6a/0xb0 [ 890.634864][T12040] memory_max_write+0x90b/0xb60 [ 890.639737][T12040] ? memory_max_show+0x1b0/0x1b0 [ 890.644698][T12040] cgroup_file_write+0x41a/0x8e0 [ 890.649659][T12040] ? cgroup_seqfile_stop+0x150/0x150 [ 890.654953][T12040] kernfs_fop_write+0x55f/0x840 [ 890.659814][T12040] ? kernfs_fop_read+0x9a0/0x9a0 [ 890.664780][T12040] __vfs_write+0x1a9/0xcb0 [ 890.669274][T12040] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 890.675393][T12040] ? __sb_start_write+0x10b/0x230 [ 890.680425][T12040] vfs_write+0x481/0x920 [ 890.684697][T12040] ksys_write+0x265/0x430 [ 890.689037][T12040] __se_sys_write+0x92/0xb0 [ 890.693549][T12040] __x64_sys_write+0x4a/0x70 [ 890.698150][T12040] do_syscall_64+0xb6/0x160 [ 890.702681][T12040] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 890.708583][T12040] RIP: 0033:0x459f39 [ 890.712507][T12040] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 890.732129][T12040] RSP: 002b:00007f93c666cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 890.740563][T12040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 890.748534][T12040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 890.756785][T12040] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 890.764778][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93c666d6d4 [ 890.772763][T12040] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 890.780949][T12040] memory: usage 5488kB, limit 0kB, failcnt 859 [ 890.787245][T12040] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 890.794341][T12040] Memory cgroup stats for /syz0: [ 890.794685][T12040] anon 135168 [ 890.794685][T12040] file 3637248 [ 890.794685][T12040] kernel_stack 196608 [ 890.794685][T12040] slab 1282048 [ 890.794685][T12040] sock 69632 [ 890.794685][T12040] shmem 3637248 [ 890.794685][T12040] file_mapped 0 [ 890.794685][T12040] file_dirty 0 [ 890.794685][T12040] file_writeback 0 [ 890.794685][T12040] anon_thp 0 [ 890.794685][T12040] inactive_anon 3514368 [ 890.794685][T12040] active_anon 49152 [ 890.794685][T12040] inactive_file 0 [ 890.794685][T12040] active_file 0 [ 890.794685][T12040] unevictable 0 [ 890.794685][T12040] slab_reclaimable 135168 [ 890.794685][T12040] slab_unreclaimable 1146880 [ 890.794685][T12040] pgfault 44913 [ 890.794685][T12040] pgmajfault 0 [ 890.794685][T12040] workingset_refault 0 [ 890.794685][T12040] workingset_activate 0 [ 890.794685][T12040] workingset_nodereclaim 0 [ 890.794685][T12040] pgrefill 0 [ 890.794685][T12040] pgscan 0 [ 890.794685][T12040] pgsteal 0 [ 890.794685][T12040] pgactivate 0 [ 890.889810][T12040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12038,uid=0 17:21:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e0", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00507) shutdown(r0, 0x0) r2 = dup(r1) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x11, r5, 0x0) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) 17:21:09 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) readv(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r1, 0x0) 17:21:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x400001006, &(0x7f0000000000)={0x0, 0x10008}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/229, 0xe5}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xd997, 0x0, 0x0, 0x800e005f0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) 17:21:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/156, 0x9c}, {0x0}], 0x2}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff21, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/244, 0x30e}, {0x0}, {0x0}], 0x10000000000003b2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r6, &(0x7f0000002d00)=[{&(0x7f0000001940)=""/237, 0xed}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) 17:21:09 executing program 5: poll(&(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x35f, 0x0, 0x0, 0x800e004e5) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/239, 0xef}, {0x0}, {0x0}], 0x3}, 0x2) shutdown(r0, 0x0) [ 890.905596][T12040] Memory cgroup out of memory: Killed process 12038 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 890.932963][ T1829] oom_reaper: reaped process 12038 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 890.974230][T12035] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 890.984390][T12035] CPU: 0 PID: 12035 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 890.992429][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.002563][T12035] Call Trace: [ 891.005924][T12035] dump_stack+0x191/0x1f0 [ 891.010323][T12035] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 891.016287][T12035] dump_header+0x1e7/0xd00 [ 891.020784][T12035] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 891.027005][T12035] ? ___ratelimit+0x542/0x720 [ 891.031762][T12035] ? task_will_free_mem+0x2c9/0x810 [ 891.037046][T12035] oom_kill_process+0x210/0x560 [ 891.041985][T12035] out_of_memory+0x1796/0x1c70 [ 891.046825][T12035] ? kmsan_internal_set_origin+0x6a/0xb0 [ 891.053081][T12035] try_charge+0x2889/0x3d70 [ 891.057671][T12035] ? __module_address+0x68/0x5e0 [ 891.062735][T12035] mem_cgroup_try_charge+0xa29/0xe40 [ 891.068118][T12035] mem_cgroup_try_charge_delay+0x7e/0x140 [ 891.073916][T12035] wp_page_copy+0x776/0x26d0 [ 891.078581][T12035] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 891.084556][T12035] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 891.090804][T12035] ? kmsan_internal_set_origin+0x6a/0xb0 [ 891.096557][T12035] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 891.102872][T12035] do_wp_page+0x1e8c/0x37f0 [ 891.107445][T12035] ? kmsan_internal_set_origin+0x6a/0xb0 [ 891.113170][T12035] handle_mm_fault+0x46e3/0x9f70 [ 891.118233][T12035] do_user_addr_fault+0x905/0x1510 [ 891.123460][T12035] __do_page_fault+0x1a2/0x410 [ 891.128302][T12035] do_page_fault+0xbb/0x500 [ 891.132885][T12035] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 891.138339][T12035] page_fault+0x4e/0x60 [ 891.142544][T12035] RIP: 0033:0x4329fe [ 891.146505][T12035] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 891.166992][T12035] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 891.173128][T12035] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 891.181155][T12035] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 891.189181][T12035] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001cce940 [ 891.197214][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 891.205348][T12035] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 891.213648][T12035] memory: usage 5068kB, limit 0kB, failcnt 874 17:21:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/22, 0x16}, {0x0, 0x2c3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x1}, 0x10) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:21:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x8164, 0x0, 0x0, 0x800e0054d) shutdown(r2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)=""/13, 0xd}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x42) shutdown(r3, 0x0) shutdown(r1, 0x0) [ 891.219862][T12035] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 891.226871][T12035] Memory cgroup stats for /syz0: [ 891.227169][T12035] anon 0 [ 891.227169][T12035] file 3637248 [ 891.227169][T12035] kernel_stack 0 [ 891.227169][T12035] slab 1282048 [ 891.227169][T12035] sock 69632 [ 891.227169][T12035] shmem 3637248 [ 891.227169][T12035] file_mapped 0 [ 891.227169][T12035] file_dirty 0 [ 891.227169][T12035] file_writeback 0 [ 891.227169][T12035] anon_thp 0 [ 891.227169][T12035] inactive_anon 3649536 [ 891.227169][T12035] active_anon 49152 [ 891.227169][T12035] inactive_file 0 [ 891.227169][T12035] active_file 0 [ 891.227169][T12035] unevictable 0 [ 891.227169][T12035] slab_reclaimable 135168 [ 891.227169][T12035] slab_unreclaimable 1146880 [ 891.227169][T12035] pgfault 44913 [ 891.227169][T12035] pgmajfault 0 [ 891.227169][T12035] workingset_refault 0 [ 891.227169][T12035] workingset_activate 0 [ 891.227169][T12035] workingset_nodereclaim 0 [ 891.227169][T12035] pgrefill 0 [ 891.227169][T12035] pgscan 0 [ 891.227169][T12035] pgsteal 0 [ 891.227169][T12035] pgactivate 0 [ 891.321794][T12035] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12035,uid=0 [ 891.337498][T12035] Memory cgroup out of memory: Killed process 12035 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 891.371896][ T1829] oom_reaper: reaped process 12035 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}, {0x0}], 0x2}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/57, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r5, &(0x7f0000000f80)=[{&(0x7f00000008c0)=""/178, 0xb2}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:09 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) shutdown(r0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e0095e) 17:21:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/19, 0x13}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00551) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000100)=""/149, 0x95}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) recvmsg(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/3, 0x3}, {0x0}], 0x2}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/179, 0xb3}, {0x0}, {0x0}], 0x3) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/152, 0x98}, {0x0}], 0x2}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r2, r3) shutdown(r3, 0x0) 17:21:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e0", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/129, 0x81}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/77, 0x4d}], 0x1}, 0x0) shutdown(r3, 0x0) shutdown(r2, 0x0) 17:21:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00527) shutdown(r0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) 17:21:10 executing program 3: poll(&(0x7f0000000080)=[{}], 0x1, 0x8220000004d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) fchmod(r0, 0x0) recvfrom$inet(r0, 0x0, 0xb5962e0fc0aae43, 0x0, 0x0, 0x800e0050f) shutdown(r0, 0x0) 17:21:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001b40)=[{&(0x7f0000000180)=""/110, 0x6e}, {0x0}, {0x0}, {0x0}, {0x0, 0x1f5}], 0x5) recvfrom$inet(r2, 0x0, 0x73a0c4e, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, &(0x7f0000000100)=""/66, 0x42, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}], 0x1}, 0x0) shutdown(r4, 0x0) r6 = dup(r2) shutdown(r6, 0x0) shutdown(r5, 0x0) 17:21:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e0", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000b40)=[{&(0x7f0000000540)=""/186, 0xba}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/228, 0xe4}], 0x1}, 0x2) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x0) shutdown(r0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) recvfrom$inet(r1, 0x0, 0x10000002c, 0x2, 0x0, 0x800e0054e) shutdown(r1, 0x0) 17:21:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{}, {}, {r0}], 0x3, 0x3f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00509) r2 = dup(r1) fchmod(r1, 0x0) recvfrom$inet(r1, 0x0, 0x2592, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:21:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/98, 0x62}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x40002) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x8000}, 0x10) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd324, 0x0, 0x0, 0x800e0053f) shutdown(r2, 0x0) 17:21:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) read(r0, &(0x7f0000000040)=""/98, 0x62) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000000)={0x6}, 0x10) r3 = getpgrp(0xffffffffffffffff) wait4(r3, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x473, 0x0, 0x0, 0x800e00519) shutdown(r2, 0x0) 17:21:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x10062, 0x0, 0x0, 0x800e00585) shutdown(r0, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x105, &(0x7f0000000100)=ANY=[], &(0x7f0000001700)) r2 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {0x0}], 0x2}, 0x0) shutdown(r1, 0x0) 17:21:11 executing program 4: poll(0x0, 0x0, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000019c0)=[{&(0x7f0000000000)=""/134, 0x86}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r5, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/190, 0xbe}, {0x0}], 0x2) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r6) shutdown(r6, 0x0) 17:21:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/210, 0xd2}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/116, 0x74}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) recvmsg(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:11 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x1733, 0x0, 0x0, 0x800e00506) poll(0x0, 0x0, 0xffffffff) shutdown(r1, 0x0) 17:21:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/162, 0xa2}, {0x0}, {0x0}], 0x3}, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x1) recvfrom$inet(r2, 0x0, 0x1789836bed901fc7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:21:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000080)=[{r0, 0x1}, {r0}, {}], 0x3, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x100000007, 0x0, 0x0, 0x800e00525) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1949) shutdown(r1, 0x0) 17:21:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/22, 0x16}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/71, 0x47}, {0x0}, {0x0}, {0x0}], 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00516) shutdown(r3, 0x0) r5 = dup(r4) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000100), 0x8) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 894.053151][ T658] device bridge_slave_1 left promiscuous mode [ 894.059595][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.104403][ T658] device bridge_slave_0 left promiscuous mode [ 894.111028][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.853106][ T658] device hsr_slave_0 left promiscuous mode [ 894.892323][ T658] device hsr_slave_1 left promiscuous mode [ 894.946250][ T658] team0 (unregistering): Port device team_slave_1 removed [ 894.959534][T13698] IPVS: ftp: loaded support on port[0] = 21 [ 894.972331][ T658] team0 (unregistering): Port device team_slave_0 removed [ 894.984132][ T658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.017587][ T658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.084128][ T658] bond0 (unregistering): Released all slaves [ 895.254580][T13698] chnl_net:caif_netlink_parms(): no params data found [ 895.300011][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.307290][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.315800][T13698] device bridge_slave_0 entered promiscuous mode [ 895.324681][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.331774][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.341030][T13698] device bridge_slave_1 entered promiscuous mode [ 895.369764][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.418208][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.457339][T13698] team0: Port device team_slave_0 added [ 895.467006][T13698] team0: Port device team_slave_1 added [ 895.547158][T13698] device hsr_slave_0 entered promiscuous mode [ 895.593040][T13698] device hsr_slave_1 entered promiscuous mode [ 895.632161][T13698] debugfs: Directory 'hsr0' with parent '/' already present! [ 895.661386][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.668591][T13698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.676296][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.683442][T13698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.757499][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.775647][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 895.786984][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.797921][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.823377][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.836115][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 895.846021][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.853236][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.876081][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 895.886619][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.893815][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.913857][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 895.924210][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 895.940091][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 895.949546][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 895.969587][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 895.985279][T13698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 896.012753][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.152171][T13703] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 896.162523][T13703] CPU: 0 PID: 13703 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 896.171183][T13703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.181299][T13703] Call Trace: [ 896.184620][T13703] dump_stack+0x191/0x1f0 [ 896.188975][T13703] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 896.194916][T13703] dump_header+0x1e7/0xd00 [ 896.199562][T13703] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 896.206733][T13703] ? ___ratelimit+0x542/0x720 [ 896.211616][T13703] ? task_will_free_mem+0x14c/0x810 [ 896.216845][T13703] oom_kill_process+0x210/0x560 [ 896.223596][T13703] out_of_memory+0x1796/0x1c70 [ 896.228525][T13703] ? kmsan_internal_set_origin+0x6a/0xb0 [ 896.234310][T13703] memory_max_write+0x90b/0xb60 [ 896.239207][T13703] ? memory_max_show+0x1b0/0x1b0 [ 896.244193][T13703] cgroup_file_write+0x41a/0x8e0 [ 896.249171][T13703] ? cgroup_seqfile_stop+0x150/0x150 [ 896.254489][T13703] kernfs_fop_write+0x55f/0x840 [ 896.260498][T13703] ? kernfs_fop_read+0x9a0/0x9a0 [ 896.266283][T13703] __vfs_write+0x1a9/0xcb0 [ 896.270753][T13703] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 896.276843][T13703] ? __sb_start_write+0x10b/0x230 [ 896.282115][T13703] vfs_write+0x481/0x920 [ 896.286896][T13703] ksys_write+0x265/0x430 [ 896.291306][T13703] __se_sys_write+0x92/0xb0 [ 896.296138][T13703] __x64_sys_write+0x4a/0x70 [ 896.300771][T13703] do_syscall_64+0xb6/0x160 [ 896.305394][T13703] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 896.311292][T13703] RIP: 0033:0x459f39 [ 896.315204][T13703] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 896.334819][T13703] RSP: 002b:00007f03cba15c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.343504][T13703] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 896.351483][T13703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 896.359616][T13703] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 896.367611][T13703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03cba166d4 [ 896.375593][T13703] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 896.384246][T13703] memory: usage 5920kB, limit 0kB, failcnt 883 [ 896.390587][T13703] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.397567][T13703] Memory cgroup stats for /syz0: [ 896.397915][T13703] anon 126976 [ 896.397915][T13703] file 3932160 [ 896.397915][T13703] kernel_stack 196608 [ 896.397915][T13703] slab 1282048 [ 896.397915][T13703] sock 69632 [ 896.397915][T13703] shmem 3932160 [ 896.397915][T13703] file_mapped 0 [ 896.397915][T13703] file_dirty 0 [ 896.397915][T13703] file_writeback 0 [ 896.397915][T13703] anon_thp 0 [ 896.397915][T13703] inactive_anon 4055040 [ 896.397915][T13703] active_anon 49152 [ 896.397915][T13703] inactive_file 0 [ 896.397915][T13703] active_file 0 [ 896.397915][T13703] unevictable 0 [ 896.397915][T13703] slab_reclaimable 135168 [ 896.397915][T13703] slab_unreclaimable 1146880 [ 896.397915][T13703] pgfault 45507 [ 896.397915][T13703] pgmajfault 0 [ 896.397915][T13703] workingset_refault 0 [ 896.397915][T13703] workingset_activate 0 [ 896.397915][T13703] workingset_nodereclaim 0 [ 896.397915][T13703] pgrefill 0 [ 896.397915][T13703] pgscan 0 [ 896.397915][T13703] pgsteal 0 [ 896.397915][T13703] pgactivate 0 17:21:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:14 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) poll(&(0x7f0000000140)=[{}, {r0}], 0x2, 0x200000004d) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup2(r1, r2) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000180), 0x8) recvfrom$inet(r2, 0x0, 0xffffff8a, 0x0, 0x0, 0x800e00511) shutdown(r1, 0x0) 17:21:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/84, 0x54}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1006, &(0x7f0000000080)={0x2}, 0x10) close(r1) recvfrom$inet(r2, 0x0, 0x100000114, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 17:21:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/243, 0xf3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) shutdown(r2, 0x0) 17:21:14 executing program 4: poll(&(0x7f00000002c0), 0x200000000000004a, 0x4e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffd26, 0x0, 0x0, 0x800e00c58) ppoll(&(0x7f0000000200)=[{r1}, {r1, 0x80}], 0x2, &(0x7f0000000240)={0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 17:21:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000200)=[{r0, 0x48}], 0x1, 0x2ba1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/224, 0xe0}, {0x0}], 0x2}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/231, 0xe7}], 0x1) shutdown(r5, 0x0) shutdown(r2, 0x0) [ 896.493340][T13703] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13701,uid=0 [ 896.509048][T13703] Memory cgroup out of memory: Killed process 13701 (syz-executor.0) total-vm:72720kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 896.529446][ T1829] oom_reaper: reaped process 13701 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 896.567144][T13698] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 896.577653][T13698] CPU: 1 PID: 13698 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 896.585584][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.595677][T13698] Call Trace: [ 896.599030][T13698] dump_stack+0x191/0x1f0 [ 896.603514][T13698] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 896.609470][T13698] dump_header+0x1e7/0xd00 [ 896.613950][T13698] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 896.620179][T13698] ? ___ratelimit+0x542/0x720 [ 896.624924][T13698] ? task_will_free_mem+0x2c9/0x810 [ 896.630200][T13698] oom_kill_process+0x210/0x560 [ 896.635122][T13698] out_of_memory+0x1796/0x1c70 [ 896.639951][T13698] ? kmsan_internal_set_origin+0x6a/0xb0 [ 896.645661][T13698] try_charge+0x2889/0x3d70 [ 896.650237][T13698] ? __module_address+0x68/0x5e0 [ 896.655283][T13698] mem_cgroup_try_charge+0xa29/0xe40 [ 896.660594][T13698] mem_cgroup_try_charge_delay+0x7e/0x140 [ 896.666371][T13698] wp_page_copy+0x776/0x26d0 [ 896.671022][T13698] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 896.677005][T13698] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 896.683211][T13698] ? kmsan_internal_set_origin+0x6a/0xb0 [ 896.688912][T13698] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 896.694958][T13698] do_wp_page+0x1e8c/0x37f0 [ 896.699521][T13698] ? kmsan_internal_set_origin+0x6a/0xb0 [ 896.705241][T13698] handle_mm_fault+0x46e3/0x9f70 [ 896.710296][T13698] do_user_addr_fault+0x905/0x1510 [ 896.715507][T13698] __do_page_fault+0x1a2/0x410 [ 896.720342][T13698] do_page_fault+0xbb/0x500 [ 896.724918][T13698] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 896.730358][T13698] page_fault+0x4e/0x60 [ 896.735435][T13698] RIP: 0033:0x4329fe [ 896.739399][T13698] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 896.759066][T13698] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 896.765204][T13698] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 896.773412][T13698] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 896.781465][T13698] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001ec1940 [ 896.789512][T13698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 896.797554][T13698] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 896.805743][T13698] memory: usage 5496kB, limit 0kB, failcnt 898 [ 896.812030][T13698] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 896.818919][T13698] Memory cgroup stats for /syz0: [ 896.819200][T13698] anon 0 [ 896.819200][T13698] file 3932160 [ 896.819200][T13698] kernel_stack 0 [ 896.819200][T13698] slab 1282048 [ 896.819200][T13698] sock 69632 [ 896.819200][T13698] shmem 3932160 [ 896.819200][T13698] file_mapped 0 [ 896.819200][T13698] file_dirty 0 [ 896.819200][T13698] file_writeback 0 [ 896.819200][T13698] anon_thp 0 [ 896.819200][T13698] inactive_anon 4055040 [ 896.819200][T13698] active_anon 49152 [ 896.819200][T13698] inactive_file 0 17:21:14 executing program 2: poll(&(0x7f0000000000)=[{}], 0x1, 0x46) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x8}, 0x10) write(r0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xd18b, 0x0, 0x0, 0x800e00520) shutdown(r0, 0x0) [ 896.819200][T13698] active_file 0 [ 896.819200][T13698] unevictable 0 [ 896.819200][T13698] slab_reclaimable 135168 [ 896.819200][T13698] slab_unreclaimable 1146880 [ 896.819200][T13698] pgfault 45507 [ 896.819200][T13698] pgmajfault 0 [ 896.819200][T13698] workingset_refault 0 [ 896.819200][T13698] workingset_activate 0 [ 896.819200][T13698] workingset_nodereclaim 0 [ 896.819200][T13698] pgrefill 0 [ 896.819200][T13698] pgscan 0 [ 896.819200][T13698] pgsteal 0 [ 896.819200][T13698] pgactivate 0 17:21:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000004000)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5c}, {0x0}, {0x0}, {&(0x7f0000003ec0)=""/91, 0x5b}], 0x100000000000000b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = dup(r1) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000000000), 0x8) recvfrom$inet(r2, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r1, 0x0) [ 896.918349][T13698] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=13698,uid=0 [ 896.933998][T13698] Memory cgroup out of memory: Killed process 13698 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 896.953269][ T1829] oom_reaper: reaped process 13698 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r5, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/240, 0xf0}, {0x0}, {0x0}], 0x3) shutdown(r4, 0x0) shutdown(r1, 0x0) 17:21:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/165, 0xa5}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x73a0b52, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x4a, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x8, 0x0, 0x0, 0x800e0054d) shutdown(r1, 0x0) 17:21:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f0000000080)=""/21, 0x15, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x2ec, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000580)=[{0x0}, {&(0x7f00000000c0)=""/132, 0x84}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x5, 0x84) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/183, 0xb7}, {0x0}, {0x0}], 0x3) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:21:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) poll(&(0x7f00000000c0)=[{r0}, {}, {r0}], 0x3, 0x800000000004c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) recvmsg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000009c0)=""/174, 0xae}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) shutdown(r1, 0x0) 17:21:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e003b5) 17:21:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000001c0)=""/231, 0xe7}, {0x0}, {0x0}], 0x3}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xd051, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x411b, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/37, 0x25}, {0x0}, {0x0}, {0x0}], 0x4) shutdown(r4, 0x0) shutdown(r2, 0x0) 17:21:15 executing program 5: poll(&(0x7f0000000040)=[{}], 0x1, 0x200800000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xea1ca13a, 0x0, 0x0, 0x800e00516) lseek(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0xff1d, 0x2, 0x0, 0x800e0051e) shutdown(r0, 0x0) 17:21:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/28, 0x1c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x500000000000}}, 0x0) recvfrom$inet(r2, 0x0, 0x20e6d29dfb76313f, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 17:21:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/19, 0x13}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xc8f4, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) r2 = dup2(r1, r0) shutdown(0xffffffffffffffff, 0x0) recvfrom$inet(r2, 0x0, 0xffffff51, 0x42, 0x0, 0x800e00511) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) shutdown(r0, 0x0) 17:21:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/70, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xcc, 0x0, 0x0, 0x800e00549) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/116, 0x74}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r2, 0x0) r4 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r4, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) shutdown(r3, 0x0) shutdown(r1, 0x0) 17:21:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read(r0, &(0x7f0000000140)=""/48, 0x30) recvfrom$inet(r1, 0x0, 0xfffffecb, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x80}, {r0, 0x1}], 0x2, 0x0) shutdown(r1, 0x0) 17:21:16 executing program 2: poll(&(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x820000000004b) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x893f, 0x0, 0x0, 0x800e00519) shutdown(0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/191, 0xbf}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000000)=""/26, 0x1a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r4, 0x0) shutdown(r0, 0x0) 17:21:16 executing program 4: poll(&(0x7f0000000040)=[{}], 0x1, 0x20000004a) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x1008d, 0x0, 0x0, 0x800e00527) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/185, 0xb9}], 0x1}, 0x0) shutdown(r0, 0x0) 17:21:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0d56, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000080), 0x4) recvfrom$inet(r3, 0x0, 0xe5, 0x2, 0x0, 0x800e00551) shutdown(r3, 0x0) 17:21:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x3a4) recvfrom$inet(r1, 0x0, 0x2769, 0x0, 0x0, 0x800e00506) shutdown(r0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x205, 0x0, 0x0, 0x800e00511) shutdown(r1, 0x0) 17:21:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000140)=[{}, {}, {r0}, {}], 0x4, 0x400080000004c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfffffe14, 0x0, 0x0, 0x800e00519) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000900)=""/169, 0xa9}], 0x5}, 0x0) shutdown(r1, 0x0) 17:21:16 executing program 3: poll(&(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8000000000049) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x59c, 0x0, 0x0, 0x800e004de) r1 = dup(r0) accept4(r1, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x1000003dd, 0x0, 0x0, 0x800e004e5) shutdown(r1, 0x0) 17:21:17 executing program 5: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f0000000140)=[{r0, 0x40}], 0x1, 0x0) poll(&(0x7f0000000180)=[{r0, 0x1}, {}], 0x2, 0x4e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffde, 0x0, 0x0, 0x800e00861) poll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, 0x81) shutdown(r1, 0x0) 17:21:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/145, 0x91}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00526) shutdown(r0, 0x0) socketpair(0x0, 0x0, 0x325, 0x0) recvfrom$inet(r1, 0x0, 0xfffffe44, 0x0, 0x0, 0x800e00521) shutdown(r1, 0x0) [ 899.633630][ T367] device bridge_slave_1 left promiscuous mode [ 899.640034][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.693989][ T367] device bridge_slave_0 left promiscuous mode [ 899.700326][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.412853][ T367] device hsr_slave_0 left promiscuous mode [ 900.462521][ T367] device hsr_slave_1 left promiscuous mode [ 900.519711][ T367] team0 (unregistering): Port device team_slave_1 removed [ 900.537620][ T367] team0 (unregistering): Port device team_slave_0 removed [ 900.557151][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.604010][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.651910][T15057] IPVS: ftp: loaded support on port[0] = 21 [ 900.693238][ T367] bond0 (unregistering): Released all slaves [ 900.866778][T15057] chnl_net:caif_netlink_parms(): no params data found [ 900.908957][T15057] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.916202][T15057] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.924602][T15057] device bridge_slave_0 entered promiscuous mode [ 900.933563][T15057] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.940671][T15057] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.949202][T15057] device bridge_slave_1 entered promiscuous mode [ 901.018993][T15057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.032426][T15057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.068022][T15057] team0: Port device team_slave_0 added [ 901.077640][T15057] team0: Port device team_slave_1 added [ 901.165819][T15057] device hsr_slave_0 entered promiscuous mode [ 901.223179][T15057] device hsr_slave_1 entered promiscuous mode [ 901.262274][T15057] debugfs: Directory 'hsr0' with parent '/' already present! [ 901.292174][T15057] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.299363][T15057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.307103][T15057] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.314279][T15057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.400979][T15057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.420778][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 901.430721][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.439766][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.456526][T15057] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.470018][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.479346][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.486550][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.515702][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.525581][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.532823][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.543612][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 901.554129][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 901.573861][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 901.597442][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 901.606355][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 901.625970][T15057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 901.652747][T15057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.787155][T15062] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 901.797997][T15062] CPU: 1 PID: 15062 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 901.805918][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.816007][T15062] Call Trace: [ 901.819444][T15062] dump_stack+0x191/0x1f0 [ 901.823808][T15062] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 901.829709][T15062] dump_header+0x1e7/0xd00 [ 901.834162][T15062] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 901.840356][T15062] ? ___ratelimit+0x542/0x720 [ 901.845062][T15062] ? task_will_free_mem+0x14c/0x810 [ 901.850319][T15062] oom_kill_process+0x210/0x560 [ 901.855226][T15062] out_of_memory+0x1796/0x1c70 [ 901.860003][T15062] ? kmsan_internal_set_origin+0x6a/0xb0 [ 901.865658][T15062] memory_max_write+0x90b/0xb60 [ 901.870548][T15062] ? memory_max_show+0x1b0/0x1b0 [ 901.876889][T15062] cgroup_file_write+0x41a/0x8e0 [ 901.881852][T15062] ? cgroup_seqfile_stop+0x150/0x150 [ 901.887150][T15062] kernfs_fop_write+0x55f/0x840 [ 901.892050][T15062] ? kernfs_fop_read+0x9a0/0x9a0 [ 901.897015][T15062] __vfs_write+0x1a9/0xcb0 [ 901.901453][T15062] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 901.907527][T15062] ? __sb_start_write+0x10b/0x230 [ 901.912588][T15062] vfs_write+0x481/0x920 [ 901.916883][T15062] ksys_write+0x265/0x430 [ 901.921235][T15062] __se_sys_write+0x92/0xb0 [ 901.925751][T15062] __x64_sys_write+0x4a/0x70 [ 901.930352][T15062] do_syscall_64+0xb6/0x160 [ 901.934886][T15062] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 901.940802][T15062] RIP: 0033:0x459f39 [ 901.944708][T15062] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 901.964375][T15062] RSP: 002b:00007ff253d88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 901.972816][T15062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 901.980844][T15062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 901.988951][T15062] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 901.997033][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff253d896d4 [ 902.005011][T15062] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 902.017545][T15062] memory: usage 5916kB, limit 0kB, failcnt 907 [ 902.023795][T15062] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.035164][T15062] Memory cgroup stats for /syz0: [ 902.035495][T15062] anon 0 [ 902.035495][T15062] file 4014080 [ 902.035495][T15062] kernel_stack 196608 [ 902.035495][T15062] slab 1282048 [ 902.035495][T15062] sock 69632 [ 902.035495][T15062] shmem 4014080 [ 902.035495][T15062] file_mapped 0 [ 902.035495][T15062] file_dirty 0 [ 902.035495][T15062] file_writeback 0 [ 902.035495][T15062] anon_thp 0 [ 902.035495][T15062] inactive_anon 4055040 [ 902.035495][T15062] active_anon 0 [ 902.035495][T15062] inactive_file 0 [ 902.035495][T15062] active_file 0 [ 902.035495][T15062] unevictable 0 [ 902.035495][T15062] slab_reclaimable 135168 [ 902.035495][T15062] slab_unreclaimable 1146880 [ 902.035495][T15062] pgfault 46068 [ 902.035495][T15062] pgmajfault 0 [ 902.035495][T15062] workingset_refault 0 [ 902.035495][T15062] workingset_activate 0 [ 902.035495][T15062] workingset_nodereclaim 0 [ 902.035495][T15062] pgrefill 0 [ 902.035495][T15062] pgscan 0 [ 902.035495][T15062] pgsteal 0 [ 902.035495][T15062] pgactivate 0 17:21:20 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) poll(&(0x7f00000002c0)=[{r0}, {r0, 0x4}, {r0}], 0x3, 0x4b) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffffde, 0x0, 0x0, 0x800e009f1) ppoll(&(0x7f0000000040)=[{r0}, {}], 0x2, &(0x7f0000000240)={0x2}, &(0x7f0000000280), 0x8) shutdown(r1, 0x0) 17:21:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) munlockall() recvfrom$inet(r0, 0x0, 0x7c1366248198da2a, 0x10000000002, 0x0, 0x800e00762) shutdown(r0, 0x0) 17:21:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e276", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00379) 17:21:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/86, 0x56}, {0x0}, {0x0}], 0x3) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfffffef4, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) read(r1, &(0x7f00000000c0)=""/96, 0x60) recvfrom$inet(r3, 0x0, 0xe5, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) 17:21:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001140)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x654c, 0x0, 0x0, 0x800e00515) shutdown(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) [ 902.130550][T15062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15060,uid=0 [ 902.146182][T15062] Memory cgroup out of memory: Killed process 15060 (syz-executor.0) total-vm:72720kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 902.166354][ T1829] oom_reaper: reaped process 15060 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 902.233607][T15057] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 902.243741][T15057] CPU: 0 PID: 15057 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 902.251708][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.261807][T15057] Call Trace: [ 902.265173][T15057] dump_stack+0x191/0x1f0 [ 902.269574][T15057] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 902.275534][T15057] dump_header+0x1e7/0xd00 [ 902.280018][T15057] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 902.286237][T15057] ? ___ratelimit+0x542/0x720 [ 902.290969][T15057] ? task_will_free_mem+0x2c9/0x810 [ 902.296245][T15057] oom_kill_process+0x210/0x560 [ 902.301163][T15057] out_of_memory+0x1796/0x1c70 [ 902.305986][T15057] ? kmsan_internal_set_origin+0x6a/0xb0 [ 902.311712][T15057] try_charge+0x2889/0x3d70 [ 902.316286][T15057] ? __module_address+0x68/0x5e0 [ 902.321343][T15057] mem_cgroup_try_charge+0xa29/0xe40 [ 902.326736][T15057] mem_cgroup_try_charge_delay+0x7e/0x140 [ 902.333133][T15057] wp_page_copy+0x776/0x26d0 [ 902.338659][T15057] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 902.344964][T15057] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 902.351196][T15057] ? kmsan_internal_set_origin+0x6a/0xb0 [ 902.356901][T15057] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 902.362967][T15057] do_wp_page+0x1e8c/0x37f0 [ 902.367780][T15057] ? kmsan_internal_set_origin+0x6a/0xb0 [ 902.373498][T15057] handle_mm_fault+0x46e3/0x9f70 [ 902.378546][T15057] do_user_addr_fault+0x905/0x1510 [ 902.383749][T15057] __do_page_fault+0x1a2/0x410 [ 902.388584][T15057] do_page_fault+0xbb/0x500 [ 902.393153][T15057] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 902.398587][T15057] page_fault+0x4e/0x60 [ 902.402786][T15057] RIP: 0033:0x4329fe [ 902.406735][T15057] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 902.427338][T15057] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 902.433460][T15057] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 902.441476][T15057] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 902.449692][T15057] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001ca9940 [ 902.457700][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 902.465819][T15057] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 902.474173][T15057] memory: usage 5492kB, limit 0kB, failcnt 922 [ 902.480367][T15057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 902.487329][T15057] Memory cgroup stats for /syz0: [ 902.487629][T15057] anon 0 [ 902.487629][T15057] file 4014080 [ 902.487629][T15057] kernel_stack 0 [ 902.487629][T15057] slab 1282048 [ 902.487629][T15057] sock 69632 [ 902.487629][T15057] shmem 4014080 [ 902.487629][T15057] file_mapped 0 [ 902.487629][T15057] file_dirty 0 [ 902.487629][T15057] file_writeback 0 [ 902.487629][T15057] anon_thp 0 [ 902.487629][T15057] inactive_anon 4055040 [ 902.487629][T15057] active_anon 0 [ 902.487629][T15057] inactive_file 0 [ 902.487629][T15057] active_file 0 [ 902.487629][T15057] unevictable 0 [ 902.487629][T15057] slab_reclaimable 135168 [ 902.487629][T15057] slab_unreclaimable 1146880 [ 902.487629][T15057] pgfault 46101 [ 902.487629][T15057] pgmajfault 0 [ 902.487629][T15057] workingset_refault 0 [ 902.487629][T15057] workingset_activate 0 [ 902.487629][T15057] workingset_nodereclaim 0 [ 902.487629][T15057] pgrefill 0 [ 902.487629][T15057] pgscan 0 [ 902.487629][T15057] pgsteal 0 [ 902.487629][T15057] pgactivate 0 17:21:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) poll(&(0x7f0000000100)=[{r0}, {}], 