/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) [ 1281.609537][T13110] IPVS: ftp: loaded support on port[0] = 21 10:13:09 executing program 0: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:09 executing program 2: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:09 executing program 3: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:09 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0x8) 10:13:09 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0x8) 10:13:09 executing program 1: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:10 executing program 0: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:10 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000a00)=""/31, 0x1f) creat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) dup3(r0, r1, 0x0) execve(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x8080aea1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 10:13:10 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0x8) 10:13:10 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/183, &(0x7f0000000000)=0x8) 10:13:10 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xba\xdb\xe6\xbf\xb4\b\xedc4\x8e\x84\xd4N\x12\x9b\xd7\t\xbd\x11+\x86T\x16\xa3\x86x\x1c\x9f\x84\x195\xde\x00_\t~\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x1c\x0f\x9bs?i\x93\xa8`Z\xed\xcd\xba\x9e\xfd\xb4U\xd14\x00+n,N\xd45\xab\x7fm\x0e\xa0\xec\xb6\x9d\xd7K\xdd.\x85c\xcb\xd6\xd7c\xde\xf6\rs\x892~\x14po\xd3W9\xd7\xe0Z\xdd\x81\x02\x00F\xb9\x06\x1b[=T:\xb5\xef?\x03\x93\x8d\xa5~i\x91\xd2\x03\x9d\xe1C4\xa1/\x80n\xfe\xe1\x1a\xfe\xb9\xa6Ly\x02\x9e\xcfi\xac\xe1\xc7\x97\xdc\xb3S\x9e\xbag\x93\xa0\t=\x9czhXI\x95\x86\x00\xf0lTw\xc3\xabS\x17\x9e\xee\xde\xf2\x87\x05\xf8\xc9x\x04\xc7\x8c\xc6\xe6N\xc6\x91\x8f\xf2\xcd\xf1\xcc\xc7\x9b\x0eW\xd8\x1e\xb2\v\xc5\xb5\xfae\xff\xff\xff\xff\xff\xff\xff\xe1\xea7\x18\xfc\xb1\x9f\x98\x8d\r[V*\xd0\x8dP\xef\x81x\xf7Y\xe7\x7f\x9eh[\xbbZ\xd5\xd4\xb7cHb\x11\xe9\xe1\x1f\xd3bG\xfd\xc9\xf3\x05\'H\x19k\xdc\x13\x1e\xdbIC\x91VV#\xc4\xf5c\xfe\x10\xd1\x82\xc6\xb3\xd31\xf5G\x8ayM>8\x9f\x84j\xdbG/\x84\x9co\xae\xd3\x83+\xa3=\xaa)\x04\x84\xf3\xe7\x8eC\f\x93\x92\xb26\xd4\xff6KaT6\xabb6\x8f\x1a\x91\x96S\x98\xd8\aan\xf6', 0x4) fallocate(r0, 0x0, 0x0, 0x1) 10:13:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x228, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x1c0, 0x10000}], 0x4000, 0x0) 10:13:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003440)=[{{&(0x7f0000000180)=@tipc=@name, 0x80, 0x0}}], 0x1, 0x0, 0x0) 10:13:10 executing program 3: r0 = fanotify_init(0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001240)='P', 0x1}], 0x1) 10:13:10 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xba\xdb\xe6\xbf\xb4\b\xedc4\x8e\x84\xd4N\x12\x9b\xd7\t\xbd\x11+\x86T\x16\xa3\x86x\x1c\x9f\x84\x195\xde\x00_\t~\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x1c\x0f\x9bs?i\x93\xa8`Z\xed\xcd\xba\x9e\xfd\xb4U\xd14\x00+n,N\xd45\xab\x7fm\x0e\xa0\xec\xb6\x9d\xd7K\xdd.\x85c\xcb\xd6\xd7c\xde\xf6\rs\x892~\x14po\xd3W9\xd7\xe0Z\xdd\x81\x02\x00F\xb9\x06\x1b[=T:\xb5\xef?\x03\x93\x8d\xa5~i\x91\xd2\x03\x9d\xe1C4\xa1/\x80n\xfe\xe1\x1a\xfe\xb9\xa6Ly\x02\x9e\xcfi\xac\xe1\xc7\x97\xdc\xb3S\x9e\xbag\x93\xa0\t=\x9czhXI\x95\x86\x00\xf0lTw\xc3\xabS\x17\x9e\xee\xde\xf2\x87\x05\xf8\xc9x\x04\xc7\x8c\xc6\xe6N\xc6\x91\x8f\xf2\xcd\xf1\xcc\xc7\x9b\x0eW\xd8\x1e\xb2\v\xc5\xb5\xfae\xff\xff\xff\xff\xff\xff\xff\xe1\xea7\x18\xfc\xb1\x9f\x98\x8d\r[V*\xd0\x8dP\xef\x81x\xf7Y\xe7\x7f\x9eh[\xbbZ\xd5\xd4\xb7cHb\x11\xe9\xe1\x1f\xd3bG\xfd\xc9\xf3\x05\'H\x19k\xdc\x13\x1e\xdbIC\x91VV#\xc4\xf5c\xfe\x10\xd1\x82\xc6\xb3\xd31\xf5G\x8ayM>8\x9f\x84j\xdbG/\x84\x9co\xae\xd3\x83+\xa3=\xaa)\x04\x84\xf3\xe7\x8eC\f\x93\x92\xb26\xd4\xff6KaT6\xabb6\x8f\x1a\x91\x96S\x98\xd8\aan\xf6', 0x4) fallocate(r0, 0x0, 0x0, 0x1) [ 1283.674179][T13509] BTRFS: device fsid fff69206-0000-0000-b81e-1b00920efd9a devid 12538021362599460864 transid 135266304 /dev/loop1 10:13:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa048b5bdb4cb904e473730e55cff26d1b0e001280fffffff05e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 10:13:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00w\x00\x00\x00'], 0xc, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00db35979f5c450600272fe429c42a9e59cd202ed5c42b332368b8241176c86763e0acb49fac4a0059797792f3ebb0ac44ecb6bfebda59d1"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="141b2bcf26079cd555dcd4476372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147eefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x18c) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) 10:13:11 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xba\xdb\xe6\xbf\xb4\b\xedc4\x8e\x84\xd4N\x12\x9b\xd7\t\xbd\x11+\x86T\x16\xa3\x86x\x1c\x9f\x84\x195\xde\x00_\t~\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x1c\x0f\x9bs?i\x93\xa8`Z\xed\xcd\xba\x9e\xfd\xb4U\xd14\x00+n,N\xd45\xab\x7fm\x0e\xa0\xec\xb6\x9d\xd7K\xdd.\x85c\xcb\xd6\xd7c\xde\xf6\rs\x892~\x14po\xd3W9\xd7\xe0Z\xdd\x81\x02\x00F\xb9\x06\x1b[=T:\xb5\xef?\x03\x93\x8d\xa5~i\x91\xd2\x03\x9d\xe1C4\xa1/\x80n\xfe\xe1\x1a\xfe\xb9\xa6Ly\x02\x9e\xcfi\xac\xe1\xc7\x97\xdc\xb3S\x9e\xbag\x93\xa0\t=\x9czhXI\x95\x86\x00\xf0lTw\xc3\xabS\x17\x9e\xee\xde\xf2\x87\x05\xf8\xc9x\x04\xc7\x8c\xc6\xe6N\xc6\x91\x8f\xf2\xcd\xf1\xcc\xc7\x9b\x0eW\xd8\x1e\xb2\v\xc5\xb5\xfae\xff\xff\xff\xff\xff\xff\xff\xe1\xea7\x18\xfc\xb1\x9f\x98\x8d\r[V*\xd0\x8dP\xef\x81x\xf7Y\xe7\x7f\x9eh[\xbbZ\xd5\xd4\xb7cHb\x11\xe9\xe1\x1f\xd3bG\xfd\xc9\xf3\x05\'H\x19k\xdc\x13\x1e\xdbIC\x91VV#\xc4\xf5c\xfe\x10\xd1\x82\xc6\xb3\xd31\xf5G\x8ayM>8\x9f\x84j\xdbG/\x84\x9co\xae\xd3\x83+\xa3=\xaa)\x04\x84\xf3\xe7\x8eC\f\x93\x92\xb26\xd4\xff6KaT6\xabb6\x8f\x1a\x91\x96S\x98\xd8\aan\xf6', 0x4) fallocate(r0, 0x0, 0x0, 0x1) [ 1283.864659][T13593] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1283.901059][T13509] BTRFS error (device loop1): superblock checksum mismatch [ 1283.961620][T13509] BTRFS error (device loop1): open_ctree failed 10:13:11 executing program 0: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r4 = open(0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(r5, r2) r6 = gettid() r7 = syz_open_procfs(r6, &(0x7f0000000240)='fdinfo/4\x00') preadv(r7, &(0x7f0000000700)=[{0x0}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) fcntl$setsig(r11, 0xa, 0x2a) ioctl$RTC_WIE_OFF(r7, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r12, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r13, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB]) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 10:13:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r2, &(0x7f0000000200)={{0x3, @netrom, 0x40000000001}, [@null, @default, @null, @bcast, @remote, @rose, @remote, @default]}, 0x47) 10:13:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x26045800) 10:13:11 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00\xac=\x9d\xba\xdb\xe6\xbf\xb4\b\xedc4\x8e\x84\xd4N\x12\x9b\xd7\t\xbd\x11+\x86T\x16\xa3\x86x\x1c\x9f\x84\x195\xde\x00_\t~\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x1c\x0f\x9bs?i\x93\xa8`Z\xed\xcd\xba\x9e\xfd\xb4U\xd14\x00+n,N\xd45\xab\x7fm\x0e\xa0\xec\xb6\x9d\xd7K\xdd.\x85c\xcb\xd6\xd7c\xde\xf6\rs\x892~\x14po\xd3W9\xd7\xe0Z\xdd\x81\x02\x00F\xb9\x06\x1b[=T:\xb5\xef?\x03\x93\x8d\xa5~i\x91\xd2\x03\x9d\xe1C4\xa1/\x80n\xfe\xe1\x1a\xfe\xb9\xa6Ly\x02\x9e\xcfi\xac\xe1\xc7\x97\xdc\xb3S\x9e\xbag\x93\xa0\t=\x9czhXI\x95\x86\x00\xf0lTw\xc3\xabS\x17\x9e\xee\xde\xf2\x87\x05\xf8\xc9x\x04\xc7\x8c\xc6\xe6N\xc6\x91\x8f\xf2\xcd\xf1\xcc\xc7\x9b\x0eW\xd8\x1e\xb2\v\xc5\xb5\xfae\xff\xff\xff\xff\xff\xff\xff\xe1\xea7\x18\xfc\xb1\x9f\x98\x8d\r[V*\xd0\x8dP\xef\x81x\xf7Y\xe7\x7f\x9eh[\xbbZ\xd5\xd4\xb7cHb\x11\xe9\xe1\x1f\xd3bG\xfd\xc9\xf3\x05\'H\x19k\xdc\x13\x1e\xdbIC\x91VV#\xc4\xf5c\xfe\x10\xd1\x82\xc6\xb3\xd31\xf5G\x8ayM>8\x9f\x84j\xdbG/\x84\x9co\xae\xd3\x83+\xa3=\xaa)\x04\x84\xf3\xe7\x8eC\f\x93\x92\xb26\xd4\xff6KaT6\xabb6\x8f\x1a\x91\x96S\x98\xd8\aan\xf6', 0x4) fallocate(r0, 0x0, 0x0, 0x1) 10:13:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x228, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x1c0, 0x10000}], 0x4000, 0x0) 10:13:11 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20008088) 10:13:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) restart_syscall() 10:13:11 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x435d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 1284.456522][T13598] overlayfs: conflicting lowerdir path [ 1284.569645][T13719] BTRFS error (device loop1): superblock checksum mismatch 10:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) restart_syscall() 10:13:12 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1284.711709][T13719] BTRFS error (device loop1): open_ctree failed 10:13:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x31, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) 10:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) restart_syscall() 10:13:12 executing program 5: clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 10:13:12 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x435d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 10:13:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x228, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174779f115a63a26e1ec988699ffb7535070618ae8c40a1c3077d0dbd535b96df14fa8bbab4a2377e87e5c9325b1a7f2795c28be447b8b5ff13a2153561c4d0b6256d95e4dd1054b190dc3ee25c23ffef6930ca0351a8486a8d9da51327c24250339ed3995884c9ca22d27544df7cf56c71b36512de92cea3c5720bb5549626487b8a6ca38f4e10377ce8e7805f325184be3ae3ae8fe2431ab97be66746b4a81062b7affdd78fe75b042ca1edd582af25800816a241587650a3e1a0c74de37fc0a72a93882383671e7ebb1bd3725debc3a8fe070f921c67940178f276036913d6fce009a1274323eed73854e8659f57db1da1575ce221debc9571f3de43d2106a1490da", 0x1c0, 0x10000}], 0x4000, 0x0) 10:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) restart_syscall() 10:13:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x5, 0x0, 0x0, {{}, 0x0, 0xf, 0x0, {0x4c, 0x18, {0x0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) 10:13:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1285.808743][T13860] BTRFS error (device loop1): superblock checksum mismatch 10:13:13 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:13:13 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1285.921828][T13860] BTRFS error (device loop1): open_ctree failed 10:13:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:13:13 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x435d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) 10:13:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x228, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174779f115a63a26e1ec988699ffb7535070618ae8c40a1c3077d0dbd535b96df14fa8bbab4a2377e87e5c9325b1a7f2795c28be447b8b5ff13a2153561c4d0b6256d95e4dd1054b190dc3ee25c23ffef6930ca0351a8486a8d9da51327c24250339ed3995884c9ca22d27544df7cf56c71b36512de92cea3c5720bb5549626487b8a6ca38f4e10377ce8e7805f325184be3ae3ae8fe2431ab97be66746b4a81062b7affdd78fe75b042ca1edd582af25800816a241587650a3e1a0c74de37fc0a72a93882383671e7ebb1bd3725debc3a8fe070f921c67940178f276036913d6fce009a1274323eed73854e8659f57db1da1575ce221debc9571f3de43d2106a1490da", 0x1c0, 0x10000}], 0x4000, 0x0) 10:13:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:13:14 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) io_submit(r1, 0x435d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) [ 1286.752059][T13988] BTRFS error (device loop1): superblock checksum mismatch [ 1286.841770][T13988] BTRFS error (device loop1): open_ctree failed [ 1286.892592][T13942] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1286.971458][T13942] CPU: 1 PID: 13942 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1286.979419][T13942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.989490][T13942] Call Trace: [ 1286.992800][T13942] dump_stack+0x197/0x210 [ 1286.997142][T13942] dump_header+0x10b/0x82d [ 1286.997164][T13942] oom_kill_process.cold+0x10/0x15 [ 1286.997184][T13942] out_of_memory+0x334/0x1340 [ 1286.997203][T13942] ? cgroup_file_notify+0x140/0x1b0 [ 1286.997223][T13942] ? oom_killer_disable+0x280/0x280 [ 1287.021790][T13942] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1287.027356][T13942] ? memcg_stat_show+0xc40/0xc40 [ 1287.032315][T13942] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1287.032340][T13942] ? cgroup_file_notify+0x140/0x1b0 [ 1287.032362][T13942] memory_max_write+0x262/0x3a0 [ 1287.032384][T13942] ? mem_cgroup_write+0x370/0x370 [ 1287.032403][T13942] ? cgroup_file_write+0x86/0x790 [ 1287.032429][T13942] cgroup_file_write+0x241/0x790 [ 1287.032444][T13942] ? mem_cgroup_write+0x370/0x370 [ 1287.032464][T13942] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1287.073947][T13942] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1287.079608][T13942] kernfs_fop_write+0x2b8/0x480 [ 1287.084484][T13942] __vfs_write+0x8a/0x110 [ 1287.088825][T13942] ? kernfs_fop_open+0xd80/0xd80 [ 1287.093772][T13942] vfs_write+0x268/0x5d0 [ 1287.098012][T13942] ksys_write+0x14f/0x290 [ 1287.102427][T13942] ? __ia32_sys_read+0xb0/0xb0 [ 1287.107176][T13942] ? do_syscall_64+0x26/0x760 [ 1287.111842][T13942] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1287.117910][T13942] ? do_syscall_64+0x26/0x760 [ 1287.122579][T13942] __x64_sys_write+0x73/0xb0 [ 1287.127156][T13942] do_syscall_64+0xfa/0x760 [ 1287.131649][T13942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1287.137608][T13942] RIP: 0033:0x45a219 [ 1287.141499][T13942] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1287.161097][T13942] RSP: 002b:00007f5ec9f81c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1287.169502][T13942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 1287.177456][T13942] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1287.185409][T13942] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1287.193366][T13942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ec9f826d4 [ 1287.201325][T13942] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff [ 1287.232277][T13942] memory: usage 38692kB, limit 0kB, failcnt 35 [ 1287.238679][T13942] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1287.245806][T13942] Memory cgroup stats for /syz4: [ 1287.245914][T13942] anon 33796096 [ 1287.245914][T13942] file 102400 [ 1287.245914][T13942] kernel_stack 655360 [ 1287.245914][T13942] slab 2465792 [ 1287.245914][T13942] sock 57344 [ 1287.245914][T13942] shmem 0 [ 1287.245914][T13942] file_mapped 0 [ 1287.245914][T13942] file_dirty 135168 [ 1287.245914][T13942] file_writeback 0 10:13:14 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1287.245914][T13942] anon_thp 31457280 [ 1287.245914][T13942] inactive_anon 0 [ 1287.245914][T13942] active_anon 33800192 [ 1287.245914][T13942] inactive_file 0 [ 1287.245914][T13942] active_file 135168 [ 1287.245914][T13942] unevictable 0 [ 1287.245914][T13942] slab_reclaimable 946176 [ 1287.245914][T13942] slab_unreclaimable 1519616 [ 1287.245914][T13942] pgfault 102267 [ 1287.245914][T13942] pgmajfault 0 [ 1287.245914][T13942] workingset_refault 0 [ 1287.245914][T13942] workingset_activate 0 [ 1287.245914][T13942] workingset_nodereclaim 0 [ 1287.245914][T13942] pgrefill 33 [ 1287.245914][T13942] pgscan 277 [ 1287.245914][T13942] pgsteal 256 [ 1287.383240][T13942] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=13932,uid=0 [ 1287.437089][T13942] Memory cgroup out of memory: Killed process 13932 (syz-executor.4) total-vm:72848kB, anon-rss:4208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 1287.478344][ T1071] oom_reaper: reaped process 13932 (syz-executor.4), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 10:13:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) 10:13:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:13:14 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1287.677248][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1287.770015][T16868] CPU: 0 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1287.777967][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.788037][T16868] Call Trace: [ 1287.791343][T16868] dump_stack+0x197/0x210 [ 1287.795694][T16868] dump_header+0x10b/0x82d [ 1287.800102][T16868] ? oom_kill_process+0x94/0x3f0 [ 1287.805050][T16868] oom_kill_process.cold+0x10/0x15 [ 1287.810178][T16868] out_of_memory+0x334/0x1340 [ 1287.814868][T16868] ? lock_downgrade+0x920/0x920 [ 1287.819746][T16868] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1287.825569][T16868] ? oom_killer_disable+0x280/0x280 [ 1287.830881][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1287.836459][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1287.841412][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1287.846542][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1287.851403][T16868] try_charge+0xf8c/0x1470 [ 1287.855825][T16868] ? find_held_lock+0x35/0x130 [ 1287.860613][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1287.866170][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1287.871724][T16868] ? find_held_lock+0x35/0x130 [ 1287.876671][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1287.882242][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1287.882259][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1287.882279][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1287.882300][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1287.882320][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1287.882336][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1287.882355][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1287.882369][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1287.882390][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1287.882406][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1287.882418][T16868] ? __kasan_check_read+0x11/0x20 [ 1287.882441][T16868] copy_process+0x3f8/0x6860 [ 1287.882458][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1287.882471][T16868] ? __kasan_check_read+0x11/0x20 [ 1287.882500][T16868] ? __cleanup_sighand+0x60/0x60 [ 1287.882514][T16868] ? find_held_lock+0x35/0x130 10:13:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1287.882548][T16868] _do_fork+0x146/0xfa0 [ 1287.882568][T16868] ? copy_init_mm+0x20/0x20 [ 1287.893309][T16868] ? __kasan_check_read+0x11/0x20 [ 1287.893323][T16868] ? _copy_to_user+0x118/0x160 [ 1287.893343][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1287.893358][T16868] ? put_timespec64+0xda/0x140 [ 1287.893382][T16868] __x64_sys_clone+0x18d/0x250 [ 1287.893399][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1287.893421][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1287.893435][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1287.893456][T16868] do_syscall_64+0xfa/0x760 [ 1287.893477][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1287.893487][T16868] RIP: 0033:0x4587ea [ 1287.893502][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1287.893510][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1287.893524][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1287.893532][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1287.893540][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1287.893549][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1287.893557][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1288.018602][T16868] memory: usage 34252kB, limit 0kB, failcnt 48 10:13:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1288.204316][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1288.237125][T16868] Memory cgroup stats for /syz4: [ 1288.237401][T16868] anon 29573120 [ 1288.237401][T16868] file 102400 [ 1288.237401][T16868] kernel_stack 589824 [ 1288.237401][T16868] slab 2465792 [ 1288.237401][T16868] sock 57344 [ 1288.237401][T16868] shmem 0 [ 1288.237401][T16868] file_mapped 0 [ 1288.237401][T16868] file_dirty 135168 [ 1288.237401][T16868] file_writeback 0 [ 1288.237401][T16868] anon_thp 27262976 [ 1288.237401][T16868] inactive_anon 0 [ 1288.237401][T16868] active_anon 29577216 [ 1288.237401][T16868] inactive_file 0 [ 1288.237401][T16868] active_file 135168 [ 1288.237401][T16868] unevictable 0 [ 1288.237401][T16868] slab_reclaimable 946176 [ 1288.237401][T16868] slab_unreclaimable 1519616 [ 1288.237401][T16868] pgfault 102300 [ 1288.237401][T16868] pgmajfault 0 [ 1288.237401][T16868] workingset_refault 0 [ 1288.237401][T16868] workingset_activate 0 [ 1288.237401][T16868] workingset_nodereclaim 0 [ 1288.237401][T16868] pgrefill 33 [ 1288.237401][T16868] pgscan 277 [ 1288.237401][T16868] pgsteal 256 [ 1288.259221][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=25398,uid=0 [ 1288.503190][T16868] Memory cgroup out of memory: Killed process 25398 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:35864kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1288.732869][T14014] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1288.779138][T14014] CPU: 1 PID: 14014 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1288.787123][T14014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.797182][T14014] Call Trace: [ 1288.800556][T14014] dump_stack+0x197/0x210 [ 1288.804890][T14014] dump_header+0x10b/0x82d [ 1288.809295][T14014] oom_kill_process.cold+0x10/0x15 [ 1288.814392][T14014] out_of_memory+0x334/0x1340 [ 1288.819075][T14014] ? retint_kernel+0x2b/0x2b [ 1288.823679][T14014] ? oom_killer_disable+0x280/0x280 [ 1288.828878][T14014] ? mem_cgroup_out_of_memory+0x16a/0x240 [ 1288.834595][T14014] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1288.840495][T14014] ? memcg_stat_show+0xc40/0xc40 [ 1288.845461][T14014] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 1288.851269][T14014] ? cgroup_file_notify+0x140/0x1b0 [ 1288.856468][T14014] memory_max_write+0x262/0x3a0 [ 1288.861322][T14014] ? mem_cgroup_write+0x370/0x370 [ 1288.866341][T14014] ? mem_cgroup_write+0x370/0x370 [ 1288.871369][T14014] cgroup_file_write+0x241/0x790 [ 1288.876293][T14014] ? mem_cgroup_write+0x370/0x370 [ 1288.881302][T14014] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1288.886924][T14014] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1288.892544][T14014] kernfs_fop_write+0x2b8/0x480 [ 1288.897379][T14014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1288.903610][T14014] __vfs_write+0x8a/0x110 [ 1288.907928][T14014] ? kernfs_fop_open+0xd80/0xd80 [ 1288.912863][T14014] vfs_write+0x268/0x5d0 [ 1288.917093][T14014] ksys_write+0x14f/0x290 [ 1288.921411][T14014] ? __ia32_sys_read+0xb0/0xb0 [ 1288.926165][T14014] ? do_syscall_64+0x26/0x760 [ 1288.930846][T14014] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.936908][T14014] ? do_syscall_64+0x26/0x760 [ 1288.941591][T14014] __x64_sys_write+0x73/0xb0 [ 1288.946169][T14014] do_syscall_64+0xfa/0x760 [ 1288.950676][T14014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1288.956556][T14014] RIP: 0033:0x45a219 [ 1288.960437][T14014] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1288.980036][T14014] RSP: 002b:00007fe3c5239c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.988435][T14014] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 1288.996392][T14014] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1289.004356][T14014] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1289.012313][T14014] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3c523a6d4 [ 1289.020269][T14014] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff 10:13:16 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1289.060721][T14014] memory: usage 42292kB, limit 0kB, failcnt 0 [ 1289.080719][T14014] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1289.094549][T14014] Memory cgroup stats for /syz3: [ 1289.096528][T14014] anon 37740544 [ 1289.096528][T14014] file 294912 [ 1289.096528][T14014] kernel_stack 589824 [ 1289.096528][T14014] slab 2846720 [ 1289.096528][T14014] sock 0 [ 1289.096528][T14014] shmem 0 [ 1289.096528][T14014] file_mapped 0 [ 1289.096528][T14014] file_dirty 135168 [ 1289.096528][T14014] file_writeback 0 [ 1289.096528][T14014] anon_thp 35651584 [ 1289.096528][T14014] inactive_anon 0 [ 1289.096528][T14014] active_anon 37740544 [ 1289.096528][T14014] inactive_file 135168 [ 1289.096528][T14014] active_file 65536 [ 1289.096528][T14014] unevictable 135168 [ 1289.096528][T14014] slab_reclaimable 946176 [ 1289.096528][T14014] slab_unreclaimable 1900544 [ 1289.096528][T14014] pgfault 113553 [ 1289.096528][T14014] pgmajfault 0 [ 1289.096528][T14014] workingset_refault 0 [ 1289.096528][T14014] workingset_activate 0 [ 1289.096528][T14014] workingset_nodereclaim 0 [ 1289.096528][T14014] pgrefill 145 [ 1289.096528][T14014] pgscan 142 [ 1289.096528][T14014] pgsteal 33 10:13:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:13:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1289.662938][T14014] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14012,uid=0 10:13:17 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1289.763964][T14014] Memory cgroup out of memory: Killed process 14012 (syz-executor.3) total-vm:72584kB, anon-rss:4260kB, file-rss:35836kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1289.806297][ T1071] oom_reaper: reaped process 14012 (syz-executor.3), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 1289.817637][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1289.871458][T16868] CPU: 0 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1289.882438][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.892509][T16868] Call Trace: [ 1289.895817][T16868] dump_stack+0x197/0x210 [ 1289.900173][T16868] dump_header+0x10b/0x82d [ 1289.904602][T16868] ? oom_kill_process+0x94/0x3f0 [ 1289.909557][T16868] oom_kill_process.cold+0x10/0x15 [ 1289.914693][T16868] out_of_memory+0x334/0x1340 [ 1289.919385][T16868] ? lock_downgrade+0x920/0x920 [ 1289.924265][T16868] ? oom_killer_disable+0x280/0x280 [ 1289.929494][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1289.935054][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1289.940015][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1289.945146][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1289.950025][T16868] try_charge+0xf8c/0x1470 [ 1289.954454][T16868] ? find_held_lock+0x35/0x130 [ 1289.959216][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1289.964750][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1289.970281][T16868] ? find_held_lock+0x35/0x130 [ 1289.975035][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1289.980595][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1289.986140][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1289.991326][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1289.996879][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1290.001991][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1290.007351][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1290.012886][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1290.018590][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1290.023778][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1290.029055][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1290.034065][T16868] ? __kasan_check_read+0x11/0x20 [ 1290.039082][T16868] copy_process+0x3f8/0x6860 [ 1290.043657][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1290.048494][T16868] ? __kasan_check_read+0x11/0x20 [ 1290.053515][T16868] ? __cleanup_sighand+0x60/0x60 [ 1290.058435][T16868] ? find_held_lock+0x35/0x130 [ 1290.063200][T16868] _do_fork+0x146/0xfa0 [ 1290.067347][T16868] ? copy_init_mm+0x20/0x20 [ 1290.071839][T16868] ? __kasan_check_read+0x11/0x20 [ 1290.076858][T16868] ? _copy_to_user+0x118/0x160 [ 1290.081621][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1290.087847][T16868] ? put_timespec64+0xda/0x140 [ 1290.092601][T16868] __x64_sys_clone+0x18d/0x250 [ 1290.097353][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1290.102199][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1290.107485][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1290.112511][T16868] do_syscall_64+0xfa/0x760 [ 1290.117006][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1290.123072][T16868] RIP: 0033:0x4587ea [ 1290.126951][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1290.146540][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1290.154940][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1290.162897][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1290.170852][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1290.178805][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1290.186798][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1290.391416][T16868] memory: usage 31748kB, limit 0kB, failcnt 54 [ 1290.398921][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1290.420520][T16868] Memory cgroup stats for /syz4: [ 1290.420633][T16868] anon 27340800 [ 1290.420633][T16868] file 102400 [ 1290.420633][T16868] kernel_stack 589824 [ 1290.420633][T16868] slab 2330624 10:13:17 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000200)="b805000000b9510000000f01c10f46a78900000066ba2100b07bee66ba4100edb9800000830f32b9800000c00f3235000100000f300f304f215c66b808008ed0660f38806f000f011c268ee0", 0xfffffffffffffdfd}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1290.420633][T16868] sock 57344 [ 1290.420633][T16868] shmem 0 [ 1290.420633][T16868] file_mapped 0 [ 1290.420633][T16868] file_dirty 135168 [ 1290.420633][T16868] file_writeback 0 [ 1290.420633][T16868] anon_thp 25165824 [ 1290.420633][T16868] inactive_anon 0 [ 1290.420633][T16868] active_anon 27344896 [ 1290.420633][T16868] inactive_file 0 [ 1290.420633][T16868] active_file 135168 [ 1290.420633][T16868] unevictable 0 [ 1290.420633][T16868] slab_reclaimable 946176 [ 1290.420633][T16868] slab_unreclaimable 1384448 [ 1290.420633][T16868] pgfault 102300 10:13:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1290.420633][T16868] pgmajfault 0 [ 1290.420633][T16868] workingset_refault 0 [ 1290.420633][T16868] workingset_activate 0 [ 1290.420633][T16868] workingset_nodereclaim 0 [ 1290.420633][T16868] pgrefill 33 [ 1290.420633][T16868] pgscan 277 [ 1290.420633][T16868] pgsteal 256 [ 1290.581468][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29886,uid=0 [ 1290.660373][T16868] Memory cgroup out of memory: Killed process 29886 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 10:13:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1290.895882][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1290.952483][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1290.960457][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1290.970623][T16799] Call Trace: [ 1290.973921][T16799] dump_stack+0x197/0x210 [ 1290.978262][T16799] dump_header+0x10b/0x82d [ 1290.982693][T16799] ? oom_kill_process+0x94/0x3f0 [ 1290.987654][T16799] oom_kill_process.cold+0x10/0x15 [ 1290.992962][T16799] out_of_memory+0x334/0x1340 [ 1290.997646][T16799] ? lock_downgrade+0x920/0x920 [ 1291.002523][T16799] ? oom_killer_disable+0x280/0x280 [ 1291.007949][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1291.013508][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1291.018467][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1291.023593][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1291.028460][T16799] try_charge+0xf8c/0x1470 [ 1291.032879][T16799] ? find_held_lock+0x35/0x130 [ 1291.037651][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1291.043193][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1291.048830][T16799] ? find_held_lock+0x35/0x130 [ 1291.053596][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1291.059416][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1291.065066][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1291.070268][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1291.075818][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1291.080950][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1291.086317][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1291.091880][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1291.097608][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1291.102827][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1291.108120][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1291.113140][T16799] ? __kasan_check_read+0x11/0x20 [ 1291.118178][T16799] copy_process+0x3f8/0x6860 [ 1291.122772][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1291.127620][T16799] ? __kasan_check_read+0x11/0x20 [ 1291.132662][T16799] ? __cleanup_sighand+0x60/0x60 [ 1291.137681][T16799] ? find_held_lock+0x35/0x130 [ 1291.142458][T16799] _do_fork+0x146/0xfa0 [ 1291.146612][T16799] ? copy_init_mm+0x20/0x20 [ 1291.151123][T16799] ? __kasan_check_read+0x11/0x20 [ 1291.156143][T16799] ? _copy_to_user+0x118/0x160 [ 1291.160966][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.167199][T16799] ? put_timespec64+0xda/0x140 [ 1291.171984][T16799] __x64_sys_clone+0x18d/0x250 [ 1291.176745][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1291.181614][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1291.186895][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1291.191925][T16799] do_syscall_64+0xfa/0x760 [ 1291.196434][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.202406][T16799] RIP: 0033:0x4587ea [ 1291.206317][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1291.226090][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1291.234496][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1291.242468][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1291.250446][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1291.258422][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1291.266667][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1291.297327][T16799] memory: usage 37316kB, limit 0kB, failcnt 156 [ 1291.306160][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1291.318921][T16799] Memory cgroup stats for /syz3: [ 1291.319026][T16799] anon 33464320 [ 1291.319026][T16799] file 155648 [ 1291.319026][T16799] kernel_stack 524288 [ 1291.319026][T16799] slab 2215936 [ 1291.319026][T16799] sock 0 [ 1291.319026][T16799] shmem 0 [ 1291.319026][T16799] file_mapped 0 [ 1291.319026][T16799] file_dirty 0 [ 1291.319026][T16799] file_writeback 0 [ 1291.319026][T16799] anon_thp 31457280 [ 1291.319026][T16799] inactive_anon 0 [ 1291.319026][T16799] active_anon 33464320 [ 1291.319026][T16799] inactive_file 135168 [ 1291.319026][T16799] active_file 65536 [ 1291.319026][T16799] unevictable 135168 [ 1291.319026][T16799] slab_reclaimable 811008 [ 1291.319026][T16799] slab_unreclaimable 1404928 [ 1291.319026][T16799] pgfault 113553 [ 1291.319026][T16799] pgmajfault 0 [ 1291.319026][T16799] workingset_refault 0 [ 1291.319026][T16799] workingset_activate 0 [ 1291.319026][T16799] workingset_nodereclaim 0 [ 1291.319026][T16799] pgrefill 1216 [ 1291.319026][T16799] pgscan 1228 [ 1291.319026][T16799] pgsteal 70 [ 1291.446271][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21162,uid=0 [ 1291.470051][T16799] Memory cgroup out of memory: Killed process 21162 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35840kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1291.507425][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1291.508590][ T1071] oom_reaper: reaped process 21162 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1291.530561][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1291.538569][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.548631][T16865] Call Trace: [ 1291.548652][T16865] dump_stack+0x197/0x210 [ 1291.548672][T16865] dump_header+0x10b/0x82d [ 1291.548684][T16865] ? oom_kill_process+0x94/0x3f0 [ 1291.548704][T16865] oom_kill_process.cold+0x10/0x15 [ 1291.556294][T16865] out_of_memory+0x334/0x1340 [ 1291.575386][T16865] ? lock_downgrade+0x920/0x920 [ 1291.580257][T16865] ? oom_killer_disable+0x280/0x280 [ 1291.585476][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1291.591019][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1291.595960][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1291.601203][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1291.606059][T16865] try_charge+0xf8c/0x1470 [ 1291.610469][T16865] ? find_held_lock+0x35/0x130 [ 1291.615237][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1291.620789][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1291.626336][T16865] ? find_held_lock+0x35/0x130 [ 1291.631087][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1291.636630][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1291.642175][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1291.647361][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1291.652908][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1291.658005][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1291.663364][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1291.668897][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1291.674963][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1291.680171][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1291.685461][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1291.690497][T16865] ? __kasan_check_read+0x11/0x20 [ 1291.695528][T16865] copy_process+0x3f8/0x6860 [ 1291.700112][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1291.704952][T16865] ? __kasan_check_read+0x11/0x20 [ 1291.709973][T16865] ? __cleanup_sighand+0x60/0x60 [ 1291.714896][T16865] ? find_held_lock+0x35/0x130 [ 1291.719658][T16865] _do_fork+0x146/0xfa0 [ 1291.723804][T16865] ? copy_init_mm+0x20/0x20 [ 1291.728297][T16865] ? __kasan_check_read+0x11/0x20 [ 1291.733308][T16865] ? _copy_to_user+0x118/0x160 [ 1291.738061][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1291.744297][T16865] ? put_timespec64+0xda/0x140 [ 1291.749054][T16865] __x64_sys_clone+0x18d/0x250 [ 1291.753804][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1291.758643][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1291.763923][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1291.768945][T16865] do_syscall_64+0xfa/0x760 [ 1291.773439][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1291.779340][T16865] RIP: 0033:0x4587ea [ 1291.783231][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1291.802823][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1291.811236][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1291.819190][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1291.827155][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1291.835111][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1291.843077][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1291.853655][T16865] memory: usage 76408kB, limit 0kB, failcnt 120 [ 1291.859920][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1291.866862][T16865] Memory cgroup stats for /syz0: [ 1291.866963][T16865] anon 68263936 [ 1291.866963][T16865] file 24576 [ 1291.866963][T16865] kernel_stack 851968 [ 1291.866963][T16865] slab 5586944 [ 1291.866963][T16865] sock 0 [ 1291.866963][T16865] shmem 0 [ 1291.866963][T16865] file_mapped 135168 [ 1291.866963][T16865] file_dirty 0 [ 1291.866963][T16865] file_writeback 0 [ 1291.866963][T16865] anon_thp 65011712 [ 1291.866963][T16865] inactive_anon 0 [ 1291.866963][T16865] active_anon 68182016 [ 1291.866963][T16865] inactive_file 131072 [ 1291.866963][T16865] active_file 0 [ 1291.866963][T16865] unevictable 0 [ 1291.866963][T16865] slab_reclaimable 1757184 [ 1291.866963][T16865] slab_unreclaimable 3829760 [ 1291.866963][T16865] pgfault 94611 [ 1291.866963][T16865] pgmajfault 0 [ 1291.866963][T16865] workingset_refault 0 [ 1291.866963][T16865] workingset_activate 0 [ 1291.866963][T16865] workingset_nodereclaim 0 [ 1291.866963][T16865] pgrefill 175 [ 1291.866963][T16865] pgscan 171 [ 1291.866963][T16865] pgsteal 34 [ 1291.866963][T16865] pgactivate 6105 [ 1291.965296][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26590,uid=0 [ 1291.982709][T16865] Memory cgroup out of memory: Killed process 26590 (syz-executor.0) total-vm:72716kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1292.018963][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1292.032655][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1292.040583][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.050651][T16868] Call Trace: [ 1292.053958][T16868] dump_stack+0x197/0x210 [ 1292.058315][T16868] dump_header+0x10b/0x82d [ 1292.062732][T16868] ? oom_kill_process+0x94/0x3f0 [ 1292.067783][T16868] oom_kill_process.cold+0x10/0x15 [ 1292.073246][T16868] out_of_memory+0x334/0x1340 [ 1292.077912][T16868] ? lock_downgrade+0x920/0x920 [ 1292.082783][T16868] ? oom_killer_disable+0x280/0x280 [ 1292.087977][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1292.093516][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1292.098455][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1292.103551][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1292.108384][T16868] try_charge+0xf8c/0x1470 [ 1292.112791][T16868] ? find_held_lock+0x35/0x130 [ 1292.117539][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1292.123061][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1292.128584][T16868] ? find_held_lock+0x35/0x130 [ 1292.133327][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1292.138859][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1292.144398][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1292.149581][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1292.155108][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1292.160200][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1292.165552][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1292.171074][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1292.176772][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1292.181963][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1292.187226][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1292.192236][T16868] ? __kasan_check_read+0x11/0x20 [ 1292.197259][T16868] copy_process+0x3f8/0x6860 [ 1292.201827][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1292.206653][T16868] ? __kasan_check_read+0x11/0x20 [ 1292.211678][T16868] ? __cleanup_sighand+0x60/0x60 [ 1292.216592][T16868] ? find_held_lock+0x35/0x130 [ 1292.221347][T16868] _do_fork+0x146/0xfa0 [ 1292.225482][T16868] ? copy_init_mm+0x20/0x20 [ 1292.229965][T16868] ? __kasan_check_read+0x11/0x20 [ 1292.234966][T16868] ? _copy_to_user+0x118/0x160 [ 1292.239712][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.245946][T16868] ? put_timespec64+0xda/0x140 [ 1292.250691][T16868] __x64_sys_clone+0x18d/0x250 [ 1292.255437][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1292.260270][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1292.265634][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1292.270641][T16868] do_syscall_64+0xfa/0x760 [ 1292.275157][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.281112][T16868] RIP: 0033:0x4587ea [ 1292.285000][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1292.304589][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1292.312978][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1292.320930][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1292.328898][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1292.336972][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1292.345062][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1292.354836][T16868] memory: usage 29420kB, limit 0kB, failcnt 60 [ 1292.361114][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1292.369813][T16868] Memory cgroup stats for /syz4: [ 1292.369919][T16868] anon 25165824 [ 1292.369919][T16868] file 102400 [ 1292.369919][T16868] kernel_stack 589824 [ 1292.369919][T16868] slab 2330624 [ 1292.369919][T16868] sock 57344 [ 1292.369919][T16868] shmem 0 [ 1292.369919][T16868] file_mapped 0 [ 1292.369919][T16868] file_dirty 135168 [ 1292.369919][T16868] file_writeback 0 [ 1292.369919][T16868] anon_thp 23068672 [ 1292.369919][T16868] inactive_anon 0 [ 1292.369919][T16868] active_anon 25169920 [ 1292.369919][T16868] inactive_file 0 [ 1292.369919][T16868] active_file 135168 [ 1292.369919][T16868] unevictable 0 [ 1292.369919][T16868] slab_reclaimable 946176 [ 1292.369919][T16868] slab_unreclaimable 1384448 [ 1292.369919][T16868] pgfault 102300 [ 1292.369919][T16868] pgmajfault 0 [ 1292.369919][T16868] workingset_refault 0 [ 1292.369919][T16868] workingset_activate 0 [ 1292.369919][T16868] workingset_nodereclaim 0 [ 1292.369919][T16868] pgrefill 33 [ 1292.369919][T16868] pgscan 277 [ 1292.369919][T16868] pgsteal 256 [ 1292.463670][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=1909,uid=0 [ 1292.480704][T16868] Memory cgroup out of memory: Killed process 1909 (syz-executor.4) total-vm:72980kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1292.513587][ T1071] oom_reaper: reaped process 1909 (syz-executor.4), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1292.514434][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1292.540355][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1292.548355][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1292.558409][T16799] Call Trace: [ 1292.561701][T16799] dump_stack+0x197/0x210 [ 1292.566046][T16799] dump_header+0x10b/0x82d [ 1292.570455][T16799] ? oom_kill_process+0x94/0x3f0 [ 1292.575378][T16799] oom_kill_process.cold+0x10/0x15 [ 1292.580472][T16799] out_of_memory+0x334/0x1340 [ 1292.585194][T16799] ? lock_downgrade+0x920/0x920 [ 1292.590053][T16799] ? oom_killer_disable+0x280/0x280 [ 1292.595267][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1292.600811][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1292.605758][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1292.610900][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1292.615754][T16799] try_charge+0xf8c/0x1470 [ 1292.620165][T16799] ? find_held_lock+0x35/0x130 [ 1292.624939][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1292.630478][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1292.636025][T16799] ? find_held_lock+0x35/0x130 [ 1292.640773][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1292.646321][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1292.651853][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1292.657031][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1292.662557][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1292.667661][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1292.673011][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1292.678534][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1292.684233][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1292.689425][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1292.694691][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1292.699691][T16799] ? __kasan_check_read+0x11/0x20 [ 1292.704700][T16799] copy_process+0x3f8/0x6860 [ 1292.709269][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1292.714113][T16799] ? __kasan_check_read+0x11/0x20 [ 1292.719138][T16799] ? __cleanup_sighand+0x60/0x60 [ 1292.724070][T16799] ? find_held_lock+0x35/0x130 [ 1292.728822][T16799] _do_fork+0x146/0xfa0 [ 1292.732989][T16799] ? copy_init_mm+0x20/0x20 [ 1292.737481][T16799] ? __kasan_check_read+0x11/0x20 [ 1292.742486][T16799] ? _copy_to_user+0x118/0x160 [ 1292.747250][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1292.753475][T16799] ? put_timespec64+0xda/0x140 [ 1292.758223][T16799] __x64_sys_clone+0x18d/0x250 [ 1292.763011][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1292.767857][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1292.773137][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1292.778160][T16799] do_syscall_64+0xfa/0x760 [ 1292.782659][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1292.788537][T16799] RIP: 0033:0x4587ea [ 1292.792420][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1292.812022][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1292.820411][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1292.828361][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1292.836316][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1292.844268][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1292.852231][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1292.862371][T16799] memory: usage 34972kB, limit 0kB, failcnt 164 [ 1292.868638][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1292.876151][T16799] Memory cgroup stats for /syz3: [ 1292.876223][T16799] anon 31236096 [ 1292.876223][T16799] file 155648 [ 1292.876223][T16799] kernel_stack 524288 [ 1292.876223][T16799] slab 2215936 [ 1292.876223][T16799] sock 0 [ 1292.876223][T16799] shmem 0 [ 1292.876223][T16799] file_mapped 0 [ 1292.876223][T16799] file_dirty 0 [ 1292.876223][T16799] file_writeback 0 [ 1292.876223][T16799] anon_thp 29360128 [ 1292.876223][T16799] inactive_anon 0 [ 1292.876223][T16799] active_anon 31236096 [ 1292.876223][T16799] inactive_file 135168 [ 1292.876223][T16799] active_file 65536 [ 1292.876223][T16799] unevictable 135168 [ 1292.876223][T16799] slab_reclaimable 811008 [ 1292.876223][T16799] slab_unreclaimable 1404928 [ 1292.876223][T16799] pgfault 113553 [ 1292.876223][T16799] pgmajfault 0 [ 1292.876223][T16799] workingset_refault 0 [ 1292.876223][T16799] workingset_activate 0 [ 1292.876223][T16799] workingset_nodereclaim 0 [ 1292.876223][T16799] pgrefill 1216 [ 1292.876223][T16799] pgscan 1228 [ 1292.876223][T16799] pgsteal 70 [ 1292.970826][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=2281,uid=0 [ 1292.986407][T16799] Memory cgroup out of memory: Killed process 2281 (syz-executor.3) total-vm:72848kB, anon-rss:2228kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1293.006019][ T1071] oom_reaper: reaped process 2281 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1293.006719][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1293.028960][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1293.036872][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.046926][T16799] Call Trace: [ 1293.050217][T16799] dump_stack+0x197/0x210 [ 1293.054541][T16799] dump_header+0x10b/0x82d [ 1293.058947][T16799] ? oom_kill_process+0x94/0x3f0 [ 1293.064214][T16799] oom_kill_process.cold+0x10/0x15 [ 1293.069318][T16799] out_of_memory+0x334/0x1340 [ 1293.073973][T16799] ? lock_downgrade+0x920/0x920 [ 1293.078820][T16799] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1293.084605][T16799] ? oom_killer_disable+0x280/0x280 [ 1293.089799][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1293.095322][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1293.100241][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1293.105334][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1293.110165][T16799] try_charge+0xf8c/0x1470 [ 1293.114559][T16799] ? find_held_lock+0x35/0x130 [ 1293.119307][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1293.124830][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1293.130354][T16799] ? find_held_lock+0x35/0x130 [ 1293.135106][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1293.140637][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1293.146162][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1293.151441][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1293.156967][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1293.162061][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1293.167420][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1293.172947][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1293.178730][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1293.183931][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1293.189196][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1293.194198][T16799] ? __kasan_check_read+0x11/0x20 [ 1293.199217][T16799] copy_process+0x3f8/0x6860 [ 1293.203788][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1293.208615][T16799] ? __kasan_check_read+0x11/0x20 [ 1293.213624][T16799] ? __cleanup_sighand+0x60/0x60 [ 1293.218539][T16799] ? find_held_lock+0x35/0x130 [ 1293.223292][T16799] _do_fork+0x146/0xfa0 [ 1293.227442][T16799] ? copy_init_mm+0x20/0x20 [ 1293.231928][T16799] ? __kasan_check_read+0x11/0x20 [ 1293.236929][T16799] ? _copy_to_user+0x118/0x160 [ 1293.241674][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.247904][T16799] ? put_timespec64+0xda/0x140 [ 1293.252664][T16799] __x64_sys_clone+0x18d/0x250 [ 1293.257408][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1293.262274][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1293.267623][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1293.272629][T16799] do_syscall_64+0xfa/0x760 [ 1293.277134][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.283006][T16799] RIP: 0033:0x4587ea [ 1293.286880][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1293.306473][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.314874][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1293.322840][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1293.331421][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1293.339369][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1293.347329][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1293.356537][T16799] memory: usage 32632kB, limit 0kB, failcnt 170 [ 1293.363261][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1293.370106][T16799] Memory cgroup stats for /syz3: [ 1293.370218][T16799] anon 29024256 [ 1293.370218][T16799] file 155648 [ 1293.370218][T16799] kernel_stack 458752 [ 1293.370218][T16799] slab 2215936 [ 1293.370218][T16799] sock 0 [ 1293.370218][T16799] shmem 0 [ 1293.370218][T16799] file_mapped 0 [ 1293.370218][T16799] file_dirty 0 [ 1293.370218][T16799] file_writeback 0 [ 1293.370218][T16799] anon_thp 27262976 [ 1293.370218][T16799] inactive_anon 0 [ 1293.370218][T16799] active_anon 29024256 [ 1293.370218][T16799] inactive_file 135168 [ 1293.370218][T16799] active_file 65536 [ 1293.370218][T16799] unevictable 135168 [ 1293.370218][T16799] slab_reclaimable 811008 [ 1293.370218][T16799] slab_unreclaimable 1404928 [ 1293.370218][T16799] pgfault 113553 [ 1293.370218][T16799] pgmajfault 0 [ 1293.370218][T16799] workingset_refault 0 [ 1293.370218][T16799] workingset_activate 0 [ 1293.370218][T16799] workingset_nodereclaim 0 [ 1293.370218][T16799] pgrefill 1216 [ 1293.370218][T16799] pgscan 1228 [ 1293.370218][T16799] pgsteal 70 [ 1293.464172][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20333,uid=0 [ 1293.479734][T16799] Memory cgroup out of memory: Killed process 20333 (syz-executor.3) total-vm:72584kB, anon-rss:2204kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1293.506394][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1293.528786][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1293.536723][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.546783][T16865] Call Trace: [ 1293.550070][T16865] dump_stack+0x197/0x210 [ 1293.554392][T16865] dump_header+0x10b/0x82d [ 1293.558786][T16865] ? oom_kill_process+0x94/0x3f0 [ 1293.563735][T16865] oom_kill_process.cold+0x10/0x15 [ 1293.568827][T16865] out_of_memory+0x334/0x1340 [ 1293.573485][T16865] ? lock_downgrade+0x920/0x920 [ 1293.579883][T16865] ? oom_killer_disable+0x280/0x280 [ 1293.585069][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1293.590604][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1293.595536][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1293.600659][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1293.605524][T16865] try_charge+0xf8c/0x1470 [ 1293.609927][T16865] ? find_held_lock+0x35/0x130 [ 1293.614788][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1293.620318][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1293.625900][T16865] ? find_held_lock+0x35/0x130 [ 1293.630648][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1293.636222][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1293.641752][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1293.646933][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1293.652463][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1293.657553][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1293.662906][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1293.668430][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1293.674129][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1293.679308][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1293.684576][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1293.689839][T16865] ? __kasan_check_read+0x11/0x20 [ 1293.694848][T16865] copy_process+0x3f8/0x6860 [ 1293.699419][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1293.704263][T16865] ? __kasan_check_read+0x11/0x20 [ 1293.709274][T16865] ? __cleanup_sighand+0x60/0x60 [ 1293.714190][T16865] ? find_held_lock+0x35/0x130 [ 1293.718963][T16865] _do_fork+0x146/0xfa0 [ 1293.723099][T16865] ? copy_init_mm+0x20/0x20 [ 1293.727582][T16865] ? __kasan_check_read+0x11/0x20 [ 1293.732593][T16865] ? _copy_to_user+0x118/0x160 [ 1293.737338][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1293.743556][T16865] ? put_timespec64+0xda/0x140 [ 1293.748302][T16865] __x64_sys_clone+0x18d/0x250 [ 1293.753060][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1293.757918][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1293.763192][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1293.768237][T16865] do_syscall_64+0xfa/0x760 [ 1293.772732][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1293.778606][T16865] RIP: 0033:0x4587ea [ 1293.782499][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1293.802084][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1293.810483][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1293.818433][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1293.826383][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1293.834334][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1293.842287][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1293.852484][T16865] memory: usage 72032kB, limit 0kB, failcnt 127 [ 1293.858750][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1293.866120][T16865] Memory cgroup stats for /syz0: [ 1293.866189][T16865] anon 63975424 [ 1293.866189][T16865] file 24576 [ 1293.866189][T16865] kernel_stack 851968 [ 1293.866189][T16865] slab 5152768 [ 1293.866189][T16865] sock 0 [ 1293.866189][T16865] shmem 0 [ 1293.866189][T16865] file_mapped 135168 [ 1293.866189][T16865] file_dirty 0 [ 1293.866189][T16865] file_writeback 0 [ 1293.866189][T16865] anon_thp 60817408 [ 1293.866189][T16865] inactive_anon 0 [ 1293.866189][T16865] active_anon 63893504 [ 1293.866189][T16865] inactive_file 131072 [ 1293.866189][T16865] active_file 0 [ 1293.866189][T16865] unevictable 0 [ 1293.866189][T16865] slab_reclaimable 1757184 [ 1293.866189][T16865] slab_unreclaimable 3395584 [ 1293.866189][T16865] pgfault 94611 [ 1293.866189][T16865] pgmajfault 0 [ 1293.866189][T16865] workingset_refault 0 [ 1293.866189][T16865] workingset_activate 0 [ 1293.866189][T16865] workingset_nodereclaim 0 [ 1293.866189][T16865] pgrefill 175 [ 1293.866189][T16865] pgscan 171 [ 1293.866189][T16865] pgsteal 34 [ 1293.866189][T16865] pgactivate 6105 [ 1293.966304][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26502,uid=0 [ 1293.981956][T16865] Memory cgroup out of memory: Killed process 26502 (syz-executor.0) total-vm:72716kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1294.002888][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1294.012463][ T1071] oom_reaper: reaped process 26502 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1294.015125][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1294.033608][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.047816][T16865] Call Trace: [ 1294.051101][T16865] dump_stack+0x197/0x210 [ 1294.055437][T16865] dump_header+0x10b/0x82d [ 1294.059851][T16865] ? oom_kill_process+0x94/0x3f0 [ 1294.064792][T16865] oom_kill_process.cold+0x10/0x15 [ 1294.069898][T16865] out_of_memory+0x334/0x1340 [ 1294.074562][T16865] ? lock_downgrade+0x920/0x920 [ 1294.079417][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1294.085318][T16865] ? oom_killer_disable+0x280/0x280 [ 1294.090523][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1294.096068][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1294.100995][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1294.106096][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1294.110935][T16865] try_charge+0xf8c/0x1470 [ 1294.115337][T16865] ? find_held_lock+0x35/0x130 [ 1294.120096][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1294.125628][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1294.131158][T16865] ? find_held_lock+0x35/0x130 [ 1294.135909][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1294.141455][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1294.146987][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1294.152172][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1294.157705][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1294.162805][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1294.168162][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1294.173695][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1294.179401][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1294.184587][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1294.189857][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1294.194874][T16865] ? __kasan_check_read+0x11/0x20 [ 1294.199903][T16865] copy_process+0x3f8/0x6860 [ 1294.204479][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1294.209322][T16865] ? __kasan_check_read+0x11/0x20 [ 1294.214341][T16865] ? __cleanup_sighand+0x60/0x60 [ 1294.219262][T16865] ? find_held_lock+0x35/0x130 [ 1294.224115][T16865] _do_fork+0x146/0xfa0 [ 1294.228263][T16865] ? copy_init_mm+0x20/0x20 [ 1294.232867][T16865] ? __kasan_check_read+0x11/0x20 [ 1294.237885][T16865] ? _copy_to_user+0x118/0x160 [ 1294.242650][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.248912][T16865] ? put_timespec64+0xda/0x140 [ 1294.253667][T16865] __x64_sys_clone+0x18d/0x250 [ 1294.258417][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1294.263258][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1294.268541][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1294.273570][T16865] do_syscall_64+0xfa/0x760 [ 1294.278064][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.283953][T16865] RIP: 0033:0x4587ea [ 1294.287848][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1294.307444][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1294.315858][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1294.323813][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1294.331769][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1294.339732][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1294.347687][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1294.357345][T16865] memory: usage 67220kB, limit 0kB, failcnt 133 [ 1294.364017][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1294.370859][T16865] Memory cgroup stats for /syz0: [ 1294.370979][T16865] anon 59625472 [ 1294.370979][T16865] file 24576 [ 1294.370979][T16865] kernel_stack 851968 [ 1294.370979][T16865] slab 5152768 [ 1294.370979][T16865] sock 0 [ 1294.370979][T16865] shmem 0 [ 1294.370979][T16865] file_mapped 135168 [ 1294.370979][T16865] file_dirty 0 [ 1294.370979][T16865] file_writeback 0 [ 1294.370979][T16865] anon_thp 56623104 [ 1294.370979][T16865] inactive_anon 0 [ 1294.370979][T16865] active_anon 59625472 [ 1294.370979][T16865] inactive_file 131072 [ 1294.370979][T16865] active_file 0 [ 1294.370979][T16865] unevictable 0 [ 1294.370979][T16865] slab_reclaimable 1757184 [ 1294.370979][T16865] slab_unreclaimable 3395584 [ 1294.370979][T16865] pgfault 94611 [ 1294.370979][T16865] pgmajfault 0 [ 1294.370979][T16865] workingset_refault 0 [ 1294.370979][T16865] workingset_activate 0 [ 1294.370979][T16865] workingset_nodereclaim 0 [ 1294.370979][T16865] pgrefill 175 [ 1294.370979][T16865] pgscan 171 [ 1294.370979][T16865] pgsteal 34 [ 1294.370979][T16865] pgactivate 6105 [ 1294.467420][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26491,uid=0 [ 1294.484180][T16865] Memory cgroup out of memory: Killed process 26491 (syz-executor.0) total-vm:72716kB, anon-rss:4264kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1294.502827][ T1071] oom_reaper: reaped process 26491 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1294.506119][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1294.533195][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1294.541188][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.551243][T16868] Call Trace: [ 1294.554569][T16868] dump_stack+0x197/0x210 [ 1294.558882][T16868] dump_header+0x10b/0x82d [ 1294.563297][T16868] ? oom_kill_process+0x94/0x3f0 [ 1294.568217][T16868] oom_kill_process.cold+0x10/0x15 [ 1294.573320][T16868] out_of_memory+0x334/0x1340 [ 1294.578004][T16868] ? lock_downgrade+0x920/0x920 [ 1294.582851][T16868] ? oom_killer_disable+0x280/0x280 [ 1294.588069][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1294.593637][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1294.598564][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1294.603660][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1294.608494][T16868] try_charge+0xf8c/0x1470 [ 1294.612891][T16868] ? find_held_lock+0x35/0x130 [ 1294.617644][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1294.623178][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1294.628702][T16868] ? find_held_lock+0x35/0x130 [ 1294.633445][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1294.638989][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1294.644516][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1294.649693][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1294.655219][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1294.660329][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1294.665681][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1294.671206][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1294.676922][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1294.682102][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1294.687365][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1294.692365][T16868] ? __kasan_check_read+0x11/0x20 [ 1294.697384][T16868] copy_process+0x3f8/0x6860 [ 1294.701953][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1294.706785][T16868] ? __kasan_check_read+0x11/0x20 [ 1294.711798][T16868] ? __cleanup_sighand+0x60/0x60 [ 1294.716712][T16868] ? find_held_lock+0x35/0x130 [ 1294.721571][T16868] _do_fork+0x146/0xfa0 [ 1294.725733][T16868] ? copy_init_mm+0x20/0x20 [ 1294.730254][T16868] ? __kasan_check_read+0x11/0x20 [ 1294.735270][T16868] ? _copy_to_user+0x118/0x160 [ 1294.740072][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1294.746328][T16868] ? put_timespec64+0xda/0x140 [ 1294.751087][T16868] __x64_sys_clone+0x18d/0x250 [ 1294.755841][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1294.760677][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1294.765943][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1294.770950][T16868] do_syscall_64+0xfa/0x760 [ 1294.775440][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1294.781314][T16868] RIP: 0033:0x4587ea [ 1294.785190][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1294.804770][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1294.813172][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1294.821123][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1294.829091][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1294.837044][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1294.845013][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1294.856122][T16868] memory: usage 26816kB, limit 0kB, failcnt 66 [ 1294.862386][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1294.869223][T16868] Memory cgroup stats for /syz4: [ 1294.869349][T16868] anon 22974464 [ 1294.869349][T16868] file 102400 [ 1294.869349][T16868] kernel_stack 524288 [ 1294.869349][T16868] slab 2195456 [ 1294.869349][T16868] sock 57344 [ 1294.869349][T16868] shmem 0 [ 1294.869349][T16868] file_mapped 0 [ 1294.869349][T16868] file_dirty 135168 [ 1294.869349][T16868] file_writeback 0 [ 1294.869349][T16868] anon_thp 20971520 [ 1294.869349][T16868] inactive_anon 0 [ 1294.869349][T16868] active_anon 22978560 [ 1294.869349][T16868] inactive_file 0 [ 1294.869349][T16868] active_file 135168 [ 1294.869349][T16868] unevictable 0 [ 1294.869349][T16868] slab_reclaimable 811008 [ 1294.869349][T16868] slab_unreclaimable 1384448 [ 1294.869349][T16868] pgfault 102300 [ 1294.869349][T16868] pgmajfault 0 [ 1294.869349][T16868] workingset_refault 0 [ 1294.869349][T16868] workingset_activate 0 [ 1294.869349][T16868] workingset_nodereclaim 0 [ 1294.869349][T16868] pgrefill 33 [ 1294.869349][T16868] pgscan 277 [ 1294.869349][T16868] pgsteal 256 [ 1294.963077][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21761,uid=0 [ 1294.978676][T16868] Memory cgroup out of memory: Killed process 21761 (syz-executor.4) total-vm:72848kB, anon-rss:2220kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1294.999544][ T1071] oom_reaper: reaped process 21761 (syz-executor.4), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 1295.018837][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1295.031147][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1295.039056][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.049106][T16799] Call Trace: [ 1295.052386][T16799] dump_stack+0x197/0x210 [ 1295.056719][T16799] dump_header+0x10b/0x82d [ 1295.061200][T16799] ? oom_kill_process+0x94/0x3f0 [ 1295.066151][T16799] oom_kill_process.cold+0x10/0x15 [ 1295.071279][T16799] out_of_memory+0x334/0x1340 [ 1295.075959][T16799] ? lock_downgrade+0x920/0x920 [ 1295.080796][T16799] ? oom_killer_disable+0x280/0x280 [ 1295.086004][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1295.091539][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1295.096458][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1295.101554][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1295.106395][T16799] try_charge+0xf8c/0x1470 [ 1295.110801][T16799] ? find_held_lock+0x35/0x130 [ 1295.115563][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1295.121181][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1295.126713][T16799] ? find_held_lock+0x35/0x130 [ 1295.131496][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1295.137035][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1295.142567][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1295.147750][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1295.153281][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1295.158461][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1295.163829][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1295.169365][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1295.175065][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1295.180249][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1295.185518][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1295.190521][T16799] ? __kasan_check_read+0x11/0x20 [ 1295.195531][T16799] copy_process+0x3f8/0x6860 [ 1295.200188][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1295.205021][T16799] ? __kasan_check_read+0x11/0x20 [ 1295.210035][T16799] ? __cleanup_sighand+0x60/0x60 [ 1295.214949][T16799] ? find_held_lock+0x35/0x130 [ 1295.219790][T16799] _do_fork+0x146/0xfa0 [ 1295.223936][T16799] ? copy_init_mm+0x20/0x20 [ 1295.228455][T16799] ? __kasan_check_read+0x11/0x20 [ 1295.233458][T16799] ? _copy_to_user+0x118/0x160 [ 1295.238304][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.244522][T16799] ? put_timespec64+0xda/0x140 [ 1295.249283][T16799] __x64_sys_clone+0x18d/0x250 [ 1295.254079][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1295.258913][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1295.264192][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1295.269199][T16799] do_syscall_64+0xfa/0x760 [ 1295.273696][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.279564][T16799] RIP: 0033:0x4587ea [ 1295.283439][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1295.303026][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1295.311416][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1295.319377][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1295.327329][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1295.335292][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1295.343244][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1295.352353][T16799] memory: usage 30112kB, limit 0kB, failcnt 176 [ 1295.358609][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1295.365562][T16799] Memory cgroup stats for /syz3: [ 1295.365676][T16799] anon 26800128 [ 1295.365676][T16799] file 155648 [ 1295.365676][T16799] kernel_stack 458752 [ 1295.365676][T16799] slab 2080768 [ 1295.365676][T16799] sock 0 [ 1295.365676][T16799] shmem 0 [ 1295.365676][T16799] file_mapped 0 [ 1295.365676][T16799] file_dirty 0 [ 1295.365676][T16799] file_writeback 0 [ 1295.365676][T16799] anon_thp 25165824 [ 1295.365676][T16799] inactive_anon 0 [ 1295.365676][T16799] active_anon 26800128 [ 1295.365676][T16799] inactive_file 135168 [ 1295.365676][T16799] active_file 65536 [ 1295.365676][T16799] unevictable 135168 [ 1295.365676][T16799] slab_reclaimable 811008 [ 1295.365676][T16799] slab_unreclaimable 1269760 [ 1295.365676][T16799] pgfault 113553 [ 1295.365676][T16799] pgmajfault 0 [ 1295.365676][T16799] workingset_refault 0 [ 1295.365676][T16799] workingset_activate 0 [ 1295.365676][T16799] workingset_nodereclaim 0 [ 1295.365676][T16799] pgrefill 1216 [ 1295.365676][T16799] pgscan 1228 [ 1295.365676][T16799] pgsteal 70 [ 1295.459056][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20297,uid=0 [ 1295.474726][T16799] Memory cgroup out of memory: Killed process 20297 (syz-executor.3) total-vm:72584kB, anon-rss:2204kB, file-rss:35828kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1295.494450][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1295.500091][ T1071] oom_reaper: reaped process 20297 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 1295.508629][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1295.525248][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.535503][T16865] Call Trace: [ 1295.538820][T16865] dump_stack+0x197/0x210 [ 1295.543188][T16865] dump_header+0x10b/0x82d [ 1295.547617][T16865] ? oom_kill_process+0x94/0x3f0 [ 1295.552573][T16865] oom_kill_process.cold+0x10/0x15 [ 1295.557699][T16865] out_of_memory+0x334/0x1340 [ 1295.562497][T16865] ? lock_downgrade+0x920/0x920 [ 1295.567344][T16865] ? oom_killer_disable+0x280/0x280 [ 1295.572552][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1295.578102][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1295.583045][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1295.588162][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1295.593004][T16865] try_charge+0xf8c/0x1470 [ 1295.597406][T16865] ? find_held_lock+0x35/0x130 [ 1295.602158][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1295.607683][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1295.613212][T16865] ? find_held_lock+0x35/0x130 [ 1295.617955][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1295.623491][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1295.629196][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1295.634378][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1295.639928][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1295.645026][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1295.650379][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1295.655909][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1295.661605][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1295.666784][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1295.672049][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1295.677051][T16865] ? __kasan_check_read+0x11/0x20 [ 1295.682059][T16865] copy_process+0x3f8/0x6860 [ 1295.686627][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1295.691455][T16865] ? __kasan_check_read+0x11/0x20 [ 1295.696464][T16865] ? __cleanup_sighand+0x60/0x60 [ 1295.701380][T16865] ? find_held_lock+0x35/0x130 [ 1295.706133][T16865] _do_fork+0x146/0xfa0 [ 1295.710283][T16865] ? copy_init_mm+0x20/0x20 [ 1295.714768][T16865] ? __kasan_check_read+0x11/0x20 [ 1295.719782][T16865] ? _copy_to_user+0x118/0x160 [ 1295.724528][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1295.730771][T16865] ? put_timespec64+0xda/0x140 [ 1295.735536][T16865] __x64_sys_clone+0x18d/0x250 [ 1295.740296][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1295.745152][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1295.750422][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1295.755429][T16865] do_syscall_64+0xfa/0x760 [ 1295.759916][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1295.765813][T16865] RIP: 0033:0x4587ea [ 1295.769701][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1295.789306][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1295.797726][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1295.805695][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1295.813654][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1295.821606][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1295.829557][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1295.838903][T16865] memory: usage 62844kB, limit 0kB, failcnt 139 [ 1295.845248][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1295.852179][T16865] Memory cgroup stats for /syz0: [ 1295.852275][T16865] anon 55267328 [ 1295.852275][T16865] file 24576 [ 1295.852275][T16865] kernel_stack 786432 [ 1295.852275][T16865] slab 5152768 [ 1295.852275][T16865] sock 0 [ 1295.852275][T16865] shmem 0 [ 1295.852275][T16865] file_mapped 135168 [ 1295.852275][T16865] file_dirty 0 [ 1295.852275][T16865] file_writeback 0 [ 1295.852275][T16865] anon_thp 52428800 [ 1295.852275][T16865] inactive_anon 0 [ 1295.852275][T16865] active_anon 55271424 [ 1295.852275][T16865] inactive_file 131072 [ 1295.852275][T16865] active_file 0 [ 1295.852275][T16865] unevictable 0 [ 1295.852275][T16865] slab_reclaimable 1757184 [ 1295.852275][T16865] slab_unreclaimable 3395584 [ 1295.852275][T16865] pgfault 94611 [ 1295.852275][T16865] pgmajfault 0 [ 1295.852275][T16865] workingset_refault 0 [ 1295.852275][T16865] workingset_activate 0 [ 1295.852275][T16865] workingset_nodereclaim 0 [ 1295.852275][T16865] pgrefill 175 [ 1295.852275][T16865] pgscan 171 [ 1295.852275][T16865] pgsteal 34 [ 1295.852275][T16865] pgactivate 6105 [ 1295.951623][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26633,uid=0 [ 1295.968203][T16865] Memory cgroup out of memory: Killed process 26633 (syz-executor.0) total-vm:72584kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1295.988261][ T1071] oom_reaper: reaped process 26633 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1295.988824][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1296.011369][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1296.019257][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.029314][T16865] Call Trace: [ 1296.029336][T16865] dump_stack+0x197/0x210 [ 1296.036954][T16865] dump_header+0x10b/0x82d [ 1296.041377][T16865] ? oom_kill_process+0x94/0x3f0 [ 1296.046321][T16865] oom_kill_process.cold+0x10/0x15 [ 1296.051426][T16865] out_of_memory+0x334/0x1340 [ 1296.056107][T16865] ? lock_downgrade+0x920/0x920 [ 1296.060961][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1296.066776][T16865] ? oom_killer_disable+0x280/0x280 [ 1296.072007][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1296.077540][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1296.082476][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1296.087579][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1296.092420][T16865] try_charge+0xf8c/0x1470 [ 1296.096822][T16865] ? find_held_lock+0x35/0x130 [ 1296.101582][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1296.107114][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1296.112656][T16865] ? find_held_lock+0x35/0x130 [ 1296.117409][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1296.123042][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1296.128610][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1296.133800][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1296.139338][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1296.144442][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1296.149821][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1296.155356][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1296.161059][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1296.166260][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1296.171570][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1296.176580][T16865] ? __kasan_check_read+0x11/0x20 [ 1296.181611][T16865] copy_process+0x3f8/0x6860 [ 1296.186203][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1296.191050][T16865] ? __kasan_check_read+0x11/0x20 [ 1296.196081][T16865] ? __cleanup_sighand+0x60/0x60 [ 1296.201008][T16865] ? find_held_lock+0x35/0x130 [ 1296.205777][T16865] _do_fork+0x146/0xfa0 [ 1296.209928][T16865] ? copy_init_mm+0x20/0x20 [ 1296.214422][T16865] ? __kasan_check_read+0x11/0x20 [ 1296.219457][T16865] ? _copy_to_user+0x118/0x160 [ 1296.224215][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1296.230447][T16865] ? put_timespec64+0xda/0x140 [ 1296.235206][T16865] __x64_sys_clone+0x18d/0x250 [ 1296.240312][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1296.245167][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1296.250626][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1296.255651][T16865] do_syscall_64+0xfa/0x760 [ 1296.260150][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1296.266028][T16865] RIP: 0033:0x4587ea [ 1296.269928][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1296.289520][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1296.297917][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1296.305883][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1296.313838][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1296.321803][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1296.329760][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1296.339535][T16865] memory: usage 58464kB, limit 0kB, failcnt 145 [ 1296.346267][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1296.353617][T16865] Memory cgroup stats for /syz0: [ 1296.353719][T16865] anon 50970624 [ 1296.353719][T16865] file 24576 [ 1296.353719][T16865] kernel_stack 786432 [ 1296.353719][T16865] slab 5152768 [ 1296.353719][T16865] sock 0 [ 1296.353719][T16865] shmem 0 [ 1296.353719][T16865] file_mapped 135168 [ 1296.353719][T16865] file_dirty 0 [ 1296.353719][T16865] file_writeback 0 [ 1296.353719][T16865] anon_thp 48234496 [ 1296.353719][T16865] inactive_anon 0 [ 1296.353719][T16865] active_anon 50970624 [ 1296.353719][T16865] inactive_file 131072 [ 1296.353719][T16865] active_file 0 [ 1296.353719][T16865] unevictable 0 [ 1296.353719][T16865] slab_reclaimable 1757184 [ 1296.353719][T16865] slab_unreclaimable 3395584 [ 1296.353719][T16865] pgfault 94611 [ 1296.353719][T16865] pgmajfault 0 [ 1296.353719][T16865] workingset_refault 0 [ 1296.353719][T16865] workingset_activate 0 [ 1296.353719][T16865] workingset_nodereclaim 0 [ 1296.353719][T16865] pgrefill 