0x2, 0x46) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) ppoll(&(0x7f0000000000)=[{}, {}, {}], 0x3, &(0x7f0000000240)={0x0, 0x187eca60}, 0x0, 0x0) r2 = dup(r1) shutdown(r2, 0x0) 17:21:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x1, 0xfff, 0x401}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) 17:21:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/108, 0x6c}, {0x0}, {0x0}, {0x0}], 0x4) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x2a80, 0x0, 0x0, 0x800e00506) shutdown(r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000200)=""/1, 0x1}, {0x0}, {0x0}], 0x3}, 0x0) shutdown(r2, 0x0) [ 902.582082][T15057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15057,uid=0 [ 902.597763][T15057] Memory cgroup out of memory: Killed process 15057 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 902.622081][ T1829] oom_reaper: reaped process 15057 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:21 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 17:21:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'bridge#\x00'}}}}}, 0x34}}, 0x0) [ 902.976843][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 902.976878][ T31] audit: type=1800 audit(1572024081.027:31): pid=15286 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="ramfs" ino=85703 res=0 17:21:21 executing program 1: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0xd035) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) 17:21:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xe2, &(0x7f0000000100)) [ 903.274535][T15537] Enabling of bearer rejected, failed to enable media 17:21:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e276", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) 17:21:21 executing program 5: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 17:21:21 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000280)) ppoll(&(0x7f0000000100)=[{}, {r2}, {r0}], 0x3, 0x0, &(0x7f0000000180)={0x9}, 0x8) 17:21:21 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 17:21:21 executing program 4: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17:21:21 executing program 3: r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17:21:21 executing program 5: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") 17:21:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e276", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000200)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "20d3f7", 0x0, [0x9, 0x20, 0xfffffff9, 0x10001, 0x0]}}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000300)=""/137) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f00000001c0)) tkill(r1, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000240), 0x0, r3}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r4, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.944703][T15989] RSP: 002b:00007fd79115dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 907.953132][T15989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 907.961101][T15989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 907.969071][T15989] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 907.977055][T15989] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd79115e6d4 [ 907.985029][T15989] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 907.994671][T15989] memory: usage 8492kB, limit 0kB, failcnt 931 [ 908.000859][T15989] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.007782][T15989] Memory cgroup stats for /syz0: [ 908.008123][T15989] anon 2306048 [ 908.008123][T15989] file 4464640 [ 908.008123][T15989] kernel_stack 196608 [ 908.008123][T15989] slab 1282048 [ 908.008123][T15989] sock 69632 [ 908.008123][T15989] shmem 4464640 [ 908.008123][T15989] file_mapped 0 [ 908.008123][T15989] file_dirty 0 [ 908.008123][T15989] file_writeback 0 [ 908.008123][T15989] anon_thp 2097152 [ 908.008123][T15989] inactive_anon 4460544 [ 908.008123][T15989] active_anon 2244608 [ 908.008123][T15989] inactive_file 0 [ 908.008123][T15989] active_file 0 [ 908.008123][T15989] unevictable 0 [ 908.008123][T15989] slab_reclaimable 135168 [ 908.008123][T15989] slab_unreclaimable 1146880 [ 908.008123][T15989] pgfault 46134 [ 908.008123][T15989] pgmajfault 0 [ 908.008123][T15989] workingset_refault 0 [ 908.008123][T15989] workingset_activate 0 [ 908.008123][T15989] workingset_nodereclaim 0 [ 908.008123][T15989] pgrefill 0 [ 908.008123][T15989] pgscan 0 [ 908.008123][T15989] pgsteal 0 [ 908.008123][T15989] pgactivate 0 [ 908.104204][T15989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15987,uid=0 17:21:26 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c87", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:26 executing program 2: 17:21:26 executing program 4: 17:21:26 executing program 1: 17:21:26 executing program 3: 17:21:26 executing program 5: [ 908.120027][T15989] Memory cgroup out of memory: Killed process 15987 (syz-executor.0) total-vm:72720kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 908.141267][ T1829] oom_reaper: reaped process 15987 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 908.190046][T15984] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 908.200108][T15984] CPU: 1 PID: 15984 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 908.208037][T15984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.218123][T15984] Call Trace: [ 908.221475][T15984] dump_stack+0x191/0x1f0 [ 908.225870][T15984] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 908.231821][T15984] dump_header+0x1e7/0xd00 17:21:26 executing program 2: 17:21:26 executing program 3: [ 908.236300][T15984] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 908.242527][T15984] ? ___ratelimit+0x542/0x720 [ 908.247265][T15984] ? task_will_free_mem+0x2c9/0x810 [ 908.252537][T15984] oom_kill_process+0x210/0x560 [ 908.257450][T15984] out_of_memory+0x1796/0x1c70 [ 908.262268][T15984] ? kmsan_internal_set_origin+0x6a/0xb0 [ 908.267980][T15984] try_charge+0x2889/0x3d70 [ 908.272552][T15984] ? __module_address+0x68/0x5e0 [ 908.277597][T15984] mem_cgroup_try_charge+0xa29/0xe40 [ 908.282952][T15984] mem_cgroup_try_charge_delay+0x7e/0x140 [ 908.288734][T15984] wp_page_copy+0x776/0x26d0 [ 908.293393][T15984] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 908.299352][T15984] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 908.305581][T15984] ? kmsan_internal_set_origin+0x6a/0xb0 [ 908.311281][T15984] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 908.317392][T15984] do_wp_page+0x1e8c/0x37f0 [ 908.321947][T15984] ? kmsan_internal_set_origin+0x6a/0xb0 [ 908.327630][T15984] handle_mm_fault+0x46e3/0x9f70 [ 908.332651][T15984] do_user_addr_fault+0x905/0x1510 [ 908.337810][T15984] __do_page_fault+0x1a2/0x410 [ 908.344726][T15984] do_page_fault+0xbb/0x500 [ 908.349280][T15984] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 908.357904][T15984] page_fault+0x4e/0x60 [ 908.362077][T15984] RIP: 0033:0x4329fe [ 908.365998][T15984] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 908.385627][T15984] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 908.391713][T15984] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 908.399797][T15984] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 908.407794][T15984] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001b58940 [ 908.415792][T15984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 908.423797][T15984] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 908.434033][T15984] memory: usage 6024kB, limit 0kB, failcnt 940 17:21:26 executing program 4: [ 908.440254][T15984] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.447250][T15984] Memory cgroup stats for /syz0: [ 908.447528][T15984] anon 57344 [ 908.447528][T15984] file 4464640 [ 908.447528][T15984] kernel_stack 0 [ 908.447528][T15984] slab 1282048 [ 908.447528][T15984] sock 69632 [ 908.447528][T15984] shmem 4464640 [ 908.447528][T15984] file_mapped 0 [ 908.447528][T15984] file_dirty 0 [ 908.447528][T15984] file_writeback 0 [ 908.447528][T15984] anon_thp 0 [ 908.447528][T15984] inactive_anon 4460544 [ 908.447528][T15984] active_anon 135168 [ 908.447528][T15984] inactive_file 0 [ 908.447528][T15984] active_file 0 [ 908.447528][T15984] unevictable 0 [ 908.447528][T15984] slab_reclaimable 135168 [ 908.447528][T15984] slab_unreclaimable 1146880 [ 908.447528][T15984] pgfault 46167 [ 908.447528][T15984] pgmajfault 0 [ 908.447528][T15984] workingset_refault 0 [ 908.447528][T15984] workingset_activate 0 [ 908.447528][T15984] workingset_nodereclaim 0 [ 908.447528][T15984] pgrefill 0 [ 908.447528][T15984] pgscan 0 [ 908.447528][T15984] pgsteal 0 [ 908.447528][T15984] pgactivate 0 [ 908.542277][T15984] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15984,uid=0 [ 908.558155][T15984] Memory cgroup out of memory: Killed process 15984 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 908.577232][ T1829] oom_reaper: reaped process 15984 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:26 executing program 1: 17:21:26 executing program 5: 17:21:26 executing program 3: 17:21:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c87", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:27 executing program 4: 17:21:27 executing program 2: 17:21:27 executing program 5: 17:21:27 executing program 1: 17:21:27 executing program 3: 17:21:27 executing program 3: 17:21:27 executing program 4: 17:21:27 executing program 5: 17:21:27 executing program 1: 17:21:27 executing program 2: 17:21:27 executing program 4: 17:21:27 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c87", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:27 executing program 3: 17:21:27 executing program 1: 17:21:27 executing program 5: 17:21:27 executing program 4: 17:21:27 executing program 2: 17:21:27 executing program 1: 17:21:27 executing program 3: 17:21:27 executing program 5: 17:21:27 executing program 2: 17:21:28 executing program 4: 17:21:28 executing program 1: [ 910.863933][T13808] device bridge_slave_1 left promiscuous mode [ 910.870365][T13808] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.913332][T13808] device bridge_slave_0 left promiscuous mode [ 910.919851][T13808] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.769097][T16057] IPVS: ftp: loaded support on port[0] = 21 [ 911.780628][T13808] device hsr_slave_0 left promiscuous mode [ 911.822235][T13808] device hsr_slave_1 left promiscuous mode [ 911.901603][T13808] team0 (unregistering): Port device team_slave_1 removed [ 911.913940][T13808] team0 (unregistering): Port device team_slave_0 removed [ 911.925556][T13808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 911.957512][T13808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.030501][T13808] bond0 (unregistering): Released all slaves [ 912.170258][T16057] chnl_net:caif_netlink_parms(): no params data found [ 912.210286][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.217435][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.225851][T16057] device bridge_slave_0 entered promiscuous mode [ 912.234918][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.242174][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.250279][T16057] device bridge_slave_1 entered promiscuous mode [ 912.274565][T16057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.286513][T16057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.347016][T16057] team0: Port device team_slave_0 added [ 912.356510][T16057] team0: Port device team_slave_1 added [ 912.430712][T16057] device hsr_slave_0 entered promiscuous mode [ 912.464947][T16057] device hsr_slave_1 entered promiscuous mode [ 912.522186][T16057] debugfs: Directory 'hsr0' with parent '/' already present! [ 912.551005][T16057] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.559339][T16057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.567075][T16057] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.574238][T16057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.656380][T16057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.677189][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.687043][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.695461][T30475] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.711395][T16057] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.726065][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.737045][T13677] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.744255][T13677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.765139][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 912.774412][T13677] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.781597][T13677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.804618][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 912.815897][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 912.832224][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 912.852887][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 912.861770][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.874751][T16057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 912.901357][T16057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.036216][T16062] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 913.046689][T16062] CPU: 0 PID: 16062 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 913.054616][T16062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.064683][T16062] Call Trace: [ 913.068005][T16062] dump_stack+0x191/0x1f0 [ 913.072359][T16062] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 913.078313][T16062] dump_header+0x1e7/0xd00 [ 913.082748][T16062] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 913.088916][T16062] ? ___ratelimit+0x542/0x720 [ 913.093609][T16062] ? task_will_free_mem+0x14c/0x810 [ 913.098824][T16062] oom_kill_process+0x210/0x560 [ 913.103692][T16062] out_of_memory+0x1796/0x1c70 [ 913.108469][T16062] ? kmsan_internal_set_origin+0x6a/0xb0 [ 913.114126][T16062] memory_max_write+0x90b/0xb60 [ 913.119005][T16062] ? memory_max_show+0x1b0/0x1b0 [ 913.123977][T16062] cgroup_file_write+0x41a/0x8e0 [ 913.128955][T16062] ? cgroup_seqfile_stop+0x150/0x150 [ 913.134291][T16062] kernfs_fop_write+0x55f/0x840 [ 913.139163][T16062] ? kernfs_fop_read+0x9a0/0x9a0 [ 913.144109][T16062] __vfs_write+0x1a9/0xcb0 [ 913.148552][T16062] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 913.154629][T16062] ? __sb_start_write+0x10b/0x230 [ 913.159661][T16062] vfs_write+0x481/0x920 [ 913.163915][T16062] ksys_write+0x265/0x430 [ 913.168261][T16062] __se_sys_write+0x92/0xb0 [ 913.172769][T16062] __x64_sys_write+0x4a/0x70 [ 913.177366][T16062] do_syscall_64+0xb6/0x160 [ 913.181973][T16062] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 913.187864][T16062] RIP: 0033:0x459f39 [ 913.191794][T16062] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.211433][T16062] RSP: 002b:00007f7a71717c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 913.220055][T16062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 913.228066][T16062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 913.236073][T16062] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 913.244102][T16062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7a717186d4 [ 913.252095][T16062] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 913.263394][T16062] memory: usage 7864kB, limit 0kB, failcnt 949 [ 913.269615][T16062] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.276625][T16062] Memory cgroup stats for /syz0: [ 913.276918][T16062] anon 2277376 [ 913.276918][T16062] file 3977216 [ 913.276918][T16062] kernel_stack 196608 [ 913.276918][T16062] slab 1282048 [ 913.276918][T16062] sock 69632 [ 913.276918][T16062] shmem 3977216 [ 913.276918][T16062] file_mapped 0 [ 913.276918][T16062] file_dirty 0 [ 913.276918][T16062] file_writeback 0 [ 913.276918][T16062] anon_thp 2097152 [ 913.276918][T16062] inactive_anon 3919872 [ 913.276918][T16062] active_anon 2220032 [ 913.276918][T16062] inactive_file 0 [ 913.276918][T16062] active_file 0 [ 913.276918][T16062] unevictable 0 [ 913.276918][T16062] slab_reclaimable 135168 [ 913.276918][T16062] slab_unreclaimable 1146880 [ 913.276918][T16062] pgfault 46200 [ 913.276918][T16062] pgmajfault 0 [ 913.276918][T16062] workingset_refault 0 [ 913.276918][T16062] workingset_activate 0 [ 913.276918][T16062] workingset_nodereclaim 0 [ 913.276918][T16062] pgrefill 0 [ 913.276918][T16062] pgscan 0 [ 913.276918][T16062] pgsteal 0 [ 913.276918][T16062] pgactivate 0 17:21:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d13", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:31 executing program 5: 17:21:31 executing program 3: 17:21:31 executing program 4: 17:21:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 17:21:31 executing program 1: [ 913.376113][T16062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16060,uid=0 [ 913.391829][T16062] Memory cgroup out of memory: Killed process 16060 (syz-executor.0) total-vm:72720kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 913.413835][ T1829] oom_reaper: reaped process 16060 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 913.498241][T16057] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 913.508963][T16057] CPU: 0 PID: 16057 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 913.516900][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.527000][T16057] Call Trace: [ 913.530357][T16057] dump_stack+0x191/0x1f0 [ 913.534755][T16057] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 913.540710][T16057] dump_header+0x1e7/0xd00 [ 913.545203][T16057] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 913.551435][T16057] ? ___ratelimit+0x542/0x720 [ 913.556173][T16057] ? task_will_free_mem+0x2c9/0x810 [ 913.561458][T16057] oom_kill_process+0x210/0x560 [ 913.566380][T16057] out_of_memory+0x1796/0x1c70 [ 913.571191][T16057] ? kmsan_internal_set_origin+0x6a/0xb0 [ 913.576912][T16057] try_charge+0x2889/0x3d70 [ 913.581499][T16057] ? __module_address+0x68/0x5e0 [ 913.586530][T16057] mem_cgroup_try_charge+0xa29/0xe40 [ 913.591861][T16057] mem_cgroup_try_charge_delay+0x7e/0x140 [ 913.597611][T16057] wp_page_copy+0x776/0x26d0 [ 913.602228][T16057] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 913.608149][T16057] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 913.614334][T16057] ? kmsan_internal_set_origin+0x6a/0xb0 [ 913.620005][T16057] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 913.626010][T16057] do_wp_page+0x1e8c/0x37f0 [ 913.630549][T16057] handle_mm_fault+0x46e3/0x9f70 [ 913.635549][T16057] do_user_addr_fault+0x905/0x1510 [ 913.640709][T16057] __do_page_fault+0x1a2/0x410 [ 913.645589][T16057] do_page_fault+0xbb/0x500 [ 913.650566][T16057] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 913.655978][T16057] page_fault+0x4e/0x60 [ 913.660150][T16057] RIP: 0033:0x4329fe [ 913.664068][T16057] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 913.683690][T16057] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 913.689776][T16057] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 913.697856][T16057] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 913.705839][T16057] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000002502940 [ 913.713828][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 913.721810][T16057] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 913.732240][T16057] memory: usage 5396kB, limit 0kB, failcnt 964 [ 913.738447][T16057] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.745421][T16057] Memory cgroup stats for /syz0: [ 913.745726][T16057] anon 53248 [ 913.745726][T16057] file 3977216 [ 913.745726][T16057] kernel_stack 0 [ 913.745726][T16057] slab 1282048 [ 913.745726][T16057] sock 69632 [ 913.745726][T16057] shmem 3977216 [ 913.745726][T16057] file_mapped 0 [ 913.745726][T16057] file_dirty 0 [ 913.745726][T16057] file_writeback 0 [ 913.745726][T16057] anon_thp 0 [ 913.745726][T16057] inactive_anon 3919872 [ 913.745726][T16057] active_anon 53248 [ 913.745726][T16057] inactive_file 0 [ 913.745726][T16057] active_file 0 [ 913.745726][T16057] unevictable 0 [ 913.745726][T16057] slab_reclaimable 135168 [ 913.745726][T16057] slab_unreclaimable 1146880 [ 913.745726][T16057] pgfault 46233 [ 913.745726][T16057] pgmajfault 0 [ 913.745726][T16057] workingset_refault 0 [ 913.745726][T16057] workingset_activate 0 [ 913.745726][T16057] workingset_nodereclaim 0 [ 913.745726][T16057] pgrefill 0 [ 913.745726][T16057] pgscan 0 [ 913.745726][T16057] pgsteal 0 [ 913.745726][T16057] pgactivate 0 17:21:31 executing program 5: 17:21:31 executing program 4: 17:21:31 executing program 1: 17:21:31 executing program 3: [ 913.845086][T16057] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16057,uid=0 [ 913.860761][T16057] Memory cgroup out of memory: Killed process 16057 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 913.888560][ T1829] oom_reaper: reaped process 16057 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:32 executing program 5: 17:21:32 executing program 3: 17:21:32 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d13", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:32 executing program 4: 17:21:32 executing program 1: 17:21:32 executing program 3: 17:21:32 executing program 5: 17:21:32 executing program 2: 17:21:32 executing program 3: 17:21:32 executing program 2: 17:21:32 executing program 4: 17:21:32 executing program 1: 17:21:32 executing program 5: 17:21:32 executing program 2: 17:21:33 executing program 3: 17:21:33 executing program 4: 17:21:33 executing program 1: 17:21:33 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d13", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:33 executing program 5: 17:21:33 executing program 2: 17:21:33 executing program 4: 17:21:33 executing program 1: 17:21:33 executing program 2: 17:21:33 executing program 3: 17:21:33 executing program 5: 17:21:33 executing program 4: 17:21:33 executing program 2: [ 916.283957][ T6251] device bridge_slave_1 left promiscuous mode [ 916.290408][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.333699][ T6251] device bridge_slave_0 left promiscuous mode [ 916.340213][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.063537][ T6251] device hsr_slave_0 left promiscuous mode [ 917.112316][ T6251] device hsr_slave_1 left promiscuous mode [ 917.168800][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 917.186055][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 917.211114][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.257453][T16135] IPVS: ftp: loaded support on port[0] = 21 [ 917.274405][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.371043][ T6251] bond0 (unregistering): Released all slaves [ 917.561419][T16135] chnl_net:caif_netlink_parms(): no params data found [ 917.601727][T16135] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.608981][T16135] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.617404][T16135] device bridge_slave_0 entered promiscuous mode [ 917.625803][T16135] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.633428][T16135] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.641488][T16135] device bridge_slave_1 entered promiscuous mode [ 917.708655][T16135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.728577][T16135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.764011][T16135] team0: Port device team_slave_0 added [ 917.775921][T16135] team0: Port device team_slave_1 added [ 917.866058][T16135] device hsr_slave_0 entered promiscuous mode [ 917.912612][T16135] device hsr_slave_1 entered promiscuous mode [ 917.972136][T16135] debugfs: Directory 'hsr0' with parent '/' already present! [ 918.000715][T16135] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.007925][T16135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.015668][T16135] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.022889][T16135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.103973][T16135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.126286][T13677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 918.135017][T13677] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.143761][T13677] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.159975][T16135] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.178880][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 918.187779][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.194999][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.213579][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 918.222805][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.229966][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.250656][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 918.276278][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 918.285897][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 918.295751][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 918.311741][T16135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.324458][T16135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 918.333695][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 918.367933][T16135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.533726][T16139] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 918.547061][T16139] CPU: 1 PID: 16139 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 918.554981][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 918.565070][T16139] Call Trace: [ 918.568401][T16139] dump_stack+0x191/0x1f0 [ 918.572789][T16139] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 918.578733][T16139] dump_header+0x1e7/0xd00 [ 918.583242][T16139] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 918.589412][T16139] ? ___ratelimit+0x542/0x720 [ 918.594218][T16139] ? task_will_free_mem+0x14c/0x810 [ 918.599459][T16139] oom_kill_process+0x210/0x560 [ 918.604339][T16139] out_of_memory+0x1796/0x1c70 [ 918.609113][T16139] ? kmsan_internal_set_origin+0x6a/0xb0 [ 918.614769][T16139] try_charge+0x2889/0x3d70 [ 918.619314][T16139] mem_cgroup_try_charge+0xa29/0xe40 [ 918.624622][T16139] mem_cgroup_try_charge_delay+0x7e/0x140 [ 918.630355][T16139] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 918.636351][T16139] shmem_getpage_gfp+0x1f48/0x3f80 [ 918.641500][T16139] ? kmsan_get_metadata+0x39/0x350 [ 918.646642][T16139] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 918.652583][T16139] shmem_write_begin+0x1ac/0x310 [ 918.657576][T16139] ? shmem_writepage+0x18f0/0x18f0 [ 918.662724][T16139] generic_perform_write+0x424/0x990 [ 918.668039][T16139] ? shmem_write_begin+0x310/0x310 [ 918.673219][T16139] __generic_file_write_iter+0x44e/0xa50 [ 918.678914][T16139] generic_file_write_iter+0x770/0xad0 [ 918.684436][T16139] ? __generic_file_write_iter+0xa50/0xa50 [ 918.690260][T16139] __vfs_write+0xa2c/0xcb0 [ 918.694703][T16139] vfs_write+0x481/0x920 [ 918.698961][T16139] ksys_write+0x265/0x430 [ 918.703319][T16139] __se_sys_write+0x92/0xb0 [ 918.707832][T16139] __x64_sys_write+0x4a/0x70 [ 918.712457][T16139] do_syscall_64+0xb6/0x160 [ 918.717039][T16139] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 918.722940][T16139] RIP: 0033:0x459f39 [ 918.726846][T16139] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 918.746476][T16139] RSP: 002b:00007f0c93ef7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.755217][T16139] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 918.763236][T16139] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 918.771216][T16139] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 918.779192][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c93ef86d4 [ 918.787274][T16139] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 918.798309][T16139] memory: usage 8424kB, limit 0kB, failcnt 973 [ 918.804574][T16139] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.811422][T16139] Memory cgroup stats for /syz0: [ 918.811624][T16139] anon 2277376 [ 918.811624][T16139] file 4427776 [ 918.811624][T16139] kernel_stack 196608 [ 918.811624][T16139] slab 1282048 [ 918.811624][T16139] sock 69632 [ 918.811624][T16139] shmem 4427776 [ 918.811624][T16139] file_mapped 0 [ 918.811624][T16139] file_dirty 0 [ 918.811624][T16139] file_writeback 0 [ 918.811624][T16139] anon_thp 2097152 [ 918.811624][T16139] inactive_anon 4460544 [ 918.811624][T16139] active_anon 2277376 [ 918.811624][T16139] inactive_file 0 [ 918.811624][T16139] active_file 0 [ 918.811624][T16139] unevictable 0 [ 918.811624][T16139] slab_reclaimable 135168 [ 918.811624][T16139] slab_unreclaimable 1146880 [ 918.811624][T16139] pgfault 46266 [ 918.811624][T16139] pgmajfault 0 [ 918.811624][T16139] workingset_refault 0 [ 918.811624][T16139] workingset_activate 0 [ 918.811624][T16139] workingset_nodereclaim 0 [ 918.811624][T16139] pgrefill 0 [ 918.811624][T16139] pgscan 0 [ 918.811624][T16139] pgsteal 0 [ 918.811624][T16139] pgactivate 0 [ 918.907602][T16139] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16138,uid=0 17:21:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:37 executing program 1: 17:21:37 executing program 3: 17:21:37 executing program 5: 17:21:37 executing program 2: 17:21:37 executing program 4: [ 918.923346][T16139] Memory cgroup out of memory: Killed process 16138 (syz-executor.0) total-vm:72720kB, anon-rss:2156kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 918.943650][ T1829] oom_reaper: reaped process 16138 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 919.039328][T16135] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 919.049603][T16135] CPU: 0 PID: 16135 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 919.057537][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.067634][T16135] Call Trace: [ 919.070991][T16135] dump_stack+0x191/0x1f0 [ 919.075380][T16135] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 919.081331][T16135] dump_header+0x1e7/0xd00 [ 919.085812][T16135] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 919.092030][T16135] ? ___ratelimit+0x542/0x720 [ 919.096761][T16135] ? task_will_free_mem+0x2c9/0x810 [ 919.102030][T16135] oom_kill_process+0x210/0x560 [ 919.106921][T16135] out_of_memory+0x1796/0x1c70 [ 919.111713][T16135] ? kmsan_internal_set_origin+0x6a/0xb0 [ 919.117383][T16135] try_charge+0x2889/0x3d70 [ 919.121932][T16135] ? __module_address+0x68/0x5e0 [ 919.126955][T16135] mem_cgroup_try_charge+0xa29/0xe40 [ 919.132281][T16135] mem_cgroup_try_charge_delay+0x7e/0x140 [ 919.138031][T16135] wp_page_copy+0x776/0x26d0 [ 919.142649][T16135] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 919.148572][T16135] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 919.154773][T16135] ? kmsan_internal_set_origin+0x6a/0xb0 [ 919.160447][T16135] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 919.166455][T16135] do_wp_page+0x1e8c/0x37f0 [ 919.170982][T16135] ? kmsan_internal_set_origin+0x6a/0xb0 [ 919.176651][T16135] handle_mm_fault+0x46e3/0x9f70 [ 919.181653][T16135] do_user_addr_fault+0x905/0x1510 [ 919.186826][T16135] __do_page_fault+0x1a2/0x410 [ 919.191629][T16135] do_page_fault+0xbb/0x500 [ 919.196253][T16135] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 919.201683][T16135] page_fault+0x4e/0x60 [ 919.205854][T16135] RIP: 0033:0x4329fe [ 919.209779][T16135] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 919.229404][T16135] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 17:21:37 executing program 3: 17:21:37 executing program 5: [ 919.235493][T16135] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 919.243480][T16135] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 919.251471][T16135] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001db1940 [ 919.259457][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 919.267460][T16135] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 919.276256][T16135] memory: usage 5948kB, limit 0kB, failcnt 988 [ 919.282558][T16135] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 17:21:37 executing program 2: 17:21:37 executing program 4: [ 919.289458][T16135] Memory cgroup stats for /syz0: [ 919.289785][T16135] anon 53248 [ 919.289785][T16135] file 4427776 [ 919.289785][T16135] kernel_stack 0 [ 919.289785][T16135] slab 1282048 [ 919.289785][T16135] sock 69632 [ 919.289785][T16135] shmem 4427776 [ 919.289785][T16135] file_mapped 0 [ 919.289785][T16135] file_dirty 0 [ 919.289785][T16135] file_writeback 0 [ 919.289785][T16135] anon_thp 0 [ 919.289785][T16135] inactive_anon 4460544 [ 919.289785][T16135] active_anon 53248 [ 919.289785][T16135] inactive_file 0 17:21:37 executing program 1: [ 919.289785][T16135] active_file 0 [ 919.289785][T16135] unevictable 0 [ 919.289785][T16135] slab_reclaimable 135168 [ 919.289785][T16135] slab_unreclaimable 1146880 [ 919.289785][T16135] pgfault 46299 [ 919.289785][T16135] pgmajfault 0 [ 919.289785][T16135] workingset_refault 0 [ 919.289785][T16135] workingset_activate 0 [ 919.289785][T16135] workingset_nodereclaim 0 [ 919.289785][T16135] pgrefill 0 [ 919.289785][T16135] pgscan 0 [ 919.289785][T16135] pgsteal 0 [ 919.289785][T16135] pgactivate 0 [ 919.385449][T16135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16135,uid=0 [ 919.401232][T16135] Memory cgroup out of memory: Killed process 16135 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 919.433128][ T1829] oom_reaper: reaped process 16135 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:37 executing program 3: 17:21:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:37 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x1, 0xfff, 0x401}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000005c0)=0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) 17:21:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@srh, 0x8) 17:21:37 executing program 1: mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x0, 0x6) 17:21:37 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x8000000000080001, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000100) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x9, 0x4) msgget$private(0x0, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x2, 0x0, 0x1}) 17:21:37 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 17:21:38 executing program 4: pipe2$9p(0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x0) 17:21:38 executing program 3: 17:21:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b081ebcef225d350d439c49c62c250859f642187377ca3c2e067100762327dabc6c09f9376ca951ae914c", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) 17:21:38 executing program 1: 17:21:38 executing program 3: 17:21:38 executing program 4: 17:21:38 executing program 1: 17:21:40 executing program 4: 17:21:40 executing program 3: 17:21:40 executing program 1: 17:21:40 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000005c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x1, 0xfff, 0x401}) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x208200) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000005c0)=0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) 17:21:40 executing program 2: [ 922.063912][ T367] device bridge_slave_1 left promiscuous mode [ 922.070566][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.123102][ T367] device bridge_slave_0 left promiscuous mode [ 922.129794][ T367] bridge0: port 1(bridge_slave_0) entered disabled state 17:21:40 executing program 1: 17:21:40 executing program 4: [ 923.285504][T16421] IPVS: ftp: loaded support on port[0] = 21 [ 923.952865][ T367] device hsr_slave_0 left promiscuous mode [ 923.992255][ T367] device hsr_slave_1 left promiscuous mode [ 924.040837][ T367] team0 (unregistering): Port device team_slave_1 removed [ 924.053222][ T367] team0 (unregistering): Port device team_slave_0 removed [ 924.064497][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.088300][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.170387][ T367] bond0 (unregistering): Released all slaves [ 924.353574][T16421] chnl_net:caif_netlink_parms(): no params data found [ 924.394775][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.402022][T16421] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.410034][T16421] device bridge_slave_0 entered promiscuous mode [ 924.418482][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.425664][T16421] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.433924][T16421] device bridge_slave_1 entered promiscuous mode [ 924.457082][T16421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.515713][T16421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.551430][T16421] team0: Port device team_slave_0 added [ 924.560866][T16421] team0: Port device team_slave_1 added [ 924.648952][T16421] device hsr_slave_0 entered promiscuous mode [ 924.692878][T16421] device hsr_slave_1 entered promiscuous mode [ 924.752163][T16421] debugfs: Directory 'hsr0' with parent '/' already present! [ 924.779517][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.786884][T16421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.794627][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.802826][T16421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.868469][T16421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.888483][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 924.898334][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.907883][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.932421][T16421] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.947039][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.956133][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.963328][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.978111][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.988009][T30475] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.995192][T30475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.018695][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 925.028466][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 925.042411][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 925.057802][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.075018][T16421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.086923][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 925.096954][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.132144][T16421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.277461][T16427] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 925.288337][T16427] CPU: 1 PID: 16427 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 925.296254][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.306411][T16427] Call Trace: [ 925.309721][T16427] dump_stack+0x191/0x1f0 [ 925.314222][T16427] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 925.320162][T16427] dump_header+0x1e7/0xd00 [ 925.324746][T16427] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 925.330924][T16427] ? ___ratelimit+0x542/0x720 [ 925.335611][T16427] ? task_will_free_mem+0x14c/0x810 [ 925.340999][T16427] oom_kill_process+0x210/0x560 [ 925.345865][T16427] out_of_memory+0x1796/0x1c70 [ 925.350757][T16427] ? kmsan_internal_set_origin+0x6a/0xb0 [ 925.356429][T16427] memory_max_write+0x90b/0xb60 [ 925.361307][T16427] ? memory_max_show+0x1b0/0x1b0 [ 925.366262][T16427] cgroup_file_write+0x41a/0x8e0 [ 925.371229][T16427] ? cgroup_seqfile_stop+0x150/0x150 [ 925.376525][T16427] kernfs_fop_write+0x55f/0x840 [ 925.381393][T16427] ? kernfs_fop_read+0x9a0/0x9a0 [ 925.386351][T16427] __vfs_write+0x1a9/0xcb0 [ 925.390803][T16427] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 925.397020][T16427] ? __sb_start_write+0x10b/0x230 [ 925.402074][T16427] vfs_write+0x481/0x920 [ 925.406332][T16427] ksys_write+0x265/0x430 [ 925.410673][T16427] __se_sys_write+0x92/0xb0 [ 925.415186][T16427] __x64_sys_write+0x4a/0x70 [ 925.419782][T16427] do_syscall_64+0xb6/0x160 [ 925.424313][T16427] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 925.430204][T16427] RIP: 0033:0x459f39 [ 925.434126][T16427] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 925.453760][T16427] RSP: 002b:00007fae3cbcac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 925.462184][T16427] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 925.470158][T16427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 925.478128][T16427] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 925.486102][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fae3cbcb6d4 [ 925.494078][T16427] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 925.502234][T16427] memory: usage 8332kB, limit 0kB, failcnt 997 [ 925.508430][T16427] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.515387][T16427] Memory cgroup stats for /syz0: [ 925.515724][T16427] anon 2215936 [ 925.515724][T16427] file 4325376 [ 925.515724][T16427] kernel_stack 196608 [ 925.515724][T16427] slab 1282048 [ 925.515724][T16427] sock 69632 [ 925.515724][T16427] shmem 4325376 [ 925.515724][T16427] file_mapped 0 [ 925.515724][T16427] file_dirty 0 [ 925.515724][T16427] file_writeback 0 [ 925.515724][T16427] anon_thp 2097152 [ 925.515724][T16427] inactive_anon 4460544 [ 925.515724][T16427] active_anon 2215936 [ 925.515724][T16427] inactive_file 0 [ 925.515724][T16427] active_file 0 [ 925.515724][T16427] unevictable 0 [ 925.515724][T16427] slab_reclaimable 135168 [ 925.515724][T16427] slab_unreclaimable 1146880 [ 925.515724][T16427] pgfault 46365 [ 925.515724][T16427] pgmajfault 0 [ 925.515724][T16427] workingset_refault 0 [ 925.515724][T16427] workingset_activate 0 [ 925.515724][T16427] workingset_nodereclaim 0 [ 925.515724][T16427] pgrefill 0 [ 925.515724][T16427] pgscan 0 [ 925.515724][T16427] pgsteal 0 [ 925.515724][T16427] pgactivate 0 [ 925.611667][T16427] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16425,uid=0 17:21:43 executing program 3: 17:21:43 executing program 2: 17:21:43 executing program 1: 17:21:43 executing program 4: 17:21:43 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", 0x0, 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 925.627909][T16427] Memory cgroup out of memory: Killed process 16425 (syz-executor.0) total-vm:72720kB, anon-rss:2152kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 925.652894][ T1829] oom_reaper: reaped process 16425 (syz-executor.0), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 17:21:43 executing program 5: [ 925.760991][T16421] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 925.771283][T16421] CPU: 1 PID: 16421 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 925.779215][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 925.789313][T16421] Call Trace: [ 925.792665][T16421] dump_stack+0x191/0x1f0 [ 925.797047][T16421] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 925.802968][T16421] dump_header+0x1e7/0xd00 [ 925.807426][T16421] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 925.814220][T16421] ? ___ratelimit+0x542/0x720 [ 925.818916][T16421] ? task_will_free_mem+0x2c9/0x810 [ 925.824162][T16421] oom_kill_process+0x210/0x560 [ 