175 [ 1296.353719][T16865] pgscan 171 [ 1296.353719][T16865] pgsteal 34 [ 1296.353719][T16865] pgactivate 6105 [ 1296.450765][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26562,uid=0 [ 1296.466485][T16865] Memory cgroup out of memory: Killed process 26562 (syz-executor.0) total-vm:72584kB, anon-rss:4256kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1296.486594][ T1071] oom_reaper: reaped process 26562 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1296.498010][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1296.510800][T16868] CPU: 0 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1296.518743][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.528813][T16868] Call Trace: [ 1296.532111][T16868] dump_stack+0x197/0x210 [ 1296.536425][T16868] dump_header+0x10b/0x82d [ 1296.540862][T16868] ? oom_kill_process+0x94/0x3f0 [ 1296.545784][T16868] oom_kill_process.cold+0x10/0x15 [ 1296.550880][T16868] out_of_memory+0x334/0x1340 [ 1296.555552][T16868] ? lock_downgrade+0x920/0x920 [ 1296.560402][T16868] ? oom_killer_disable+0x280/0x280 [ 1296.565597][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1296.571148][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1296.576210][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1296.581344][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1296.586233][T16868] try_charge+0xf8c/0x1470 [ 1296.590646][T16868] ? find_held_lock+0x35/0x130 [ 1296.595402][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1296.600945][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1296.606617][T16868] ? find_held_lock+0x35/0x130 [ 1296.611483][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1296.617042][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1296.622622][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1296.627809][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1296.633353][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1296.638446][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1296.643797][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1296.649327][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1296.655032][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1296.660214][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1296.665477][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1296.670495][T16868] ? __kasan_check_read+0x11/0x20 [ 1296.675509][T16868] copy_process+0x3f8/0x6860 [ 1296.680081][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1296.684997][T16868] ? __kasan_check_read+0x11/0x20 [ 1296.690007][T16868] ? __cleanup_sighand+0x60/0x60 [ 1296.694925][T16868] ? find_held_lock+0x35/0x130 [ 1296.699682][T16868] _do_fork+0x146/0xfa0 [ 1296.703832][T16868] ? copy_init_mm+0x20/0x20 [ 1296.708326][T16868] ? __kasan_check_read+0x11/0x20 [ 1296.713335][T16868] ? _copy_to_user+0x118/0x160 [ 1296.718080][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1296.724304][T16868] ? put_timespec64+0xda/0x140 [ 1296.729059][T16868] __x64_sys_clone+0x18d/0x250 [ 1296.733807][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1296.738675][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1296.744160][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1296.749225][T16868] do_syscall_64+0xfa/0x760 [ 1296.753740][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1296.759631][T16868] RIP: 0033:0x4587ea [ 1296.763513][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1296.783099][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1296.791503][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1296.799452][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1296.807403][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1296.815355][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1296.823305][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1296.831822][T16868] memory: usage 24440kB, limit 0kB, failcnt 72 [ 1296.838045][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1296.845007][T16868] Memory cgroup stats for /syz4: [ 1296.845098][T16868] anon 20738048 [ 1296.845098][T16868] file 102400 [ 1296.845098][T16868] kernel_stack 458752 [ 1296.845098][T16868] slab 2195456 [ 1296.845098][T16868] sock 57344 [ 1296.845098][T16868] shmem 0 [ 1296.845098][T16868] file_mapped 0 [ 1296.845098][T16868] file_dirty 135168 [ 1296.845098][T16868] file_writeback 0 [ 1296.845098][T16868] anon_thp 18874368 [ 1296.845098][T16868] inactive_anon 0 [ 1296.845098][T16868] active_anon 20742144 [ 1296.845098][T16868] inactive_file 0 [ 1296.845098][T16868] active_file 135168 [ 1296.845098][T16868] unevictable 0 [ 1296.845098][T16868] slab_reclaimable 811008 [ 1296.845098][T16868] slab_unreclaimable 1384448 [ 1296.845098][T16868] pgfault 102300 [ 1296.845098][T16868] pgmajfault 0 [ 1296.845098][T16868] workingset_refault 0 [ 1296.845098][T16868] workingset_activate 0 [ 1296.845098][T16868] workingset_nodereclaim 0 [ 1296.845098][T16868] pgrefill 33 [ 1296.845098][T16868] pgscan 277 [ 1296.845098][T16868] pgsteal 256 [ 1296.938813][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=23754,uid=0 [ 1296.954485][T16868] Memory cgroup out of memory: Killed process 23754 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1296.976610][T16868] Memory cgroup out of memory: Killed process 21865 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1296.982133][ T1071] oom_reaper: reaped process 23754 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1297.009875][T16799] Memory cgroup out of memory: Killed process 21064 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1297.035306][T16865] oom_kill_process: 2 callbacks suppressed [ 1297.035323][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1297.039153][ T1071] oom_reaper: reaped process 21064 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1297.041196][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1297.071859][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.081915][T16865] Call Trace: [ 1297.085215][T16865] dump_stack+0x197/0x210 [ 1297.089558][T16865] dump_header+0x10b/0x82d [ 1297.093984][T16865] ? oom_kill_process+0x94/0x3f0 [ 1297.098924][T16865] oom_kill_process.cold+0x10/0x15 [ 1297.104024][T16865] out_of_memory+0x334/0x1340 [ 1297.108684][T16865] ? lock_downgrade+0x920/0x920 [ 1297.113539][T16865] ? oom_killer_disable+0x280/0x280 [ 1297.118724][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1297.124251][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1297.129175][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1297.134272][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1297.139110][T16865] try_charge+0xf8c/0x1470 [ 1297.143512][T16865] ? find_held_lock+0x35/0x130 [ 1297.148263][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1297.153792][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1297.159320][T16865] ? find_held_lock+0x35/0x130 [ 1297.164073][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1297.169614][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1297.175144][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1297.180327][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1297.185862][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1297.190957][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1297.196315][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1297.201843][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1297.207559][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1297.212739][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1297.218002][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1297.223004][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.228273][T16865] copy_process+0x3f8/0x6860 [ 1297.232847][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1297.237676][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.242698][T16865] ? __cleanup_sighand+0x60/0x60 [ 1297.247618][T16865] ? find_held_lock+0x35/0x130 [ 1297.252373][T16865] _do_fork+0x146/0xfa0 [ 1297.256521][T16865] ? copy_init_mm+0x20/0x20 [ 1297.261009][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.266016][T16865] ? _copy_to_user+0x118/0x160 [ 1297.270766][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.276988][T16865] ? put_timespec64+0xda/0x140 [ 1297.281742][T16865] __x64_sys_clone+0x18d/0x250 [ 1297.286487][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1297.291339][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1297.296614][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1297.301623][T16865] do_syscall_64+0xfa/0x760 [ 1297.306115][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.311991][T16865] RIP: 0033:0x4587ea [ 1297.315884][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1297.335473][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1297.343865][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1297.351870][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1297.359836][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1297.367806][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1297.375806][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1297.385229][T16865] memory: usage 54084kB, limit 0kB, failcnt 151 [ 1297.391573][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1297.398413][T16865] Memory cgroup stats for /syz0: [ 1297.398485][T16865] anon 46653440 [ 1297.398485][T16865] file 24576 [ 1297.398485][T16865] kernel_stack 786432 [ 1297.398485][T16865] slab 5152768 [ 1297.398485][T16865] sock 0 [ 1297.398485][T16865] shmem 0 [ 1297.398485][T16865] file_mapped 135168 [ 1297.398485][T16865] file_dirty 0 [ 1297.398485][T16865] file_writeback 0 [ 1297.398485][T16865] anon_thp 44040192 [ 1297.398485][T16865] inactive_anon 0 [ 1297.398485][T16865] active_anon 46653440 [ 1297.398485][T16865] inactive_file 131072 [ 1297.398485][T16865] active_file 0 [ 1297.398485][T16865] unevictable 0 [ 1297.398485][T16865] slab_reclaimable 1757184 [ 1297.398485][T16865] slab_unreclaimable 3395584 [ 1297.398485][T16865] pgfault 94611 [ 1297.398485][T16865] pgmajfault 0 [ 1297.398485][T16865] workingset_refault 0 [ 1297.398485][T16865] workingset_activate 0 [ 1297.398485][T16865] workingset_nodereclaim 0 [ 1297.398485][T16865] pgrefill 175 [ 1297.398485][T16865] pgscan 171 [ 1297.398485][T16865] pgsteal 34 [ 1297.398485][T16865] pgactivate 6105 [ 1297.403496][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21215,uid=0 [ 1297.513715][T16865] Memory cgroup out of memory: Killed process 21215 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35848kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1297.532339][ T1071] oom_reaper: reaped process 21215 (syz-executor.0), now anon-rss:0kB, file-rss:34888kB, shmem-rss:0kB [ 1297.535187][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1297.569641][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1297.578181][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.588374][T16865] Call Trace: [ 1297.591663][T16865] dump_stack+0x197/0x210 [ 1297.595991][T16865] dump_header+0x10b/0x82d [ 1297.600388][T16865] ? oom_kill_process+0x94/0x3f0 [ 1297.605319][T16865] oom_kill_process.cold+0x10/0x15 [ 1297.610412][T16865] out_of_memory+0x334/0x1340 [ 1297.615084][T16865] ? lock_downgrade+0x920/0x920 [ 1297.619917][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1297.625726][T16865] ? oom_killer_disable+0x280/0x280 [ 1297.630911][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1297.636437][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1297.641359][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1297.646451][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1297.651288][T16865] try_charge+0xf8c/0x1470 [ 1297.655684][T16865] ? find_held_lock+0x35/0x130 [ 1297.660442][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1297.665970][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1297.671496][T16865] ? find_held_lock+0x35/0x130 [ 1297.676345][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1297.682169][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1297.687723][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1297.692931][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1297.698476][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1297.705407][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1297.710779][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1297.716318][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1297.722023][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1297.727296][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1297.732561][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1297.737564][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.742599][T16865] copy_process+0x3f8/0x6860 [ 1297.747180][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1297.752020][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.757078][T16865] ? __cleanup_sighand+0x60/0x60 [ 1297.762026][T16865] ? find_held_lock+0x35/0x130 [ 1297.766804][T16865] _do_fork+0x146/0xfa0 [ 1297.771018][T16865] ? copy_init_mm+0x20/0x20 [ 1297.775510][T16865] ? __kasan_check_read+0x11/0x20 [ 1297.780514][T16865] ? _copy_to_user+0x118/0x160 [ 1297.785264][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1297.791485][T16865] ? put_timespec64+0xda/0x140 [ 1297.796235][T16865] __x64_sys_clone+0x18d/0x250 [ 1297.800978][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1297.805813][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1297.811088][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1297.816107][T16865] do_syscall_64+0xfa/0x760 [ 1297.820609][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1297.826478][T16865] RIP: 0033:0x4587ea [ 1297.830351][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1297.849939][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1297.858334][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1297.866290][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1297.874240][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1297.882200][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1297.890154][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1297.901426][T16865] memory: usage 51752kB, limit 0kB, failcnt 157 [ 1297.908389][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1297.915337][T16865] Memory cgroup stats for /syz0: [ 1297.915424][T16865] anon 44462080 [ 1297.915424][T16865] file 24576 [ 1297.915424][T16865] kernel_stack 720896 [ 1297.915424][T16865] slab 5152768 [ 1297.915424][T16865] sock 0 [ 1297.915424][T16865] shmem 0 [ 1297.915424][T16865] file_mapped 135168 [ 1297.915424][T16865] file_dirty 0 [ 1297.915424][T16865] file_writeback 0 [ 1297.915424][T16865] anon_thp 41943040 [ 1297.915424][T16865] inactive_anon 0 [ 1297.915424][T16865] active_anon 44462080 [ 1297.915424][T16865] inactive_file 131072 [ 1297.915424][T16865] active_file 0 [ 1297.915424][T16865] unevictable 0 [ 1297.915424][T16865] slab_reclaimable 1757184 [ 1297.915424][T16865] slab_unreclaimable 3395584 [ 1297.915424][T16865] pgfault 94611 [ 1297.915424][T16865] pgmajfault 0 [ 1297.915424][T16865] workingset_refault 0 [ 1297.915424][T16865] workingset_activate 0 [ 1297.915424][T16865] workingset_nodereclaim 0 [ 1297.915424][T16865] pgrefill 175 [ 1297.915424][T16865] pgscan 171 [ 1297.915424][T16865] pgsteal 34 [ 1297.915424][T16865] pgactivate 6105 [ 1298.012076][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21178,uid=0 [ 1298.027674][T16865] Memory cgroup out of memory: Killed process 21178 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35844kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1298.046346][ T1071] oom_reaper: reaped process 21178 (syz-executor.0), now anon-rss:0kB, file-rss:34884kB, shmem-rss:0kB [ 1298.057621][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1298.072042][T16868] CPU: 0 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1298.079960][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.090029][T16868] Call Trace: [ 1298.093312][T16868] dump_stack+0x197/0x210 [ 1298.097626][T16868] dump_header+0x10b/0x82d [ 1298.102044][T16868] ? oom_kill_process+0x94/0x3f0 [ 1298.106977][T16868] oom_kill_process.cold+0x10/0x15 [ 1298.112180][T16868] out_of_memory+0x334/0x1340 [ 1298.116836][T16868] ? lock_downgrade+0x920/0x920 [ 1298.121669][T16868] ? oom_killer_disable+0x280/0x280 [ 1298.126877][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1298.132523][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1298.137551][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1298.142694][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1298.147530][T16868] try_charge+0xf8c/0x1470 [ 1298.151948][T16868] ? find_held_lock+0x35/0x130 [ 1298.156696][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1298.162218][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1298.167745][T16868] ? find_held_lock+0x35/0x130 [ 1298.172486][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1298.178020][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1298.183549][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1298.188728][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1298.194258][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1298.199364][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1298.204738][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1298.210267][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1298.215963][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1298.221153][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1298.226421][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1298.231423][T16868] ? __kasan_check_read+0x11/0x20 [ 1298.236429][T16868] copy_process+0x3f8/0x6860 [ 1298.241000][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1298.245835][T16868] ? __kasan_check_read+0x11/0x20 [ 1298.251045][T16868] ? __cleanup_sighand+0x60/0x60 [ 1298.255962][T16868] ? find_held_lock+0x35/0x130 [ 1298.260716][T16868] _do_fork+0x146/0xfa0 [ 1298.264868][T16868] ? copy_init_mm+0x20/0x20 [ 1298.269367][T16868] ? __kasan_check_read+0x11/0x20 [ 1298.274381][T16868] ? _copy_to_user+0x118/0x160 [ 1298.279126][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.285346][T16868] ? put_timespec64+0xda/0x140 [ 1298.290094][T16868] __x64_sys_clone+0x18d/0x250 [ 1298.294852][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1298.299686][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1298.304949][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1298.309956][T16868] do_syscall_64+0xfa/0x760 [ 1298.314442][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1298.320323][T16868] RIP: 0033:0x4587ea [ 1298.324198][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1298.344297][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1298.352683][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1298.360635][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1298.368592][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1298.376544][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1298.384505][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1298.392849][T16868] memory: usage 19756kB, limit 0kB, failcnt 84 [ 1298.399011][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1298.406025][T16868] Memory cgroup stats for /syz4: [ 1298.406119][T16868] anon 16240640 [ 1298.406119][T16868] file 102400 [ 1298.406119][T16868] kernel_stack 393216 [ 1298.406119][T16868] slab 2195456 [ 1298.406119][T16868] sock 57344 [ 1298.406119][T16868] shmem 0 [ 1298.406119][T16868] file_mapped 0 [ 1298.406119][T16868] file_dirty 135168 [ 1298.406119][T16868] file_writeback 0 [ 1298.406119][T16868] anon_thp 14680064 [ 1298.406119][T16868] inactive_anon 0 [ 1298.406119][T16868] active_anon 16244736 [ 1298.406119][T16868] inactive_file 0 [ 1298.406119][T16868] active_file 135168 [ 1298.406119][T16868] unevictable 0 [ 1298.406119][T16868] slab_reclaimable 811008 [ 1298.406119][T16868] slab_unreclaimable 1384448 [ 1298.406119][T16868] pgfault 102300 [ 1298.406119][T16868] pgmajfault 0 [ 1298.406119][T16868] workingset_refault 0 [ 1298.406119][T16868] workingset_activate 0 [ 1298.406119][T16868] workingset_nodereclaim 0 [ 1298.406119][T16868] pgrefill 33 [ 1298.406119][T16868] pgscan 277 [ 1298.406119][T16868] pgsteal 256 [ 1298.499277][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21820,uid=0 [ 1298.515537][T16868] Memory cgroup out of memory: Killed process 21820 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1298.549469][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1298.565356][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1298.573293][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.583349][T16799] Call Trace: [ 1298.583380][T16799] dump_stack+0x197/0x210 [ 1298.583401][T16799] dump_header+0x10b/0x82d [ 1298.583413][T16799] ? oom_kill_process+0x94/0x3f0 [ 1298.583430][T16799] oom_kill_process.cold+0x10/0x15 [ 1298.583446][T16799] out_of_memory+0x334/0x1340 [ 1298.583465][T16799] ? lock_downgrade+0x920/0x920 [ 1298.591076][T16799] ? oom_killer_disable+0x280/0x280 [ 1298.591105][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1298.601136][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1298.610933][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1298.621059][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1298.631504][T16799] try_charge+0xf8c/0x1470 [ 1298.631520][T16799] ? find_held_lock+0x35/0x130 [ 1298.631551][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1298.641488][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1298.641507][T16799] ? find_held_lock+0x35/0x130 [ 1298.641522][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1298.641551][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1298.650713][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1298.661782][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1298.661803][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1298.661821][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1298.661839][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1298.672140][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1298.672156][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1298.672176][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1298.672193][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1298.682906][T16799] ? __kasan_check_read+0x11/0x20 [ 1298.682930][T16799] copy_process+0x3f8/0x6860 [ 1298.682947][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1298.693555][T16799] ? __kasan_check_read+0x11/0x20 [ 1298.693583][T16799] ? __cleanup_sighand+0x60/0x60 [ 1298.693599][T16799] ? find_held_lock+0x35/0x130 [ 1298.704524][T16799] _do_fork+0x146/0xfa0 [ 1298.704544][T16799] ? copy_init_mm+0x20/0x20 [ 1298.704564][T16799] ? __kasan_check_read+0x11/0x20 [ 1298.715461][T16799] ? _copy_to_user+0x118/0x160 [ 1298.715483][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1298.715499][T16799] ? put_timespec64+0xda/0x140 [ 1298.715521][T16799] __x64_sys_clone+0x18d/0x250 [ 1298.715541][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1298.725868][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1298.725883][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1298.725905][T16799] do_syscall_64+0xfa/0x760 [ 1298.735482][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1298.735494][T16799] RIP: 0033:0x4587ea [ 1298.735511][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1298.745383][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1298.756495][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1298.756504][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1298.756512][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1298.756519][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1298.756526][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1298.757011][T16799] memory: usage 25440kB, limit 0kB, failcnt 188 [ 1298.781481][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1298.781486][T16799] Memory cgroup stats for /syz3: [ 1298.781588][T16799] anon 22364160 [ 1298.781588][T16799] file 155648 [ 1298.781588][T16799] kernel_stack 393216 [ 1298.781588][T16799] slab 2080768 [ 1298.781588][T16799] sock 0 [ 1298.781588][T16799] shmem 0 [ 1298.781588][T16799] file_mapped 0 [ 1298.781588][T16799] file_dirty 0 [ 1298.781588][T16799] file_writeback 0 [ 1298.781588][T16799] anon_thp 20971520 [ 1298.781588][T16799] inactive_anon 0 [ 1298.781588][T16799] active_anon 22364160 [ 1298.781588][T16799] inactive_file 135168 [ 1298.781588][T16799] active_file 65536 [ 1298.781588][T16799] unevictable 135168 [ 1298.781588][T16799] slab_reclaimable 811008 [ 1298.781588][T16799] slab_unreclaimable 1269760 [ 1298.781588][T16799] pgfault 113553 [ 1298.781588][T16799] pgmajfault 0 [ 1298.781588][T16799] workingset_refault 0 [ 1298.781588][T16799] workingset_activate 0 [ 1298.781588][T16799] workingset_nodereclaim 0 [ 1298.781588][T16799] pgrefill 1216 [ 1298.781588][T16799] pgscan 1228 [ 1298.781588][T16799] pgsteal 70 [ 1298.781607][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20307,uid=0 [ 1298.801550][T16799] Memory cgroup out of memory: Killed process 20307 (syz-executor.3) total-vm:72584kB, anon-rss:2204kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1299.038326][ T1071] oom_reaper: reaped process 20307 (syz-executor.3), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 1299.054877][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1299.078083][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1299.086021][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.096066][T16865] Call Trace: [ 1299.099350][T16865] dump_stack+0x197/0x210 [ 1299.103665][T16865] dump_header+0x10b/0x82d [ 1299.108060][T16865] ? oom_kill_process+0x94/0x3f0 [ 1299.112982][T16865] oom_kill_process.cold+0x10/0x15 [ 1299.118079][T16865] out_of_memory+0x334/0x1340 [ 1299.122742][T16865] ? lock_downgrade+0x920/0x920 [ 1299.127578][T16865] ? oom_killer_disable+0x280/0x280 [ 1299.132763][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1299.138293][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1299.143231][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1299.148352][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1299.153185][T16865] try_charge+0xf8c/0x1470 [ 1299.157580][T16865] ? find_held_lock+0x35/0x130 [ 1299.162330][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1299.167857][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1299.173384][T16865] ? find_held_lock+0x35/0x130 [ 1299.178127][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1299.183661][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1299.189196][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1299.194398][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1299.199926][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1299.205020][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1299.210371][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1299.215925][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1299.221638][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1299.226831][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1299.232101][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1299.237107][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.242119][T16865] copy_process+0x3f8/0x6860 [ 1299.246691][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1299.251524][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.256538][T16865] ? __cleanup_sighand+0x60/0x60 [ 1299.261464][T16865] ? find_held_lock+0x35/0x130 [ 1299.266217][T16865] _do_fork+0x146/0xfa0 [ 1299.270359][T16865] ? copy_init_mm+0x20/0x20 [ 1299.274844][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.279849][T16865] ? _copy_to_user+0x118/0x160 [ 1299.284601][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.290835][T16865] ? put_timespec64+0xda/0x140 [ 1299.295599][T16865] __x64_sys_clone+0x18d/0x250 [ 1299.300701][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1299.305536][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1299.310818][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1299.315827][T16865] do_syscall_64+0xfa/0x760 [ 1299.320336][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.326224][T16865] RIP: 0033:0x4587ea [ 1299.330106][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1299.349698][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1299.358110][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1299.366075][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1299.374024][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1299.381974][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1299.389922][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1299.399878][T16865] memory: usage 50932kB, limit 0kB, failcnt 163 [ 1299.407494][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1299.414916][T16865] Memory cgroup stats for /syz0: [ 1299.414983][T16865] anon 44462080 [ 1299.414983][T16865] file 24576 [ 1299.414983][T16865] kernel_stack 720896 [ 1299.414983][T16865] slab 4608000 [ 1299.414983][T16865] sock 0 [ 1299.414983][T16865] shmem 0 [ 1299.414983][T16865] file_mapped 135168 [ 1299.414983][T16865] file_dirty 0 [ 1299.414983][T16865] file_writeback 0 [ 1299.414983][T16865] anon_thp 41943040 [ 1299.414983][T16865] inactive_anon 0 [ 1299.414983][T16865] active_anon 44462080 [ 1299.414983][T16865] inactive_file 131072 [ 1299.414983][T16865] active_file 0 [ 1299.414983][T16865] unevictable 0 [ 1299.414983][T16865] slab_reclaimable 1757184 [ 1299.414983][T16865] slab_unreclaimable 2850816 [ 1299.414983][T16865] pgfault 94611 [ 1299.414983][T16865] pgmajfault 0 [ 1299.414983][T16865] workingset_refault 0 [ 1299.414983][T16865] workingset_activate 0 [ 1299.414983][T16865] workingset_nodereclaim 0 [ 1299.414983][T16865] pgrefill 175 [ 1299.414983][T16865] pgscan 171 [ 1299.414983][T16865] pgsteal 34 [ 1299.414983][T16865] pgactivate 6105 [ 1299.512124][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=29882,uid=0 [ 1299.527790][T16865] Memory cgroup out of memory: Killed process 29882 (syz-executor.0) total-vm:72584kB, anon-rss:2208kB, file-rss:35832kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1299.548526][ T1071] oom_reaper: reaped process 29882 (syz-executor.0), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 1299.549429][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1299.571580][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1299.579467][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.589524][T16865] Call Trace: [ 1299.592822][T16865] dump_stack+0x197/0x210 [ 1299.597163][T16865] dump_header+0x10b/0x82d [ 1299.601577][T16865] ? oom_kill_process+0x94/0x3f0 [ 1299.606529][T16865] oom_kill_process.cold+0x10/0x15 [ 1299.611734][T16865] out_of_memory+0x334/0x1340 [ 1299.616412][T16865] ? lock_downgrade+0x920/0x920 [ 1299.621265][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1299.627069][T16865] ? oom_killer_disable+0x280/0x280 [ 1299.632274][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1299.637837][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1299.642772][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1299.647876][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1299.652725][T16865] try_charge+0xf8c/0x1470 [ 1299.657141][T16865] ? find_held_lock+0x35/0x130 [ 1299.661926][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1299.667502][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1299.673067][T16865] ? find_held_lock+0x35/0x130 [ 1299.677832][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1299.683394][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1299.688932][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1299.694220][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1299.699786][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1299.704900][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1299.710272][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1299.715826][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1299.721551][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1299.726745][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1299.732116][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1299.737141][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.742170][T16865] copy_process+0x3f8/0x6860 [ 1299.746766][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1299.751626][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.756668][T16865] ? __cleanup_sighand+0x60/0x60 [ 1299.761610][T16865] ? find_held_lock+0x35/0x130 [ 1299.766374][T16865] _do_fork+0x146/0xfa0 [ 1299.770521][T16865] ? copy_init_mm+0x20/0x20 [ 1299.775046][T16865] ? __kasan_check_read+0x11/0x20 [ 1299.780092][T16865] ? _copy_to_user+0x118/0x160 [ 1299.784859][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1299.791126][T16865] ? put_timespec64+0xda/0x140 [ 1299.795903][T16865] __x64_sys_clone+0x18d/0x250 [ 1299.800690][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1299.805569][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1299.810845][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1299.815894][T16865] do_syscall_64+0xfa/0x760 [ 1299.820422][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1299.826333][T16865] RIP: 0033:0x4587ea [ 1299.830223][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1299.850007][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1299.858428][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1299.866393][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1299.874355][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1299.882333][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1299.890291][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1299.900902][T16865] memory: usage 48576kB, limit 0kB, failcnt 169 [ 1299.907415][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1299.914376][T16865] Memory cgroup stats for /syz0: [ 1299.914468][T16865] anon 42196992 [ 1299.914468][T16865] file 24576 [ 1299.914468][T16865] kernel_stack 655360 [ 1299.914468][T16865] slab 4608000 [ 1299.914468][T16865] sock 0 [ 1299.914468][T16865] shmem 0 [ 1299.914468][T16865] file_mapped 135168 [ 1299.914468][T16865] file_dirty 0 [ 1299.914468][T16865] file_writeback 0 [ 1299.914468][T16865] anon_thp 39845888 [ 1299.914468][T16865] inactive_anon 0 [ 1299.914468][T16865] active_anon 42196992 [ 1299.914468][T16865] inactive_file 131072 [ 1299.914468][T16865] active_file 0 [ 1299.914468][T16865] unevictable 0 [ 1299.914468][T16865] slab_reclaimable 1757184 [ 1299.914468][T16865] slab_unreclaimable 2850816 [ 1299.914468][T16865] pgfault 94611 [ 1299.914468][T16865] pgmajfault 0 [ 1299.914468][T16865] workingset_refault 0 [ 1299.914468][T16865] workingset_activate 0 [ 1299.914468][T16865] workingset_nodereclaim 0 [ 1299.914468][T16865] pgrefill 175 [ 1299.914468][T16865] pgscan 171 [ 1299.914468][T16865] pgsteal 34 [ 1299.914468][T16865] pgactivate 6105 [ 1300.011311][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20291,uid=0 [ 1300.027866][T16865] Memory cgroup out of memory: Killed process 20291 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35824kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1300.046105][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1300.047470][ T1071] oom_reaper: reaped process 20291 (syz-executor.0), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 1300.060242][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1300.076877][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.086937][T16868] Call Trace: [ 1300.090233][T16868] dump_stack+0x197/0x210 [ 1300.094585][T16868] dump_header+0x10b/0x82d [ 1300.099011][T16868] ? oom_kill_process+0x94/0x3f0 [ 1300.104029][T16868] oom_kill_process.cold+0x10/0x15 [ 1300.109127][T16868] out_of_memory+0x334/0x1340 [ 1300.113798][T16868] ? lock_downgrade+0x920/0x920 [ 1300.118658][T16868] ? oom_killer_disable+0x280/0x280 [ 1300.123890][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1300.129418][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1300.134352][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1300.139465][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1300.144303][T16868] try_charge+0xf8c/0x1470 [ 1300.148711][T16868] ? find_held_lock+0x35/0x130 [ 1300.153480][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1300.159013][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1300.164539][T16868] ? find_held_lock+0x35/0x130 [ 1300.169292][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1300.174846][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1300.180480][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1300.185675][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1300.191203][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1300.196404][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1300.201780][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1300.207328][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1300.213155][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1300.218347][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1300.223619][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1300.228624][T16868] ? __kasan_check_read+0x11/0x20 [ 1300.233648][T16868] copy_process+0x3f8/0x6860 [ 1300.238228][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1300.243058][T16868] ? __kasan_check_read+0x11/0x20 [ 1300.248078][T16868] ? __cleanup_sighand+0x60/0x60 [ 1300.253016][T16868] ? find_held_lock+0x35/0x130 [ 1300.257780][T16868] _do_fork+0x146/0xfa0 [ 1300.261929][T16868] ? copy_init_mm+0x20/0x20 [ 1300.266439][T16868] ? __kasan_check_read+0x11/0x20 [ 1300.271455][T16868] ? _copy_to_user+0x118/0x160 [ 1300.276223][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.282474][T16868] ? put_timespec64+0xda/0x140 [ 1300.289424][T16868] __x64_sys_clone+0x18d/0x250 [ 1300.294186][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1300.299037][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1300.304314][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1300.309339][T16868] do_syscall_64+0xfa/0x760 [ 1300.313843][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.319729][T16868] RIP: 0033:0x4587ea [ 1300.330999][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1300.350594][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1300.358994][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1300.366949][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1300.374910][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1300.382971][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1300.390930][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1300.400205][T16868] memory: usage 17292kB, limit 0kB, failcnt 90 [ 1300.406468][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1300.413436][T16868] Memory cgroup stats for /syz4: [ 1300.413530][T16868] anon 14020608 [ 1300.413530][T16868] file 102400 [ 1300.413530][T16868] kernel_stack 327680 [ 1300.413530][T16868] slab 2195456 [ 1300.413530][T16868] sock 57344 [ 1300.413530][T16868] shmem 0 [ 1300.413530][T16868] file_mapped 0 [ 1300.413530][T16868] file_dirty 135168 [ 1300.413530][T16868] file_writeback 0 [ 1300.413530][T16868] anon_thp 12582912 [ 1300.413530][T16868] inactive_anon 0 [ 1300.413530][T16868] active_anon 14024704 [ 1300.413530][T16868] inactive_file 0 [ 1300.413530][T16868] active_file 135168 [ 1300.413530][T16868] unevictable 0 [ 1300.413530][T16868] slab_reclaimable 811008 [ 1300.413530][T16868] slab_unreclaimable 1384448 [ 1300.413530][T16868] pgfault 102300 [ 1300.413530][T16868] pgmajfault 0 [ 1300.413530][T16868] workingset_refault 0 [ 1300.413530][T16868] workingset_activate 0 [ 1300.413530][T16868] workingset_nodereclaim 0 [ 1300.413530][T16868] pgrefill 33 [ 1300.413530][T16868] pgscan 277 [ 1300.413530][T16868] pgsteal 256 [ 1300.506931][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21771,uid=0 [ 1300.523136][T16868] Memory cgroup out of memory: Killed process 21771 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1300.550516][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1300.563012][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1300.570921][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.580971][T16799] Call Trace: [ 1300.584255][T16799] dump_stack+0x197/0x210 [ 1300.588597][T16799] dump_header+0x10b/0x82d [ 1300.592991][T16799] ? oom_kill_process+0x94/0x3f0 [ 1300.597908][T16799] oom_kill_process.cold+0x10/0x15 [ 1300.603036][T16799] out_of_memory+0x334/0x1340 [ 1300.607734][T16799] ? lock_downgrade+0x920/0x920 [ 1300.612578][T16799] ? oom_killer_disable+0x280/0x280 [ 1300.617772][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1300.623298][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1300.628220][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1300.633336][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1300.638171][T16799] try_charge+0xf8c/0x1470 [ 1300.642568][T16799] ? find_held_lock+0x35/0x130 [ 1300.647316][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1300.652839][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1300.658361][T16799] ? find_held_lock+0x35/0x130 [ 1300.663115][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1300.668661][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1300.674185][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1300.679373][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1300.684912][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1300.690005][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1300.695355][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1300.700880][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1300.706578][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1300.711760][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1300.717041][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1300.722058][T16799] ? __kasan_check_read+0x11/0x20 [ 1300.727102][T16799] copy_process+0x3f8/0x6860 [ 1300.731713][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1300.736547][T16799] ? __kasan_check_read+0x11/0x20 [ 1300.741563][T16799] ? __cleanup_sighand+0x60/0x60 [ 1300.746477][T16799] ? find_held_lock+0x35/0x130 [ 1300.751324][T16799] _do_fork+0x146/0xfa0 [ 1300.755478][T16799] ? copy_init_mm+0x20/0x20 [ 1300.760133][T16799] ? __kasan_check_read+0x11/0x20 [ 1300.765186][T16799] ? _copy_to_user+0x118/0x160 [ 1300.769944][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1300.776174][T16799] ? put_timespec64+0xda/0x140 [ 1300.780927][T16799] __x64_sys_clone+0x18d/0x250 [ 1300.785720][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1300.790556][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1300.795844][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1300.800875][T16799] do_syscall_64+0xfa/0x760 [ 1300.805367][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1300.811369][T16799] RIP: 0033:0x4587ea [ 1300.815290][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1300.834899][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1300.843297][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1300.851266][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1300.860018][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1300.867976][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1300.875927][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1300.884693][T16799] memory: usage 22908kB, limit 0kB, failcnt 194 [ 1300.890959][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1300.898286][T16799] Memory cgroup stats for /syz3: [ 1300.898393][T16799] anon 20123648 [ 1300.898393][T16799] file 155648 [ 1300.898393][T16799] kernel_stack 327680 [ 1300.898393][T16799] slab 2080768 [ 1300.898393][T16799] sock 0 [ 1300.898393][T16799] shmem 0 [ 1300.898393][T16799] file_mapped 0 [ 1300.898393][T16799] file_dirty 0 [ 1300.898393][T16799] file_writeback 0 [ 1300.898393][T16799] anon_thp 18874368 [ 1300.898393][T16799] inactive_anon 0 [ 1300.898393][T16799] active_anon 20123648 [ 1300.898393][T16799] inactive_file 135168 [ 1300.898393][T16799] active_file 65536 [ 1300.898393][T16799] unevictable 135168 [ 1300.898393][T16799] slab_reclaimable 811008 [ 1300.898393][T16799] slab_unreclaimable 1269760 [ 1300.898393][T16799] pgfault 113553 [ 1300.898393][T16799] pgmajfault 0 [ 1300.898393][T16799] workingset_refault 0 [ 1300.898393][T16799] workingset_activate 0 [ 1300.898393][T16799] workingset_nodereclaim 0 [ 1300.898393][T16799] pgrefill 1216 [ 1300.898393][T16799] pgscan 1228 [ 1300.898393][T16799] pgsteal 70 [ 1300.992245][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27788,uid=0 [ 1301.007835][T16799] Memory cgroup out of memory: Killed process 27788 (syz-executor.3) total-vm:72848kB, anon-rss:2228kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1301.026634][ T1071] oom_reaper: reaped process 27788 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1301.039034][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1301.051889][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1301.059793][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.069941][T16865] Call Trace: [ 1301.073233][T16865] dump_stack+0x197/0x210 [ 1301.077567][T16865] dump_header+0x10b/0x82d [ 1301.081992][T16865] ? oom_kill_process+0x94/0x3f0 [ 1301.086944][T16865] oom_kill_process.cold+0x10/0x15 [ 1301.092075][T16865] out_of_memory+0x334/0x1340 [ 1301.096751][T16865] ? lock_downgrade+0x920/0x920 [ 1301.101613][T16865] ? oom_killer_disable+0x280/0x280 [ 1301.106808][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1301.112345][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1301.117291][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1301.122413][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1301.127258][T16865] try_charge+0xf8c/0x1470 [ 1301.131668][T16865] ? find_held_lock+0x35/0x130 [ 1301.137646][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1301.143181][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1301.150529][T16865] ? find_held_lock+0x35/0x130 [ 1301.155285][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1301.160833][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1301.166383][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1301.171584][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1301.177133][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1301.182256][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1301.187633][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1301.193954][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1301.199661][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1301.204854][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1301.210117][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1301.215126][T16865] ? __kasan_check_read+0x11/0x20 [ 1301.220144][T16865] copy_process+0x3f8/0x6860 [ 1301.224714][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1301.229543][T16865] ? __kasan_check_read+0x11/0x20 [ 1301.234571][T16865] ? __cleanup_sighand+0x60/0x60 [ 1301.239496][T16865] ? find_held_lock+0x35/0x130 [ 1301.244266][T16865] _do_fork+0x146/0xfa0 [ 1301.248421][T16865] ? copy_init_mm+0x20/0x20 [ 1301.252917][T16865] ? __kasan_check_read+0x11/0x20 [ 1301.257930][T16865] ? _copy_to_user+0x118/0x160 [ 1301.262679][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.268908][T16865] ? put_timespec64+0xda/0x140 [ 1301.273671][T16865] __x64_sys_clone+0x18d/0x250 [ 1301.278425][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1301.283264][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1301.288526][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1301.293550][T16865] do_syscall_64+0xfa/0x760 [ 1301.298049][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.303932][T16865] RIP: 0033:0x4587ea [ 1301.307807][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1301.328959][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1301.337370][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1301.345345][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1301.353310][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1301.361296][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1301.369257][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1301.379032][T16865] memory: usage 46240kB, limit 0kB, failcnt 175 [ 1301.385456][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1301.392740][T16865] Memory cgroup stats for /syz0: [ 1301.392835][T16865] anon 39989248 [ 1301.392835][T16865] file 24576 [ 1301.392835][T16865] kernel_stack 655360 [ 1301.392835][T16865] slab 4608000 [ 1301.392835][T16865] sock 0 [ 1301.392835][T16865] shmem 0 [ 1301.392835][T16865] file_mapped 135168 [ 1301.392835][T16865] file_dirty 0 [ 1301.392835][T16865] file_writeback 0 [ 1301.392835][T16865] anon_thp 37748736 [ 1301.392835][T16865] inactive_anon 0 [ 1301.392835][T16865] active_anon 39989248 [ 1301.392835][T16865] inactive_file 131072 [ 1301.392835][T16865] active_file 0 [ 1301.392835][T16865] unevictable 0 [ 1301.392835][T16865] slab_reclaimable 1757184 [ 1301.392835][T16865] slab_unreclaimable 2850816 [ 1301.392835][T16865] pgfault 94611 [ 1301.392835][T16865] pgmajfault 0 [ 1301.392835][T16865] workingset_refault 0 [ 1301.392835][T16865] workingset_activate 0 [ 1301.392835][T16865] workingset_nodereclaim 0 [ 1301.392835][T16865] pgrefill 175 [ 1301.392835][T16865] pgscan 171 [ 1301.392835][T16865] pgsteal 34 [ 1301.392835][T16865] pgactivate 6105 [ 1301.490231][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24353,uid=0 [ 1301.506871][T16865] Memory cgroup out of memory: Killed process 24353 (syz-executor.0) total-vm:72584kB, anon-rss:2208kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1301.525402][ T1071] oom_reaper: reaped process 24353 (syz-executor.0), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1301.525414][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1301.525432][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1301.556116][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.566183][T16868] Call Trace: [ 1301.569496][T16868] dump_stack+0x197/0x210 [ 1301.573841][T16868] dump_header+0x10b/0x82d [ 1301.578263][T16868] ? oom_kill_process+0x94/0x3f0 [ 1301.583219][T16868] oom_kill_process.cold+0x10/0x15 [ 1301.588343][T16868] out_of_memory+0x334/0x1340 [ 1301.593030][T16868] ? lock_downgrade+0x920/0x920 [ 1301.597883][T16868] ? oom_killer_disable+0x280/0x280 [ 1301.603087][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1301.608640][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1301.613582][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1301.618693][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1301.623545][T16868] try_charge+0xf8c/0x1470 [ 1301.627954][T16868] ? find_held_lock+0x35/0x130 [ 1301.632723][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1301.638259][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1301.643801][T16868] ? find_held_lock+0x35/0x130 [ 1301.648555][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1301.654106][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1301.659656][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1301.664898][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1301.670426][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1301.675520][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1301.680870][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1301.686404][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1301.692377][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1301.697570][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1301.702841][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1301.707852][T16868] ? __kasan_check_read+0x11/0x20 [ 1301.712875][T16868] copy_process+0x3f8/0x6860 [ 1301.717489][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1301.722331][T16868] ? __kasan_check_read+0x11/0x20 [ 1301.727403][T16868] ? __cleanup_sighand+0x60/0x60 [ 1301.732336][T16868] ? find_held_lock+0x35/0x130 [ 1301.737102][T16868] _do_fork+0x146/0xfa0 [ 1301.741247][T16868] ? copy_init_mm+0x20/0x20 [ 1301.745741][T16868] ? __kasan_check_read+0x11/0x20 [ 1301.750742][T16868] ? _copy_to_user+0x118/0x160 [ 1301.755503][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1301.761830][T16868] ? put_timespec64+0xda/0x140 [ 1301.766588][T16868] __x64_sys_clone+0x18d/0x250 [ 1301.771690][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1301.776550][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1301.781832][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1301.786871][T16868] do_syscall_64+0xfa/0x760 [ 1301.791377][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1301.797310][T16868] RIP: 0033:0x4587ea [ 1301.801187][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1301.821043][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1301.829483][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1301.837443][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1301.845516][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1301.853474][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1301.861444][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1301.870968][T16868] memory: usage 14920kB, limit 0kB, failcnt 96 [ 1301.877218][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1301.884143][T16868] Memory cgroup stats for /syz4: [ 1301.884236][T16868] anon 11784192 [ 1301.884236][T16868] file 102400 [ 1301.884236][T16868] kernel_stack 327680 [ 1301.884236][T16868] slab 2195456 [ 1301.884236][T16868] sock 57344 [ 1301.884236][T16868] shmem 0 [ 1301.884236][T16868] file_mapped 0 [ 1301.884236][T16868] file_dirty 135168 [ 1301.884236][T16868] file_writeback 0 [ 1301.884236][T16868] anon_thp 10485760 [ 1301.884236][T16868] inactive_anon 0 [ 1301.884236][T16868] active_anon 11788288 [ 1301.884236][T16868] inactive_file 0 [ 1301.884236][T16868] active_file 135168 [ 1301.884236][T16868] unevictable 0 [ 1301.884236][T16868] slab_reclaimable 811008 [ 1301.884236][T16868] slab_unreclaimable 1384448 [ 1301.884236][T16868] pgfault 102300 [ 1301.884236][T16868] pgmajfault 0 [ 1301.884236][T16868] workingset_refault 0 [ 1301.884236][T16868] workingset_activate 0 [ 1301.884236][T16868] workingset_nodereclaim 0 [ 1301.884236][T16868] pgrefill 33 [ 1301.884236][T16868] pgscan 277 [ 1301.884236][T16868] pgsteal 256 [ 1301.977752][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=29873,uid=0 [ 1301.994297][T16868] Memory cgroup out of memory: Killed process 29873 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1302.014332][ T1071] oom_reaper: reaped process 29873 (syz-executor.4), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1302.016187][T16868] Memory cgroup out of memory: Killed process 20233 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1302.044288][T16799] oom_kill_process: 1 callbacks suppressed [ 1302.044304][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1302.044724][ T1071] oom_reaper: reaped process 20233 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 1302.050133][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1302.082641][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.092700][T16799] Call Trace: [ 1302.095992][T16799] dump_stack+0x197/0x210 [ 1302.100330][T16799] dump_header+0x10b/0x82d [ 1302.104750][T16799] ? oom_kill_process+0x94/0x3f0 [ 1302.109698][T16799] oom_kill_process.cold+0x10/0x15 [ 1302.114839][T16799] out_of_memory+0x334/0x1340 [ 1302.119510][T16799] ? lock_downgrade+0x920/0x920 [ 1302.124454][T16799] ? oom_killer_disable+0x280/0x280 [ 1302.129729][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1302.135257][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1302.140177][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1302.145283][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1302.150129][T16799] try_charge+0xf8c/0x1470 [ 1302.154524][T16799] ? find_held_lock+0x35/0x130 [ 1302.159284][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1302.164816][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1302.170380][T16799] ? find_held_lock+0x35/0x130 [ 1302.175127][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1302.180661][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1302.186199][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1302.191392][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1302.196927][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1302.202125][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1302.207495][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1302.213034][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1302.218730][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1302.223923][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1302.229198][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1302.234214][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.239221][T16799] copy_process+0x3f8/0x6860 [ 1302.243807][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1302.248652][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.253681][T16799] ? __cleanup_sighand+0x60/0x60 [ 1302.258598][T16799] ? find_held_lock+0x35/0x130 [ 1302.263371][T16799] _do_fork+0x146/0xfa0 [ 1302.267532][T16799] ? copy_init_mm+0x20/0x20 [ 1302.272027][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.277030][T16799] ? _copy_to_user+0x118/0x160 [ 1302.281790][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.288028][T16799] ? put_timespec64+0xda/0x140 [ 1302.292786][T16799] __x64_sys_clone+0x18d/0x250 [ 1302.297539][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1302.302390][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1302.307678][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1302.312711][T16799] do_syscall_64+0xfa/0x760 [ 1302.317209][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.323086][T16799] RIP: 0033:0x4587ea [ 1302.326981][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1302.346584][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1302.354991][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1302.362965][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1302.370927][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1302.378879][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1302.386835][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1302.396060][T16799] memory: usage 20556kB, limit 0kB, failcnt 200 [ 1302.402383][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1302.409219][T16799] Memory cgroup stats for /syz3: [ 1302.409293][T16799] anon 17969152 [ 1302.409293][T16799] file 155648 [ 1302.409293][T16799] kernel_stack 327680 [ 1302.409293][T16799] slab 2080768 [ 1302.409293][T16799] sock 0 [ 1302.409293][T16799] shmem 0 [ 1302.409293][T16799] file_mapped 0 [ 1302.409293][T16799] file_dirty 0 [ 1302.409293][T16799] file_writeback 0 [ 1302.409293][T16799] anon_thp 16777216 [ 1302.409293][T16799] inactive_anon 0 [ 1302.409293][T16799] active_anon 17969152 [ 1302.409293][T16799] inactive_file 135168 [ 1302.409293][T16799] active_file 65536 [ 1302.409293][T16799] unevictable 135168 [ 1302.409293][T16799] slab_reclaimable 811008 [ 1302.409293][T16799] slab_unreclaimable 1269760 [ 1302.409293][T16799] pgfault 113553 [ 1302.409293][T16799] pgmajfault 0 [ 1302.409293][T16799] workingset_refault 0 [ 1302.409293][T16799] workingset_activate 0 [ 1302.409293][T16799] workingset_nodereclaim 0 [ 1302.409293][T16799] pgrefill 1216 [ 1302.409293][T16799] pgscan 1228 [ 1302.409293][T16799] pgsteal 70 [ 1302.503086][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27815,uid=0 [ 1302.518669][T16799] Memory cgroup out of memory: Killed process 27815 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1302.539154][ T1071] oom_reaper: reaped process 27815 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1302.539941][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1302.562517][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1302.570509][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.580571][T16799] Call Trace: [ 1302.583873][T16799] dump_stack+0x197/0x210 [ 1302.588208][T16799] dump_header+0x10b/0x82d [ 1302.592637][T16799] ? oom_kill_process+0x94/0x3f0 [ 1302.597584][T16799] oom_kill_process.cold+0x10/0x15 [ 1302.602694][T16799] out_of_memory+0x334/0x1340 [ 1302.607389][T16799] ? lock_downgrade+0x920/0x920 [ 1302.612255][T16799] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1302.618070][T16799] ? oom_killer_disable+0x280/0x280 [ 1302.623298][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1302.628859][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1302.633793][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1302.638897][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1302.643759][T16799] try_charge+0xf8c/0x1470 [ 1302.648174][T16799] ? find_held_lock+0x35/0x130 [ 1302.652940][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1302.658467][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1302.664008][T16799] ? find_held_lock+0x35/0x130 [ 1302.668769][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1302.674360][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1302.679902][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1302.685100][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1302.691511][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1302.696614][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1302.701979][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1302.707522][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1302.713248][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1302.718436][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1302.723717][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1302.728730][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.733748][T16799] copy_process+0x3f8/0x6860 [ 1302.738328][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1302.743172][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.748210][T16799] ? __cleanup_sighand+0x60/0x60 [ 1302.753139][T16799] ? find_held_lock+0x35/0x130 [ 1302.757905][T16799] _do_fork+0x146/0xfa0 [ 1302.762057][T16799] ? copy_init_mm+0x20/0x20 [ 1302.766561][T16799] ? __kasan_check_read+0x11/0x20 [ 1302.771590][T16799] ? _copy_to_user+0x118/0x160 [ 1302.776359][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1302.782602][T16799] ? put_timespec64+0xda/0x140 [ 1302.787550][T16799] __x64_sys_clone+0x18d/0x250 [ 1302.792316][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1302.797162][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1302.802443][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1302.807475][T16799] do_syscall_64+0xfa/0x760 [ 1302.811977][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1302.817861][T16799] RIP: 0033:0x4587ea [ 1302.821750][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1302.841453][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1302.849857][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1302.857818][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1302.865783][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1302.873747][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1302.881884][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1302.892199][T16799] memory: usage 18240kB, limit 0kB, failcnt 206 [ 1302.898556][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1302.905664][T16799] Memory cgroup stats for /syz3: [ 1302.905768][T16799] anon 15781888 [ 1302.905768][T16799] file 155648 [ 1302.905768][T16799] kernel_stack 262144 [ 1302.905768][T16799] slab 2080768 [ 1302.905768][T16799] sock 0 [ 1302.905768][T16799] shmem 0 [ 1302.905768][T16799] file_mapped 0 [ 1302.905768][T16799] file_dirty 0 [ 1302.905768][T16799] file_writeback 0 [ 1302.905768][T16799] anon_thp 14680064 [ 1302.905768][T16799] inactive_anon 0 [ 1302.905768][T16799] active_anon 15781888 [ 1302.905768][T16799] inactive_file 135168 [ 1302.905768][T16799] active_file 65536 [ 1302.905768][T16799] unevictable 135168 [ 1302.905768][T16799] slab_reclaimable 811008 [ 1302.905768][T16799] slab_unreclaimable 1269760 [ 1302.905768][T16799] pgfault 113553 [ 1302.905768][T16799] pgmajfault 0 [ 1302.905768][T16799] workingset_refault 0 [ 1302.905768][T16799] workingset_activate 0 [ 1302.905768][T16799] workingset_nodereclaim 0 [ 1302.905768][T16799] pgrefill 1216 [ 1302.905768][T16799] pgscan 1228 [ 1302.905768][T16799] pgsteal 70 [ 1302.999658][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27800,uid=0 [ 1303.015240][T16799] Memory cgroup out of memory: Killed process 27800 (syz-executor.3) total-vm:72584kB, anon-rss:2212kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1303.035659][ T1071] oom_reaper: reaped process 27800 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1303.043642][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1303.058878][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1303.066776][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.076830][T16865] Call Trace: [ 1303.080176][T16865] dump_stack+0x197/0x210 [ 1303.084516][T16865] dump_header+0x10b/0x82d [ 1303.088930][T16865] ? oom_kill_process+0x94/0x3f0 [ 1303.093865][T16865] oom_kill_process.cold+0x10/0x15 [ 1303.099010][T16865] out_of_memory+0x334/0x1340 [ 1303.103684][T16865] ? lock_downgrade+0x920/0x920 [ 1303.108532][T16865] ? oom_killer_disable+0x280/0x280 [ 1303.113717][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1303.119312][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1303.124254][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1303.129358][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1303.134196][T16865] try_charge+0xf8c/0x1470 [ 1303.138610][T16865] ? find_held_lock+0x35/0x130 [ 1303.143470][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1303.149054][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1303.154621][T16865] ? find_held_lock+0x35/0x130 [ 1303.159365][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1303.164920][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1303.170459][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1303.175698][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1303.181280][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1303.186413][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1303.191788][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1303.197325][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1303.203039][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1303.208232][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1303.213499][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1303.218503][T16865] ? __kasan_check_read+0x11/0x20 [ 1303.223523][T16865] copy_process+0x3f8/0x6860 [ 1303.228108][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1303.232946][T16865] ? __kasan_check_read+0x11/0x20 [ 1303.237966][T16865] ? __cleanup_sighand+0x60/0x60 [ 1303.242894][T16865] ? find_held_lock+0x35/0x130 [ 1303.247704][T16865] _do_fork+0x146/0xfa0 [ 1303.251855][T16865] ? copy_init_mm+0x20/0x20 [ 1303.256351][T16865] ? __kasan_check_read+0x11/0x20 [ 1303.261364][T16865] ? _copy_to_user+0x118/0x160 [ 1303.266132][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.272392][T16865] ? put_timespec64+0xda/0x140 [ 1303.277163][T16865] __x64_sys_clone+0x18d/0x250 [ 1303.281924][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1303.286771][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1303.292046][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1303.297065][T16865] do_syscall_64+0xfa/0x760 [ 1303.301569][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.307501][T16865] RIP: 0033:0x4587ea [ 1303.311389][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1303.330989][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1303.339386][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1303.347363][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1303.355318][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1303.363281][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1303.371255][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1303.380862][T16865] memory: usage 43904kB, limit 0kB, failcnt 181 [ 1303.387179][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1303.394077][T16865] Memory cgroup stats for /syz0: [ 1303.394168][T16865] anon 37769216 [ 1303.394168][T16865] file 24576 [ 1303.394168][T16865] kernel_stack 589824 [ 1303.394168][T16865] slab 4472832 [ 1303.394168][T16865] sock 0 [ 1303.394168][T16865] shmem 0 [ 1303.394168][T16865] file_mapped 135168 [ 1303.394168][T16865] file_dirty 0 [ 1303.394168][T16865] file_writeback 0 [ 1303.394168][T16865] anon_thp 35651584 [ 1303.394168][T16865] inactive_anon 0 [ 1303.394168][T16865] active_anon 37769216 [ 1303.394168][T16865] inactive_file 131072 [ 1303.394168][T16865] active_file 0 [ 1303.394168][T16865] unevictable 0 [ 1303.394168][T16865] slab_reclaimable 1757184 [ 1303.394168][T16865] slab_unreclaimable 2715648 [ 1303.394168][T16865] pgfault 94611 [ 1303.394168][T16865] pgmajfault 0 [ 1303.394168][T16865] workingset_refault 0 [ 1303.394168][T16865] workingset_activate 0 [ 1303.394168][T16865] workingset_nodereclaim 0 [ 1303.394168][T16865] pgrefill 175 [ 1303.394168][T16865] pgscan 171 [ 1303.394168][T16865] pgsteal 34 [ 1303.394168][T16865] pgactivate 6105 [ 1303.490905][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24346,uid=0 [ 1303.507161][T16865] Memory cgroup out of memory: Killed process 24346 (syz-executor.0) total-vm:72584kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1303.534481][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1303.548915][T16868] CPU: 0 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1303.556803][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.566995][T16868] Call Trace: [ 1303.570274][T16868] dump_stack+0x197/0x210 [ 1303.574616][T16868] dump_header+0x10b/0x82d [ 1303.579018][T16868] ? oom_kill_process+0x94/0x3f0 [ 1303.583948][T16868] oom_kill_process.cold+0x10/0x15 [ 1303.589080][T16868] out_of_memory+0x334/0x1340 [ 1303.593750][T16868] ? lock_downgrade+0x920/0x920 [ 1303.599508][T16868] ? oom_killer_disable+0x280/0x280 [ 1303.604698][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1303.610225][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1303.615230][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1303.620322][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1303.625157][T16868] try_charge+0xf8c/0x1470 [ 1303.629552][T16868] ? find_held_lock+0x35/0x130 [ 1303.634302][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1303.639823][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1303.645348][T16868] ? find_held_lock+0x35/0x130 [ 1303.650101][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1303.655636][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1303.661166][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1303.666347][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1303.671882][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1303.676988][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1303.682355][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1303.687886][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1303.693584][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1303.698765][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1303.704032][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1303.709034][T16868] ? __kasan_check_read+0x11/0x20 [ 1303.714051][T16868] copy_process+0x3f8/0x6860 [ 1303.718622][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1303.723570][T16868] ? __kasan_check_read+0x11/0x20 [ 1303.728590][T16868] ? __cleanup_sighand+0x60/0x60 [ 1303.733527][T16868] ? find_held_lock+0x35/0x130 [ 1303.738302][T16868] _do_fork+0x146/0xfa0 [ 1303.742475][T16868] ? copy_init_mm+0x20/0x20 [ 1303.746971][T16868] ? __kasan_check_read+0x11/0x20 [ 1303.751984][T16868] ? _copy_to_user+0x118/0x160 [ 1303.756774][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1303.763011][T16868] ? put_timespec64+0xda/0x140 [ 1303.767775][T16868] __x64_sys_clone+0x18d/0x250 [ 1303.772526][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1303.777406][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1303.782672][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1303.787683][T16868] do_syscall_64+0xfa/0x760 [ 1303.792171][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1303.798040][T16868] RIP: 0033:0x4587ea [ 1303.801915][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1303.821512][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1303.829925][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1303.837878][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1303.845842][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1303.853793][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1303.861747][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1303.876907][T16868] memory: usage 10124kB, limit 0kB, failcnt 108 [ 1303.883281][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1303.890111][T16868] Memory cgroup stats for /syz4: [ 1303.890187][T16868] anon 7331840 [ 1303.890187][T16868] file 102400 [ 1303.890187][T16868] kernel_stack 262144 [ 1303.890187][T16868] slab 2060288 [ 1303.890187][T16868] sock 57344 [ 1303.890187][T16868] shmem 0 [ 1303.890187][T16868] file_mapped 0 [ 1303.890187][T16868] file_dirty 135168 [ 1303.890187][T16868] file_writeback 0 [ 1303.890187][T16868] anon_thp 6291456 [ 1303.890187][T16868] inactive_anon 0 [ 1303.890187][T16868] active_anon 7335936 [ 1303.890187][T16868] inactive_file 0 [ 1303.890187][T16868] active_file 135168 [ 1303.890187][T16868] unevictable 0 [ 1303.890187][T16868] slab_reclaimable 811008 [ 1303.890187][T16868] slab_unreclaimable 1249280 [ 1303.890187][T16868] pgfault 102300 [ 1303.890187][T16868] pgmajfault 0 [ 1303.890187][T16868] workingset_refault 0 [ 1303.890187][T16868] workingset_activate 0 [ 1303.890187][T16868] workingset_nodereclaim 0 [ 1303.890187][T16868] pgrefill 33 [ 1303.890187][T16868] pgscan 277 [ 1303.890187][T16868] pgsteal 256 [ 1303.890187][T16868] pgactivate 0 [ 1303.989109][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20177,uid=0 [ 1304.005422][T16868] Memory cgroup out of memory: Killed process 20177 (syz-executor.4) total-vm:72716kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1304.023703][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1304.038969][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1304.039419][ T1071] oom_reaper: reaped process 20177 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1304.046910][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.046917][T16799] Call Trace: [ 1304.046940][T16799] dump_stack+0x197/0x210 [ 1304.046961][T16799] dump_header+0x10b/0x82d [ 1304.046971][T16799] ? oom_kill_process+0x94/0x3f0 [ 1304.046988][T16799] oom_kill_process.cold+0x10/0x15 [ 1304.047004][T16799] out_of_memory+0x334/0x1340 [ 1304.047020][T16799] ? lock_downgrade+0x920/0x920 [ 1304.047042][T16799] ? oom_killer_disable+0x280/0x280 [ 1304.047072][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1304.047088][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1304.047107][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1304.047127][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1304.125477][T16799] try_charge+0xf8c/0x1470 [ 1304.129913][T16799] ? find_held_lock+0x35/0x130 [ 1304.134684][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1304.140359][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1304.145918][T16799] ? find_held_lock+0x35/0x130 [ 1304.150682][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1304.156231][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1304.161775][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1304.166971][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1304.172528][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1304.178226][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1304.183601][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1304.189204][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1304.194910][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1304.200101][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1304.205385][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1304.210403][T16799] ? __kasan_check_read+0x11/0x20 [ 1304.215420][T16799] copy_process+0x3f8/0x6860 [ 1304.219995][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1304.224838][T16799] ? __kasan_check_read+0x11/0x20 [ 1304.229864][T16799] ? __cleanup_sighand+0x60/0x60 [ 1304.234782][T16799] ? find_held_lock+0x35/0x130 [ 1304.239536][T16799] _do_fork+0x146/0xfa0 [ 1304.243692][T16799] ? copy_init_mm+0x20/0x20 [ 1304.248983][T16799] ? __kasan_check_read+0x11/0x20 [ 1304.254003][T16799] ? _copy_to_user+0x118/0x160 [ 1304.258776][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.265010][T16799] ? put_timespec64+0xda/0x140 [ 1304.269773][T16799] __x64_sys_clone+0x18d/0x250 [ 1304.274542][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1304.279379][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1304.284674][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1304.289694][T16799] do_syscall_64+0xfa/0x760 [ 1304.294186][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1304.300063][T16799] RIP: 0033:0x4587ea [ 1304.303951][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1304.323565][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1304.331995][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1304.339970][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1304.347928][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1304.355888][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1304.363852][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1304.373176][T16799] memory: usage 15792kB, limit 0kB, failcnt 212 [ 1304.379436][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1304.386376][T16799] Memory cgroup stats for /syz3: [ 1304.386471][T16799] anon 13557760 [ 1304.386471][T16799] file 155648 [ 1304.386471][T16799] kernel_stack 262144 [ 1304.386471][T16799] slab 1945600 [ 1304.386471][T16799] sock 0 [ 1304.386471][T16799] shmem 0 [ 1304.386471][T16799] file_mapped 0 [ 1304.386471][T16799] file_dirty 0 [ 1304.386471][T16799] file_writeback 0 [ 1304.386471][T16799] anon_thp 12582912 [ 1304.386471][T16799] inactive_anon 0 [ 1304.386471][T16799] active_anon 13557760 [ 1304.386471][T16799] inactive_file 135168 [ 1304.386471][T16799] active_file 65536 [ 1304.386471][T16799] unevictable 135168 [ 1304.386471][T16799] slab_reclaimable 675840 [ 1304.386471][T16799] slab_unreclaimable 1269760 [ 1304.386471][T16799] pgfault 113553 [ 1304.386471][T16799] pgmajfault 0 [ 1304.386471][T16799] workingset_refault 33 [ 1304.386471][T16799] workingset_activate 0 [ 1304.386471][T16799] workingset_nodereclaim 0 [ 1304.386471][T16799] pgrefill 1216 [ 1304.386471][T16799] pgscan 1228 [ 1304.386471][T16799] pgsteal 70 [ 1304.480304][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22014,uid=0 [ 1304.497732][T16799] Memory cgroup out of memory: Killed process 22014 (syz-executor.3) total-vm:72848kB, anon-rss:2228kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1304.516606][ T1071] oom_reaper: reaped process 22014 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 1304.517553][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1304.549791][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1304.557752][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.567800][T16865] Call Trace: [ 1304.571079][T16865] dump_stack+0x197/0x210 [ 1304.575401][T16865] dump_header+0x10b/0x82d [ 1304.579816][T16865] ? oom_kill_process+0x94/0x3f0 [ 1304.584740][T16865] oom_kill_process.cold+0x10/0x15 [ 1304.589839][T16865] out_of_memory+0x334/0x1340 [ 1304.594520][T16865] ? lock_downgrade+0x920/0x920 [ 1304.599354][T16865] ? oom_killer_disable+0x280/0x280 [ 1304.604564][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1304.610095][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1304.615078][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1304.620181][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1304.625035][T16865] try_charge+0xf8c/0x1470 [ 1304.629439][T16865] ? find_held_lock+0x35/0x130 [ 1304.634210][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1304.639738][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1304.645271][T16865] ? find_held_lock+0x35/0x130 [ 1304.650020][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1304.655559][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1304.661176][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1304.666358][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1304.671897][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1304.676991][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1304.682362][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1304.687917][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1304.693630][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1304.698818][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1304.704089][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1304.709115][T16865] ? __kasan_check_read+0x11/0x20 [ 1304.714153][T16865] copy_process+0x3f8/0x6860 [ 1304.718865][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1304.723718][T16865] ? __kasan_check_read+0x11/0x20 [ 1304.728740][T16865] ? __cleanup_sighand+0x60/0x60 [ 1304.733804][T16865] ? find_held_lock+0x35/0x130 [ 1304.738742][T16865] _do_fork+0x146/0xfa0 [ 1304.742908][T16865] ? copy_init_mm+0x20/0x20 [ 1304.747405][T16865] ? __kasan_check_read+0x11/0x20 [ 1304.752427][T16865] ? _copy_to_user+0x118/0x160 [ 1304.757186][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1304.763433][T16865] ? put_timespec64+0xda/0x140 [ 1304.768196][T16865] __x64_sys_clone+0x18d/0x250 [ 1304.772949][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1304.777793][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1304.783064][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1304.788075][T16865] do_syscall_64+0xfa/0x760 [ 1304.792569][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1304.798443][T16865] RIP: 0033:0x4587ea [ 1304.802424][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1304.822015][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1304.830410][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1304.838379][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1304.846336][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1304.854294][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1304.862251][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1304.871837][T16865] memory: usage 40920kB, limit 0kB, failcnt 187 [ 1304.878107][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1304.885126][T16865] Memory cgroup stats for /syz0: [ 1304.885224][T16865] anon 35581952 [ 1304.885224][T16865] file 24576 [ 1304.885224][T16865] kernel_stack 524288 [ 1304.885224][T16865] slab 3760128 [ 1304.885224][T16865] sock 0 [ 1304.885224][T16865] shmem 0 [ 1304.885224][T16865] file_mapped 135168 [ 1304.885224][T16865] file_dirty 0 [ 1304.885224][T16865] file_writeback 0 [ 1304.885224][T16865] anon_thp 33554432 [ 1304.885224][T16865] inactive_anon 0 [ 1304.885224][T16865] active_anon 35581952 [ 1304.885224][T16865] inactive_file 131072 [ 1304.885224][T16865] active_file 0 [ 1304.885224][T16865] unevictable 0 [ 1304.885224][T16865] slab_reclaimable 1622016 [ 1304.885224][T16865] slab_unreclaimable 