925.829041][T16421] out_of_memory+0x1796/0x1c70 [ 925.833835][T16421] ? kmsan_internal_set_origin+0x6a/0xb0 [ 925.839507][T16421] try_charge+0x2889/0x3d70 [ 925.844043][T16421] ? __module_address+0x68/0x5e0 [ 925.849045][T16421] mem_cgroup_try_charge+0xa29/0xe40 [ 925.854374][T16421] mem_cgroup_try_charge_delay+0x7e/0x140 [ 925.860398][T16421] wp_page_copy+0x776/0x26d0 [ 925.865279][T16421] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 925.871203][T16421] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 925.877389][T16421] ? kmsan_internal_set_origin+0x6a/0xb0 [ 925.883056][T16421] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 925.889059][T16421] do_wp_page+0x1e8c/0x37f0 [ 925.893585][T16421] ? kmsan_internal_set_origin+0x6a/0xb0 [ 925.899253][T16421] handle_mm_fault+0x46e3/0x9f70 [ 925.904258][T16421] do_user_addr_fault+0x905/0x1510 [ 925.909416][T16421] __do_page_fault+0x1a2/0x410 [ 925.914208][T16421] do_page_fault+0xbb/0x500 [ 925.918743][T16421] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 925.924144][T16421] page_fault+0x4e/0x60 [ 925.928312][T16421] RIP: 0033:0x4329fe [ 925.932234][T16421] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 925.951866][T16421] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 925.961958][T16421] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 925.969963][T16421] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 925.977964][T16421] RBP: 0000000000008030 R08: 0000000000000001 R09: 000000000240b940 [ 925.985964][T16421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 925.993961][T16421] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 926.003304][T16421] memory: usage 5860kB, limit 0kB, failcnt 1012 17:21:43 executing program 1: [ 926.009609][T16421] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.016549][T16421] Memory cgroup stats for /syz0: [ 926.016848][T16421] anon 53248 [ 926.016848][T16421] file 4325376 [ 926.016848][T16421] kernel_stack 0 [ 926.016848][T16421] slab 1282048 [ 926.016848][T16421] sock 69632 [ 926.016848][T16421] shmem 4325376 [ 926.016848][T16421] file_mapped 0 [ 926.016848][T16421] file_dirty 0 [ 926.016848][T16421] file_writeback 0 [ 926.016848][T16421] anon_thp 0 [ 926.016848][T16421] inactive_anon 4460544 [ 926.016848][T16421] active_anon 53248 [ 926.016848][T16421] inactive_file 0 [ 926.016848][T16421] active_file 0 [ 926.016848][T16421] unevictable 0 [ 926.016848][T16421] slab_reclaimable 135168 [ 926.016848][T16421] slab_unreclaimable 1146880 [ 926.016848][T16421] pgfault 46365 [ 926.016848][T16421] pgmajfault 0 [ 926.016848][T16421] workingset_refault 0 [ 926.016848][T16421] workingset_activate 0 [ 926.016848][T16421] workingset_nodereclaim 0 [ 926.016848][T16421] pgrefill 0 [ 926.016848][T16421] pgscan 0 [ 926.016848][T16421] pgsteal 0 17:21:44 executing program 3: 17:21:44 executing program 2: [ 926.016848][T16421] pgactivate 0 [ 926.113472][T16421] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16421,uid=0 [ 926.129128][T16421] Memory cgroup out of memory: Killed process 16421 (syz-executor.0) total-vm:72456kB, anon-rss:76kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 926.153126][ T1829] oom_reaper: reaped process 16421 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 17:21:44 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x92, 0xe0, 0xc, 0x40, 0x9e1, 0x5121, 0x1cc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x79, 0xe5, 0x9f}}]}}]}}, 0x0) 17:21:44 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x45, 0xea, 0x8, 0x499, 0x3498, 0x4c82, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x55, 0x7c}}]}}]}}, 0x0) 17:21:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2c, {0x2c, 0x0, "354a6b9dec63a6cc37f8fde27e1626f0e323277d07158bd465db184f583c758f4c45bd30f757e2c32871"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:21:44 executing program 3: syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x725e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x2a5}}}}}]}}]}}, 0x0) 17:21:44 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xf8, 0xfe, 0x8, 0x1199, 0x683b, 0x7886, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x41, 0x28, 0xce, 0x0, [], [{}]}}]}}]}}, 0x0) [ 926.612151][T13688] usb 5-1: new high-speed USB device number 2 using dummy_hcd 17:21:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", 0x0, 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 926.673863][T13677] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 926.812370][ T3381] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 926.820317][ T12] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 926.836023][ T54] usb 3-1: new high-speed USB device number 6 using dummy_hcd 17:21:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", 0x0, 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 926.874219][T13688] usb 5-1: Using ep0 maxpacket: 8 [ 927.014600][T13688] usb 5-1: New USB device found, idVendor=0499, idProduct=3498, bcdDevice=4c.82 [ 927.023899][T13688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.032393][T13677] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 927.040748][T13677] usb 6-1: config 0 has no interface number 0 [ 927.047441][T13677] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice= 1.cc [ 927.052790][T13688] usb 5-1: config 0 descriptor?? [ 927.056669][T13677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.092537][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 927.112178][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 927.175869][T13677] usb 6-1: config 0 descriptor?? [ 927.216324][ T3381] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 927.229493][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.232431][ T54] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 927.240534][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 927.251048][ T54] usb 3-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=78.86 [ 927.263828][ T12] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 927.263898][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.273508][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.301379][ T54] usb 3-1: config 0 descriptor?? [ 927.314636][T13802] usb 5-1: USB disconnect, device number 2 [ 927.331657][ T12] usb 2-1: config 0 descriptor?? [ 927.346371][ T54] sierra 3-1:0.0: Sierra USB modem converter detected [ 927.442578][T13677] usb 6-1: string descriptor 0 read error: -71 [ 927.449148][T13677] int51x1: probe of 6-1:0.223 failed with error -32 [ 927.473755][T13677] usb 6-1: USB disconnect, device number 2 [ 927.485169][ T3381] usb 4-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 927.494389][ T3381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.502994][ T3381] usb 4-1: Product: syz [ 927.507238][ T3381] usb 4-1: Manufacturer: syz [ 927.511918][ T3381] usb 4-1: SerialNumber: syz [ 927.555273][ T54] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 927.573437][ T54] usb 3-1: USB disconnect, device number 6 [ 927.584830][ T3381] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 927.617521][ T54] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 927.627694][ T54] sierra 3-1:0.0: device disconnected [ 927.784265][ T3381] usb 4-1: USB disconnect, device number 2 [ 927.833313][ T12] hid (null): unknown global tag 0xd [ 927.848098][ T12] kye 0003:0458:501A.0003: unknown main item tag 0x0 [ 927.855215][ T12] kye 0003:0458:501A.0003: unknown main item tag 0xe [ 927.862572][ T12] kye 0003:0458:501A.0003: unknown global tag 0xd [ 927.869125][ T12] kye 0003:0458:501A.0003: item 0 0 1 13 parsing failed [ 927.876657][ T12] kye 0003:0458:501A.0003: parse failed [ 927.882418][ T12] kye: probe of 0003:0458:501A.0003 failed with error -22 [ 928.053645][ T12] usb 2-1: USB disconnect, device number 2 [ 928.102864][T13802] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 928.182809][ T54] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 928.342642][T13688] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 928.350825][T13802] usb 5-1: Using ep0 maxpacket: 8 [ 928.357072][ T658] device bridge_slave_1 left promiscuous mode [ 928.363590][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.395676][ T658] device bridge_slave_0 left promiscuous mode [ 928.402360][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.472449][T13802] usb 5-1: New USB device found, idVendor=0499, idProduct=3498, bcdDevice=4c.82 [ 928.481762][T13802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.493138][T13802] usb 5-1: config 0 descriptor?? [ 928.552257][ T54] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 928.560517][ T54] usb 6-1: config 0 has no interface number 0 [ 928.566809][ T54] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice= 1.cc [ 928.575977][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.586680][ T3381] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 928.594649][T13688] usb 3-1: Using ep0 maxpacket: 8 [ 928.605012][ T54] usb 6-1: config 0 descriptor?? [ 928.712478][T13688] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 928.723595][T13688] usb 3-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=78.86 [ 928.732859][T13688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.745602][T16462] usb 5-1: USB disconnect, device number 3 [ 928.759585][T13688] usb 3-1: config 0 descriptor?? [ 928.807548][T13688] sierra 3-1:0.0: Sierra USB modem converter detected [ 928.892465][T13802] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 928.894968][ T54] usb 6-1: string descriptor 0 read error: -71 [ 928.906667][ T54] int51x1: probe of 6-1:0.223 failed with error -32 [ 928.921755][ T54] usb 6-1: USB disconnect, device number 3 [ 928.982980][ T3381] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 929.016544][T13688] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 929.036198][T13688] usb 3-1: USB disconnect, device number 7 [ 929.049116][T13688] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 929.058973][T13688] sierra 3-1:0.0: device disconnected [ 929.143139][T13802] usb 2-1: Using ep0 maxpacket: 16 [ 929.163012][ T3381] usb 4-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.40 [ 929.172253][ T3381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.180324][ T3381] usb 4-1: Product: syz [ 929.184657][ T3381] usb 4-1: Manufacturer: syz [ 929.189338][ T3381] usb 4-1: SerialNumber: syz 17:21:47 executing program 4: r0 = syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb, 0x8}}, {{0x9, 0x5, 0x1, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x7c, &(0x7f0000004280)=""/124) [ 929.294796][T13802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.306190][T13802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 929.319326][T13802] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 929.328559][T13802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.342671][ T3381] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 17:21:47 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xef, 0x45, 0x96, 0x10, 0x436, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa9, 0x2d, 0x83, 0x0, [], [{{0x9, 0x5, 0xa, 0x1e}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) [ 929.489330][T13802] usb 2-1: config 0 descriptor?? 17:21:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x356, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1477, 0x1006, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x78, {0x78, 0x0, "055b08e2b94db664517b80748e6597b20f948768d71ae713b641a5630d0becb54c4070509bf8d36eff46a06eaf741e45f63374f1a84942d05dc91b4eb456264eb8618dc70e051ec152cf58e2b12cb934714edcabceac15f68a94ec40cf76e4d40c50cc71edce1b78e0b26b845758e7f37c079735e7ba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 929.539297][ T54] usb 4-1: USB disconnect, device number 3 17:21:47 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0xffffffffffffff23}, {0xd}, [@call_mgmt]}, {[{}]}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x240}) 17:21:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x2c, {0x2c, 0x0, "354a6b9dec63a6cc37f8fde27e1626f0e323277d07158bd465db184f583c758f4c45bd30f757e2c32871"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 929.722283][ T3381] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 929.812763][T13802] usbhid 2-1:0.0: can't add hid device: -71 [ 929.819086][T13802] usbhid: probe of 2-1:0.0 failed with error -71 [ 929.844174][T13688] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 929.876963][T13802] usb 2-1: USB disconnect, device number 3 [ 929.900710][T16484] IPVS: ftp: loaded support on port[0] = 21 [ 929.972690][ T3381] usb 5-1: Using ep0 maxpacket: 8 [ 930.022293][T13677] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 930.042722][ T54] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 930.082372][T13688] usb 6-1: Using ep0 maxpacket: 16 [ 930.092952][ T3381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 930.104757][ T3381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 930.115813][ T3381] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 930.125056][ T3381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.140110][ T3381] usb 5-1: config 0 descriptor?? [ 930.222394][T13688] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 930.232722][T13688] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 930.242726][T13688] usb 6-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 930.251851][T13688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.282556][T13677] usb 3-1: Using ep0 maxpacket: 32 [ 930.301917][T13688] usb 6-1: config 0 descriptor?? [ 930.332595][T13802] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 930.345640][T13688] ums-sddr09 6-1:0.0: USB Mass Storage device detected [ 930.361115][ T658] device hsr_slave_0 left promiscuous mode [ 930.371850][T13688] scsi host1: usb-storage 6-1:0.0 [ 930.392689][ T658] device hsr_slave_1 left promiscuous mode [ 930.436783][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.447890][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 930.458879][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 930.472090][ T54] usb 4-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40 [ 930.481231][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.490300][T13677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 930.492230][ T658] team0 (unregistering): Port device team_slave_1 removed [ 930.500587][T13677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 930.516826][T13677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.528492][ T54] usb 4-1: config 0 descriptor?? [ 930.541570][ T658] team0 (unregistering): Port device team_slave_0 removed [ 930.557763][ T2670] usb 6-1: USB disconnect, device number 4 [ 930.568715][T13677] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 930.576308][T13677] usb 3-1: bad CDC descriptors [ 930.589216][ T658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.592554][T13802] usb 2-1: Using ep0 maxpacket: 16 [ 930.605643][T13677] usb 5-1: USB disconnect, device number 4 [ 930.659090][ T658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 930.722198][ T658] bond0 (unregistering): Released all slaves [ 930.735640][T13802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.746789][T13802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 930.759967][T13802] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 930.769248][T13802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.779535][T14791] usb 3-1: USB disconnect, device number 8 [ 930.779894][T13802] usb 2-1: config 0 descriptor?? [ 930.953900][T16484] chnl_net:caif_netlink_parms(): no params data found [ 931.051754][ T54] hid-generic 0003:1477:1006.0004: hidraw0: USB HID v0.00 Device [HID 1477:1006] on usb-dummy_hcd.3-1/input0 [ 931.063047][T16484] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.070695][T16484] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.079561][T16484] device bridge_slave_0 entered promiscuous mode [ 931.094574][T16484] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.102041][T16484] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.111343][T16484] device bridge_slave_1 entered promiscuous mode [ 931.178745][T16484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.195168][T16484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.234387][T16484] team0: Port device team_slave_0 added [ 931.243941][T16484] team0: Port device team_slave_1 added [ 931.253850][T13677] usb 4-1: USB disconnect, device number 4 [ 931.263349][T13802] hid (null): unknown global tag 0xd [ 931.274788][T13802] kye 0003:0458:501A.0005: unknown main item tag 0x0 [ 931.281842][T13802] kye 0003:0458:501A.0005: unknown main item tag 0xe [ 931.288904][T13802] kye 0003:0458:501A.0005: unknown global tag 0xd [ 931.296921][T13802] kye 0003:0458:501A.0005: item 0 0 1 13 parsing failed [ 931.304417][T13802] kye 0003:0458:501A.0005: parse failed [ 931.310113][T13802] kye: probe of 0003:0458:501A.0005 failed with error -22 [ 931.367237][T16484] device hsr_slave_0 entered promiscuous mode [ 931.387864][T14791] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 931.395655][ T54] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 931.407654][T16484] device hsr_slave_1 entered promiscuous mode [ 931.452412][T16484] debugfs: Directory 'hsr0' with parent '/' already present! [ 931.489107][T13802] usb 2-1: USB disconnect, device number 4 [ 931.500409][T16484] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.507984][T16484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.515619][T16484] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.522872][T16484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.594181][ T2670] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 931.613593][T16484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 931.636186][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 931.646807][T30475] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.655902][T30475] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.674457][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 931.677980][T16484] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.679790][T14791] usb 5-1: Using ep0 maxpacket: 8 [ 931.696248][T30475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 931.705757][T30475] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.712987][T30475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.731721][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 931.740804][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.748011][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 931.797557][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 931.806967][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 931.816661][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 931.827031][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 931.836957][ T54] usb 6-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 931.846116][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.850815][T16484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 931.855127][T14791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 931.865181][T16484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 931.875757][T14791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 931.896956][T14791] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 931.906168][T14791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.917987][ T2670] usb 3-1: Using ep0 maxpacket: 32 [ 931.924658][ T54] usb 6-1: config 0 descriptor?? [ 931.938844][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 931.948254][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 931.957749][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 931.970539][ T54] ums-sddr09 6-1:0.0: USB Mass Storage device detected [ 931.986182][T16484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.989573][T14791] usb 5-1: config 0 descriptor?? [ 931.999648][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 932.029810][ T54] scsi host1: usb-storage 6-1:0.0 [ 932.043068][T30475] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 932.054365][ T2670] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.065607][ T2670] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 932.074799][ T2670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:21:50 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) [ 932.144146][ T2670] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 932.151090][ T2670] usb 3-1: bad CDC descriptors [ 932.170275][T13802] usb 6-1: USB disconnect, device number 5 [ 932.238761][ T2670] usb 5-1: USB disconnect, device number 5 [ 932.252293][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 932.343708][ T54] usb 3-1: USB disconnect, device number 9 [ 932.397633][T16512] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 932.404248][T30475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.408294][T16512] CPU: 1 PID: 16512 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 932.418901][T30475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 932.426588][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.426605][T16512] Call Trace: [ 932.426659][T16512] dump_stack+0x191/0x1f0 [ 932.426713][T16512] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 932.426789][T16512] dump_header+0x1e7/0xd00 [ 932.438755][T30475] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 932.448704][T16512] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 932.448768][T16512] ? ___ratelimit+0x542/0x720 [ 932.452182][T30475] usb 4-1: New USB device found, idVendor=1477, idProduct=1006, bcdDevice= 0.40 [ 932.456381][T16512] ? task_will_free_mem+0x14c/0x810 [ 932.462335][T30475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.466692][T16512] oom_kill_process+0x210/0x560 [ 932.517516][T16512] out_of_memory+0x1796/0x1c70 [ 932.522343][T16512] ? kmsan_internal_set_origin+0x6a/0xb0 [ 932.528058][T16512] memory_max_write+0x90b/0xb60 [ 932.533001][T16512] ? memory_max_show+0x1b0/0x1b0 [ 932.537997][T16512] cgroup_file_write+0x41a/0x8e0 [ 932.538070][T16512] ? cgroup_seqfile_stop+0x150/0x150 [ 932.538116][T16512] kernfs_fop_write+0x55f/0x840 [ 932.538173][T16512] ? kernfs_fop_read+0x9a0/0x9a0 [ 932.558179][T16512] __vfs_write+0x1a9/0xcb0 [ 932.562684][T16512] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 932.569590][T16512] ? __sb_start_write+0x10b/0x230 [ 932.574667][T16512] vfs_write+0x481/0x920 [ 932.578976][T16512] ksys_write+0x265/0x430 [ 932.583369][T16512] __se_sys_write+0x92/0xb0 [ 932.587930][T16512] __x64_sys_write+0x4a/0x70 [ 932.592561][T16512] do_syscall_64+0xb6/0x160 [ 932.597090][T16512] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 932.602994][T16512] RIP: 0033:0x459f39 [ 932.606911][T16512] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.627486][T16512] RSP: 002b:00007ff15094ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 932.635924][T16512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 932.643910][T16512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 932.651897][T16512] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 932.659903][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff15094b6d4 [ 932.667890][T16512] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 932.676048][T16512] memory: usage 2608kB, limit 0kB, failcnt 1021 [ 932.682376][T16512] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.689240][T16512] Memory cgroup stats for /syz0: [ 932.689561][T16512] anon 53248 [ 932.689561][T16512] file 475136 [ 932.689561][T16512] kernel_stack 196608 [ 932.689561][T16512] slab 1282048 [ 932.689561][T16512] sock 69632 [ 932.689561][T16512] shmem 475136 [ 932.689561][T16512] file_mapped 0 [ 932.689561][T16512] file_dirty 0 [ 932.689561][T16512] file_writeback 0 [ 932.689561][T16512] anon_thp 0 [ 932.689561][T16512] inactive_anon 540672 [ 932.689561][T16512] active_anon 53248 [ 932.689561][T16512] inactive_file 0 [ 932.689561][T16512] active_file 0 [ 932.689561][T16512] unevictable 0 [ 932.689561][T16512] slab_reclaimable 135168 [ 932.689561][T16512] slab_unreclaimable 1146880 [ 932.689561][T16512] pgfault 46596 [ 932.689561][T16512] pgmajfault 0 [ 932.689561][T16512] workingset_refault 0 [ 932.689561][T16512] workingset_activate 0 [ 932.689561][T16512] workingset_nodereclaim 0 [ 932.689561][T16512] pgrefill 0 [ 932.689561][T16512] pgscan 0 [ 932.689561][T16512] pgsteal 0 [ 932.689561][T16512] pgactivate 0 [ 932.708635][T30475] usb 4-1: config 0 descriptor?? [ 932.784438][T16512] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16508,uid=0 [ 932.784680][T16512] Memory cgroup out of memory: Killed process 16508 (syz-executor.0) total-vm:72720kB, anon-rss:112kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 17:21:50 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xc9, 0x90, 0x4f, 0x8, 0x4bb, 0x930, 0xd24a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0x4, 0xe8}}]}}]}}, 0x0) 17:21:50 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4d, 0x10, 0xc3, 0x10, 0x45ba, 0x92dc, 0x5ce, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0xfe, 0x3}}]}}]}}, 0x0) [ 932.850962][T30475] usb 4-1: can't set config #0, error -71 [ 932.861416][T30475] usb 4-1: USB disconnect, device number 5 [ 932.863408][ T1829] oom_reaper: reaped process 16508 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 17:21:50 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={0x0}}, 0x0) 17:21:51 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xef, 0x45, 0x96, 0x10, 0x436, 0x5, 0x100, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa9, 0x2d, 0x83, 0x0, [], [{{0x9, 0x5, 0xa, 0x1e}}, {{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) 17:21:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0), 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 933.022557][T14791] usb 2-1: new high-speed USB device number 5 using dummy_hcd 17:21:51 executing program 3: r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0x9d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x0, "d0b6c9c1"}, @main=@item_4={0x3, 0x0, 0x0, "2ca4f6a2"}]}}, 0x0}, 0x0) [ 933.073197][T16484] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 933.083390][T16484] CPU: 1 PID: 16484 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 933.091315][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.101384][T16484] Call Trace: [ 933.104702][T16484] dump_stack+0x191/0x1f0 [ 933.109062][T16484] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 933.114984][T16484] dump_header+0x1e7/0xd00 [ 933.119431][T16484] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 933.125612][T16484] ? ___ratelimit+0x542/0x720 [ 933.130309][T16484] ? task_will_free_mem+0x2c9/0x810 [ 933.135805][T16484] oom_kill_process+0x210/0x560 [ 933.140684][T16484] out_of_memory+0x1796/0x1c70 [ 933.145468][T16484] ? kmsan_internal_set_origin+0x6a/0xb0 [ 933.151145][T16484] try_charge+0x2889/0x3d70 [ 933.155677][T16484] ? __module_address+0x68/0x5e0 [ 933.160676][T16484] mem_cgroup_try_charge+0xa29/0xe40 [ 933.165997][T16484] mem_cgroup_try_charge_delay+0x7e/0x140 [ 933.171765][T16484] wp_page_copy+0x776/0x26d0 [ 933.176384][T16484] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 933.182307][T16484] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 933.188493][T16484] ? kmsan_internal_set_origin+0x6a/0xb0 [ 933.194158][T16484] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 933.200164][T16484] do_wp_page+0x1e8c/0x37f0 [ 933.204689][T16484] ? kmsan_internal_set_origin+0x6a/0xb0 [ 933.210382][T16484] handle_mm_fault+0x46e3/0x9f70 [ 933.215403][T16484] do_user_addr_fault+0x905/0x1510 [ 933.220582][T16484] __do_page_fault+0x1a2/0x410 [ 933.225388][T16484] do_page_fault+0xbb/0x500 [ 933.229929][T16484] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 933.235329][T16484] page_fault+0x4e/0x60 [ 933.239497][T16484] RIP: 0033:0x4329fe [ 933.243417][T16484] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 933.263040][T16484] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 933.269125][T16484] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 933.277108][T16484] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 933.285106][T16484] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001f72940 [ 933.293102][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 933.301096][T16484] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 933.310103][T16484] memory: usage 2192kB, limit 0kB, failcnt 1038 [ 933.316458][T16484] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.316487][T16484] Memory cgroup stats for /syz0: [ 933.316772][T16484] anon 53248 [ 933.316772][T16484] file 475136 [ 933.316772][T16484] kernel_stack 0 [ 933.316772][T16484] slab 1282048 [ 933.316772][T16484] sock 69632 [ 933.316772][T16484] shmem 475136 [ 933.316772][T16484] file_mapped 0 [ 933.316772][T16484] file_dirty 0 [ 933.316772][T16484] file_writeback 0 [ 933.316772][T16484] anon_thp 0 [ 933.316772][T16484] inactive_anon 540672 [ 933.316772][T16484] active_anon 53248 [ 933.316772][T16484] inactive_file 0 [ 933.316772][T16484] active_file 0 [ 933.316772][T16484] unevictable 0 [ 933.316772][T16484] slab_reclaimable 135168 [ 933.316772][T16484] slab_unreclaimable 1146880 [ 933.316772][T16484] pgfault 46629 [ 933.316772][T16484] pgmajfault 0 [ 933.316772][T16484] workingset_refault 0 [ 933.316772][T16484] workingset_activate 0 [ 933.316772][T16484] workingset_nodereclaim 0 [ 933.316772][T16484] pgrefill 0 [ 933.316772][T16484] pgscan 0 [ 933.316772][T16484] pgsteal 0 [ 933.316772][T16484] pgactivate 0 [ 933.417745][T16484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16484,uid=0 [ 933.433385][T16484] Memory cgroup out of memory: Killed process 16484 (syz-executor.0) total-vm:72456kB, anon-rss:84kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 933.457651][ T1829] oom_reaper: reaped process 16484 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 933.502205][T13802] usb 6-1: new high-speed USB device number 6 using dummy_hcd 17:21:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0), 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 933.623067][ T2670] usb 5-1: new high-speed USB device number 6 using dummy_hcd 17:21:51 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0), 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 933.742569][ T54] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 933.743490][T13802] usb 6-1: Using ep0 maxpacket: 16 [ 933.750575][T14791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 933.762182][T30475] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 933.869803][T14791] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 933.878699][T14791] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 933.879722][T13802] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 933.888902][T14791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.898850][T13802] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 933.907924][ T2670] usb 5-1: Using ep0 maxpacket: 16 [ 933.917519][T13802] usb 6-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 933.931718][T13802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.042119][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 934.052639][ T2670] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 934.060735][ T2670] usb 5-1: config 0 has no interface number 0 [ 934.067200][ T2670] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 934.069938][T13802] usb 6-1: config 0 descriptor?? [ 934.076359][ T2670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.112702][T14791] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.121874][T14791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.130370][T14791] usb 2-1: Product: syz [ 934.134651][T14791] usb 2-1: Manufacturer: syz [ 934.139324][T14791] usb 2-1: SerialNumber: syz [ 934.147511][ T2670] usb 5-1: config 0 descriptor?? [ 934.152313][T13802] ums-sddr09 6-1:0.0: USB Mass Storage device detected [ 934.184376][T30475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 934.193234][ T54] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 934.195640][T30475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 934.204547][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.208207][ T2670] usbtmc 5-1:0.8: bulk endpoints not found [ 934.215602][T30475] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 934.241841][ T54] usb 3-1: config 0 descriptor?? [ 934.242432][T30475] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 934.242503][T30475] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.302465][T13802] scsi host1: usb-storage 6-1:0.0 [ 934.339764][T13802] usb 6-1: USB disconnect, device number 6 [ 934.383742][T30475] usb 4-1: config 0 descriptor?? [ 934.416367][ T12] usb 5-1: USB disconnect, device number 6 [ 934.494772][ T54] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 934.505051][ T54] asix: probe of 3-1:0.0 failed with error -71 [ 934.539731][ T54] usb 3-1: USB disconnect, device number 10 [ 934.572655][T14791] usb 2-1: 0:2 : does not exist [ 934.623769][T14791] usb 2-1: USB disconnect, device number 5 [ 934.855850][T30475] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 934.863488][T30475] microsoft 0003:045E:009D.0006: unknown main item tag 0x0 [ 934.892381][T30475] microsoft 0003:045E:009D.0006: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 17:21:52 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x0, 0x0, 0x22, {0x22, 0x0, "7c03048d8d553a806139cba23ca82eb2845494d9cc615160e2517fd235d73d6b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 935.076203][ T3742] usb 4-1: USB disconnect, device number 6 [ 935.212276][T14791] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 935.252146][ T54] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 935.262393][ T2670] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 935.282328][T13674] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 935.343894][ T367] device bridge_slave_1 left promiscuous mode [ 935.350539][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.403858][ T367] device bridge_slave_0 left promiscuous mode [ 935.410377][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.462380][T14791] usb 5-1: Using ep0 maxpacket: 16 [ 935.502832][ T2670] usb 3-1: Using ep0 maxpacket: 8 [ 935.522490][T13674] usb 6-1: Using ep0 maxpacket: 8 [ 935.582443][T14791] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 935.590646][T14791] usb 5-1: config 0 has no interface number 0 [ 935.597046][T14791] usb 5-1: New USB device found, idVendor=45ba, idProduct=92dc, bcdDevice= 5.ce [ 935.606261][T14791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.623672][T14791] usb 5-1: config 0 descriptor?? [ 935.652686][ T2670] usb 3-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice=d2.4a [ 935.661947][ T2670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.671373][T13674] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.682603][T13674] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 935.695868][T13674] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 935.705043][T13674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.714106][ T54] usb 2-1: unable to get BOS descriptor or descriptor too short [ 935.724136][T14791] usbtmc 5-1:0.8: bulk endpoints not found [ 935.743831][ T2670] usb 3-1: config 0 descriptor?? [ 935.757777][T13674] usb 6-1: config 0 descriptor?? [ 935.793073][ T54] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 935.801862][ T54] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 935.812100][ T54] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.868860][T13688] usb 5-1: USB disconnect, device number 7 [ 935.894471][T13802] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 935.972402][ T54] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.981691][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.989974][ T54] usb 2-1: Product: syz [ 935.994317][ T54] usb 2-1: Manufacturer: syz [ 935.998989][ T54] usb 2-1: SerialNumber: syz [ 936.017196][ T2670] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 936.028528][ T2670] asix: probe of 3-1:0.0 failed with error -71 17:21:54 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x16c, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x29, {[@main=@item_4={0x3, 0x0, 0x0, "cced4b29"}, @local=@item_4={0x3, 0x2, 0x0, "0f28caa7"}, @main=@item_4={0x3, 0x0, 0x0, "d4c2a35e"}, @local, @main=@item_4={0x3, 0x0, 0x0, "b0cabed8"}, @main=@item_4={0x3, 0x0, 0x0, "c75784f5"}, @main=@item_4={0x3, 0x0, 0xa, "01ab8423"}, @local=@item_4={0x3, 0x2, 0x0, "ccf90442"}, @main=@item_4={0x3, 0x0, 0xc, "7b73379a"}]}}, 0x0}, 0x0) 17:21:54 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8e, 0x4a, 0x58, 0x8, 0x525, 0xa4a3, 0x7381, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x19, 0x10001, 0x1, 0x5f, 0x81, 0x13, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "04bdaf7e9e"}]}}]}}]}}]}}, 0x0) 17:21:54 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x52, 0xab, 0xbc, 0x8, 0x1a0a, 0x101, 0x7d7f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8d, 0x49, 0xac}}]}}]}}, 0x0) [ 936.102868][ T2670] usb 3-1: USB disconnect, device number 11 [ 936.204592][ T54] usb 2-1: can't set config #1, error -71 [ 936.237106][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0x2 [ 936.244287][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0x0 [ 936.251441][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0x6 [ 936.259215][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0x6 [ 936.266315][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0xe [ 936.273415][T13674] wacom 0003:056A:0331.0007: unknown main item tag 0xd [ 936.280455][T13674] wacom 0003:056A:0331.0007: unbalanced collection at end of report description [ 936.290096][T13674] wacom 0003:056A:0331.0007: parse failed [ 936.296111][T13674] wacom: probe of 0003:056A:0331.0007 failed with error -22 [ 936.304132][T13802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.315669][T13802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 936.326713][T13802] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 936.339806][T13802] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 936.346538][ T54] usb 2-1: USB disconnect, device number 6 [ 936.349171][T13802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.433119][T13802] usb 4-1: config 0 descriptor?? [ 936.445316][T16462] usb 6-1: USB disconnect, device number 7 [ 936.522286][T13688] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 936.604123][ T2670] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 936.623183][T16556] IPVS: ftp: loaded support on port[0] = 21 17:21:54 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 936.712691][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 936.762723][T13688] usb 5-1: Using ep0 maxpacket: 8 [ 936.782551][T13802] usbhid 4-1:0.0: can't add hid device: -71 [ 936.788864][T13802] usbhid: probe of 4-1:0.0 failed with error -71 [ 936.816782][T13802] usb 4-1: USB disconnect, device number 7 [ 936.842112][ T2670] usb 3-1: Using ep0 maxpacket: 8 [ 936.892396][T13688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.903516][T13688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.916534][T13688] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 936.926056][T13688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.942082][T13688] usb 5-1: config 0 descriptor?? [ 936.952128][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 936.962363][ T2670] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=7d.7f [ 936.962448][ T2670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.003009][ T2670] usb 3-1: config 0 descriptor?? [ 937.072328][ T54] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 937.080523][ T54] usb 2-1: config 0 has no interface number 0 [ 937.086804][ T54] usb 2-1: config 0 interface 25 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 937.097486][ T54] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has an invalid bInterval 158, changing to 7 [ 937.108638][ T54] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has invalid maxpacket 1711, setting to 1024 [ 937.119963][ T54] usb 2-1: config 0 interface 25 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 937.133066][ T54] usb 2-1: config 0 interface 25 has no altsetting 0 [ 937.139862][ T54] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=73.81 [ 937.149039][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.159857][ T54] usb 2-1: config 0 descriptor?? [ 937.249135][ T3381] usb 3-1: USB disconnect, device number 12 [ 937.257992][T13802] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 937.265785][T16462] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 937.422418][ T54] usbtest 2-1:0.25: couldn't get endpoints, -71 [ 937.429304][ T54] usbtest: probe of 2-1:0.25 failed with error -71 [ 937.443620][ T54] usb 2-1: USB disconnect, device number 7 [ 937.449861][T13688] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 937.454094][ T367] device hsr_slave_0 left promiscuous mode [ 937.457731][T13688] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 937.470582][T13688] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 937.478259][T13688] dragonrise 0003:0079:0006.0008: unknown main item tag 0x0 [ 937.498914][T13688] dragonrise 0003:0079:0006.