2138112 [ 1304.885224][T16865] pgfault 94611 [ 1304.885224][T16865] pgmajfault 0 [ 1304.885224][T16865] workingset_refault 0 [ 1304.885224][T16865] workingset_activate 0 [ 1304.885224][T16865] workingset_nodereclaim 0 [ 1304.885224][T16865] pgrefill 175 [ 1304.885224][T16865] pgscan 171 [ 1304.885224][T16865] pgsteal 34 [ 1304.885224][T16865] pgactivate 6105 [ 1304.982169][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24324,uid=0 [ 1304.997758][T16865] Memory cgroup out of memory: Killed process 24324 (syz-executor.0) total-vm:72584kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1305.015871][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1305.017173][ T1071] oom_reaper: reaped process 24324 (syz-executor.0), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1305.030937][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1305.046719][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.056789][T16868] Call Trace: [ 1305.060094][T16868] dump_stack+0x197/0x210 [ 1305.064440][T16868] dump_header+0x10b/0x82d [ 1305.068854][T16868] ? oom_kill_process+0x94/0x3f0 [ 1305.073815][T16868] oom_kill_process.cold+0x10/0x15 [ 1305.078942][T16868] out_of_memory+0x334/0x1340 [ 1305.083634][T16868] ? lock_downgrade+0x920/0x920 [ 1305.088493][T16868] ? oom_killer_disable+0x280/0x280 [ 1305.093721][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1305.099264][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1305.104191][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1305.109386][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1305.114237][T16868] try_charge+0xf8c/0x1470 [ 1305.118644][T16868] ? find_held_lock+0x35/0x130 [ 1305.123413][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1305.128994][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1305.134539][T16868] ? find_held_lock+0x35/0x130 [ 1305.139325][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1305.144882][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1305.150429][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1305.155746][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1305.161308][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1305.166419][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1305.171791][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1305.177352][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1305.183151][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1305.188349][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1305.193633][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1305.198670][T16868] ? __kasan_check_read+0x11/0x20 [ 1305.203697][T16868] copy_process+0x3f8/0x6860 [ 1305.208303][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1305.213157][T16868] ? __kasan_check_read+0x11/0x20 [ 1305.218188][T16868] ? __cleanup_sighand+0x60/0x60 [ 1305.223120][T16868] ? find_held_lock+0x35/0x130 [ 1305.227884][T16868] _do_fork+0x146/0xfa0 [ 1305.232042][T16868] ? copy_init_mm+0x20/0x20 [ 1305.236544][T16868] ? __kasan_check_read+0x11/0x20 [ 1305.241562][T16868] ? _copy_to_user+0x118/0x160 [ 1305.246333][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.252573][T16868] ? put_timespec64+0xda/0x140 [ 1305.257339][T16868] __x64_sys_clone+0x18d/0x250 [ 1305.262122][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1305.266973][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1305.272260][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1305.277301][T16868] do_syscall_64+0xfa/0x760 [ 1305.281807][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.287690][T16868] RIP: 0033:0x4587ea [ 1305.291575][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1305.311189][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1305.319609][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1305.327582][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1305.335561][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1305.343531][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1305.351509][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1305.361058][T16868] memory: usage 7784kB, limit 0kB, failcnt 114 [ 1305.367344][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1305.374329][T16868] Memory cgroup stats for /syz4: [ 1305.374420][T16868] anon 5103616 [ 1305.374420][T16868] file 102400 [ 1305.374420][T16868] kernel_stack 262144 [ 1305.374420][T16868] slab 2060288 [ 1305.374420][T16868] sock 57344 [ 1305.374420][T16868] shmem 0 [ 1305.374420][T16868] file_mapped 0 [ 1305.374420][T16868] file_dirty 135168 [ 1305.374420][T16868] file_writeback 0 [ 1305.374420][T16868] anon_thp 4194304 [ 1305.374420][T16868] inactive_anon 0 [ 1305.374420][T16868] active_anon 5107712 [ 1305.374420][T16868] inactive_file 0 [ 1305.374420][T16868] active_file 135168 [ 1305.374420][T16868] unevictable 0 [ 1305.374420][T16868] slab_reclaimable 811008 [ 1305.374420][T16868] slab_unreclaimable 1249280 [ 1305.374420][T16868] pgfault 102300 [ 1305.374420][T16868] pgmajfault 0 [ 1305.374420][T16868] workingset_refault 0 [ 1305.374420][T16868] workingset_activate 0 [ 1305.374420][T16868] workingset_nodereclaim 0 [ 1305.374420][T16868] pgrefill 33 [ 1305.374420][T16868] pgscan 277 [ 1305.374420][T16868] pgsteal 256 [ 1305.374420][T16868] pgactivate 0 [ 1305.472656][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20206,uid=0 [ 1305.488295][T16868] Memory cgroup out of memory: Killed process 20206 (syz-executor.4) total-vm:72584kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1305.506441][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1305.507595][ T1071] oom_reaper: reaped process 20206 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1305.522117][T16799] CPU: 1 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1305.537262][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.547329][T16799] Call Trace: [ 1305.550641][T16799] dump_stack+0x197/0x210 [ 1305.554994][T16799] dump_header+0x10b/0x82d [ 1305.559571][T16799] ? oom_kill_process+0x94/0x3f0 [ 1305.564515][T16799] oom_kill_process.cold+0x10/0x15 [ 1305.569613][T16799] out_of_memory+0x334/0x1340 [ 1305.574327][T16799] ? lock_downgrade+0x920/0x920 [ 1305.579267][T16799] ? oom_killer_disable+0x280/0x280 [ 1305.584487][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1305.590245][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1305.595195][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1305.600445][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1305.605322][T16799] try_charge+0xf8c/0x1470 [ 1305.609733][T16799] ? find_held_lock+0x35/0x130 [ 1305.614514][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1305.620071][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1305.625610][T16799] ? find_held_lock+0x35/0x130 [ 1305.630375][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1305.635944][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1305.641506][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1305.646705][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1305.652260][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1305.657386][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1305.662755][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1305.668304][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1305.675588][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1305.681763][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1305.687053][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1305.692086][T16799] ? __kasan_check_read+0x11/0x20 [ 1305.697122][T16799] copy_process+0x3f8/0x6860 [ 1305.701723][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1305.706577][T16799] ? __kasan_check_read+0x11/0x20 [ 1305.711610][T16799] ? __cleanup_sighand+0x60/0x60 [ 1305.716548][T16799] ? find_held_lock+0x35/0x130 [ 1305.721334][T16799] _do_fork+0x146/0xfa0 [ 1305.725503][T16799] ? copy_init_mm+0x20/0x20 [ 1305.730063][T16799] ? __kasan_check_read+0x11/0x20 [ 1305.735091][T16799] ? _copy_to_user+0x118/0x160 [ 1305.739861][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1305.746092][T16799] ? put_timespec64+0xda/0x140 [ 1305.750845][T16799] __x64_sys_clone+0x18d/0x250 [ 1305.755626][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1305.760527][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1305.765805][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1305.770958][T16799] do_syscall_64+0xfa/0x760 [ 1305.775481][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1305.781383][T16799] RIP: 0033:0x4587ea [ 1305.785389][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1305.804983][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1305.813387][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1305.821360][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1305.829432][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1305.837415][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1305.845395][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1305.854755][T16799] memory: usage 13408kB, limit 0kB, failcnt 218 [ 1305.861021][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1305.867956][T16799] Memory cgroup stats for /syz3: [ 1305.868048][T16799] anon 11341824 [ 1305.868048][T16799] file 155648 [ 1305.868048][T16799] kernel_stack 196608 [ 1305.868048][T16799] slab 1945600 [ 1305.868048][T16799] sock 0 [ 1305.868048][T16799] shmem 0 [ 1305.868048][T16799] file_mapped 0 [ 1305.868048][T16799] file_dirty 0 [ 1305.868048][T16799] file_writeback 0 [ 1305.868048][T16799] anon_thp 10485760 [ 1305.868048][T16799] inactive_anon 0 [ 1305.868048][T16799] active_anon 11341824 [ 1305.868048][T16799] inactive_file 135168 [ 1305.868048][T16799] active_file 65536 [ 1305.868048][T16799] unevictable 135168 [ 1305.868048][T16799] slab_reclaimable 675840 [ 1305.868048][T16799] slab_unreclaimable 1269760 [ 1305.868048][T16799] pgfault 113553 [ 1305.868048][T16799] pgmajfault 0 [ 1305.868048][T16799] workingset_refault 33 [ 1305.868048][T16799] workingset_activate 0 [ 1305.868048][T16799] workingset_nodereclaim 0 [ 1305.868048][T16799] pgrefill 1216 [ 1305.868048][T16799] pgscan 1228 [ 1305.868048][T16799] pgsteal 70 [ 1305.961754][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22122,uid=0 [ 1305.978175][T16799] Memory cgroup out of memory: Killed process 22122 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1305.996799][ T1071] oom_reaper: reaped process 22122 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1305.997619][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1306.031353][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1306.039277][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.049333][T16865] Call Trace: [ 1306.052612][T16865] dump_stack+0x197/0x210 [ 1306.056928][T16865] dump_header+0x10b/0x82d [ 1306.061334][T16865] ? oom_kill_process+0x94/0x3f0 [ 1306.066354][T16865] oom_kill_process.cold+0x10/0x15 [ 1306.071462][T16865] out_of_memory+0x334/0x1340 [ 1306.076121][T16865] ? lock_downgrade+0x920/0x920 [ 1306.080973][T16865] ? oom_killer_disable+0x280/0x280 [ 1306.086177][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1306.091720][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1306.096660][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1306.101758][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1306.106606][T16865] try_charge+0xf8c/0x1470 [ 1306.111024][T16865] ? find_held_lock+0x35/0x130 [ 1306.115797][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1306.121335][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1306.126879][T16865] ? find_held_lock+0x35/0x130 [ 1306.131630][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1306.137168][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1306.142706][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1306.147891][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1306.153422][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1306.158518][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1306.163887][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1306.169533][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1306.175363][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1306.180557][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1306.185896][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1306.190909][T16865] ? __kasan_check_read+0x11/0x20 [ 1306.195930][T16865] copy_process+0x3f8/0x6860 [ 1306.200501][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1306.205348][T16865] ? __kasan_check_read+0x11/0x20 [ 1306.210361][T16865] ? __cleanup_sighand+0x60/0x60 [ 1306.215283][T16865] ? find_held_lock+0x35/0x130 [ 1306.220039][T16865] _do_fork+0x146/0xfa0 [ 1306.224205][T16865] ? copy_init_mm+0x20/0x20 [ 1306.228704][T16865] ? __kasan_check_read+0x11/0x20 [ 1306.233711][T16865] ? _copy_to_user+0x118/0x160 [ 1306.238458][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.244681][T16865] ? put_timespec64+0xda/0x140 [ 1306.249432][T16865] __x64_sys_clone+0x18d/0x250 [ 1306.254179][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1306.259016][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1306.264292][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1306.269370][T16865] do_syscall_64+0xfa/0x760 [ 1306.273882][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.279774][T16865] RIP: 0033:0x4587ea [ 1306.283658][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1306.303275][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1306.311712][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1306.319664][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1306.327619][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1306.335572][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1306.343522][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1306.352778][T16865] memory: usage 38600kB, limit 0kB, failcnt 193 [ 1306.359037][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1306.365966][T16865] Memory cgroup stats for /syz0: [ 1306.366060][T16865] anon 33394688 [ 1306.366060][T16865] file 24576 [ 1306.366060][T16865] kernel_stack 524288 [ 1306.366060][T16865] slab 3760128 [ 1306.366060][T16865] sock 0 [ 1306.366060][T16865] shmem 0 [ 1306.366060][T16865] file_mapped 135168 [ 1306.366060][T16865] file_dirty 0 [ 1306.366060][T16865] file_writeback 0 [ 1306.366060][T16865] anon_thp 31457280 [ 1306.366060][T16865] inactive_anon 0 [ 1306.366060][T16865] active_anon 33394688 [ 1306.366060][T16865] inactive_file 131072 [ 1306.366060][T16865] active_file 0 [ 1306.366060][T16865] unevictable 0 [ 1306.366060][T16865] slab_reclaimable 1622016 [ 1306.366060][T16865] slab_unreclaimable 2138112 [ 1306.366060][T16865] pgfault 94611 [ 1306.366060][T16865] pgmajfault 0 [ 1306.366060][T16865] workingset_refault 0 [ 1306.366060][T16865] workingset_activate 0 [ 1306.366060][T16865] workingset_nodereclaim 0 [ 1306.366060][T16865] pgrefill 175 [ 1306.366060][T16865] pgscan 171 [ 1306.366060][T16865] pgsteal 34 [ 1306.366060][T16865] pgactivate 6105 [ 1306.463623][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21944,uid=0 [ 1306.479203][T16865] Memory cgroup out of memory: Killed process 21944 (syz-executor.0) total-vm:72716kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1306.497353][T16868] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1306.498676][ T1071] oom_reaper: reaped process 21944 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1306.511795][T16868] CPU: 1 PID: 16868 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1306.528291][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1306.538344][T16868] Call Trace: [ 1306.538368][T16868] dump_stack+0x197/0x210 [ 1306.538388][T16868] dump_header+0x10b/0x82d [ 1306.538401][T16868] ? oom_kill_process+0x94/0x3f0 [ 1306.538419][T16868] oom_kill_process.cold+0x10/0x15 [ 1306.538436][T16868] out_of_memory+0x334/0x1340 [ 1306.538456][T16868] ? lock_downgrade+0x920/0x920 [ 1306.550455][T16868] ? oom_killer_disable+0x280/0x280 [ 1306.575173][T16868] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1306.580735][T16868] ? memcg_stat_show+0xc40/0xc40 [ 1306.585696][T16868] ? do_raw_spin_unlock+0x57/0x270 [ 1306.590809][T16868] ? _raw_spin_unlock+0x2d/0x50 [ 1306.595664][T16868] try_charge+0xf8c/0x1470 [ 1306.600078][T16868] ? find_held_lock+0x35/0x130 [ 1306.604866][T16868] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1306.610413][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1306.615946][T16868] ? find_held_lock+0x35/0x130 [ 1306.620692][T16868] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1306.626251][T16868] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1306.631792][T16868] ? memcg_kmem_put_cache+0x50/0x50 [ 1306.637021][T16868] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1306.642595][T16868] __memcg_kmem_charge+0x13a/0x3a0 [ 1306.647715][T16868] __alloc_pages_nodemask+0x4f5/0x900 [ 1306.653081][T16868] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1306.658607][T16868] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1306.664319][T16868] ? percpu_ref_put_many+0xb6/0x190 [ 1306.669514][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1306.674818][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1306.679821][T16868] ? __kasan_check_read+0x11/0x20 [ 1306.684847][T16868] copy_process+0x3f8/0x6860 [ 1306.689513][T16868] ? perf_trace_lock+0xeb/0x4c0 [ 1306.694471][T16868] ? __kasan_check_read+0x11/0x20 [ 1306.699496][T16868] ? __cleanup_sighand+0x60/0x60 [ 1306.704430][T16868] ? find_held_lock+0x35/0x130 [ 1306.709261][T16868] _do_fork+0x146/0xfa0 [ 1306.713421][T16868] ? copy_init_mm+0x20/0x20 [ 1306.717915][T16868] ? __kasan_check_read+0x11/0x20 [ 1306.722936][T16868] ? _copy_to_user+0x118/0x160 [ 1306.727707][T16868] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1306.733963][T16868] ? put_timespec64+0xda/0x140 [ 1306.738717][T16868] __x64_sys_clone+0x18d/0x250 [ 1306.743488][T16868] ? __ia32_sys_vfork+0xc0/0xc0 [ 1306.748358][T16868] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1306.753651][T16868] ? trace_hardirqs_on+0x67/0x240 [ 1306.758660][T16868] do_syscall_64+0xfa/0x760 [ 1306.763162][T16868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1306.769059][T16868] RIP: 0033:0x4587ea [ 1306.772935][T16868] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1306.792519][T16868] RSP: 002b:00007ffce2ad32f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1306.800926][T16868] RAX: ffffffffffffffda RBX: 00007ffce2ad32f0 RCX: 00000000004587ea [ 1306.808893][T16868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1306.816932][T16868] RBP: 00007ffce2ad3330 R08: 0000000000000001 R09: 000000000160a940 [ 1306.824893][T16868] R10: 000000000160ac10 R11: 0000000000000246 R12: 0000000000000001 [ 1306.832869][T16868] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce2ad3380 [ 1306.843190][T16868] memory: usage 5436kB, limit 0kB, failcnt 120 [ 1306.849369][T16868] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1306.856314][T16868] Memory cgroup stats for /syz4: [ 1306.856406][T16868] anon 2863104 [ 1306.856406][T16868] file 102400 [ 1306.856406][T16868] kernel_stack 196608 [ 1306.856406][T16868] slab 2060288 [ 1306.856406][T16868] sock 57344 [ 1306.856406][T16868] shmem 0 [ 1306.856406][T16868] file_mapped 0 [ 1306.856406][T16868] file_dirty 135168 [ 1306.856406][T16868] file_writeback 0 [ 1306.856406][T16868] anon_thp 2097152 [ 1306.856406][T16868] inactive_anon 0 [ 1306.856406][T16868] active_anon 2867200 [ 1306.856406][T16868] inactive_file 0 [ 1306.856406][T16868] active_file 135168 [ 1306.856406][T16868] unevictable 0 [ 1306.856406][T16868] slab_reclaimable 811008 [ 1306.856406][T16868] slab_unreclaimable 1249280 [ 1306.856406][T16868] pgfault 102300 [ 1306.856406][T16868] pgmajfault 0 [ 1306.856406][T16868] workingset_refault 0 [ 1306.856406][T16868] workingset_activate 0 [ 1306.856406][T16868] workingset_nodereclaim 0 [ 1306.856406][T16868] pgrefill 33 [ 1306.856406][T16868] pgscan 277 [ 1306.856406][T16868] pgsteal 256 [ 1306.856406][T16868] pgactivate 0 [ 1306.953263][T16868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=16868,uid=0 [ 1306.968805][T16868] Memory cgroup out of memory: Killed process 16868 (syz-executor.4) total-vm:72452kB, anon-rss:112kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 1306.987084][ T1071] oom_reaper: reaped process 16868 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1306.989257][T16799] Memory cgroup out of memory: Killed process 22074 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1307.034619][T16865] Memory cgroup out of memory: Killed process 20775 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1307.056494][ T1071] oom_reaper: reaped process 20775 (syz-executor.0), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB [ 1307.081441][T16799] oom_kill_process: 2 callbacks suppressed [ 1307.081459][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1307.102111][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1307.110023][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.120075][T16799] Call Trace: [ 1307.123378][T16799] dump_stack+0x197/0x210 [ 1307.127723][T16799] dump_header+0x10b/0x82d [ 1307.132670][T16799] ? oom_kill_process+0x94/0x3f0 [ 1307.137626][T16799] oom_kill_process.cold+0x10/0x15 [ 1307.142749][T16799] out_of_memory+0x334/0x1340 [ 1307.147426][T16799] ? lock_downgrade+0x920/0x920 [ 1307.152288][T16799] ? oom_killer_disable+0x280/0x280 [ 1307.157492][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1307.163022][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1307.167946][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1307.173039][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1307.177889][T16799] try_charge+0xf8c/0x1470 [ 1307.182286][T16799] ? find_held_lock+0x35/0x130 [ 1307.187036][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1307.192563][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1307.198091][T16799] ? find_held_lock+0x35/0x130 [ 1307.202842][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1307.208401][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1307.213927][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1307.219212][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1307.224743][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1307.229836][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1307.235208][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1307.240733][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1307.246431][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1307.251706][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1307.256991][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1307.262002][T16799] ? __kasan_check_read+0x11/0x20 [ 1307.267015][T16799] copy_process+0x3f8/0x6860 [ 1307.271600][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1307.276429][T16799] ? __kasan_check_read+0x11/0x20 [ 1307.281454][T16799] ? __cleanup_sighand+0x60/0x60 [ 1307.286381][T16799] ? find_held_lock+0x35/0x130 [ 1307.291133][T16799] _do_fork+0x146/0xfa0 [ 1307.295285][T16799] ? copy_init_mm+0x20/0x20 [ 1307.299781][T16799] ? __kasan_check_read+0x11/0x20 [ 1307.304783][T16799] ? _copy_to_user+0x118/0x160 [ 1307.309533][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.315752][T16799] ? put_timespec64+0xda/0x140 [ 1307.320502][T16799] __x64_sys_clone+0x18d/0x250 [ 1307.325610][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1307.330455][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1307.335729][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1307.340743][T16799] do_syscall_64+0xfa/0x760 [ 1307.345292][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.351190][T16799] RIP: 0033:0x4587ea [ 1307.355081][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1307.374690][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1307.383092][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1307.391045][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1307.398992][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1307.407116][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1307.415063][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1307.428409][T16799] memory: usage 8752kB, limit 0kB, failcnt 230 [ 1307.439445][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1307.446376][T16799] Memory cgroup stats for /syz3: [ 1307.446474][T16799] anon 6799360 [ 1307.446474][T16799] file 155648 [ 1307.446474][T16799] kernel_stack 131072 [ 1307.446474][T16799] slab 1945600 [ 1307.446474][T16799] sock 0 [ 1307.446474][T16799] shmem 0 [ 1307.446474][T16799] file_mapped 0 [ 1307.446474][T16799] file_dirty 0 [ 1307.446474][T16799] file_writeback 0 [ 1307.446474][T16799] anon_thp 6291456 [ 1307.446474][T16799] inactive_anon 0 [ 1307.446474][T16799] active_anon 6799360 [ 1307.446474][T16799] inactive_file 135168 [ 1307.446474][T16799] active_file 65536 [ 1307.446474][T16799] unevictable 135168 [ 1307.446474][T16799] slab_reclaimable 675840 [ 1307.446474][T16799] slab_unreclaimable 1269760 [ 1307.446474][T16799] pgfault 113553 [ 1307.446474][T16799] pgmajfault 0 [ 1307.446474][T16799] workingset_refault 33 [ 1307.446474][T16799] workingset_activate 0 [ 1307.446474][T16799] workingset_nodereclaim 0 [ 1307.446474][T16799] pgrefill 1216 [ 1307.446474][T16799] pgscan 1228 [ 1307.446474][T16799] pgsteal 70 [ 1307.542253][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=22034,uid=0 [ 1307.561660][T16799] Memory cgroup out of memory: Killed process 22034 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:35788kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1307.580357][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1307.581901][ T1071] oom_reaper: reaped process 22034 (syz-executor.3), now anon-rss:0kB, file-rss:34828kB, shmem-rss:0kB [ 1307.595051][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1307.611483][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.611489][T16865] Call Trace: [ 1307.611512][T16865] dump_stack+0x197/0x210 [ 1307.611533][T16865] dump_header+0x10b/0x82d [ 1307.611545][T16865] ? oom_kill_process+0x94/0x3f0 [ 1307.611562][T16865] oom_kill_process.cold+0x10/0x15 [ 1307.611578][T16865] out_of_memory+0x334/0x1340 [ 1307.611596][T16865] ? lock_downgrade+0x920/0x920 [ 1307.633643][T16865] ? oom_killer_disable+0x280/0x280 [ 1307.643669][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1307.643684][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1307.643705][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1307.643724][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1307.643741][T16865] try_charge+0xf8c/0x1470 [ 1307.643755][T16865] ? find_held_lock+0x35/0x130 [ 1307.643782][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1307.643795][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1307.643810][T16865] ? find_held_lock+0x35/0x130 [ 1307.643825][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1307.643855][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1307.643874][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1307.678916][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1307.688059][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1307.703868][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1307.714904][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1307.714921][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1307.714935][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1307.714955][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1307.714971][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1307.714983][T16865] ? __kasan_check_read+0x11/0x20 [ 1307.715006][T16865] copy_process+0x3f8/0x6860 [ 1307.715023][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1307.715035][T16865] ? __kasan_check_read+0x11/0x20 [ 1307.715067][T16865] ? __cleanup_sighand+0x60/0x60 [ 1307.730857][T16865] ? find_held_lock+0x35/0x130 [ 1307.743060][T16865] _do_fork+0x146/0xfa0 [ 1307.743081][T16865] ? copy_init_mm+0x20/0x20 [ 1307.743100][T16865] ? __kasan_check_read+0x11/0x20 [ 1307.743114][T16865] ? _copy_to_user+0x118/0x160 [ 1307.743136][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1307.743152][T16865] ? put_timespec64+0xda/0x140 [ 1307.743175][T16865] __x64_sys_clone+0x18d/0x250 [ 1307.743192][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1307.743220][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1307.759394][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1307.769416][T16865] do_syscall_64+0xfa/0x760 [ 1307.783839][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1307.783851][T16865] RIP: 0033:0x4587ea [ 1307.783865][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1307.783872][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1307.783884][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1307.783891][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1307.783899][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1307.783907][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1307.783914][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1307.801261][T16865] memory: usage 33960kB, limit 0kB, failcnt 205 [ 1307.807838][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1307.825698][T16865] Memory cgroup stats for /syz0: [ 1307.825802][T16865] anon 28975104 [ 1307.825802][T16865] file 24576 [ 1307.825802][T16865] kernel_stack 458752 [ 1307.825802][T16865] slab 3760128 [ 1307.825802][T16865] sock 0 [ 1307.825802][T16865] shmem 0 [ 1307.825802][T16865] file_mapped 135168 [ 1307.825802][T16865] file_dirty 0 [ 1307.825802][T16865] file_writeback 0 [ 1307.825802][T16865] anon_thp 27262976 [ 1307.825802][T16865] inactive_anon 0 [ 1307.825802][T16865] active_anon 28975104 [ 1307.825802][T16865] inactive_file 131072 [ 1307.825802][T16865] active_file 0 [ 1307.825802][T16865] unevictable 0 [ 1307.825802][T16865] slab_reclaimable 1622016 [ 1307.825802][T16865] slab_unreclaimable 2138112 [ 1307.825802][T16865] pgfault 94611 [ 1307.825802][T16865] pgmajfault 0 [ 1307.825802][T16865] workingset_refault 0 [ 1307.825802][T16865] workingset_activate 0 [ 1307.825802][T16865] workingset_nodereclaim 0 [ 1307.825802][T16865] pgrefill 175 [ 1307.825802][T16865] pgscan 171 [ 1307.825802][T16865] pgsteal 34 [ 1307.825802][T16865] pgactivate 6105 [ 1307.839462][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20762,uid=0 [ 1307.871346][T16865] Memory cgroup out of memory: Killed process 20762 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1308.091836][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1308.106277][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1308.114171][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.114184][T16799] Call Trace: [ 1308.127524][T16799] dump_stack+0x197/0x210 [ 1308.131864][T16799] dump_header+0x10b/0x82d [ 1308.136276][T16799] ? oom_kill_process+0x94/0x3f0 [ 1308.141209][T16799] oom_kill_process.cold+0x10/0x15 [ 1308.141227][T16799] out_of_memory+0x334/0x1340 [ 1308.150979][T16799] ? lock_downgrade+0x920/0x920 [ 1308.155828][T16799] ? oom_killer_disable+0x280/0x280 [ 1308.155856][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1308.166540][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1308.166560][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1308.166584][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1308.176588][T16799] try_charge+0xf8c/0x1470 [ 1308.185794][T16799] ? find_held_lock+0x35/0x130 [ 1308.190557][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1308.196091][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1308.196107][T16799] ? find_held_lock+0x35/0x130 [ 1308.196126][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1308.206404][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1308.217473][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1308.217493][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1308.228208][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1308.233323][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1308.233337][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1308.233355][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1308.244229][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1308.244249][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1308.244266][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1308.255138][T16799] ? __kasan_check_read+0x11/0x20 [ 1308.255160][T16799] copy_process+0x3f8/0x6860 [ 1308.255177][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1308.265443][T16799] ? __kasan_check_read+0x11/0x20 [ 1308.265478][T16799] ? __cleanup_sighand+0x60/0x60 [ 1308.275034][T16799] ? find_held_lock+0x35/0x130 [ 1308.275073][T16799] _do_fork+0x146/0xfa0 [ 1308.284977][T16799] ? copy_init_mm+0x20/0x20 [ 1308.284995][T16799] ? __kasan_check_read+0x11/0x20 [ 1308.285013][T16799] ? _copy_to_user+0x118/0x160 [ 1308.294769][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1308.294784][T16799] ? put_timespec64+0xda/0x140 [ 1308.294806][T16799] __x64_sys_clone+0x18d/0x250 [ 1308.303532][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1308.303555][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1308.303571][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1308.313327][T16799] do_syscall_64+0xfa/0x760 [ 1308.313349][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1308.313364][T16799] RIP: 0033:0x4587ea [ 1308.324320][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1308.324328][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1308.324340][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1308.324352][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1308.333937][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1308.333946][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1308.333954][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1308.335530][T16799] memory: usage 6392kB, limit 0kB, failcnt 236 [ 1308.344949][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1308.355207][T16799] Memory cgroup stats for /syz3: [ 1308.355303][T16799] anon 4558848 [ 1308.355303][T16799] file 155648 [ 1308.355303][T16799] kernel_stack 65536 [ 1308.355303][T16799] slab 1810432 [ 1308.355303][T16799] sock 0 [ 1308.355303][T16799] shmem 0 [ 1308.355303][T16799] file_mapped 0 [ 1308.355303][T16799] file_dirty 0 [ 1308.355303][T16799] file_writeback 0 [ 1308.355303][T16799] anon_thp 4194304 [ 1308.355303][T16799] inactive_anon 0 [ 1308.355303][T16799] active_anon 4558848 [ 1308.355303][T16799] inactive_file 135168 [ 1308.355303][T16799] active_file 65536 [ 1308.355303][T16799] unevictable 135168 [ 1308.355303][T16799] slab_reclaimable 540672 [ 1308.355303][T16799] slab_unreclaimable 1269760 [ 1308.355303][T16799] pgfault 113553 [ 1308.355303][T16799] pgmajfault 0 [ 1308.355303][T16799] workingset_refault 33 [ 1308.355303][T16799] workingset_activate 0 [ 1308.355303][T16799] workingset_nodereclaim 0 [ 1308.355303][T16799] pgrefill 1216 [ 1308.355303][T16799] pgscan 1228 [ 1308.355303][T16799] pgsteal 70 [ 1308.378768][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1687,uid=0 [ 1308.403345][T16799] Memory cgroup out of memory: Killed process 1687 (syz-executor.3) total-vm:72848kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 1308.435797][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1308.534484][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1308.578789][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.596701][T16865] Call Trace: [ 1308.596730][T16865] dump_stack+0x197/0x210 [ 1308.596752][T16865] dump_header+0x10b/0x82d [ 1308.604318][T16865] ? oom_kill_process+0x94/0x3f0 [ 1308.604338][T16865] oom_kill_process.cold+0x10/0x15 [ 1308.604355][T16865] out_of_memory+0x334/0x1340 [ 1308.613660][T16865] ? lock_downgrade+0x920/0x920 [ 1308.613680][T16865] ? oom_killer_disable+0x280/0x280 [ 1308.613708][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1308.623621][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1308.623641][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1308.623660][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1308.633664][T16865] try_charge+0xf8c/0x1470 [ 1308.633677][T16865] ? find_held_lock+0x35/0x130 [ 1308.633703][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1308.644156][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1308.644172][T16865] ? find_held_lock+0x35/0x130 [ 1308.644191][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1308.654115][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1308.654138][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1308.663262][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1308.663287][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1308.674338][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1308.674352][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1308.674370][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1308.684721][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1308.684742][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1308.684759][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1308.695446][T16865] ? __kasan_check_read+0x11/0x20 [ 1308.695469][T16865] copy_process+0x3f8/0x6860 [ 1308.695485][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1308.706089][T16865] ? __kasan_check_read+0x11/0x20 [ 1308.706116][T16865] ? __cleanup_sighand+0x60/0x60 [ 1308.706136][T16865] ? find_held_lock+0x35/0x130 [ 1308.717020][T16865] _do_fork+0x146/0xfa0 [ 1308.727876][T16865] ? copy_init_mm+0x20/0x20 [ 1308.738179][T16865] ? __kasan_check_read+0x11/0x20 [ 1308.747933][T16865] ? _copy_to_user+0x118/0x160 [ 1308.757782][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1308.767456][T16865] ? put_timespec64+0xda/0x140 [ 1308.776084][T16865] __x64_sys_clone+0x18d/0x250 [ 1308.785829][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1308.785858][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1308.796813][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1308.806390][T16865] do_syscall_64+0xfa/0x760 [ 1308.816669][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1308.827016][T16865] RIP: 0033:0x4587ea [ 1308.827030][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1308.827037][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1308.827051][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1308.827063][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1308.850516][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1308.850524][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1308.850533][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1308.853758][T16865] memory: usage 31648kB, limit 0kB, failcnt 211 [ 1308.875177][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1308.891154][T16865] Memory cgroup stats for /syz0: [ 1308.891318][T16865] anon 26771456 [ 1308.891318][T16865] file 24576 [ 1308.891318][T16865] kernel_stack 458752 [ 1308.891318][T16865] slab 3760128 [ 1308.891318][T16865] sock 0 [ 1308.891318][T16865] shmem 0 [ 1308.891318][T16865] file_mapped 135168 [ 1308.891318][T16865] file_dirty 0 [ 1308.891318][T16865] file_writeback 0 [ 1308.891318][T16865] anon_thp 25165824 [ 1308.891318][T16865] inactive_anon 0 [ 1308.891318][T16865] active_anon 26771456 [ 1308.891318][T16865] inactive_file 131072 [ 1308.891318][T16865] active_file 0 [ 1308.891318][T16865] unevictable 0 [ 1308.891318][T16865] slab_reclaimable 1622016 [ 1308.891318][T16865] slab_unreclaimable 2138112 [ 1308.891318][T16865] pgfault 94611 [ 1308.891318][T16865] pgmajfault 0 [ 1308.891318][T16865] workingset_refault 0 [ 1308.891318][T16865] workingset_activate 0 [ 1308.891318][T16865] workingset_nodereclaim 0 [ 1308.891318][T16865] pgrefill 175 [ 1308.891318][T16865] pgscan 171 [ 1308.891318][T16865] pgsteal 34 [ 1308.891318][T16865] pgactivate 6105 [ 1308.910138][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20287,uid=0 [ 1309.009275][T16865] Memory cgroup out of memory: Killed process 20287 (syz-executor.0) total-vm:72716kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1309.071572][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1309.085009][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1309.092900][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.103206][T16799] Call Trace: [ 1309.106500][T16799] dump_stack+0x197/0x210 [ 1309.110828][T16799] dump_header+0x10b/0x82d [ 1309.115324][T16799] ? oom_kill_process+0x94/0x3f0 [ 1309.120258][T16799] oom_kill_process.cold+0x10/0x15 [ 1309.125368][T16799] out_of_memory+0x334/0x1340 [ 1309.130039][T16799] ? lock_downgrade+0x920/0x920 [ 1309.134899][T16799] ? oom_killer_disable+0x280/0x280 [ 1309.140108][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1309.145684][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1309.150626][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1309.155759][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1309.160616][T16799] try_charge+0xf8c/0x1470 [ 1309.165027][T16799] ? find_held_lock+0x35/0x130 [ 1309.169801][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1309.175340][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1309.180879][T16799] ? find_held_lock+0x35/0x130 [ 1309.185638][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1309.191198][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1309.196745][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1309.201946][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1309.207496][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1309.212611][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1309.217980][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1309.223524][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1309.229240][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1309.234437][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1309.239716][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1309.244734][T16799] ? __kasan_check_read+0x11/0x20 [ 1309.249760][T16799] copy_process+0x3f8/0x6860 [ 1309.254349][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1309.259195][T16799] ? __kasan_check_read+0x11/0x20 [ 1309.264229][T16799] ? __cleanup_sighand+0x60/0x60 [ 1309.269162][T16799] ? find_held_lock+0x35/0x130 [ 1309.273938][T16799] _do_fork+0x146/0xfa0 [ 1309.278093][T16799] ? copy_init_mm+0x20/0x20 [ 1309.282594][T16799] ? __kasan_check_read+0x11/0x20 [ 1309.287972][T16799] ? _copy_to_user+0x118/0x160 [ 1309.292822][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.299195][T16799] ? put_timespec64+0xda/0x140 [ 1309.303948][T16799] __x64_sys_clone+0x18d/0x250 [ 1309.308747][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1309.313625][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1309.318897][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1309.323902][T16799] do_syscall_64+0xfa/0x760 [ 1309.328438][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.334306][T16799] RIP: 0033:0x4587ea [ 1309.338179][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1309.357937][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1309.366334][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1309.374280][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1309.382229][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1309.390176][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1309.398125][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1309.406809][T16799] memory: usage 3848kB, limit 0kB, failcnt 242 [ 1309.413129][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1309.420052][T16799] Memory cgroup stats for /syz3: [ 1309.420171][T16799] anon 2351104 [ 1309.420171][T16799] file 155648 [ 1309.420171][T16799] kernel_stack 65536 [ 1309.420171][T16799] slab 1540096 [ 1309.420171][T16799] sock 0 [ 1309.420171][T16799] shmem 0 [ 1309.420171][T16799] file_mapped 0 [ 1309.420171][T16799] file_dirty 0 [ 1309.420171][T16799] file_writeback 0 [ 1309.420171][T16799] anon_thp 2097152 [ 1309.420171][T16799] inactive_anon 0 [ 1309.420171][T16799] active_anon 2351104 [ 1309.420171][T16799] inactive_file 135168 [ 1309.420171][T16799] active_file 65536 [ 1309.420171][T16799] unevictable 135168 [ 1309.420171][T16799] slab_reclaimable 405504 [ 1309.420171][T16799] slab_unreclaimable 1134592 [ 1309.420171][T16799] pgfault 113553 [ 1309.420171][T16799] pgmajfault 0 [ 1309.420171][T16799] workingset_refault 33 [ 1309.420171][T16799] workingset_activate 0 [ 1309.420171][T16799] workingset_nodereclaim 0 [ 1309.420171][T16799] pgrefill 1216 [ 1309.420171][T16799] pgscan 1228 [ 1309.420171][T16799] pgsteal 70 [ 1309.425254][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1676,uid=0 [ 1309.533027][T16799] Memory cgroup out of memory: Killed process 1676 (syz-executor.3) total-vm:72716kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1309.552567][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1309.558996][ T1071] oom_reaper: reaped process 1676 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1309.566700][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1309.583288][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1309.593345][T16865] Call Trace: [ 1309.596636][T16865] dump_stack+0x197/0x210 [ 1309.600978][T16865] dump_header+0x10b/0x82d [ 1309.605503][T16865] ? oom_kill_process+0x94/0x3f0 [ 1309.610464][T16865] oom_kill_process.cold+0x10/0x15 [ 1309.615576][T16865] out_of_memory+0x334/0x1340 [ 1309.620395][T16865] ? lock_downgrade+0x920/0x920 [ 1309.625233][T16865] ? oom_killer_disable+0x280/0x280 [ 1309.630418][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1309.635952][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1309.641009][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1309.646132][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1309.651038][T16865] try_charge+0xf8c/0x1470 [ 1309.655448][T16865] ? find_held_lock+0x35/0x130 [ 1309.660209][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1309.665786][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1309.671323][T16865] ? find_held_lock+0x35/0x130 [ 1309.676086][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1309.681637][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1309.687179][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1309.692373][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1309.697912][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1309.703010][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1309.708373][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1309.713909][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1309.719629][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1309.724811][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1309.730080][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1309.735107][T16865] ? __kasan_check_read+0x11/0x20 [ 1309.740165][T16865] copy_process+0x3f8/0x6860 [ 1309.744742][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1309.749592][T16865] ? __kasan_check_read+0x11/0x20 [ 1309.754622][T16865] ? __cleanup_sighand+0x60/0x60 [ 1309.759609][T16865] ? find_held_lock+0x35/0x130 [ 1309.764361][T16865] _do_fork+0x146/0xfa0 [ 1309.768542][T16865] ? copy_init_mm+0x20/0x20 [ 1309.773038][T16865] ? __kasan_check_read+0x11/0x20 [ 1309.778051][T16865] ? _copy_to_user+0x118/0x160 [ 1309.782799][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1309.789018][T16865] ? put_timespec64+0xda/0x140 [ 1309.793779][T16865] __x64_sys_clone+0x18d/0x250 [ 1309.798532][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1309.803404][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1309.808665][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1309.813682][T16865] do_syscall_64+0xfa/0x760 [ 1309.818185][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1309.824052][T16865] RIP: 0033:0x4587ea [ 1309.827928][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1309.847703][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1309.856119][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1309.864089][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1309.872048][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1309.880010][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1309.887958][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1309.901126][T16865] memory: usage 29156kB, limit 0kB, failcnt 217 [ 1309.907795][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1309.914762][T16865] Memory cgroup stats for /syz0: [ 1309.914863][T16865] anon 24563712 [ 1309.914863][T16865] file 24576 [ 1309.914863][T16865] kernel_stack 393216 [ 1309.914863][T16865] slab 3760128 [ 1309.914863][T16865] sock 0 [ 1309.914863][T16865] shmem 0 [ 1309.914863][T16865] file_mapped 135168 [ 1309.914863][T16865] file_dirty 0 [ 1309.914863][T16865] file_writeback 0 [ 1309.914863][T16865] anon_thp 23068672 [ 1309.914863][T16865] inactive_anon 0 [ 1309.914863][T16865] active_anon 24563712 [ 1309.914863][T16865] inactive_file 131072 [ 1309.914863][T16865] active_file 0 [ 1309.914863][T16865] unevictable 0 [ 1309.914863][T16865] slab_reclaimable 1622016 [ 1309.914863][T16865] slab_unreclaimable 2138112 [ 1309.914863][T16865] pgfault 94611 [ 1309.914863][T16865] pgmajfault 0 [ 1309.914863][T16865] workingset_refault 0 [ 1309.914863][T16865] workingset_activate 0 [ 1309.914863][T16865] workingset_nodereclaim 0 [ 1309.914863][T16865] pgrefill 175 [ 1309.914863][T16865] pgscan 171 [ 1309.914863][T16865] pgsteal 34 [ 1309.914863][T16865] pgactivate 6105 [ 1310.012258][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=24304,uid=0 [ 1310.027819][T16865] Memory cgroup out of memory: Killed process 24304 (syz-executor.0) total-vm:72716kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1310.047163][ T1071] oom_reaper: reaped process 24304 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 1310.058410][T16799] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1310.077373][T16799] CPU: 0 PID: 16799 Comm: syz-executor.3 Not tainted 5.4.0-rc6+ #0 [ 1310.085379][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.095430][T16799] Call Trace: [ 1310.098708][T16799] dump_stack+0x197/0x210 [ 1310.103020][T16799] dump_header+0x10b/0x82d [ 1310.107409][T16799] ? oom_kill_process+0x94/0x3f0 [ 1310.112324][T16799] oom_kill_process.cold+0x10/0x15 [ 1310.117412][T16799] out_of_memory+0x334/0x1340 [ 1310.122082][T16799] ? lock_downgrade+0x920/0x920 [ 1310.126910][T16799] ? oom_killer_disable+0x280/0x280 [ 1310.132094][T16799] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1310.137616][T16799] ? memcg_stat_show+0xc40/0xc40 [ 1310.142537][T16799] ? do_raw_spin_unlock+0x57/0x270 [ 1310.147627][T16799] ? _raw_spin_unlock+0x2d/0x50 [ 1310.152473][T16799] try_charge+0xf8c/0x1470 [ 1310.156866][T16799] ? find_held_lock+0x35/0x130 [ 1310.161614][T16799] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1310.167137][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1310.172661][T16799] ? find_held_lock+0x35/0x130 [ 1310.177403][T16799] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1310.182935][T16799] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1310.188470][T16799] ? memcg_kmem_put_cache+0x50/0x50 [ 1310.193648][T16799] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1310.199185][T16799] __memcg_kmem_charge+0x13a/0x3a0 [ 1310.204279][T16799] __alloc_pages_nodemask+0x4f5/0x900 [ 1310.209641][T16799] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1310.215178][T16799] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1310.220887][T16799] ? percpu_ref_put_many+0xb6/0x190 [ 1310.226070][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1310.231332][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1310.236332][T16799] ? __kasan_check_read+0x11/0x20 [ 1310.241353][T16799] copy_process+0x3f8/0x6860 [ 1310.245921][T16799] ? perf_trace_lock+0xeb/0x4c0 [ 1310.250749][T16799] ? __kasan_check_read+0x11/0x20 [ 1310.255760][T16799] ? __cleanup_sighand+0x60/0x60 [ 1310.260693][T16799] ? find_held_lock+0x35/0x130 [ 1310.265444][T16799] _do_fork+0x146/0xfa0 [ 1310.269578][T16799] ? copy_init_mm+0x20/0x20 [ 1310.274072][T16799] ? __kasan_check_read+0x11/0x20 [ 1310.279080][T16799] ? _copy_to_user+0x118/0x160 [ 1310.283838][T16799] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1310.290063][T16799] ? put_timespec64+0xda/0x140 [ 1310.294812][T16799] __x64_sys_clone+0x18d/0x250 [ 1310.299554][T16799] ? __ia32_sys_vfork+0xc0/0xc0 [ 1310.304399][T16799] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1310.309771][T16799] ? trace_hardirqs_on+0x67/0x240 [ 1310.314777][T16799] do_syscall_64+0xfa/0x760 [ 1310.319262][T16799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.325143][T16799] RIP: 0033:0x4587ea [ 1310.329032][T16799] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1310.348628][T16799] RSP: 002b:00007ffcde0cb050 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1310.357015][T16799] RAX: ffffffffffffffda RBX: 00007ffcde0cb050 RCX: 00000000004587ea [ 1310.364977][T16799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1310.372943][T16799] RBP: 00007ffcde0cb090 R08: 0000000000000001 R09: 0000000001b77940 [ 1310.380892][T16799] R10: 0000000001b77c10 R11: 0000000000000246 R12: 0000000000000001 [ 1310.388840][T16799] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffcde0cb0e0 [ 1310.398668][T16799] memory: usage 1504kB, limit 0kB, failcnt 248 [ 1310.407376][T16799] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1310.415567][T16799] Memory cgroup stats for /syz3: [ 1310.415656][T16799] anon 106496 [ 1310.415656][T16799] file 155648 [ 1310.415656][T16799] kernel_stack 0 [ 1310.415656][T16799] slab 1540096 [ 1310.415656][T16799] sock 0 [ 1310.415656][T16799] shmem 0 [ 1310.415656][T16799] file_mapped 0 [ 1310.415656][T16799] file_dirty 0 [ 1310.415656][T16799] file_writeback 0 [ 1310.415656][T16799] anon_thp 0 [ 1310.415656][T16799] inactive_anon 0 [ 1310.415656][T16799] active_anon 106496 [ 1310.415656][T16799] inactive_file 135168 [ 1310.415656][T16799] active_file 65536 [ 1310.415656][T16799] unevictable 135168 [ 1310.415656][T16799] slab_reclaimable 405504 [ 1310.415656][T16799] slab_unreclaimable 1134592 [ 1310.415656][T16799] pgfault 113553 [ 1310.415656][T16799] pgmajfault 0 [ 1310.415656][T16799] workingset_refault 33 [ 1310.415656][T16799] workingset_activate 0 [ 1310.415656][T16799] workingset_nodereclaim 0 [ 1310.415656][T16799] pgrefill 1216 [ 1310.415656][T16799] pgscan 1228 [ 1310.415656][T16799] pgsteal 70 [ 1310.415656][T16799] pgactivate 1155 [ 1310.511570][T16799] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16799,uid=0 [ 1310.527209][T16799] Memory cgroup out of memory: Killed process 16799 (syz-executor.3) total-vm:72452kB, anon-rss:120kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 1310.546005][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1310.546112][ T1071] oom_reaper: reaped process 16799 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1310.558459][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1310.576988][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.577002][T16865] Call Trace: [ 1310.590349][T16865] dump_stack+0x197/0x210 [ 1310.594677][T16865] dump_header+0x10b/0x82d [ 1310.599078][T16865] ? oom_kill_process+0x94/0x3f0 [ 1310.604030][T16865] oom_kill_process.cold+0x10/0x15 [ 1310.609240][T16865] out_of_memory+0x334/0x1340 [ 1310.613932][T16865] ? lock_downgrade+0x920/0x920 [ 1310.618808][T16865] ? oom_killer_disable+0x280/0x280 [ 1310.624025][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 10:13:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) 10:13:37 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYPTR], 0x8) r2 = socket$kcm(0x29, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x103fffffd, 0xd) write$binfmt_misc(r2, &(0x7f0000000300)={'syz1'}, 0x4) 10:13:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) dup2(r1, r2) 10:13:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000001c0)='s', 0x1) 10:13:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1310.629585][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1310.634532][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1310.639648][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1310.644558][T16865] try_charge+0xf8c/0x1470 [ 1310.649011][T16865] ? find_held_lock+0x35/0x130 [ 1310.653792][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1310.659337][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1310.664886][T16865] ? find_held_lock+0x35/0x130 [ 1310.669687][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1310.675246][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1310.680802][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1310.686008][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1310.691562][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1310.696682][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1310.702062][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1310.707623][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1310.713351][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1310.718566][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1310.723864][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1310.728937][T16865] ? __kasan_check_read+0x11/0x20 [ 1310.733977][T16865] copy_process+0x3f8/0x6860 [ 1310.738580][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1310.743451][T16865] ? __kasan_check_read+0x11/0x20 [ 1310.748503][T16865] ? __cleanup_sighand+0x60/0x60 [ 1310.753496][T16865] ? find_held_lock+0x35/0x130 [ 1310.758322][T16865] _do_fork+0x146/0xfa0 [ 1310.762503][T16865] ? copy_init_mm+0x20/0x20 [ 1310.767046][T16865] ? __kasan_check_read+0x11/0x20 [ 1310.772081][T16865] ? _copy_to_user+0x118/0x160 [ 1310.776860][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1310.783114][T16865] ? put_timespec64+0xda/0x140 [ 1310.787898][T16865] __x64_sys_clone+0x18d/0x250 [ 1310.792671][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1310.797536][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1310.802830][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1310.807962][T16865] do_syscall_64+0xfa/0x760 [ 1310.812484][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1310.818368][T16865] RIP: 0033:0x4587ea [ 1310.822257][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1310.822264][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1310.822277][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1310.822285][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1310.822292][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1310.822300][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1310.822312][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1310.921034][T16865] memory: usage 26808kB, limit 0kB, failcnt 223 10:13:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000010c0)=0x19ff, 0x4) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='3', 0x1}], 0x1}}], 0x1, 0x0) 10:13:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) dup2(r1, r2) [ 1310.927472][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1310.934563][T16865] Memory cgroup stats for /syz0: [ 1310.934667][T16865] anon 22327296 [ 1310.934667][T16865] file 24576 [ 1310.934667][T16865] kernel_stack 327680 [ 1310.934667][T16865] slab 3760128 [ 1310.934667][T16865] sock 0 [ 1310.934667][T16865] shmem 0 [ 1310.934667][T16865] file_mapped 135168 [ 1310.934667][T16865] file_dirty 0 [ 1310.934667][T16865] file_writeback 0 [ 1310.934667][T16865] anon_thp 20971520 [ 1310.934667][T16865] inactive_anon 0 [ 1310.934667][T16865] active_anon 22327296 [ 1310.934667][T16865] inactive_file 131072 [ 1310.934667][T16865] active_file 0 [ 1310.934667][T16865] unevictable 0 [ 1310.934667][T16865] slab_reclaimable 1622016 [ 1310.934667][T16865] slab_unreclaimable 2138112 [ 1310.934667][T16865] pgfault 94611 [ 1310.934667][T16865] pgmajfault 0 [ 1310.934667][T16865] workingset_refault 0 [ 1310.934667][T16865] workingset_activate 0 [ 1310.934667][T16865] workingset_nodereclaim 0 [ 1310.934667][T16865] pgrefill 175 [ 1310.934667][T16865] pgscan 171 [ 1310.934667][T16865] pgsteal 34 [ 1310.934667][T16865] pgactivate 6105 [ 1311.131523][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20750,uid=0 10:13:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3}) 10:13:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}}, 0x84) [ 1311.229019][T16865] Memory cgroup out of memory: Killed process 20750 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1311.358456][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1311.401463][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1311.409403][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.419465][T16865] Call Trace: [ 1311.422769][T16865] dump_stack+0x197/0x210 [ 1311.427116][T16865] dump_header+0x10b/0x82d [ 1311.431544][T16865] ? oom_kill_process+0x94/0x3f0 [ 1311.436496][T16865] oom_kill_process.cold+0x10/0x15 [ 1311.441624][T16865] out_of_memory+0x334/0x1340 [ 1311.446309][T16865] ? lock_downgrade+0x920/0x920 [ 1311.451172][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1311.456984][T16865] ? oom_killer_disable+0x280/0x280 [ 1311.462202][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1311.467759][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1311.472712][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1311.477833][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1311.482696][T16865] try_charge+0xf8c/0x1470 [ 1311.487147][T16865] ? find_held_lock+0x35/0x130 [ 1311.491932][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1311.497479][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1311.503033][T16865] ? find_held_lock+0x35/0x130 [ 1311.507804][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1311.513368][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1311.518919][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1311.524123][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1311.529674][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1311.534794][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1311.540258][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1311.545838][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1311.551561][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1311.551586][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1311.551601][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1311.551612][T16865] ? __kasan_check_read+0x11/0x20 [ 1311.551634][T16865] copy_process+0x3f8/0x6860 [ 1311.551650][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1311.551665][T16865] ? __kasan_check_read+0x11/0x20 [ 1311.581564][T16865] ? __cleanup_sighand+0x60/0x60 [ 1311.581578][T16865] ? find_held_lock+0x35/0x130 [ 1311.581609][T16865] _do_fork+0x146/0xfa0 [ 1311.581628][T16865] ? copy_init_mm+0x20/0x20 [ 1311.604945][T16865] ? __kasan_check_read+0x11/0x20 [ 1311.610074][T16865] ? _copy_to_user+0x118/0x160 [ 1311.614853][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1311.621097][T16865] ? put_timespec64+0xda/0x140 [ 1311.625854][T16865] __x64_sys_clone+0x18d/0x250 [ 1311.630605][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1311.635449][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1311.640721][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1311.645735][T16865] do_syscall_64+0xfa/0x760 [ 1311.650227][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1311.656125][T16865] RIP: 0033:0x4587ea [ 1311.660026][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1311.679619][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1311.688028][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1311.695991][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1311.703943][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1311.711898][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1311.719851][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 10:13:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x49bf}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2}}], 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x167, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x3ed, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 1311.914328][T16865] memory: usage 24460kB, limit 0kB, failcnt 229 [ 1311.920654][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1311.945249][T16865] Memory cgroup stats for /syz0: [ 1311.945347][T16865] anon 20140032 [ 1311.945347][T16865] file 24576 [ 1311.945347][T16865] kernel_stack 327680 [ 1311.945347][T16865] slab 3760128 [ 1311.945347][T16865] sock 0 [ 1311.945347][T16865] shmem 0 [ 1311.945347][T16865] file_mapped 135168 [ 1311.945347][T16865] file_dirty 0 [ 1311.945347][T16865] file_writeback 0 [ 1311.945347][T16865] anon_thp 18874368 [ 1311.945347][T16865] inactive_anon 0 [ 1311.945347][T16865] active_anon 20140032 [ 1311.945347][T16865] inactive_file 131072 [ 1311.945347][T16865] active_file 0 [ 1311.945347][T16865] unevictable 0 [ 1311.945347][T16865] slab_reclaimable 1622016 [ 1311.945347][T16865] slab_unreclaimable 2138112 [ 1311.945347][T16865] pgfault 94611 [ 1311.945347][T16865] pgmajfault 0 [ 1311.945347][T16865] workingset_refault 0 [ 1311.945347][T16865] workingset_activate 0 [ 1311.945347][T16865] workingset_nodereclaim 0 [ 1311.945347][T16865] pgrefill 175 [ 1311.945347][T16865] pgscan 171 [ 1311.945347][T16865] pgsteal 34 [ 1311.945347][T16865] pgactivate 6105 [ 1312.064919][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20792,uid=0 [ 1312.081009][T16865] Memory cgroup out of memory: Killed process 20792 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:131072kB oom_score_adj:1000 [ 1312.212911][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1312.249790][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1312.257761][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.267829][T16865] Call Trace: [ 1312.271128][T16865] dump_stack+0x197/0x210 [ 1312.275468][T16865] dump_header+0x10b/0x82d [ 1312.279889][T16865] ? oom_kill_process+0x94/0x3f0 [ 1312.284833][T16865] oom_kill_process.cold+0x10/0x15 [ 1312.289940][T16865] out_of_memory+0x334/0x1340 [ 1312.289955][T16865] ? lock_downgrade+0x920/0x920 [ 1312.289977][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1312.299468][T16865] ? oom_killer_disable+0x280/0x280 [ 1312.310433][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1312.316001][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1312.320949][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1312.326069][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1312.330932][T16865] try_charge+0xf8c/0x1470 [ 1312.335360][T16865] ? find_held_lock+0x35/0x130 [ 1312.340143][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1312.345694][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1312.351247][T16865] ? find_held_lock+0x35/0x130 [ 1312.356020][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1312.361589][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1312.368075][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1312.373259][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1312.378800][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1312.383893][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1312.389247][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1312.395293][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1312.400995][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1312.406173][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1312.411435][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1312.416464][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.421471][T16865] copy_process+0x3f8/0x6860 [ 1312.426038][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1312.430863][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.435873][T16865] ? __cleanup_sighand+0x60/0x60 [ 1312.440784][T16865] ? find_held_lock+0x35/0x130 [ 1312.445536][T16865] _do_fork+0x146/0xfa0 [ 1312.449671][T16865] ? copy_init_mm+0x20/0x20 [ 1312.454152][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.459186][T16865] ? _copy_to_user+0x118/0x160 [ 1312.463931][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1312.470192][T16865] ? put_timespec64+0xda/0x140 [ 1312.474964][T16865] __x64_sys_clone+0x18d/0x250 [ 1312.479705][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1312.484552][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1312.489825][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1312.494841][T16865] do_syscall_64+0xfa/0x760 [ 1312.499336][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1312.505221][T16865] RIP: 0033:0x4587ea [ 1312.509213][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1312.528793][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1312.537179][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1312.545128][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1312.553077][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1312.561024][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1312.568970][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1312.577564][T16865] memory: usage 22136kB, limit 0kB, failcnt 235 [ 1312.584249][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1312.591088][T16865] Memory cgroup stats for /syz0: [ 1312.591171][T16865] anon 17932288 [ 1312.591171][T16865] file 24576 [ 1312.591171][T16865] kernel_stack 262144 [ 1312.591171][T16865] slab 3760128 [ 1312.591171][T16865] sock 0 [ 1312.591171][T16865] shmem 0 [ 1312.591171][T16865] file_mapped 135168 [ 1312.591171][T16865] file_dirty 0 [ 1312.591171][T16865] file_writeback 0 [ 1312.591171][T16865] anon_thp 16777216 [ 1312.591171][T16865] inactive_anon 0 [ 1312.591171][T16865] active_anon 17932288 [ 1312.591171][T16865] inactive_file 131072 [ 1312.591171][T16865] active_file 0 [ 1312.591171][T16865] unevictable 0 [ 1312.591171][T16865] slab_reclaimable 1622016 [ 1312.591171][T16865] slab_unreclaimable 2138112 [ 1312.591171][T16865] pgfault 94611 [ 1312.591171][T16865] pgmajfault 0 [ 1312.591171][T16865] workingset_refault 0 [ 1312.591171][T16865] workingset_activate 0 [ 1312.591171][T16865] workingset_nodereclaim 0 [ 1312.591171][T16865] pgrefill 175 [ 1312.591171][T16865] pgscan 171 [ 1312.591171][T16865] pgsteal 34 [ 1312.591171][T16865] pgactivate 6105 [ 1312.687922][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22160,uid=0 [ 1312.703469][T16865] Memory cgroup out of memory: Killed process 22160 (syz-executor.0) total-vm:72848kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1312.724078][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1312.731021][ T1071] oom_reaper: reaped process 22160 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1312.736000][T16865] CPU: 0 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1312.754862][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.764923][T16865] Call Trace: [ 1312.768224][T16865] dump_stack+0x197/0x210 [ 1312.772700][T16865] dump_header+0x10b/0x82d [ 1312.777120][T16865] ? oom_kill_process+0x94/0x3f0 [ 1312.782077][T16865] oom_kill_process.cold+0x10/0x15 [ 1312.787194][T16865] out_of_memory+0x334/0x1340 [ 1312.791885][T16865] ? lock_downgrade+0x920/0x920 [ 1312.797442][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1312.803254][T16865] ? oom_killer_disable+0x280/0x280 [ 1312.808469][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1312.814021][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1312.818964][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1312.824088][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1312.828943][T16865] try_charge+0xf8c/0x1470 [ 1312.833369][T16865] ? find_held_lock+0x35/0x130 [ 1312.838148][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1312.843689][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1312.849213][T16865] ? find_held_lock+0x35/0x130 [ 1312.853955][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1312.859486][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1312.865134][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1312.870312][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1312.875836][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1312.881008][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1312.886390][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1312.891966][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1312.897666][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1312.902894][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1312.908169][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1312.913169][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.918174][T16865] copy_process+0x3f8/0x6860 [ 1312.922744][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1312.927690][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.932699][T16865] ? __cleanup_sighand+0x60/0x60 [ 1312.937611][T16865] ? find_held_lock+0x35/0x130 [ 1312.942364][T16865] _do_fork+0x146/0xfa0 [ 1312.946499][T16865] ? copy_init_mm+0x20/0x20 [ 1312.950978][T16865] ? __kasan_check_read+0x11/0x20 [ 1312.955977][T16865] ? _copy_to_user+0x118/0x160 [ 1312.960721][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1312.966949][T16865] ? put_timespec64+0xda/0x140 [ 1312.971708][T16865] __x64_sys_clone+0x18d/0x250 [ 1312.976480][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1312.981313][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1312.986575][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1312.991582][T16865] do_syscall_64+0xfa/0x760 [ 1312.996064][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1313.001931][T16865] RIP: 0033:0x4587ea [ 1313.005805][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1313.025395][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1313.033793][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1313.041743][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1313.049692][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1313.057657][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1313.065614][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1313.074097][T16865] memory: usage 19812kB, limit 0kB, failcnt 241 [ 1313.080345][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1313.087285][T16865] Memory cgroup stats for /syz0: [ 1313.087387][T16865] anon 15695872 [ 1313.087387][T16865] file 24576 [ 1313.087387][T16865] kernel_stack 262144 [ 1313.087387][T16865] slab 3760128 [ 1313.087387][T16865] sock 0 [ 1313.087387][T16865] shmem 0 [ 1313.087387][T16865] file_mapped 135168 [ 1313.087387][T16865] file_dirty 0 [ 1313.087387][T16865] file_writeback 0 [ 1313.087387][T16865] anon_thp 14680064 [ 1313.087387][T16865] inactive_anon 0 [ 1313.087387][T16865] active_anon 15695872 [ 1313.087387][T16865] inactive_file 131072 [ 1313.087387][T16865] active_file 0 [ 1313.087387][T16865] unevictable 0 [ 1313.087387][T16865] slab_reclaimable 1622016 [ 1313.087387][T16865] slab_unreclaimable 2138112 [ 1313.087387][T16865] pgfault 94611 [ 1313.087387][T16865] pgmajfault 0 [ 1313.087387][T16865] workingset_refault 0 [ 1313.087387][T16865] workingset_activate 0 [ 1313.087387][T16865] workingset_nodereclaim 0 [ 1313.087387][T16865] pgrefill 175 [ 1313.087387][T16865] pgscan 171 [ 1313.087387][T16865] pgsteal 34 [ 1313.087387][T16865] pgactivate 6105 [ 1313.183803][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22132,uid=0 [ 1313.199364][T16865] Memory cgroup out of memory: Killed process 22132 (syz-executor.0) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1313.237518][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1313.256609][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1313.264530][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.274584][T16865] Call Trace: [ 1313.277882][T16865] dump_stack+0x197/0x210 [ 1313.282216][T16865] dump_header+0x10b/0x82d [ 1313.286634][T16865] ? oom_kill_process+0x94/0x3f0 [ 1313.291581][T16865] oom_kill_process.cold+0x10/0x15 [ 1313.296700][T16865] out_of_memory+0x334/0x1340 [ 1313.301385][T16865] ? lock_downgrade+0x920/0x920 [ 1313.306251][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1313.312069][T16865] ? oom_killer_disable+0x280/0x280 [ 1313.317288][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1313.322852][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1313.327801][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1313.332928][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1313.337790][T16865] try_charge+0xf8c/0x1470 [ 1313.342212][T16865] ? find_held_lock+0x35/0x130 [ 1313.346990][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1313.352539][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1313.358094][T16865] ? find_held_lock+0x35/0x130 [ 1313.362867][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1313.368435][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1313.373988][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1313.379198][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1313.384756][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1313.389875][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1313.395245][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1313.400789][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1313.406494][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1313.406512][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1313.406525][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1313.406536][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.406555][T16865] copy_process+0x3f8/0x6860 [ 1313.406569][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1313.406580][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.406605][T16865] ? __cleanup_sighand+0x60/0x60 [ 1313.406622][T16865] ? find_held_lock+0x35/0x130 [ 1313.415739][T14681] IPVS: ftp: loaded support on port[0] = 21 [ 1313.417097][T16865] _do_fork+0x146/0xfa0 [ 1313.427191][T16865] ? copy_init_mm+0x20/0x20 [ 1313.427208][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.427219][T16865] ? _copy_to_user+0x118/0x160 [ 1313.427239][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.436894][T16865] ? put_timespec64+0xda/0x140 [ 1313.446833][T16865] __x64_sys_clone+0x18d/0x250 [ 1313.457471][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1313.466119][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1313.475851][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1313.475870][T16865] do_syscall_64+0xfa/0x760 [ 1313.475892][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1313.475903][T16865] RIP: 0033:0x4587ea [ 1313.475915][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1313.475926][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1313.486889][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1313.486898][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1313.486906][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1313.486913][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1313.486925][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1313.504723][T16865] memory: usage 17488kB, limit 0kB, failcnt 247 [ 1313.522505][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1313.555801][T16865] Memory cgroup stats for /syz0: [ 1313.555903][T16865] anon 13488128 [ 1313.555903][T16865] file 24576 [ 1313.555903][T16865] kernel_stack 262144 [ 1313.555903][T16865] slab 3760128 [ 1313.555903][T16865] sock 0 [ 1313.555903][T16865] shmem 0 [ 1313.555903][T16865] file_mapped 135168 [ 1313.555903][T16865] file_dirty 0 [ 1313.555903][T16865] file_writeback 0 [ 1313.555903][T16865] anon_thp 12582912 [ 1313.555903][T16865] inactive_anon 0 [ 1313.555903][T16865] active_anon 13488128 [ 1313.555903][T16865] inactive_file 131072 [ 1313.555903][T16865] active_file 0 [ 1313.555903][T16865] unevictable 0 [ 1313.555903][T16865] slab_reclaimable 1622016 [ 1313.555903][T16865] slab_unreclaimable 2138112 [ 1313.555903][T16865] pgfault 94611 [ 1313.555903][T16865] pgmajfault 0 [ 1313.555903][T16865] workingset_refault 0 [ 1313.555903][T16865] workingset_activate 0 [ 1313.555903][T16865] workingset_nodereclaim 0 [ 1313.555903][T16865] pgrefill 175 [ 1313.555903][T16865] pgscan 171 [ 1313.555903][T16865] pgsteal 34 [ 1313.555903][T16865] pgactivate 6105 [ 1313.572610][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=22095,uid=0 [ 1313.588054][T16865] Memory cgroup out of memory: Killed process 22095 (syz-executor.0) total-vm:72716kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 10:13:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) [ 1313.742078][ T1071] oom_reaper: reaped process 22095 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1313.803210][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1313.833348][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1313.841291][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.851349][T16865] Call Trace: [ 1313.854645][T16865] dump_stack+0x197/0x210 [ 1313.858979][T16865] dump_header+0x10b/0x82d [ 1313.863383][T16865] ? oom_kill_process+0x94/0x3f0 [ 1313.863399][T16865] oom_kill_process.cold+0x10/0x15 [ 1313.863415][T16865] out_of_memory+0x334/0x1340 [ 1313.863429][T16865] ? lock_downgrade+0x920/0x920 [ 1313.863447][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1313.863463][T16865] ? oom_killer_disable+0x280/0x280 [ 1313.863489][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1313.863503][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1313.863521][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1313.873538][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1313.883036][T16865] try_charge+0xf8c/0x1470 [ 1313.883050][T16865] ? find_held_lock+0x35/0x130 [ 1313.883073][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1313.883085][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1313.883100][T16865] ? find_held_lock+0x35/0x130 [ 1313.883114][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1313.883142][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1313.918932][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1313.934745][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1313.934764][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1313.934781][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1313.934799][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1313.945061][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1313.945075][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1313.945094][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1313.945108][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1313.945121][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.945144][T16865] copy_process+0x3f8/0x6860 [ 1313.945159][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1313.945174][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.955881][T16865] ? __cleanup_sighand+0x60/0x60 [ 1313.971829][T16865] ? find_held_lock+0x35/0x130 [ 1313.971861][T16865] _do_fork+0x146/0xfa0 [ 1313.971878][T16865] ? copy_init_mm+0x20/0x20 [ 1313.983097][T16865] ? __kasan_check_read+0x11/0x20 [ 1313.983111][T16865] ? _copy_to_user+0x118/0x160 [ 1313.983129][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1313.983143][T16865] ? put_timespec64+0xda/0x140 [ 1313.983166][T16865] __x64_sys_clone+0x18d/0x250 [ 1313.983183][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1313.983210][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1313.993651][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1314.003655][T16865] do_syscall_64+0xfa/0x760 [ 1314.003677][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.003687][T16865] RIP: 0033:0x4587ea [ 