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 937.511722][T13688] dragonrise 0003:0079:0006.0008: no output reports found [ 937.519056][T13688] dragonrise 0003:0079:0006.0008: force feedback init failed [ 937.543860][ T367] device hsr_slave_1 left promiscuous mode [ 937.552195][T13802] usb 4-1: Using ep0 maxpacket: 32 [ 937.557666][T16462] usb 6-1: Using ep0 maxpacket: 8 [ 937.593966][ T367] team0 (unregistering): Port device team_slave_1 removed [ 937.606792][ T367] team0 (unregistering): Port device team_slave_0 removed [ 937.619496][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.667555][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.677553][ T2670] usb 5-1: USB disconnect, device number 8 [ 937.678524][T13802] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 937.697091][T16462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.708184][T16462] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 937.721155][T16462] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 937.730422][T16462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.740003][T16462] usb 6-1: config 0 descriptor?? [ 937.797634][ T367] bond0 (unregistering): Released all slaves [ 937.942472][T13802] usb 4-1: string descriptor 0 read error: -32 [ 937.949943][T13802] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 937.959130][T13802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:21:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x7da, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000004fc0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xb, "cf87f96f"}, @global=@item_012={0x2, 0x1, 0x0, 'b]'}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @local=@item_012={0x2, 0x2, 0x0, "41b0"}, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) [ 938.017416][T13802] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 938.052344][ T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 938.103257][T16556] chnl_net:caif_netlink_parms(): no params data found [ 938.122596][T16462] usbhid 6-1:0.0: can't add hid device: -71 [ 938.128843][T16462] usbhid: probe of 6-1:0.0 failed with error -71 [ 938.174003][T16462] usb 6-1: USB disconnect, device number 8 [ 938.182434][ T2670] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 938.207712][T16556] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.215095][T16556] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.224208][T16556] device bridge_slave_0 entered promiscuous mode [ 938.236339][T16556] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.243876][T16556] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.252768][T16556] device bridge_slave_1 entered promiscuous mode [ 938.253424][T13802] usb 4-1: USB disconnect, device number 8 [ 938.294175][T16556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.313760][T16556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.325352][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 938.358369][T16556] team0: Port device team_slave_0 added [ 938.370315][T16556] team0: Port device team_slave_1 added [ 938.442312][ T54] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=7d.7f [ 938.451467][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.460478][ T2670] usb 2-1: Using ep0 maxpacket: 8 [ 938.466470][T16556] device hsr_slave_0 entered promiscuous mode [ 938.466928][ T54] usb 3-1: config 0 descriptor?? [ 938.482315][T13674] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 938.513825][T16556] device hsr_slave_1 entered promiscuous mode [ 938.552480][T16556] debugfs: Directory 'hsr0' with parent '/' already present! [ 938.572909][T16462] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 938.582210][ T2670] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 938.590437][ T2670] usb 2-1: config 0 has no interface number 0 [ 938.591138][T16556] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.596740][ T2670] usb 2-1: config 0 interface 25 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 938.603780][T16556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.614318][ T2670] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has an invalid bInterval 158, changing to 7 [ 938.621881][T16556] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.632571][ T2670] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has invalid maxpacket 1711, setting to 1024 [ 938.639626][T16556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.650643][ T2670] usb 2-1: config 0 interface 25 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 938.671419][ T2670] usb 2-1: config 0 interface 25 has no altsetting 0 [ 938.678299][ T2670] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=73.81 [ 938.687460][ T2670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.699707][ T2670] usb 2-1: config 0 descriptor?? [ 938.717469][ T3742] usb 3-1: USB disconnect, device number 13 [ 938.768117][T16556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.796671][T13802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 938.807317][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.812375][T13674] usb 5-1: Using ep0 maxpacket: 8 [ 938.820161][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.850772][T16556] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.869359][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.878583][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.885827][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.902344][T16462] usb 6-1: Using ep0 maxpacket: 16 [ 938.927765][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 938.936727][T16498] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.943984][T16498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.955316][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 938.965035][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 938.974918][T13674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.986864][T13674] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.999844][T13674] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 939.009036][T13674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.009398][T16556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.028484][T16556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.028919][ T2670] usbtest 2-1:0.25: couldn't get endpoints, -71 [ 939.045350][ T2670] usbtest: probe of 2-1:0.25 failed with error -71 [ 939.065636][ T2670] usb 2-1: USB disconnect, device number 8 [ 939.083359][T13674] usb 5-1: config 0 descriptor?? [ 939.084173][T16462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.096421][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 939.099483][T16462] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 939.108405][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 939.119563][T16462] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 939.128988][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.136481][T16462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.145964][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 939.161301][T16498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 939.203388][T16556] 8021q: adding VLAN 0 to HW filter on device batadv0 17:21:57 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0xff, 0x27, 0x8, 0x8cf2, 0xadee, 0xe7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0x8, 0x3}}]}}]}}, 0x0) 17:21:57 executing program 1: syz_usb_connect(0x0, 0x34, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x8e, 0x4a, 0x58, 0x8, 0x525, 0xa4a3, 0x7381, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x19, 0x10001, 0x1, 0x5f, 0x81, 0x13, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "04bdaf7e9e"}]}}]}}]}}]}}, 0x0) [ 939.253460][ T54] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 939.273163][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:21:57 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x926, 0x3333, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x22, {0x22, 0x0, "bedc2a5443640a789bdd51ea6221d59bc578290bb75545b86415f523b546d3b9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 939.372576][T13674] usbhid 5-1:0.0: can't add hid device: -71 [ 939.378784][T13674] usbhid: probe of 5-1:0.0 failed with error -71 [ 939.438052][T13674] usb 5-1: USB disconnect, device number 9 [ 939.482699][T16462] usb 6-1: config 0 descriptor?? [ 939.503634][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 939.529682][T16586] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 939.540166][T16586] CPU: 0 PID: 16586 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 939.548094][T16586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.558177][T16586] Call Trace: [ 939.561510][T16586] dump_stack+0x191/0x1f0 [ 939.565895][T16586] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 939.571854][T16586] dump_header+0x1e7/0xd00 [ 939.576345][T16586] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 939.582563][T16586] ? ___ratelimit+0x542/0x720 [ 939.587297][T16586] ? task_will_free_mem+0x14c/0x810 [ 939.592569][T16586] oom_kill_process+0x210/0x560 [ 939.597491][T16586] out_of_memory+0x1796/0x1c70 [ 939.602318][T16586] ? kmsan_internal_set_origin+0x6a/0xb0 [ 939.608036][T16586] memory_max_write+0x90b/0xb60 [ 939.612983][T16586] ? memory_max_show+0x1b0/0x1b0 [ 939.617985][T16586] cgroup_file_write+0x41a/0x8e0 [ 939.622444][ T54] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.623001][T16586] ? cgroup_seqfile_stop+0x150/0x150 [ 939.623049][T16586] kernfs_fop_write+0x55f/0x840 [ 939.623112][T16586] ? kernfs_fop_read+0x9a0/0x9a0 [ 939.650917][T16586] __vfs_write+0x1a9/0xcb0 [ 939.655408][T16586] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 939.661518][T16586] ? __sb_start_write+0x10b/0x230 [ 939.666551][T16586] vfs_write+0x481/0x920 [ 939.670852][T16586] ksys_write+0x265/0x430 [ 939.675246][T16586] __se_sys_write+0x92/0xb0 [ 939.679779][T16586] __x64_sys_write+0x4a/0x70 [ 939.684380][T16586] do_syscall_64+0xb6/0x160 [ 939.688893][T16586] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 939.694790][T16586] RIP: 0033:0x459f39 [ 939.698698][T16586] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.718303][T16586] RSP: 002b:00007fe957892c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 939.726757][T16586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459f39 [ 939.734775][T16586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 939.742847][T16586] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 939.750844][T16586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9578936d4 [ 939.758842][T16586] R13: 00000000004ca618 R14: 00000000004e25c0 R15: 00000000ffffffff [ 939.767950][T16586] memory: usage 3200kB, limit 0kB, failcnt 1047 [ 939.774291][T16586] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.781162][T16586] Memory cgroup stats for /syz0: [ 939.781469][T16586] anon 188416 [ 939.781469][T16586] file 1146880 [ 939.781469][T16586] kernel_stack 196608 [ 939.781469][T16586] slab 1282048 [ 939.781469][T16586] sock 69632 [ 939.781469][T16586] shmem 1146880 [ 939.781469][T16586] file_mapped 0 [ 939.781469][T16586] file_dirty 0 [ 939.781469][T16586] file_writeback 0 [ 939.781469][T16586] anon_thp 0 [ 939.781469][T16586] inactive_anon 1081344 [ 939.781469][T16586] active_anon 188416 [ 939.781469][T16586] inactive_file 0 [ 939.781469][T16586] active_file 0 [ 939.781469][T16586] unevictable 0 [ 939.781469][T16586] slab_reclaimable 135168 [ 939.781469][T16586] slab_unreclaimable 1146880 [ 939.781469][T16586] pgfault 46992 [ 939.781469][T16586] pgmajfault 0 [ 939.781469][T16586] workingset_refault 0 [ 939.781469][T16586] workingset_activate 0 [ 939.781469][T16586] workingset_nodereclaim 0 [ 939.781469][T16586] pgrefill 0 [ 939.781469][T16586] pgscan 0 [ 939.781469][T16586] pgsteal 0 [ 939.781469][T16586] pgactivate 0 [ 939.834727][T13674] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 939.877552][T16586] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16582,uid=0 [ 939.877772][T16586] Memory cgroup out of memory: Killed process 16582 (syz-executor.0) total-vm:72720kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 939.887472][ T1829] oom_reaper: reaped process 16582 (syz-executor.0), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 17:21:57 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x58, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xfffffffffffffdd9, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0xffffffffffffff3b}, {0x5}, {0xd}, [@acm={0x4}, @dmm={0x7}]}}}]}}]}}, 0x0) [ 939.934636][ T54] usb 4-1: string descriptor 0 read error: -71 [ 939.941073][ T54] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 939.951884][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:21:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 939.992573][T30475] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 940.013042][ T54] usb 4-1: can't set config #1, error -71 [ 940.031050][T16556] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 940.041565][T16556] CPU: 1 PID: 16556 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 940.049481][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.059553][T16556] Call Trace: [ 940.062899][T16556] dump_stack+0x191/0x1f0 [ 940.067324][T16556] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.073273][T16556] dump_header+0x1e7/0xd00 [ 940.077737][T16556] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 940.083939][T16556] ? ___ratelimit+0x542/0x720 [ 940.088623][T16556] ? task_will_free_mem+0x2c9/0x810 [ 940.094056][T16556] oom_kill_process+0x210/0x560 [ 940.098949][T16556] out_of_memory+0x1796/0x1c70 [ 940.103741][T16556] ? kmsan_internal_set_origin+0x6a/0xb0 [ 940.109397][T16556] try_charge+0x2889/0x3d70 [ 940.113928][T16556] ? __module_address+0x68/0x5e0 [ 940.118909][T16556] mem_cgroup_try_charge+0xa29/0xe40 [ 940.124237][T16556] mem_cgroup_try_charge_delay+0x7e/0x140 [ 940.129971][T16556] wp_page_copy+0x776/0x26d0 [ 940.134592][T16556] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 940.140529][T16556] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 940.146745][T16556] ? kmsan_internal_set_origin+0x6a/0xb0 [ 940.152449][T16556] ? kmsan_get_shadow_origin_ptr+0x196/0x4b0 [ 940.158479][T16556] do_wp_page+0x1e8c/0x37f0 [ 940.163015][T16556] ? kmsan_internal_set_origin+0x6a/0xb0 [ 940.168681][T16556] handle_mm_fault+0x46e3/0x9f70 [ 940.173660][T16556] do_user_addr_fault+0x905/0x1510 [ 940.178818][T16556] __do_page_fault+0x1a2/0x410 [ 940.183617][T16556] do_page_fault+0xbb/0x500 [ 940.188191][T16556] ? kmsan_unpoison_pt_regs+0x28/0x30 [ 940.193629][T16556] page_fault+0x4e/0x60 [ 940.197830][T16556] RIP: 0033:0x4329fe [ 940.201752][T16556] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d d4 5a 64 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 7e 0d fe ff 48 81 [ 940.221366][T16556] RSP: 002b:0000000000a6ebf0 EFLAGS: 00010246 [ 940.227458][T16556] RAX: 0000000000000000 RBX: 0000000000716640 RCX: 00000000004592a4 [ 940.235450][T16556] RDX: 0000000000a6ec10 RSI: 0000000000000001 RDI: 0000000000008030 [ 940.243426][T16556] RBP: 0000000000008030 R08: 0000000000000001 R09: 000000000238a940 [ 940.251404][T16556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a6fdf0 [ 940.259378][T16556] R13: 0000000000a6fde0 R14: 0000000000000000 R15: 0000000000a6fdf0 [ 940.267581][T16556] memory: usage 2784kB, limit 0kB, failcnt 1064 [ 940.273950][T16556] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.278542][T13802] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 940.280828][T16556] Memory cgroup stats for /syz0: [ 940.281114][T16556] anon 45056 [ 940.281114][T16556] file 1146880 [ 940.281114][T16556] kernel_stack 0 [ 940.281114][T16556] slab 1282048 [ 940.281114][T16556] sock 69632 [ 940.281114][T16556] shmem 1146880 [ 940.281114][T16556] file_mapped 0 [ 940.281114][T16556] file_dirty 0 [ 940.281114][T16556] file_writeback 0 [ 940.281114][T16556] anon_thp 0 [ 940.281114][T16556] inactive_anon 1081344 [ 940.281114][T16556] active_anon 53248 [ 940.281114][T16556] inactive_file 0 [ 940.281114][T16556] active_file 0 [ 940.281114][T16556] unevictable 0 [ 940.281114][T16556] slab_reclaimable 135168 [ 940.281114][T16556] slab_unreclaimable 1146880 [ 940.281114][T16556] pgfault 46992 [ 940.281114][T16556] pgmajfault 0 [ 940.281114][T16556] workingset_refault 0 [ 940.281114][T16556] workingset_activate 0 [ 940.281114][T16556] workingset_nodereclaim 0 [ 940.281114][T16556] pgrefill 0 [ 940.281114][T16556] pgscan 0 [ 940.281114][T16556] pgsteal 0 [ 940.281114][T16556] pgactivate 0 [ 940.293401][T16556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16556,uid=0 [ 940.398421][T16556] Memory cgroup out of memory: Killed process 16556 (syz-executor.0) total-vm:72456kB, anon-rss:80kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 940.425779][ T54] usb 4-1: USB disconnect, device number 9 [ 940.431964][T16462] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 940.433800][ T1829] oom_reaper: reaped process 16556 (syz-executor.0), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB [ 940.439899][T16462] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 940.479019][T16462] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 940.522269][T30475] usb 3-1: Using ep0 maxpacket: 8 [ 940.652128][T13674] usb 5-1: Using ep0 maxpacket: 8 [ 940.662446][T13802] usb 2-1: Using ep0 maxpacket: 8 [ 940.667915][T30475] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 940.676286][T30475] usb 3-1: config 0 has no interface number 0 [ 940.676400][T30475] usb 3-1: New USB device found, idVendor=8cf2, idProduct=adee, bcdDevice= 0.e7 [ 940.691625][T30475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:21:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 940.706327][T30475] usb 3-1: config 0 descriptor?? [ 940.728873][ T2670] usb 6-1: USB disconnect, device number 9 [ 940.747031][T30475] usb-storage 3-1:0.106: USB Mass Storage device detected [ 940.785290][T13802] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 940.792242][ T54] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 940.793547][T13802] usb 2-1: config 0 has no interface number 0 [ 940.793636][T13802] usb 2-1: config 0 interface 25 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 940.818181][T13802] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has an invalid bInterval 158, changing to 7 [ 940.828233][T13674] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.829391][T13802] usb 2-1: config 0 interface 25 altsetting 1 endpoint 0x4 has invalid maxpacket 1711, setting to 1024 [ 940.840200][T13674] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.851271][T13802] usb 2-1: config 0 interface 25 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 940.864107][T13674] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 940.877071][T13802] usb 2-1: config 0 interface 25 has no altsetting 0 [ 940.886126][T13674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.900972][T13802] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=73.81 [ 940.911116][T13802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.930876][T13802] usb 2-1: config 0 descriptor?? 17:21:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000004c0)="d6ea9dab2b27e77ef1ca0a425d5489589ac0dfc0dc5d22c1aa685d5fc8b077ebdcd7fd3296137a50e88d4de0bed432e2824485a95d229bd10a55d8a54ecf7a5bd974ca0d5705bdb1fc7d36da7186509183bfe61c084477ee283f98d75ca10516be3be27858d0dd6bcb99ab45454fa7ba89f575d505f5b25e59cde25a4f2b0ae38c1d6aa00a3cf63dcffd16a49bae43b6081cbc6de416bf734606cf3e2c513f7fca3bfe2bf2724c74e3693739ab85b490e06afb8573634104c13fad435cd3adf08f29333df5c0bf0567df4281c0882e3d96c75a0341baf0f11e057f31e2761e1c6bb8135c8714081d135f3c2f", &(0x7f00000000c0)="bf6203012c8bb36ca2965aad0df01159a1ff9880790df3201275fbe2c0412eb28acdda400757258ead3c6b", 0xd41af3e28dfcbe0b}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x40, 0x3, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0x0, 0x58, 0x0, 0x8, 0x6, 0x5, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.\x93sage_sys\x00', 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r5, 0x88, 0x68, &(0x7f00000001c0), 0xfedc) close(r5) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) write$cgroup_int(r2, 0x0, 0x0) [ 940.948604][T30475] usb 3-1: USB disconnect, device number 14 [ 940.977529][T13674] usb 5-1: config 0 descriptor?? [ 941.103343][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 941.193727][T13802] usbtest 2-1:0.25: couldn't get endpoints, -71 [ 941.200319][T13802] usbtest: probe of 2-1:0.25 failed with error -71 [ 941.216035][T13802] usb 2-1: USB disconnect, device number 9 [ 941.222694][ T54] usb 4-1: config index 0 descriptor too short (expected 64985, got 70) [ 941.231266][ T54] usb 4-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 941.241666][ T54] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 941.241770][ T54] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 941.264222][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.354138][ T54] usb 4-1: bad CDC descriptors [ 941.514096][T13674] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 941.540370][T13674] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input7 [ 941.562799][T13802] usb 4-1: USB disconnect, device number 10 [ 941.634512][T16462] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 941.643672][T13674] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 941.721240][ T12] usb 5-1: USB disconnect, device number 10 [ 941.746872][T30475] usb 3-1: new high-speed USB device number 15 using dummy_hcd 17:21:59 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0xaa, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "0f"}, {0x5, 0x24, 0x0, 0x80000004}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xffffffffffff43fc, 0x1, 0x3}, {0x2, 0x24, 0x1a, 0x4}, [@mdlm={0x15}, @call_mgmt={0x5}, @mbim={0xc}, @mdlm={0xfffffffffffffe2c}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa}, 0x2d, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@generic={0x1e, 0x10, 0x0, "9678b7d93b5c991aae537bf808a7b0570555dbd427790000000000"}, @ss_cap={0xa}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0xdb, &(0x7f0000000200)=@string={0xdb, 0x3, "6d7a83de6bab6514f3d12766b9894b1ae98d747caf02bf06d9bf41560cc9b8313b5f533178c7e7b5d734311608d5e42b10286a8d860bab52c97d361203dcb50ef9134eef256beb2cafdb2ee41b35199dacf1fec94b169892b42f62a42b7319f927a85b0e777fd72794725f18751f1cddc6546cb985e789d67aed640d40cc977d027ac2c3569fa54f4ce5fd4b9ff0e4cb65f820a8b32a64b788b045bb23819467dc544db12a3331bbf7ca760f484113bf14a2a5714a8d2767a2463cd984f12402fcf94d6135f8c37789f78c9a6b22002e81254c0f5aba254198"}}, {0xa9, &(0x7f0000000300)=@string={0xa9, 0x3, "e4ae84842ff17fa2823d875bd3ae8961ec7ffb6c3cb24a8cb8f9be5452186c5f9f117ea2f5c40dcffba9f29420f2b12aa96a92622e02ea627434c39979ab33d588bb7f6f1974a7caa20fae2b72ccddbc2fc212528663cbbe713d76789d9eb97a96827200833fda9ca8cae2f0abff4d9bb61e2a7a3dbb9924938e45deb8157a2c03b8003517e1af83fd21781cdd32991fb9128fe4b2691eb61912af63a9d9f2cedb546636c1182e"}}]}) [ 941.882686][T16462] usb 6-1: Using ep0 maxpacket: 16 [ 942.002095][T30475] usb 3-1: Using ep0 maxpacket: 8 [ 942.014300][T16462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 942.025970][T16462] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 942.039024][T16462] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 942.049194][T16462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.059333][T16462] usb 6-1: config 0 descriptor?? [ 942.142673][T30475] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 942.150931][T30475] usb 3-1: config 0 has no interface number 0 [ 942.157175][T30475] usb 3-1: New USB device found, idVendor=8cf2, idProduct=adee, bcdDevice= 0.e7 [ 942.166359][T30475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.177218][T30475] usb 3-1: config 0 descriptor?? [ 942.202273][T13802] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 942.224873][T30475] usb-storage 3-1:0.106: USB Mass Storage device detected 17:22:00 executing program 5: syz_usb_connect$uac1(0x0, 0xb3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @output_terminal={0x9}, @feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @processing_unit={0x7}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x6}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x0, 0x3, [0x0, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 942.345517][T13674] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 942.412571][T16462] usbhid 6-1:0.0: can't add hid device: -71 [ 942.418791][T16462] usbhid: probe of 6-1:0.0 failed with error -71 [ 942.430210][T30475] usb 3-1: USB disconnect, device number 15 [ 942.442796][T16462] usb 6-1: USB disconnect, device number 10 [ 942.452660][T13802] usb 2-1: Using ep0 maxpacket: 8 17:22:00 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xf9, 0x30, 0x8c, 0x40, 0x12d1, 0x14ac, 0x2847, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x52, 0x7f, 0xc6}}]}}]}}, 0x0) [ 942.512444][ T12] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 942.572450][T13802] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 942.581286][T13802] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.585266][ T6251] device bridge_slave_1 left promiscuous mode [ 942.591712][T13802] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 942.598043][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.606551][T13802] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 942.614604][T13674] usb 4-1: Using ep0 maxpacket: 16 [ 942.626483][T13802] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 942.654770][ T6251] device bridge_slave_0 left promiscuous mode [ 942.661481][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.752627][T13674] usb 4-1: config index 0 descriptor too short (expected 64985, got 70) [ 942.761094][T13674] usb 4-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 942.771473][T13674] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.784640][T13674] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.793840][T13674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.794099][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 942.843080][T13802] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.844008][T13674] usb 4-1: bad CDC descriptors [ 942.852414][T13802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.865208][T13802] usb 2-1: Product: 껤蒄ꉿ㶂宇껓憉翬泻눼豊隸咾ᡒ彬ᆟꉾ쓵켍ꧻ铲⪱檩抒Ȯ拪㑴駃ꭹ픳뮈潿琙쪧ྡྷ⮮챲볝숯划掆뻋㵱硶麝窹芖r㾃鳚쪨ﾫ魍Ặ稪묽⒙躓ᖸⱺ렃㔀莯⇽ᱸ㋝ᾙኹ榲똞ሙ掯컲哛㙦ᣁ [ 942.891117][T13802] usb 2-1: Manufacturer: 穭꭫ᑥ퇳昧覹ᩋ跩籴ʯڿ뿙噁줌ㆸ弻ㅓ인뗧㓗ᘱ픈⯤⠐赪ஆ劫緉ሶີᏹ欥Ⳬ㔛鴙짾ᙋ銘⾴ꑢ猫酪ꠧ๛罷⟗犔ᡟή哆륬횉൤챀綗稂쏂齖侥䯽쯤ꠠ⪳띤낈뭅脣枔哜녍㌪묱쫷ྲྀ䅈뼓ꈔ熥赊朧䚢Ȥ識慍矃验≫⸀▁ཌ멚䄥 [ 942.922328][T13802] usb 2-1: SerialNumber: syz [ 942.929494][T16462] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 942.974808][T13802] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 942.981598][T13802] cdc_ncm 2-1:1.0: bind() failure [ 943.032894][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.043964][ T12] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 943.056908][ T12] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 943.056982][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.079447][T13674] usb 4-1: USB disconnect, device number 11 [ 943.092167][T30475] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 943.124563][ T12] usb 5-1: config 0 descriptor?? [ 943.176427][ T2670] usb 2-1: USB disconnect, device number 10 17:22:01 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x29, {0x29, 0x0, "d4b5028937beaa1a75eb38ce8e032dcd38a9cdad9398833fd39b521bc3fe025878b1ca999d2d5c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 943.224307][T16462] usb 6-1: Using ep0 maxpacket: 32 17:22:01 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x1a, 0x78, 0x8, 0xb95, 0x772a, 0x55cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0x2d, 0x35}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0xac, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000019c0)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x40, 0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 943.352897][T16462] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 943.364080][T16462] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.414673][ T12] usbhid 5-1:0.0: can't add hid device: -71 [ 943.420875][ T12] usbhid: probe of 5-1:0.0 failed with error -71 [ 943.447283][ T12] usb 5-1: USB disconnect, device number 11 [ 943.484364][T30475] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.492637][T30475] usb 3-1: config 0 has no interface number 0 [ 943.498846][T30475] usb 3-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=28.47 [ 943.508145][T30475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.552953][T30475] usb 3-1: config 0 descriptor?? [ 943.562150][T13674] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 943.572655][T16462] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 943.581800][T16462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.589967][T16462] usb 6-1: Product: syz [ 943.594455][T16462] usb 6-1: Manufacturer: syz [ 943.599129][T16462] usb 6-1: SerialNumber: syz [ 943.756610][T16625] IPVS: ftp: loaded support on port[0] = 21 [ 943.802193][T13674] usb 4-1: Using ep0 maxpacket: 8 [ 943.818562][ T3742] usb 3-1: USB disconnect, device number 16 [ 943.872834][ T12] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 943.922593][T13674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.933817][T13674] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 943.946766][T13674] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 943.955934][T13674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.965320][ T2670] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 943.979031][T13674] usb 4-1: config 0 descriptor?? [ 944.085724][T16462] usb 6-1: USB disconnect, device number 11 [ 944.122190][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 944.214303][ T2670] usb 2-1: Using ep0 maxpacket: 8 [ 944.252318][ T12] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=55.cd [ 944.261497][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.272092][ T12] usb 5-1: config 0 descriptor?? [ 944.336755][ T2670] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 944.345680][ T2670] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.355904][ T2670] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 944.364926][ T2670] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 944.365004][ T2670] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 944.465193][T13674] gt683r_led 0003:1770:FF00.000B: unknown global tag 0xd [ 944.472466][T13674] gt683r_led 0003:1770:FF00.000B: item 0 0 1 13 parsing failed [ 944.480391][T13674] gt683r_led 0003:1770:FF00.000B: hid parsing failed [ 944.488114][T13674] gt683r_led: probe of 0003:1770:FF00.000B failed with error -22 [ 944.525061][ T12] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 944.542514][ T2670] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.551620][ T2670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.559806][ T2670] usb 2-1: Product: 껤蒄ꉿ㶂宇껓憉翬泻눼豊隸咾ᡒ彬ᆟꉾ쓵켍ꧻ铲⪱檩抒Ȯ拪㑴駃ꭹ픳뮈潿琙쪧ྡྷ⮮챲볝숯划掆뻋㵱硶麝窹芖r㾃鳚쪨ﾫ魍Ặ稪묽⒙躓ᖸⱺ렃㔀莯⇽ᱸ㋝ᾙኹ榲똞ሙ掯컲哛㙦ᣁ [ 944.584803][ T2670] usb 2-1: Manufacturer: 穭꭫ᑥ퇳昧覹ᩋ跩籴ʯڿ뿙噁줌ㆸ弻ㅓ인뗧㓗ᘱ픈⯤⠐赪ஆ劫緉ሶີᏹ欥Ⳬ㔛鴙짾ᙋ銘⾴ꑢ猫酪ꠧ๛罷⟗犔ᡟή哆륬횉൤챀綗稂쏂齖侥䯽쯤ꠠ⪳띤낈뭅脣枔哜녍㌪묱쫷ྲྀ䅈뼓ꈔ熥赊朧䚢Ȥ識慍矃验≫⸀▁ཌ멚䄥 [ 944.616084][ T2670] usb 2-1: SerialNumber: syz [ 944.664237][ T2670] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 944.671106][ T2670] cdc_ncm 2-1:1.0: bind() failure [ 944.679316][T13802] usb 4-1: USB disconnect, device number 12 [ 944.692266][T30475] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 944.700074][T16462] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 944.745452][ T6251] device hsr_slave_0 left promiscuous mode [ 944.783147][ T6251] device hsr_slave_1 left promiscuous mode 17:22:02 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0xfe}}, {{0x9, 0x5, 0x81, 0x3, 0x382}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1d2}}, {{0x9, 0x5, 0x3, 0x2, 0x380}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001500)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x803}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) [ 944.844906][ T6251] team0 (unregistering): Port device team_slave_1 removed [ 944.858510][ T6251] team0 (unregistering): Port device team_slave_0 removed [ 944.869965][ T2670] usb 2-1: USB disconnect, device number 11 [ 944.878410][ T6251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.944813][ T6251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.972946][T16462] usb 6-1: Using ep0 maxpacket: 32 [ 945.015811][ T6251] bond0 (unregistering): Released all slaves [ 945.094631][T30475] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 945.103404][T30475] usb 3-1: config 0 has no interface number 0 [ 945.109633][T30475] usb 3-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=28.47 [ 945.118958][T30475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.129012][T16462] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 945.140667][T16462] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.155057][T30475] usb 3-1: config 0 descriptor?? [ 945.263118][T16625] chnl_net:caif_netlink_parms(): no params data found [ 945.316790][T16462] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 945.326128][T16462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.334359][T16462] usb 6-1: Product: syz [ 945.338622][T16462] usb 6-1: Manufacturer: syz [ 945.343382][T16462] usb 6-1: SerialNumber: syz [ 945.362207][T16625] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.369426][T16625] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.372188][ T2670] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 945.378404][T16625] device bridge_slave_0 entered promiscuous mode [ 945.385006][T16623] ===================================================== [ 945.397588][T16623] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0xa9/0xb0 [ 945.400001][T16625] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.405051][T16623] CPU: 1 PID: 16623 Comm: syz-executor.4 Not tainted 5.4.0-rc3+ #0 [ 945.405059][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 945.405065][T16623] Call Trace: [ 945.405093][T16623] dump_stack+0x191/0x1f0 [ 945.405119][T16623] kmsan_report+0x128/0x220 [ 945.405160][T16623] kmsan_internal_check_memory+0x187/0x4a0 [ 945.412328][T16625] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.420075][T16623] ? kmsan_get_metadata+0x39/0x350 [ 945.432198][T16625] device bridge_slave_1 entered promiscuous mode [ 945.433415][T16623] kmsan_copy_to_user+0xa9/0xb0 [ 945.462319][T16625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.466471][T16623] _copy_to_user+0x16b/0x1f0 [ 945.475772][T16625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.480338][T16623] fuzzer_ioctl+0x25a9/0x5860 [ 945.498611][T16623] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 945.504882][T16623] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 945.506931][T16625] team0: Port device team_slave_0 added [ 945.510799][T16623] ? next_event+0x6a0/0x6a0 [ 945.519863][T16625] team0: Port device team_slave_1 added [ 945.520845][T16623] full_proxy_unlocked_ioctl+0x222/0x330 [ 945.532000][T16623] ? full_proxy_poll+0x2d0/0x2d0 [ 945.536951][T16623] do_vfs_ioctl+0xea8/0x2c50 [ 945.541579][T16623] ? security_file_ioctl+0x1bd/0x200 [ 945.546888][T16623] __se_sys_ioctl+0x1da/0x270 [ 945.551599][T16623] __x64_sys_ioctl+0x4a/0x70 [ 945.556206][T16623] do_syscall_64+0xb6/0x160 [ 945.560725][T16623] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 945.566619][T16623] RIP: 0033:0x459da7 [ 945.570517][T16623] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 945.590220][T16623] RSP: 002b:00007fe30458c3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.598646][T16623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459da7 [ 945.606635][T16623] RDX: 00007fe30458c810 RSI: 0000000080085502 RDI: 0000000000000003 [ 945.614616][T16623] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 945.623551][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 945.631539][T16623] R13: 00000000004bf779 R14: 00000000004e1450 R15: 00000000ffffffff [ 945.639535][T16623] [ 945.641870][T16623] Uninit was stored to memory at: [ 945.646910][T16623] kmsan_internal_chain_origin+0xbd/0x180 [ 945.652640][T16623] kmsan_memcpy_memmove_metadata+0x25c/0x2e0 [ 945.658632][T16623] kmsan_memcpy_metadata+0xb/0x10 [ 945.663659][T16623] __msan_memcpy+0x56/0x70 17:22:03 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe2, 0xa6, 0xc2, 0x8, 0x7fd, 0x4, 0x33e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x24, 0x2c, 0x6d, 0x0, [], [{{0x9, 0x5, 0x0, 0xb}}, {{0x9, 0x5, 0x1, 0x3, 0x8}}]}}]}}]}}, 0x0) syz_usb_ep_read(r0, 0x1, 0x7c, &(0x7f0000004280)=""/124) [ 945.668073][T16623] gadget_setup+0x498/0xb60 [ 945.672581][T16623] dummy_timer+0x1fba/0x6770 [ 945.677165][T16623] call_timer_fn+0x232/0x530 [ 945.681752][T16623] __run_timers+0xd60/0x1270 [ 945.681766][T16623] run_timer_softirq+0x2d/0x50 [ 945.681783][T16623] __do_softirq+0x4a1/0x83a [ 945.681796][T16623] irq_exit+0x230/0x280 [ 945.681836][T16623] exiting_irq+0xe/0x10 [ 945.691177][T16623] smp_apic_timer_interrupt+0x48/0x70 [ 945.709584][T16623] apic_timer_interrupt+0x2e/0x40 [ 945.714626][T16623] finish_lock_switch+0x2b/0x40 [ 945.719750][T16623] finish_task_switch+0xfa/0x2d0 [ 945.724698][T16623] __schedule+0x71b/0x800 [ 945.729019][T16623] schedule+0x19b/0x2d0 [ 945.733157][T16623] do_nanosleep+0x25e/0x940 [ 945.737649][T16623] __se_sys_nanosleep+0x725/0x940 [ 945.742669][T16623] __x64_sys_nanosleep+0x3e/0x60 [ 945.747597][T16623] do_syscall_64+0xb6/0x160 [ 945.752086][T16623] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 945.757973][T16623] [ 945.760286][T16623] Uninit was stored to memory at: [ 945.765307][T16623] kmsan_internal_chain_origin+0xbd/0x180 [ 945.771012][T16623] __msan_chain_origin+0x6b/0xd0 [ 945.775936][T16623] dummy_timer+0x2d76/0x6770 [ 945.780509][T16623] call_timer_fn+0x232/0x530 [ 945.785086][T16623] __run_timers+0xd60/0x1270 [ 945.789661][T16623] run_timer_softirq+0x2d/0x50 [ 945.794412][T16623] __do_softirq+0x4a1/0x83a [ 945.798900][T16623] irq_exit+0x230/0x280 [ 945.803043][T16623] exiting_irq+0xe/0x10 [ 945.807187][T16623] smp_apic_timer_interrupt+0x48/0x70 [ 945.812544][T16623] apic_timer_interrupt+0x2e/0x40 [ 945.817553][T16623] finish_lock_switch+0x2b/0x40 [ 945.822577][T16623] finish_task_switch+0xfa/0x2d0 [ 945.827511][T16623] __schedule+0x71b/0x800 [ 945.831828][T16623] schedule+0x19b/0x2d0 [ 945.835973][T16623] do_nanosleep+0x25e/0x940 [ 945.840464][T16623] __se_sys_nanosleep+0x725/0x940 [ 945.845476][T16623] __x64_sys_nanosleep+0x3e/0x60 [ 945.850420][T16623] do_syscall_64+0xb6/0x160 [ 945.854911][T16623] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 945.860781][T16623] [ 945.863095][T16623] Uninit was stored to memory at: [ 945.868229][T16623] kmsan_internal_chain_origin+0xbd/0x180 [ 945.873934][T16623] __msan_chain_origin+0x6b/0xd0 [ 945.878858][T16623] usb_control_msg+0x61b/0x7f0 [ 945.883610][T16623] usbnet_write_cmd+0x386/0x430 [ 945.888461][T16623] asix_write_cmd+0x155/0x270 [ 945.893122][T16623] ax88772_hw_reset+0x191/0xb40 [ 945.897956][T16623] ax88772_bind+0x6ad/0x11f0 [ 945.902531][T16623] usbnet_probe+0x10d3/0x39d0 [ 945.907193][T16623] usb_probe_interface+0xd19/0x1310 [ 945.912391][T16623] really_probe+0xd91/0x1f90 [ 945.916966][T16623] driver_probe_device+0x1ba/0x510 [ 945.922064][T16623] __device_attach_driver+0x5b8/0x790 [ 945.927422][T16623] bus_for_each_drv+0x28e/0x3b0 [ 945.932257][T16623] __device_attach+0x489/0x750 [ 945.937005][T16623] device_initial_probe+0x4a/0x60 [ 945.942013][T16623] bus_probe_device+0x131/0x390 [ 945.946848][T16623] device_add+0x25b5/0x2df0 [ 945.951338][T16623] usb_set_configuration+0x309f/0x3710 [ 945.956800][T16623] generic_probe+0xe7/0x280 [ 945.961296][T16623] usb_probe_device+0x146/0x200 [ 945.966143][T16623] really_probe+0xd91/0x1f90 [ 945.970727][T16623] driver_probe_device+0x1ba/0x510 [ 945.975831][T16623] __device_attach_driver+0x5b8/0x790 [ 945.981191][T16623] bus_for_each_drv+0x28e/0x3b0 [ 945.986040][T16623] __device_attach+0x489/0x750 [ 945.990793][T16623] device_initial_probe+0x4a/0x60 [ 945.995802][T16623] bus_probe_device+0x131/0x390 [ 946.000636][T16623] device_add+0x25b5/0x2df0 [ 946.005136][T16623] usb_new_device+0x23e5/0x2fb0 [ 946.009971][T16623] hub_event+0x581d/0x72f0 [ 946.014377][T16623] process_one_work+0x1572/0x1ef0 [ 946.019388][T16623] worker_thread+0x189c/0x2460 [ 946.024135][T16623] kthread+0x4b5/0x4f0 [ 946.028188][T16623] ret_from_fork+0x35/0x40 [ 946.032585][T16623] [ 946.034897][T16623] Uninit was stored to memory at: [ 946.039910][T16623] kmsan_internal_chain_origin+0xbd/0x180 [ 946.045628][T16623] __msan_chain_origin+0x6b/0xd0 [ 946.050565][T16623] ax88772_bind+0xa12/0x11f0 [ 946.055155][T16623] usbnet_probe+0x10d3/0x39d0 [ 946.059818][T16623] usb_probe_interface+0xd19/0x1310 [ 946.065000][T16623] really_probe+0xd91/0x1f90 [ 946.069575][T16623] driver_probe_device+0x1ba/0x510 [ 946.074669][T16623] __device_attach_driver+0x5b8/0x790 [ 946.080025][T16623] bus_for_each_drv+0x28e/0x3b0 [ 946.084863][T16623] __device_attach+0x489/0x750 [ 946.089612][T16623] device_initial_probe+0x4a/0x60 [ 946.094621][T16623] bus_probe_device+0x131/0x390 [ 946.099461][T16623] device_add+0x25b5/0x2df0 [ 946.103948][T16623] usb_set_configuration+0x309f/0x3710 [ 946.109399][T16623] generic_probe+0xe7/0x280 [ 946.113889][T16623] usb_probe_device+0x146/0x200 [ 946.118725][T16623] really_probe+0xd91/0x1f90 [ 946.123313][T16623] driver_probe_device+0x1ba/0x510 [ 946.128408][T16623] __device_attach_driver+0x5b8/0x790 [ 946.134027][T16623] bus_for_each_drv+0x28e/0x3b0 [ 946.138867][T16623] __device_attach+0x489/0x750 [ 946.143717][T16623] device_initial_probe+0x4a/0x60 [ 946.148727][T16623] bus_probe_device+0x131/0x390 [ 946.153562][T16623] device_add+0x25b5/0x2df0 [ 946.158055][T16623] usb_new_device+0x23e5/0x2fb0 [ 946.162888][T16623] hub_event+0x581d/0x72f0 [ 946.167292][T16623] process_one_work+0x1572/0x1ef0 [ 946.172306][T16623] worker_thread+0x189c/0x2460 [ 946.177051][T16623] kthread+0x4b5/0x4f0 [ 946.181109][T16623] ret_from_fork+0x35/0x40 [ 946.185499][T16623] [ 946.187812][T16623] Local variable description: ----buf.i@asix_get_phy_addr [ 946.194894][T16623] Variable was created at: [ 946.199294][T16623] asix_get_phy_addr+0x4d/0x280 [ 946.204139][T16623] asix_get_phy_addr+0x4d/0x280 [ 946.208970][T16623] [ 946.211278][T16623] Byte 10 of 16 is uninitialized [ 946.216210][T16623] Memory access of size 16 starts at ffff8880509cdf80 [ 946.222956][T16623] Data copied to user address 00007fe30458c810 [ 946.229085][T16623] ===================================================== [ 946.236004][T16623] Disabling lock debugging due to kernel taint [ 946.242142][T16623] Kernel panic - not syncing: panic_on_warn set ... [ 946.248722][T16623] CPU: 1 PID: 16623 Comm: syz-executor.4 Tainted: G B 5.4.0-rc3+ #0 [ 946.257993][T16623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 946.268031][T16623] Call Trace: [ 946.271317][T16623] dump_stack+0x191/0x1f0 [ 946.275645][T16623] panic+0x3c9/0xc1e [ 946.279551][T16623] kmsan_report+0x215/0x220 [ 946.284049][T16623] kmsan_internal_check_memory+0x187/0x4a0 [ 946.289844][T16623] ? kmsan_get_metadata+0x39/0x350 [ 946.294953][T16623] kmsan_copy_to_user+0xa9/0xb0 [ 946.299794][T16623] _copy_to_user+0x16b/0x1f0 [ 946.304382][T16623] fuzzer_ioctl+0x25a9/0x5860 [ 946.309058][T16623] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 946.315124][T16623] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 946.321005][T16623] ? next_event+0x6a0/0x6a0 [ 946.325498][T16623] full_proxy_unlocked_ioctl+0x222/0x330 [ 946.331133][T16623] ? full_proxy_poll+0x2d0/0x2d0 [ 946.336059][T16623] do_vfs_ioctl+0xea8/0x2c50 [ 946.340651][T16623] ? security_file_ioctl+0x1bd/0x200 [ 946.345942][T16623] __se_sys_ioctl+0x1da/0x270 [ 946.350615][T16623] __x64_sys_ioctl+0x4a/0x70 [ 946.355196][T16623] do_syscall_64+0xb6/0x160 [ 946.359687][T16623] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 946.365568][T16623] RIP: 0033:0x459da7 [ 946.369453][T16623] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 946.389161][T16623] RSP: 002b:00007fe30458c3c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.397567][T16623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000459da7 [ 946.405538][T16623] RDX: 00007fe30458c810 RSI: 0000000080085502 RDI: 0000000000000003 [ 946.413496][T16623] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 946.421455][T16623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 946.429850][T16623] R13: 00000000004bf779 R14: 00000000004e1450 R15: 00000000ffffffff [ 946.439108][T16623] Kernel Offset: disabled [ 946.443431][T16623] Rebooting in 86400 seconds..