1314.003701][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1314.003709][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1314.003722][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1314.003730][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1314.003736][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1314.003743][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1314.003749][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1314.007996][T16865] memory: usage 15044kB, limit 0kB, failcnt 253 [ 1314.059590][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1314.073225][T16865] Memory cgroup stats for /syz0: [ 1314.073322][T16865] anon 11247616 [ 1314.073322][T16865] file 24576 [ 1314.073322][T16865] kernel_stack 196608 [ 1314.073322][T16865] slab 3620864 [ 1314.073322][T16865] sock 0 [ 1314.073322][T16865] shmem 0 [ 1314.073322][T16865] file_mapped 135168 [ 1314.073322][T16865] file_dirty 0 [ 1314.073322][T16865] file_writeback 0 [ 1314.073322][T16865] anon_thp 10485760 [ 1314.073322][T16865] inactive_anon 0 [ 1314.073322][T16865] active_anon 11247616 [ 1314.073322][T16865] inactive_file 131072 [ 1314.073322][T16865] active_file 0 [ 1314.073322][T16865] unevictable 0 [ 1314.073322][T16865] slab_reclaimable 1622016 [ 1314.073322][T16865] slab_unreclaimable 1998848 [ 1314.073322][T16865] pgfault 94611 [ 1314.073322][T16865] pgmajfault 0 [ 1314.073322][T16865] workingset_refault 0 [ 1314.073322][T16865] workingset_activate 0 [ 1314.073322][T16865] workingset_nodereclaim 0 [ 1314.073322][T16865] pgrefill 175 [ 1314.073322][T16865] pgscan 171 [ 1314.073322][T16865] pgsteal 34 [ 1314.073322][T16865] pgactivate 6105 [ 1314.083613][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20229,uid=0 [ 1314.115929][T16865] Memory cgroup out of memory: Killed process 20229 (syz-executor.0) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1314.161761][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1314.179403][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1314.285867][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.285872][T16865] Call Trace: [ 1314.285894][T16865] dump_stack+0x197/0x210 [ 1314.285913][T16865] dump_header+0x10b/0x82d [ 1314.285925][T16865] ? oom_kill_process+0x94/0x3f0 [ 1314.285941][T16865] oom_kill_process.cold+0x10/0x15 [ 1314.285958][T16865] out_of_memory+0x334/0x1340 [ 1314.315435][T16865] ? lock_downgrade+0x920/0x920 [ 1314.315455][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1314.315471][T16865] ? oom_killer_disable+0x280/0x280 [ 1314.315494][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1314.333424][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1314.333445][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1314.333466][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1314.341039][T16865] try_charge+0xf8c/0x1470 [ 1314.355455][T16865] ? find_held_lock+0x35/0x130 [ 1314.371049][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1314.371062][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1314.371076][T16865] ? find_held_lock+0x35/0x130 [ 1314.371090][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1314.371119][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1314.371137][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1314.371155][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1314.371173][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1314.387660][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1314.397678][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1314.406899][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1314.417172][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1314.427447][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1314.438489][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1314.449201][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.459647][T16865] copy_process+0x3f8/0x6860 [ 1314.470859][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1314.481302][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.481331][T16865] ? __cleanup_sighand+0x60/0x60 [ 1314.481345][T16865] ? find_held_lock+0x35/0x130 [ 1314.481378][T16865] _do_fork+0x146/0xfa0 [ 1314.481396][T16865] ? copy_init_mm+0x20/0x20 [ 1314.491401][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.491415][T16865] ? _copy_to_user+0x118/0x160 [ 1314.491436][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.491451][T16865] ? put_timespec64+0xda/0x140 [ 1314.491473][T16865] __x64_sys_clone+0x18d/0x250 [ 1314.491490][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1314.500918][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1314.510842][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1314.524375][T16865] do_syscall_64+0xfa/0x760 [ 1314.534115][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.534127][T16865] RIP: 0033:0x4587ea [ 1314.534141][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1314.534148][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1314.534160][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1314.534169][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1314.534177][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1314.534191][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1314.534199][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1314.537818][T16865] memory: usage 12688kB, limit 0kB, failcnt 259 [ 1314.551310][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1314.565892][T16865] Memory cgroup stats for /syz0: [ 1314.565987][T16865] anon 9023488 [ 1314.565987][T16865] file 24576 [ 1314.565987][T16865] kernel_stack 131072 [ 1314.565987][T16865] slab 3620864 [ 1314.565987][T16865] sock 0 [ 1314.565987][T16865] shmem 0 [ 1314.565987][T16865] file_mapped 135168 [ 1314.565987][T16865] file_dirty 0 [ 1314.565987][T16865] file_writeback 0 [ 1314.565987][T16865] anon_thp 8388608 [ 1314.565987][T16865] inactive_anon 0 [ 1314.565987][T16865] active_anon 9023488 [ 1314.565987][T16865] inactive_file 131072 [ 1314.565987][T16865] active_file 0 [ 1314.565987][T16865] unevictable 0 [ 1314.565987][T16865] slab_reclaimable 1622016 [ 1314.565987][T16865] slab_unreclaimable 1998848 [ 1314.565987][T16865] pgfault 94611 [ 1314.565987][T16865] pgmajfault 0 [ 1314.565987][T16865] workingset_refault 0 [ 1314.565987][T16865] workingset_activate 0 [ 1314.565987][T16865] workingset_nodereclaim 0 [ 1314.565987][T16865] pgrefill 175 [ 1314.565987][T16865] pgscan 171 [ 1314.565987][T16865] pgsteal 34 [ 1314.565987][T16865] pgactivate 6105 [ 1314.576342][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20204,uid=0 [ 1314.600914][T16865] Memory cgroup out of memory: Killed process 20204 (syz-executor.0) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1314.639241][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1314.649958][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1314.661509][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.661515][T16865] Call Trace: [ 1314.661535][T16865] dump_stack+0x197/0x210 [ 1314.661556][T16865] dump_header+0x10b/0x82d [ 1314.661568][T16865] ? oom_kill_process+0x94/0x3f0 [ 1314.661583][T16865] oom_kill_process.cold+0x10/0x15 [ 1314.661600][T16865] out_of_memory+0x334/0x1340 [ 1314.757626][T16865] ? lock_downgrade+0x920/0x920 [ 1314.757646][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1314.757662][T16865] ? oom_killer_disable+0x280/0x280 [ 1314.757684][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1314.757697][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1314.757713][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1314.757733][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1314.757750][T16865] try_charge+0xf8c/0x1470 [ 1314.757763][T16865] ? find_held_lock+0x35/0x130 [ 1314.757792][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1314.757805][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1314.757819][T16865] ? find_held_lock+0x35/0x130 [ 1314.757834][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1314.757861][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1314.757876][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1314.757896][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1314.790946][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1314.790965][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1314.790979][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1314.790997][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1314.810670][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1314.825196][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1314.825211][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1314.825223][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.825244][T16865] copy_process+0x3f8/0x6860 [ 1314.825260][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1314.825275][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.834007][T16865] ? __cleanup_sighand+0x60/0x60 [ 1314.843994][T16865] ? find_held_lock+0x35/0x130 [ 1314.844025][T16865] _do_fork+0x146/0xfa0 [ 1314.844042][T16865] ? copy_init_mm+0x20/0x20 [ 1314.844060][T16865] ? __kasan_check_read+0x11/0x20 [ 1314.844077][T16865] ? _copy_to_user+0x118/0x160 [ 1314.853569][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1314.853585][T16865] ? put_timespec64+0xda/0x140 [ 1314.853607][T16865] __x64_sys_clone+0x18d/0x250 [ 1314.853624][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1314.853643][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1314.853660][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1314.864786][T16865] do_syscall_64+0xfa/0x760 [ 1314.875241][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.875253][T16865] RIP: 0033:0x4587ea [ 1314.875266][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1314.875273][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1314.875284][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1314.875292][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1314.875299][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1314.875311][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1314.885226][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1314.901625][T16865] memory: usage 10352kB, limit 0kB, failcnt 265 [ 1314.910271][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1314.928213][T16865] Memory cgroup stats for /syz0: [ 1314.928309][T16865] anon 6799360 [ 1314.928309][T16865] file 24576 [ 1314.928309][T16865] kernel_stack 131072 [ 1314.928309][T16865] slab 3350528 [ 1314.928309][T16865] sock 0 [ 1314.928309][T16865] shmem 0 [ 1314.928309][T16865] file_mapped 135168 [ 1314.928309][T16865] file_dirty 0 [ 1314.928309][T16865] file_writeback 0 [ 1314.928309][T16865] anon_thp 6291456 [ 1314.928309][T16865] inactive_anon 0 [ 1314.928309][T16865] active_anon 6799360 [ 1314.928309][T16865] inactive_file 131072 [ 1314.928309][T16865] active_file 0 [ 1314.928309][T16865] unevictable 0 [ 1314.928309][T16865] slab_reclaimable 1486848 [ 1314.928309][T16865] slab_unreclaimable 1863680 [ 1314.928309][T16865] pgfault 94611 [ 1314.928309][T16865] pgmajfault 0 [ 1314.928309][T16865] workingset_refault 0 [ 1314.928309][T16865] workingset_activate 0 [ 1314.928309][T16865] workingset_nodereclaim 0 [ 1314.928309][T16865] pgrefill 175 [ 1314.928309][T16865] pgscan 171 [ 1314.928309][T16865] pgsteal 34 [ 1314.928309][T16865] pgactivate 6105 [ 1314.941459][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20189,uid=0 [ 1314.948320][T16865] Memory cgroup out of memory: Killed process 20189 (syz-executor.0) total-vm:72716kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1315.288029][ T1071] oom_reaper: reaped process 20189 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1315.308401][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1315.327163][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1315.335078][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.335083][T16865] Call Trace: [ 1315.335104][T16865] dump_stack+0x197/0x210 [ 1315.335129][T16865] dump_header+0x10b/0x82d [ 1315.335139][T16865] ? oom_kill_process+0x94/0x3f0 [ 1315.335155][T16865] oom_kill_process.cold+0x10/0x15 [ 1315.335171][T16865] out_of_memory+0x334/0x1340 [ 1315.335188][T16865] ? lock_downgrade+0x920/0x920 [ 1315.348527][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1315.357231][T16865] ? oom_killer_disable+0x280/0x280 [ 1315.367246][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1315.376724][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1315.387685][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1315.398410][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1315.408593][T16865] try_charge+0xf8c/0x1470 [ 1315.412998][T16865] ? find_held_lock+0x35/0x130 [ 1315.413021][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1315.413034][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1315.413048][T16865] ? find_held_lock+0x35/0x130 [ 1315.413061][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1315.413088][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1315.420583][T14681] chnl_net:caif_netlink_parms(): no params data found [ 1315.423375][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1315.423394][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1315.423412][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1315.423430][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1315.423444][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1315.423466][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1315.433739][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1315.433759][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1315.433773][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1315.433790][T16865] ? __kasan_check_read+0x11/0x20 [ 1315.444847][T16865] copy_process+0x3f8/0x6860 [ 1315.444862][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1315.444874][T16865] ? __kasan_check_read+0x11/0x20 [ 1315.444898][T16865] ? __cleanup_sighand+0x60/0x60 [ 1315.444909][T16865] ? find_held_lock+0x35/0x130 [ 1315.444944][T16865] _do_fork+0x146/0xfa0 [ 1315.456863][T16865] ? copy_init_mm+0x20/0x20 [ 1315.467481][T16865] ? __kasan_check_read+0x11/0x20 [ 1315.478350][T16865] ? _copy_to_user+0x118/0x160 [ 1315.490272][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1315.500550][T16865] ? put_timespec64+0xda/0x140 [ 1315.510156][T16865] __x64_sys_clone+0x18d/0x250 [ 1315.519982][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1315.529756][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1315.538387][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1315.548153][T16865] do_syscall_64+0xfa/0x760 [ 1315.559129][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1315.568698][T16865] RIP: 0033:0x4587ea [ 1315.578985][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1315.578993][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1315.579006][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1315.579018][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1315.589374][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1315.589387][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1315.613130][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1315.631178][T16865] memory: usage 8164kB, limit 0kB, failcnt 271 [ 1315.651463][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1315.667450][T16865] Memory cgroup stats for /syz0: [ 1315.667552][T16865] anon 4558848 [ 1315.667552][T16865] file 24576 [ 1315.667552][T16865] kernel_stack 131072 [ 1315.667552][T16865] slab 3350528 [ 1315.667552][T16865] sock 0 [ 1315.667552][T16865] shmem 0 [ 1315.667552][T16865] file_mapped 135168 [ 1315.667552][T16865] file_dirty 0 [ 1315.667552][T16865] file_writeback 0 [ 1315.667552][T16865] anon_thp 4194304 [ 1315.667552][T16865] inactive_anon 0 [ 1315.667552][T16865] active_anon 4558848 [ 1315.667552][T16865] inactive_file 131072 [ 1315.667552][T16865] active_file 0 [ 1315.667552][T16865] unevictable 0 [ 1315.667552][T16865] slab_reclaimable 1486848 [ 1315.667552][T16865] slab_unreclaimable 1863680 [ 1315.667552][T16865] pgfault 94611 [ 1315.667552][T16865] pgmajfault 0 [ 1315.667552][T16865] workingset_refault 0 [ 1315.667552][T16865] workingset_activate 0 [ 1315.667552][T16865] workingset_nodereclaim 0 [ 1315.667552][T16865] pgrefill 175 [ 1315.667552][T16865] pgscan 171 [ 1315.667552][T16865] pgsteal 34 [ 1315.667552][T16865] pgactivate 6105 [ 1315.675451][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21188,uid=0 [ 1315.786453][T16865] Memory cgroup out of memory: Killed process 21188 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1315.848924][T14681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.857316][T14681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.866104][T14681] device bridge_slave_0 entered promiscuous mode [ 1315.875004][T14681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.882621][T14681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.890726][T14681] device bridge_slave_1 entered promiscuous mode [ 1315.898673][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1315.919266][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1315.927210][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.927216][T16865] Call Trace: [ 1315.927241][T16865] dump_stack+0x197/0x210 [ 1315.927260][T16865] dump_header+0x10b/0x82d [ 1315.927271][T16865] ? oom_kill_process+0x94/0x3f0 [ 1315.927286][T16865] oom_kill_process.cold+0x10/0x15 [ 1315.927303][T16865] out_of_memory+0x334/0x1340 [ 1315.927315][T16865] ? lock_downgrade+0x920/0x920 [ 1315.927333][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1315.927349][T16865] ? oom_killer_disable+0x280/0x280 [ 1315.927374][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1315.927387][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1315.927409][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1315.940963][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1315.949699][T16865] try_charge+0xf8c/0x1470 [ 1315.959751][T16865] ? find_held_lock+0x35/0x130 [ 1315.969251][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1315.980219][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1315.990660][T16865] ? find_held_lock+0x35/0x130 [ 1316.000613][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1316.009772][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1316.020895][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1316.031176][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1316.041871][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1316.041891][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1316.041907][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1316.041921][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1316.041932][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1316.041951][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1316.052568][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1316.052581][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.052602][T16865] copy_process+0x3f8/0x6860 [ 1316.052618][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1316.052634][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.063541][T16865] ? __cleanup_sighand+0x60/0x60 [ 1316.063554][T16865] ? find_held_lock+0x35/0x130 [ 1316.063582][T16865] _do_fork+0x146/0xfa0 [ 1316.063599][T16865] ? copy_init_mm+0x20/0x20 [ 1316.063617][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.074951][T16865] ? _copy_to_user+0x118/0x160 [ 1316.074970][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1316.074984][T16865] ? put_timespec64+0xda/0x140 [ 1316.075006][T16865] __x64_sys_clone+0x18d/0x250 [ 1316.085278][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1316.094855][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1316.094868][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1316.094887][T16865] do_syscall_64+0xfa/0x760 [ 1316.094909][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1316.094918][T16865] RIP: 0033:0x4587ea [ 1316.094935][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1316.104788][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1316.114437][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1316.114445][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1316.114452][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1316.114459][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1316.114466][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1316.124417][T16865] memory: usage 5664kB, limit 0kB, failcnt 277 [ 1316.138783][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1316.146098][T16865] Memory cgroup stats for /syz0: [ 1316.146201][T16865] anon 2342912 [ 1316.146201][T16865] file 24576 [ 1316.146201][T16865] kernel_stack 65536 [ 1316.146201][T16865] slab 3350528 [ 1316.146201][T16865] sock 0 [ 1316.146201][T16865] shmem 0 [ 1316.146201][T16865] file_mapped 135168 [ 1316.146201][T16865] file_dirty 0 [ 1316.146201][T16865] file_writeback 0 [ 1316.146201][T16865] anon_thp 2097152 [ 1316.146201][T16865] inactive_anon 0 [ 1316.146201][T16865] active_anon 2342912 [ 1316.146201][T16865] inactive_file 131072 [ 1316.146201][T16865] active_file 0 [ 1316.146201][T16865] unevictable 0 [ 1316.146201][T16865] slab_reclaimable 1486848 [ 1316.146201][T16865] slab_unreclaimable 1863680 [ 1316.146201][T16865] pgfault 94611 [ 1316.146201][T16865] pgmajfault 0 [ 1316.146201][T16865] workingset_refault 0 [ 1316.146201][T16865] workingset_activate 0 [ 1316.146201][T16865] workingset_nodereclaim 0 [ 1316.146201][T16865] pgrefill 175 [ 1316.146201][T16865] pgscan 171 [ 1316.146201][T16865] pgsteal 34 [ 1316.146201][T16865] pgactivate 6105 [ 1316.159629][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21137,uid=0 [ 1316.182391][T16865] Memory cgroup out of memory: Killed process 21137 (syz-executor.0) total-vm:72584kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:1000 [ 1316.416193][T16865] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 1316.428272][T16865] CPU: 1 PID: 16865 Comm: syz-executor.0 Not tainted 5.4.0-rc6+ #0 [ 1316.436193][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.436199][T16865] Call Trace: [ 1316.436220][T16865] dump_stack+0x197/0x210 [ 1316.436241][T16865] dump_header+0x10b/0x82d [ 1316.436252][T16865] ? oom_kill_process+0x94/0x3f0 [ 1316.436267][T16865] oom_kill_process.cold+0x10/0x15 [ 1316.436283][T16865] out_of_memory+0x334/0x1340 [ 1316.436298][T16865] ? lock_downgrade+0x920/0x920 [ 1316.436316][T16865] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1316.436332][T16865] ? oom_killer_disable+0x280/0x280 [ 1316.436356][T16865] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1316.436369][T16865] ? memcg_stat_show+0xc40/0xc40 [ 1316.436387][T16865] ? do_raw_spin_unlock+0x57/0x270 [ 1316.454137][T16865] ? _raw_spin_unlock+0x2d/0x50 [ 1316.464433][T16865] try_charge+0xf8c/0x1470 [ 1316.464448][T16865] ? find_held_lock+0x35/0x130 [ 1316.464470][T16865] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1316.464482][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1316.464495][T16865] ? find_held_lock+0x35/0x130 [ 1316.464509][T16865] ? get_mem_cgroup_from_mm+0x139/0x320 [ 1316.464538][T16865] __memcg_kmem_charge_memcg+0x7c/0x130 [ 1316.464555][T16865] ? memcg_kmem_put_cache+0x50/0x50 [ 1316.464573][T16865] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1316.479759][T16865] __memcg_kmem_charge+0x13a/0x3a0 [ 1316.479778][T16865] __alloc_pages_nodemask+0x4f5/0x900 [ 1316.479796][T16865] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1316.520512][T16865] ? __alloc_pages_slowpath+0x2920/0x2920 [ 1316.541911][T16865] ? percpu_ref_put_many+0xb6/0x190 [ 1316.541934][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1316.541948][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1316.541960][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.541979][T16865] copy_process+0x3f8/0x6860 [ 1316.541995][T16865] ? perf_trace_lock+0xeb/0x4c0 [ 1316.542007][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.542033][T16865] ? __cleanup_sighand+0x60/0x60 [ 1316.542048][T16865] ? find_held_lock+0x35/0x130 [ 1316.559733][T16865] _do_fork+0x146/0xfa0 [ 1316.570274][T16865] ? copy_init_mm+0x20/0x20 [ 1316.581522][T16865] ? __kasan_check_read+0x11/0x20 [ 1316.581537][T16865] ? _copy_to_user+0x118/0x160 [ 1316.581557][T16865] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1316.581573][T16865] ? put_timespec64+0xda/0x140 [ 1316.581595][T16865] __x64_sys_clone+0x18d/0x250 [ 1316.581610][T16865] ? __ia32_sys_vfork+0xc0/0xc0 [ 1316.581630][T16865] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1316.581644][T16865] ? trace_hardirqs_on+0x67/0x240 [ 1316.581663][T16865] do_syscall_64+0xfa/0x760 [ 1316.581684][T16865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1316.592294][T16865] RIP: 0033:0x4587ea [ 1316.592308][T16865] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1316.592314][T16865] RSP: 002b:00007ffce76b3c60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1316.592327][T16865] RAX: ffffffffffffffda RBX: 00007ffce76b3c60 RCX: 00000000004587ea [ 1316.592334][T16865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1316.592341][T16865] RBP: 00007ffce76b3ca0 R08: 0000000000000001 R09: 0000000001bc1940 [ 1316.592348][T16865] R10: 0000000001bc1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1316.592355][T16865] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce76b3cf0 [ 1316.593411][T16865] memory: usage 3328kB, limit 0kB, failcnt 283 [ 1316.608621][T16865] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1316.623523][T16865] Memory cgroup stats for /syz0: [ 1316.623621][T16865] anon 110592 [ 1316.623621][T16865] file 24576 [ 1316.623621][T16865] kernel_stack 65536 [ 1316.623621][T16865] slab 3350528 [ 1316.623621][T16865] sock 0 [ 1316.623621][T16865] shmem 0 [ 1316.623621][T16865] file_mapped 135168 [ 1316.623621][T16865] file_dirty 0 [ 1316.623621][T16865] file_writeback 0 [ 1316.623621][T16865] anon_thp 0 [ 1316.623621][T16865] inactive_anon 0 [ 1316.623621][T16865] active_anon 110592 [ 1316.623621][T16865] inactive_file 131072 [ 1316.623621][T16865] active_file 0 [ 1316.623621][T16865] unevictable 0 [ 1316.623621][T16865] slab_reclaimable 1486848 [ 1316.623621][T16865] slab_unreclaimable 1863680 [ 1316.623621][T16865] pgfault 94611 [ 1316.623621][T16865] pgmajfault 0 [ 1316.623621][T16865] workingset_refault 0 [ 1316.623621][T16865] workingset_activate 0 [ 1316.623621][T16865] workingset_nodereclaim 0 [ 1316.623621][T16865] pgrefill 175 [ 1316.623621][T16865] pgscan 171 [ 1316.623621][T16865] pgsteal 34 [ 1316.623621][T16865] pgactivate 6105 [ 1316.649948][T16865] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=16865,uid=0 [ 1316.665873][T16865] Memory cgroup out of memory: Killed process 16865 (syz-executor.0) total-vm:72452kB, anon-rss:116kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 [ 1316.916407][T14681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1316.928214][T14681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.133072][T14681] team0: Port device team_slave_0 added [ 1317.140886][T14681] team0: Port device team_slave_1 added [ 1317.213923][T14681] device hsr_slave_0 entered promiscuous mode [ 1317.251892][T14681] device hsr_slave_1 entered promiscuous mode 10:13:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.current\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8e, 0x0, &(0x7f0000000480)="bd841db3b37a4e7f10f9d8d35a3e7854626cf481c0faee5d6f579ae66b0b205006faf145d78114136447c8e22a4a5f10ce97b228dc279e39f4b71f320916828756af1fa6090e0214e3bea3570955647208b65e900b9651532f8cfa3c0a4deb08704bd60c3f1e2d467fb9b17a2a3ace9bbadd7568bd72c116aaf331984aea47c266cde2cc7613d1266b9f53b325c0", 0x0, 0x9}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000600)="d5ed35364a0503bbfafaf831508f164757cae9f616bfeb10e5e59482db51", &(0x7f0000000700)="009081179b0f26ea9680e7e5c0c007b8cd34d1d52dcb84a95afceebf810565e83aeb33ff39ee70e0c10a36787389f559d9a3052968e712d2f17d2fd31e47590d1ee105929705314f523c21398ffb741e7bcc668c0e69acd898affa9d00c0be2b3af7cd50f8f00f3a73e22ac3ade44db1c67cf64d376114aed7aa840050eed18bd12ad1bb036b57a0db65ff838551032ae3443540cc657adb7551cc3c4a323cbb4c7a84e8aa0aabcc0d1883926ebf06", 0x4}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce1e, 0x0, 0x40000000000000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @volatile={0x0, 0x0, 0x0, 0x4}]}}, &(0x7f00000002c0)=""/245, 0x32, 0xf5, 0x1}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x42400) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc814) r2 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r1, 0x7, 0x1, 0x6, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth1_tor\x00'}}, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)="3f459b38641cc37b7071636d5f84ccd8b0785e16bbd47050cf0bdace5fa36972bf433692a874cae27f75d6b39cdac0a6", 0x30}], 0x1}, 0x4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x310) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x100, 0x12) 10:13:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0) 10:13:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}}, 0x84) 10:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) dup2(r1, r2) 10:13:44 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x5, &(0x7f0000000080), 0x4) [ 1317.484612][T14681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.551791][ T8915] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1317.581689][ T8915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1317.589802][ T8915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1317.642671][T14681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.672597][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1317.692456][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1317.711698][T31439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.719010][T31439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.747785][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1317.768371][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1317.788361][T31439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.795616][T31439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1317.811759][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1317.824096][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1317.852603][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1317.891580][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1317.902478][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1317.913333][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1317.945383][T14681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1317.966013][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1317.979164][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1317.991574][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1318.011757][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1318.019317][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1318.032233][T14681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1318.236541][T14699] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1318.250260][T14699] CPU: 0 PID: 14699 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1318.258422][T14699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.268802][T14699] Call Trace: [ 1318.272110][T14699] dump_stack+0x197/0x210 [ 1318.276594][T14699] dump_header+0x10b/0x82d [ 1318.281012][T14699] oom_kill_process.cold+0x10/0x15 [ 1318.286142][T14699] out_of_memory+0x334/0x1340 [ 1318.290835][T14699] ? __sched_text_start+0x8/0x8 [ 1318.295694][T14699] ? oom_killer_disable+0x280/0x280 [ 1318.300913][T14699] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1318.306484][T14699] ? memcg_stat_show+0xc40/0xc40 [ 1318.311460][T14699] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 1318.317280][T14699] ? cgroup_file_notify+0x140/0x1b0 [ 1318.322502][T14699] memory_max_write+0x262/0x3a0 [ 1318.327367][T14699] ? mem_cgroup_write+0x370/0x370 [ 1318.332403][T14699] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 1318.337874][T14699] cgroup_file_write+0x241/0x790 [ 1318.342826][T14699] ? mem_cgroup_write+0x370/0x370 [ 1318.347865][T14699] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1318.353516][T14699] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 1318.359166][T14699] kernfs_fop_write+0x2b8/0x480 [ 1318.364029][T14699] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1318.370561][T14699] __vfs_write+0x8a/0x110 [ 1318.375031][T14699] ? kernfs_fop_open+0xd80/0xd80 [ 1318.380188][T14699] vfs_write+0x268/0x5d0 [ 1318.384464][T14699] ksys_write+0x14f/0x290 [ 1318.389271][T14699] ? __ia32_sys_read+0xb0/0xb0 [ 1318.394289][T14699] ? do_syscall_64+0x26/0x760 [ 1318.399374][T14699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.405745][T14699] ? do_syscall_64+0x26/0x760 [ 1318.410791][T14699] __x64_sys_write+0x73/0xb0 [ 1318.415491][T14699] do_syscall_64+0xfa/0x760 [ 1318.420006][T14699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1318.425989][T14699] RIP: 0033:0x45a219 [ 1318.430107][T14699] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1318.450087][T14699] RSP: 002b:00007f9f93f5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1318.458616][T14699] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 1318.466834][T14699] RDX: 0000000000000012 RSI: 00000000200003c0 RDI: 0000000000000008 [ 1318.474998][T14699] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1318.483967][T14699] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f93f606d4 [ 1318.492169][T14699] R13: 00000000004cab4b R14: 00000000004e3000 R15: 00000000ffffffff [ 1318.510062][T14699] memory: usage 7608kB, limit 0kB, failcnt 125 [ 1318.516689][T14699] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1318.524289][T14699] Memory cgroup stats for /syz4: [ 1318.525754][T14699] anon 6356992 [ 1318.525754][T14699] file 102400 [ 1318.525754][T14699] kernel_stack 65536 [ 1318.525754][T14699] slab 1376256 [ 1318.525754][T14699] sock 57344 [ 1318.525754][T14699] shmem 0 [ 1318.525754][T14699] file_mapped 0 [ 1318.525754][T14699] file_dirty 135168 [ 1318.525754][T14699] file_writeback 0 [ 1318.525754][T14699] anon_thp 6291456 [ 1318.525754][T14699] inactive_anon 0 [ 1318.525754][T14699] active_anon 6356992 [ 1318.525754][T14699] inactive_file 0 [ 1318.525754][T14699] active_file 135168 [ 1318.525754][T14699] unevictable 0 [ 1318.525754][T14699] slab_reclaimable 675840 [ 1318.525754][T14699] slab_unreclaimable 700416 [ 1318.525754][T14699] pgfault 102366 [ 1318.525754][T14699] pgmajfault 0 [ 1318.525754][T14699] workingset_refault 0 [ 1318.525754][T14699] workingset_activate 0 [ 1318.525754][T14699] workingset_nodereclaim 0 [ 1318.525754][T14699] pgrefill 33 [ 1318.525754][T14699] pgscan 277 [ 1318.525754][T14699] pgsteal 256 [ 1318.525754][T14699] pgactivate 0 [ 1318.630812][T14699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14698,uid=0 [ 1318.648230][T14699] Memory cgroup out of memory: Killed process 14698 (syz-executor.4) total-vm:72588kB, anon-rss:4188kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 1318.673353][ T1071] oom_reaper: reaped process 14698 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 10:13:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000080)=0x10) close(r1) 10:13:46 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000007c0)={0x298, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) add_key(0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000040)={0x1b4}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) listen(r0, 0x0) 10:13:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) write$sndseq(r2, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) dup2(r1, r2) 10:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}}, 0x84) 10:13:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) [ 1318.914297][T14681] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1318.945800][T14681] CPU: 1 PID: 14681 Comm: syz-executor.4 Not tainted 5.4.0-rc6+ #0 [ 1318.954012][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.972809][T14681] Call Trace: [ 1318.976261][T14681] dump_stack+0x197/0x210 [ 1318.980619][T14681] dump_header+0x10b/0x82d [ 1318.985062][T14681] ? oom_kill_process+0x94/0x3f0 [ 1318.990029][T14681] oom_kill_process.cold+0x10/0x15 [ 1318.995257][T14681] out_of_memory+0x334/0x1340 [ 1319.000734][T14681] ? lock_downgrade+0x920/0x920 [ 1319.005720][T14681] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 1319.005738][T14681] ? oom_killer_disable+0x280/0x280 [ 1319.005760][T14681] mem_cgroup_out_of_memory+0x1d8/0x240 [ 1319.005774][T14681] ? memcg_stat_show+0xc40/0xc40 [ 1319.005791][T14681] ? do_raw_spin_unlock+0x57/0x270 [ 1319.005813][T14681] ? _raw_spin_unlock+0x2d/0x50 [ 1319.037716][T14681] try_charge+0xf8c/0x1470 [ 1319.042303][T14681] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1319.042317][T14681] ? percpu_ref_tryget_live+0x111/0x290 [ 1319.042336][T14681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.042352][T14681] ? __kasan_check_read+0x11/0x20 [ 1319.042372][T14681] ? get_mem_cgroup_from_mm+0x156/0x320 [ 1319.053487][T14681] mem_cgroup_try_charge+0x136/0x590 [ 1319.053511][T14681] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 1319.053530][T14681] wp_page_copy+0x407/0x1860 [ 1319.053545][T14681] ? find_held_lock+0x35/0x130 [ 1319.053559][T14681] ? do_wp_page+0x53b/0x15c0 [ 1319.053581][T14681] ? pmd_devmap_trans_unstable+0x220/0x220 [ 1319.065397][T14681] ? lock_downgrade+0x920/0x920 [ 1319.065417][T14681] ? swp_swapcount+0x540/0x540 [ 1319.065434][T14681] ? __kasan_check_read+0x11/0x20 10:13:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00\x00\x00\x00\x00\x00\x008\x00', 0x2, [{}, {}]}, 0x48) [ 1319.065452][T14681] ? do_raw_spin_unlock+0x57/0x270 [ 1319.075608][T14708] IPVS: ftp: loaded support on port[0] = 21 [ 1319.077004][T14681] do_wp_page+0x543/0x15c0 [ 1319.077026][T14681] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 1319.077051][T14681] __handle_mm_fault+0x23ec/0x4040 [ 1319.097089][T14681] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1319.097106][T14681] ? handle_mm_fault+0x292/0xaa0 [ 1319.097134][T14681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1319.117831][T14681] ? __kasan_check_read+0x11/0x20 10:13:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @local}}}, 0x84) [ 1319.117855][T14681] handle_mm_fault+0x3b7/0xaa0 [ 1319.117875][T14681] __do_page_fault+0x536/0xdd0 [ 1319.117898][T14681] do_page_fault+0x38/0x590 [ 1319.138868][T14681] page_fault+0x39/0x40 [ 1319.138881][T14681] RIP: 0033:0x4312f6 [ 1319.138898][T14681] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 76 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 ec 59 64 00 85 c0 0f 84 [ 1319.154804][T14681] RSP: 002b:00007ffe4c50a4f0 EFLAGS: 00010206 [ 1319.154816][T14681] RAX: 0000000000019691 RBX: 0000000000717640 RCX: 0000000000008041 [ 1319.154825][T14681] RDX: 000000000298d930 RSI: 0000000002995970 RDI: 0000000000000003 [ 1319.154834][T14681] RBP: 0000000000008041 R08: 0000000000000001 R09: 000000000298c940 [ 1319.154842][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000717698 [ 1319.154849][T14681] R13: 0000000000717698 R14: 0000000000000000 R15: 0000000000002710 [ 1319.260052][T14681] memory: usage 3228kB, limit 0kB, failcnt 133 [ 1319.267702][T14681] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1319.277550][T14681] Memory cgroup stats for /syz4: [ 1319.277816][T14681] anon 2088960 [ 1319.277816][T14681] file 102400 [ 1319.277816][T14681] kernel_stack 0 [ 1319.277816][T14681] slab 1376256 [ 1319.277816][T14681] sock 57344 [ 1319.277816][T14681] shmem 0 [ 1319.277816][T14681] file_mapped 0 [ 1319.277816][T14681] file_dirty 135168 [ 1319.277816][T14681] file_writeback 0 [ 1319.277816][T14681] anon_thp 2097152 [ 1319.277816][T14681] inactive_anon 0 [ 1319.277816][T14681] active_anon 2088960 [ 1319.277816][T14681] inactive_file 0 [ 1319.277816][T14681] active_file 135168 [ 1319.277816][T14681] unevictable 0 [ 1319.277816][T14681] slab_reclaimable 675840 [ 1319.277816][T14681] slab_unreclaimable 700416 [ 1319.277816][T14681] pgfault 102366 [ 1319.277816][T14681] pgmajfault 0 [ 1319.277816][T14681] workingset_refault 0 [ 1319.277816][T14681] workingset_activate 0 [ 1319.277816][T14681] workingset_nodereclaim 0 [ 1319.277816][T14681] pgrefill 33 [ 1319.277816][T14681] pgscan 277 10:13:46 executing program 5: r0 = syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000400)) [ 1319.277816][T14681] pgsteal 256 [ 1319.277816][T14681] pgactivate 0 10:13:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x5000aea5, &(0x7f0000000080)) [ 1319.549576][T14818] IPVS: ftp: loaded support on port[0] = 21 10:13:46 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0xa3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1319.742820][T14681] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=14681,uid=0 [ 1319.802112][T14681] Memory cgroup out of memory: Killed process 14681 (syz-executor.4) total-vm:72456kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 10:13:47 executing program 1: msgrcv(0x0, 0x0, 0x0, 0x0, 0x7000) [ 1319.909392][ T1071] oom_reaper: reaped process 14681 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 1320.158834][T14708] IPVS: ftp: loaded support on port[0] = 21 [ 1320.429511][T14818] chnl_net:caif_netlink_parms(): no params data found [ 1320.466789][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.474947][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.490730][T14818] device bridge_slave_0 entered promiscuous mode [ 1320.499477][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.506959][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.515505][T14818] device bridge_slave_1 entered promiscuous mode [ 1320.622274][T14818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1320.655237][T14818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.713956][T14818] team0: Port device team_slave_0 added [ 1320.745405][T14818] team0: Port device team_slave_1 added [ 1320.855171][T14818] device hsr_slave_0 entered promiscuous mode [ 1320.913079][T14818] device hsr_slave_1 entered promiscuous mode [ 1320.971668][T14818] debugfs: Directory 'hsr0' with parent '/' already present! [ 1321.008185][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.015549][T14818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.023018][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.030095][T14818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.050089][T31439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.063300][T31439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.148543][T14818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.168957][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1321.186839][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1321.199130][T14818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.220984][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1321.248899][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1321.259969][T17589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.267124][T17589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.294792][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1321.310992][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1321.342475][T12960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.349822][T12960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.369035][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1321.420829][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1321.430568][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1321.449792][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1321.462771][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1321.485222][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1321.510149][T14818] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1321.523157][T14818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1321.543548][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1321.555266][T14936] IPVS: ftp: loaded support on port[0] = 21 [ 1321.562787][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1321.574969][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1321.588633][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1321.597910][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1321.607824][T12960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1321.693644][T14818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.714411][ T8915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1321.740342][ T8915] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1321.844145][T14936] chnl_net:caif_netlink_parms(): no params data found 10:13:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x176], [0xc1]}) 10:13:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x200]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc74424060000008a0000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x52}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x6, 0x40}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:13:49 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0xcf}, 0x0) getresuid(&(0x7f0000004180), 0x0, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x4, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x40000}]) 10:13:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}]}) [ 1321.942539][T14936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.958164][T14936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.972683][T14936] device bridge_slave_0 entered promiscuous mode [ 1321.984031][T14936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.029266][ T26] audit: type=1804 audit(1573208029.352:177): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 [ 1322.054435][T14936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.088553][T14936] device bridge_slave_1 entered promiscuous mode [ 1322.121395][ T26] audit: type=1804 audit(1573208029.392:178): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 [ 1322.197748][ T26] audit: type=1804 audit(1573208029.402:179): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 10:13:49 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) stat(0x0, &(0x7f0000000240)) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)=0xaf34) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) [ 1322.328412][ T26] audit: type=1804 audit(1573208029.472:180): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 [ 1322.430412][T14936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.441947][ T26] audit: type=1804 audit(1573208029.472:181): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 [ 1322.483103][T14936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.579233][ T26] audit: type=1804 audit(1573208029.492:182): pid=15002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir686928593/syzkaller.NsIwfq/114/bus" dev="sda1" ino=16609 res=1 [ 1322.830429][T14936] team0: Port device team_slave_0 added [ 1322.870755][T14936] team0: Port device team_slave_1 added [ 1323.021804][T14936] device hsr_slave_0 entered promiscuous mode [ 1323.061866][T14936] device hsr_slave_1 entered promiscuous mode [ 1323.101639][T14936] debugfs: Directory 'hsr0' with parent '/' already present! [ 1323.164535][T14936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.179633][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1323.193508][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1323.202313][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1323.220704][T14936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.234978][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1323.243969][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1323.253106][T31439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.260312][T31439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.270282][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1323.292969][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1323.303251][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1323.312374][T17589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.319616][T17589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.328632][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1323.339178][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1323.349479][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1323.358882][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1323.369022][T17589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1323.389105][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1323.398183][T16870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1323.416172][T14936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.427182][T14936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.442478][T28250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1323.453132][T28250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1323.462089][T28250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1323.471069][T28250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1323.481763][T28250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1323.505643][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1323.514709][T31439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1323.528195][T14936] 8021q: adding VLAN 0 to HW filter on device batadv0 10:13:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 10:13:51 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r0, 0x0, r2, 0x0, 0x20000000010002, 0x0) 10:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x176], [0xc1]}) 10:13:51 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00\x00\x00\x00\x00\x00\x008\x00', 0x2, [{}, {}]}, 0x48) 10:13:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) [ 1323.844389][T15179] IPVS: ftp: loaded support on port[0] = 21 [ 1323.891905][T15181] input: syz1 as /devices/virtual/input/input23 10:13:51 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xd, r1}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x1c4, 0x0) 10:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x176], [0xc1]}) 10:13:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='localflocks']) 10:13:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 10:13:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x5, [0x176], [0xc1]}) [ 1324.349606][T15297] gfs2: not a GFS2 filesystem [ 1324.664556][T15386] IPVS: ftp: loaded support on port[0] = 21 [ 1324.995794][T15386] chnl_net:caif_netlink_parms(): no params data found [ 1325.048360][T15386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.057184][T15386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.066152][T15386] device bridge_slave_0 entered promiscuous mode [ 1325.077707][T15386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.101370][T15386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.117776][T15386] device bridge_slave_1 entered promiscuous mode [ 1325.189019][T15386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.210114][T15386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.250480][T15386] team0: Port device team_slave_0 added [ 1325.274537][T15386] team0: Port device team_slave_1 added [ 1325.345928][T15386] device hsr_slave_0 entered promiscuous mode [ 1325.401912][T15386] device hsr_slave_1 entered promiscuous mode [ 1325.451601][T15386] debugfs: Directory 'hsr0' with parent '/' already present! [ 1325.500306][T15386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.507479][T15386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.515006][T15386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.522218][T15386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.658831][T15386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1325.692796][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1325.703323][ T9099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.712683][ T9099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.736075][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1325.766518][T15386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.794598][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1325.812408][ T9099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.819620][ T9099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.855529][T15301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1325.870261][T15301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.877583][T15301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.914719][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.924088][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.933770][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1325.943459][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.962887][T16872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1325.975431][T15386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.002883][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.010667][ T9099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.037499][T15386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.221650][T15427] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1326.285042][T15427] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities 10:13:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000200)=""/121, 0x79}], 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) connect$tipc(0xffffffffffffffff, &(0x7f0000000740)=@id={0x1e, 0x3, 0x0, {0x0, 0x3}}, 0x4) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 10:13:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='localflocks']) 10:13:53 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0xc038563c, &(0x7f0000000400)) 10:13:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r3, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 10:13:53 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00\x00\x00\x00\x00\x00\x008\x00', 0x2, [{}, {}]}, 0x48) [ 1326.428021][T15438] IPVS: ftp: loaded support on port[0] = 21 [ 1326.491890][T15441] gfs2: not a GFS2 filesystem 10:13:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x2, 0x0, [{0x5a}, {0x80}]}) 10:13:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='localflocks']) 10:13:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)={0x18, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) [ 1326.920956][T15462] gfs2: not a GFS2 filesystem 10:13:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x58}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000001200)=""/4103, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:13:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='localflocks']) 10:13:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) 10:13:54 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x0, 0x0) [ 1327.312295][T15481] gfs2: not a GFS2 filesystem 10:13:55 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00\x00\x00\x00\x00\x00\x008\x00', 0x2, [{}, {}]}, 0x48) 10:13:55 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000), 0xfdad) 10:13:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) gettid() getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000740)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040), 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'batadv0\x00'}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) 10:13:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x0, 0x0) 10:13:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) 10:13:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280), 0x0, 0x1a0}]) 10:13:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000d00)=ANY=[@ANYBLOB="12"], 0x1) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) write$binfmt_elf64(r2, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x810000032, 0xffffffffffffffff, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 10:13:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x0, 0x0) [ 1328.143036][T15518] IPVS: ftp: loaded support on port[0] = 21 10:13:55 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x2, &(0x7f0000000080)="2e86ff09", 0x4) 10:13:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) lseek(r0, 0x0, 0x0) 10:13:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00D\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 1328.576238][T15526] Dev loop0: unable to read RDB block 1 [ 1328.595904][T15526] loop0: unable to read partition table [ 1328.655410][T15526] loop0: partition table beyond EOD, truncated [ 1328.709472][T15526] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 10:13:56 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x28d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 10:13:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000001240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000001200), 0x3d1}, 0x3e) 10:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 10:13:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280), 0x0, 0x1a0}]) 10:13:56 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r0}, {r0}], 0x2, &(0x7f0000000100), 0x0, 0x0) [ 1329.096686][T15649] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 10:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 10:13:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000001240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000001200), 0x3d1}, 0x3e) 10:13:56 executing program 2: clone(0x1202b100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1329.415275][T15736] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 10:13:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="390000001300090417feb1ae7aa77cf40000ff3f0900000000000000000010141900040044000000000000000000e91ed838d2fd0000000100", 0x39}], 0x1) 10:13:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000001240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000001200), 0x3d1}, 0x3e) [ 1329.526513][T15654] Dev loop0: unable to read RDB block 1 [ 1329.560865][T15654] loop0: unable to read partition table 10:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) [ 1329.573740][T15654] loop0: partition table beyond EOD, truncated [ 1329.614443][T15654] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1329.694693][T15782] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1329.780622][T15784] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 10:13:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x10, r1, 0x0) 10:13:57 executing program 2: clone(0x1202b100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:13:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x3, &(0x7f0000001240)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x27}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000001200), 0x3d1}, 0x3e) 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) 10:13:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280), 0x0, 0x1a0}]) 10:13:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) 10:13:57 executing program 2: clone(0x1202b100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 10:13:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)={0xa3, 0x2000000000000}) [ 1330.102738][T15845] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 10:13:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000140)={0x400000100002f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) 10:13:57 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/130, 0x9a2733f6c2698b56, 0x0, 0x0) 10:13:57 executing program 2: clone(0x1202b100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1330.336150][T15914] input: syz0 as /devices/virtual/input/input24 10:13:57 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)={0xa3, 0x2000000000000}) 10:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) 10:13:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f04f021fffffe100004000638477fbac14140ce0ffe06ac699da153f08a0e6e380f6010af683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 10:13:57 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x50, 0x0, &(0x7f0000000600)) [ 1330.595713][T15908] Dev loop0: unable to read RDB block 1 [ 1330.625614][T15908] loop0: unable to read partition table [ 1330.667907][T15908] loop0: partition table beyond EOD, truncated [ 1330.720869][T15908] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 10:13:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000280), 0x0, 0x1a0}]) 10:13:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)={0xa3, 0x2000000000000}) 10:13:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x3, 0xfffffffffffffffd}, 0x4) 10:13:58 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x134}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1331.041353][ C0] net_ratelimit: 4 callbacks suppressed [ 1331.041361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1331.052873][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:13:58 executing program 1: r0 = io_uring_setup(0x40000000e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x2, 0x0) 10:13:58 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0x0, 0x0, 0x0, 0x2, 0x0, 0x5, {0x6, 0xfffffffffffffff9, 0x0, 0x80000000, 0x20, 0x2, 0x696f, 0x4, 0x0, 0xff}}}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x9}) r2 = gettid() ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r2}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) getgid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) close(r0) 10:13:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0184908, &(0x7f0000000000)={0xa3, 0x2000000000000}) 10:13:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000022000104000000a6ffffffffffffffe28f139814a2b0bf0b6511932bfa21a9ba54615f6d349dab4f078f12b71406822ddc8af61121be129ca878cd55927a3d6d4ee9a52d00003ec6cf5f2b916620e885549ca6df674f8e5800f9fe4e3527417b9b0c1412faf400d106b9695b64ffa2c3dde8a49f64f82b188b9fdbd95ddbf7f18ac501460e1251d1f43718384f34e50b2c0e6bdf4069f29b6b1549e82a382687b6b79e18c01668c02a3c8aca5497eb78d70e80aa0b23365f8811998c3677b31e2aecdd643aaab724f6e98de32fcf0d24e7da1b77bb65f06ddb724a1059edfc56194b"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={[], [], @loopback}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0) 10:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xcb, &(0x7f0000000000), 0xc) [ 1331.410893][T16068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1331.422934][T16059] Dev loop0: unable to read RDB block 1 [ 1331.472631][T16059] loop0: unable to read partition table 10:13:58 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000380)="0f20e06635000002000f22e00f35ba610066b80000000066efbaf80c66b8e8ee668466efbafc0cec26e0480f019a91d10f23630f01dff33eff45000f20e06635000004000f22e0"}], 0x0, 0x0, 0x0, 0xffffffffffffffc4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1331.513588][T16059] loop0: partition table beyond EOD, truncated [ 1331.546227][T16059] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) 10:13:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000022000104000000a6ffffffffffffffe28f139814a2b0bf0b6511932bfa21a9ba54615f6d349dab4f078f12b71406822ddc8af61121be129ca878cd55927a3d6d4ee9a52d00003ec6cf5f2b916620e885549ca6df674f8e5800f9fe4e3527417b9b0c1412faf400d106b9695b64ffa2c3dde8a49f64f82b188b9fdbd95ddbf7f18ac501460e1251d1f43718384f34e50b2c0e6bdf4069f29b6b1549e82a382687b6b79e18c01668c02a3c8aca5497eb78d70e80aa0b23365f8811998c3677b31e2aecdd643aaab724f6e98de32fcf0d24e7da1b77bb65f06ddb724a1059edfc56194b"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={[], [], @loopback}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0) 10:13:58 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 1331.829395][T16097] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:59 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x3}}) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x4, 0x931d197, 0x9, 0x3aa00, 0x4, 0x20, 0x10000}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) socket$inet(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)="51549863a8d98a342a9c301450267480d4e9dd899f2a89c0", 0x18}, {&(0x7f0000001340)}], 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000180), 0x4) 10:13:59 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0x0, 0x0, 0x0, 0x2, 0x0, 0x5, {0x6, 0xfffffffffffffff9, 0x0, 0x80000000, 0x20, 0x2, 0x696f, 0x4, 0x0, 0xff}}}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x9}) r2 = gettid() ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r2}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) getgid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) close(r0) 10:13:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x0) 10:13:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 10:13:59 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x2, 0x2, 0x73) r0 = socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendmsg$kcm(r2, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00mEmory '], 0xfdef) 10:13:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000022000104000000a6ffffffffffffffe28f139814a2b0bf0b6511932bfa21a9ba54615f6d349dab4f078f12b71406822ddc8af61121be129ca878cd55927a3d6d4ee9a52d00003ec6cf5f2b916620e885549ca6df674f8e5800f9fe4e3527417b9b0c1412faf400d106b9695b64ffa2c3dde8a49f64f82b188b9fdbd95ddbf7f18ac501460e1251d1f43718384f34e50b2c0e6bdf4069f29b6b1549e82a382687b6b79e18c01668c02a3c8aca5497eb78d70e80aa0b23365f8811998c3677b31e2aecdd643aaab724f6e98de32fcf0d24e7da1b77bb65f06ddb724a1059edfc56194b"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={[], [], @loopback}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0) 10:13:59 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000001340)=""/4096, 0x200000}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0096616, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x0, 0x541, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0xb, @rand_addr=0x200000}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) [ 1332.225092][T16118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1332.241400][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.247306][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1332.321396][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.327247][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:13:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xffffffffffffffbc, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", 0x0, 0x100}, 0x28) 10:13:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe52, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000022000104000000a6ffffffffffffffe28f139814a2b0bf0b6511932bfa21a9ba54615f6d349dab4f078f12b71406822ddc8af61121be129ca878cd55927a3d6d4ee9a52d00003ec6cf5f2b916620e885549ca6df674f8e5800f9fe4e3527417b9b0c1412faf400d106b9695b64ffa2c3dde8a49f64f82b188b9fdbd95ddbf7f18ac501460e1251d1f43718384f34e50b2c0e6bdf4069f29b6b1549e82a382687b6b79e18c01668c02a3c8aca5497eb78d70e80aa0b23365f8811998c3677b31e2aecdd643aaab724f6e98de32fcf0d24e7da1b77bb65f06ddb724a1059edfc56194b"], 0x14}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={[], [], @loopback}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback}}}, 0xf8}, 0x8}, 0x0) [ 1332.411367][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1332.417202][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:13:59 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0x0, 0x0, 0x0, 0x2, 0x0, 0x5, {0x6, 0xfffffffffffffff9, 0x0, 0x80000000, 0x20, 0x2, 0x696f, 0x4, 0x0, 0xff}}}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x9}) r2 = gettid() ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r2}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) getgid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) close(r0) 10:13:59 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:13:59 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x9fd724ec1a6b72c9, 0x0, 0x0) [ 1332.589594][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:14:00 executing program 5: mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x2a, 0x4, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r1, &(0x7f0000000080)=""/128, 0xae3f1a6) 10:14:00 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000001340)=""/4096, 0x200000}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0096616, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x0, 0x541, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0xb, @rand_addr=0x200000}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) 10:14:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000040850000000d000000b70000000000000095000000000000006c42a8eace204cc17d845d2d25e6566995604cce954e16dbf34cf0be2b25f0d64a84b22093d284c7b8a9044d384b2303747f70ebb92b3044bfba3c162afcd09b047fb56f733c52c4137634032bedd539f4a29eb56dde8b40b923f3ef64dd868ca8e37907c13374387331057896db13d100c13790ac61ec55d1da4b49b83ce7e9687a98fbfe4298305756b9cd8f32836c354bac4025843976b110d77b53cca94be8400ea9c25b3a2369f18057f228df0789958edb01363dd014a64cee873ff19b416baa5dd38fcbaaf425ed2ba21d525403b2a52d6f286f36ca7cd0235af0a93bd61644eb2b7f4b73e5e5382f178dcd9b2636ecc41fd8f1d682c5460adce630a7b0d3216abbfb5f700978731ed1e7e554707e0d183671c86f4cad6c3521acb77ccb9ec189ea3c0b788a71f9f801eed64a5395006563045356e403450cf33abb2ab92e065ad661f188aeb45b8fc4805a599e9e4c9d5f45d664beb5dc67892a5cec16d9f75da7433c7a075e999ea66f0db2605d91f95ef3461a14a6ffaa842f6311b5ac90809678cdf182133e891cc2134e5389532ace1dd5b154ae97861266aa230433"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xffffffffffffffbc, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", 0x0, 0x100}, 0x28) 10:14:00 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0), 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0x0, 0x0, 0x0, 0x2, 0x0, 0x5, {0x6, 0xfffffffffffffff9, 0x0, 0x80000000, 0x20, 0x2, 0x696f, 0x4, 0x0, 0xff}}}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x9}) r2 = gettid() ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r2}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) getgid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180), 0x0) close(r0) 10:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:14:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe2d640500000000004502faff00ffffffb504000000000000b704000010000020720700fefed11800850000002e000000b7000000000000009500000000000000c1ad2b8486cb349bf2ed81fc3c0ad55697fcb5aecbe8d9e98d8c96288032c46643e69177e8cfc3dc9dfdf97105d73d2cb598c52f13d6f62cf07d3896914e8376b7074bb5e8982e2fecca194b454e08e78efcc522075b9be3244a26ef46d0885781b27fba42dabd97b44079f541dede1f4a92c8c1be7687b3d2d2aa29f8f7e92bee62e540e638f1380b8d5f422149f4f84d1de8c44117b61592b80250b030fbe5e309a7bea700"/292], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00='}, 0x48) 10:14:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:00 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xffffffffffffffbc, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", 0x0, 0x100}, 0x28) 10:14:00 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000001340)=""/4096, 0x200000}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0096616, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x0, 0x541, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0xb, @rand_addr=0x200000}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) 10:14:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:14:01 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:01 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 10:14:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x6, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x15000000000000, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:14:01 executing program 2: setgroups(0x14a, &(0x7f0000000040)) getgroups(0x1, &(0x7f0000000280)=[0x0]) 10:14:01 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x3}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000400000000000"], 0x10}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 10:14:01 executing program 1: bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000001340)=""/4096, 0x200000}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, &(0x7f0000000140)}, 0xfffffffffffffc5d) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0xc0096616, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, 0x0, 0x541, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0xb, @rand_addr=0x200000}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) 10:14:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000040850000000d000000b70000000000000095000000000000006c42a8eace204cc17d845d2d25e6566995604cce954e16dbf34cf0be2b25f0d64a84b22093d284c7b8a9044d384b2303747f70ebb92b3044bfba3c162afcd09b047fb56f733c52c4137634032bedd539f4a29eb56dde8b40b923f3ef64dd868ca8e37907c13374387331057896db13d100c13790ac61ec55d1da4b49b83ce7e9687a98fbfe4298305756b9cd8f32836c354bac4025843976b110d77b53cca94be8400ea9c25b3a2369f18057f228df0789958edb01363dd014a64cee873ff19b416baa5dd38fcbaaf425ed2ba21d525403b2a52d6f286f36ca7cd0235af0a93bd61644eb2b7f4b73e5e5382f178dcd9b2636ecc41fd8f1d682c5460adce630a7b0d3216abbfb5f700978731ed1e7e554707e0d183671c86f4cad6c3521acb77ccb9ec189ea3c0b788a71f9f801eed64a5395006563045356e403450cf33abb2ab92e065ad661f188aeb45b8fc4805a599e9e4c9d5f45d664beb5dc67892a5cec16d9f75da7433c7a075e999ea66f0db2605d91f95ef3461a14a6ffaa842f6311b5ac90809678cdf182133e891cc2134e5389532ace1dd5b154ae97861266aa230433"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe80, 0xffffffffffffffbc, &(0x7f0000000000)="b90703e6680d698cb89e40f02cea", 0x0, 0x100}, 0x28) 10:14:01 executing program 2: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0xcf5, 0x0, 0x0, "01b073e270aa1e880cba114150698fc6", "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"}, 0xcf5, 0x0) 10:14:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:02 executing program 2: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000140)='./bus\x00', 0x5c00, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '\x01\x00\x00\x00\x00\x00\x00\a\x95\xf7\x17R\x8d\x80\x93q\x86@\f\xd3-%\xbef}U\xa4\xe1\x93i>F\xbf\xf6\xbaN\xff\x1d\xd6\xf9P\a\xfb\xb3\xb9\xa0\x14\xbd\xe6\xbe\xcd}\xfb\xc9\xcb\x84\xf2\x8d\xcc\x80\x1aX\xa8=\x90\'\xbdL\x89\xfd\xcb\x01\x83\x87\x95A\x1f\xd9\xc2\xba96\xe2X{ymS\xfbFx\x9c\tCB\xd4\x82\x93\xd0\xa4\x83\x01\xf7<\xad\a\xff\xde\xc1X\xf3\xfemX\xba\xe4\xf4\x1b>\xba\xbf\xf3\xf5\xdb\x1a\xfes\x11\fu\xdc>\xf2a\xe5\x16\xde!fc82\x01\x0f9Y}p\x88\xe3Q&\xf2Q\xb6W\xdf\xc5\x12\xa9\xbb\xd6'}}]}) 10:14:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x1a, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x348) bind$inet6(r1, &(0x7f00000006c0), 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0xffc2) 10:14:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) close(r0) r1 = socket(0x10, 0x80002, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ff000000", @ANYRES32=0x0], &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) [ 1334.828044][T16644] gfs2: fsid=: Trying to join cluster "lock_nolock", "" [ 1334.868356][T16644] gfs2: fsid=: Now mounting FS... [ 1334.912541][T16644] attempt to access beyond end of device [ 1334.936475][T16644] loop2: rw=4096, want=136, limit=46 [ 1334.951400][T16644] gfs2: error 10 reading superblock [ 1334.971641][T16644] gfs2: fsid=: can't read superblock [ 1334.984605][T16644] gfs2: fsid=: can't read superblock: -5 10:14:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x5f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x7ffff000) [ 1335.175104][T16645] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1335.205926][T16644] gfs2: fsid=: Trying to join cluster "lock_nolock", "" [ 1335.227664][T16644] gfs2: fsid=: Now mounting FS... [ 1335.248376][T16644] attempt to access beyond end of device [ 1335.269599][T16644] loop2: rw=4096, want=136, limit=46 [ 1335.280486][T16644] gfs2: error 10 reading superblock [ 1335.289491][T16644] gfs2: fsid=: can't read superblock [ 1335.297008][T16644] gfs2: fsid=: can't read superblock: -5 10:14:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x5f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x7ffff000) 10:14:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0xff59) 10:14:02 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:02 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r3, 0x4, 0x46600) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) 10:14:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x5f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x7ffff000) 10:14:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x2007, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003300050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018005005400d1bd", 0x2e}], 0x1}, 0x0) [ 1335.816418][T16780] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1335.978266][T16796] openvswitch: netlink: Key type 84 is out of range max 29 10:14:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x5f, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x7ffff000) [ 1336.019352][T16782] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:14:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x69b31885}}}) 10:14:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x200004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 1336.389453][T16803] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 10:14:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="8be571ccc6deb1796405b883ef4b0fa7be8b1fbab843c84e2306a818053b2d4d", 0xffffff17}], 0x1, &(0x7f0000000340)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 10:14:03 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x69b31885}}}) 10:14:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) [ 1336.635640][T16814] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 10:14:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x69b31885}}}) 10:14:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000001d"], 0x17) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 10:14:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10080) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000003c0)) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000240)={0x1, 0x6}) ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000440)=r2) process_vm_writev(r2, 0x0, 0x0, &(0x7f0000001d00)=[{0x0}, {0x0}], 0x2, 0x0) sched_setparam(r2, &(0x7f0000000280)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0xac, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x74, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffe00}], @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x8}, @IFLA_GRE_IFLAGS={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x401}], @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8}]}, 0xac}}, 0x0) 10:14:04 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xffffffff, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x69b31885}}}) 10:14:04 executing program 4: r0 = epoll_create1(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x80c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) 10:14:04 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1337.208922][T16816] device nr0 entered promiscuous mode [ 1337.221315][T16829] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 10:14:04 executing program 4: r0 = epoll_create1(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x80c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) 10:14:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="8be571ccc6deb1796405b883ef4b0fa7be8b1fbab843c84e2306a818053b2d4d", 0xffffff17}], 0x1, &(0x7f0000000340)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) [ 1337.390792][T16837] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 1338.048104][T16810] device nr0 entered promiscuous mode 10:14:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0xbacbb0d72b33fc33, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8, 0x4, {0x0, 0xfffffffffffffffc}}]}, 0xca}}, 0x0) 10:14:05 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 10:14:05 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0xf0, 0x7f, "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", 0xf9, 0x6, 0x0, 0x2, 0x5, 0x6, 0x50, 0x1}}}, 0x120) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, &(0x7f00000002c0)=0xdd, &(0x7f0000000300)=0x1) 10:14:05 executing program 4: r0 = epoll_create1(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x80c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) 10:14:05 executing program 0: sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x101}, 0xc, 0x0}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)={0x8, 0x20000000001}, 0xa66c1) 10:14:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="8be571ccc6deb1796405b883ef4b0fa7be8b1fbab843c84e2306a818053b2d4d", 0xffffff17}], 0x1, &(0x7f0000000340)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 10:14:06 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 10:14:06 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 10:14:06 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getrusage(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 10:14:06 executing program 4: r0 = epoll_create1(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x80c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) 10:14:06 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 10:14:06 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 10:14:06 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0xf0, 0x7f, "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", 0xf9, 0x6, 0x0, 0x2, 0x5, 0x6, 0x50, 0x1}}}, 0x120) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, &(0x7f00000002c0)=0xdd, &(0x7f0000000300)=0x1) 10:14:06 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r1, 0x0) setresuid(0x0, 0x0, 0xee00) 10:14:06 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000100)='./file0\x00') execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10:14:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a9119aad5265df5cf1cdd8b43", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="8be571ccc6deb1796405b883ef4b0fa7be8b1fbab843c84e2306a818053b2d4d", 0xffffff17}], 0x1, &(0x7f0000000340)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/176, 0x7ffff000}], 0x1}}], 0x1, 0x0, 0x0) 10:14:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'rose0\x00'}, 0x18) [ 1339.809481][T17020] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/6' not defined. 10:14:07 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0xf0, 0x7f, "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", 0xf9, 0x6, 0x0, 0x2, 0x5, 0x6, 0x50, 0x1}}}, 0x120) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, &(0x7f00000002c0)=0xdd, &(0x7f0000000300)=0x1) 10:14:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getrusage(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 10:14:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xe07000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$swradio(0x0, 0x1, 0x2) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xe07000, 0x2, 0x11, r2, 0x0) [ 1339.906904][T17024] IPVS: Unknown mcast interface: rose0 10:14:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "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"}}, 0x34b) 10:14:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = epoll_create1(0x0) fcntl$getownex(r2, 0x24, &(0x7f000045fff8)) 10:14:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r1, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x2d3) 10:14:07 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:07 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) fallocate(r0, 0x20, 0x0, 0xfffffeff000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$KDENABIO(r2, 0x4b36) fallocate(r1, 0x0, 0x0, 0x10000101) 10:14:08 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) write(r1, &(0x7f00000001c0), 0xfffffef3) 10:14:08 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0xf0, 0x7f, "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", 0xf9, 0x6, 0x0, 0x2, 0x5, 0x6, 0x50, 0x1}}}, 0x120) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x80, &(0x7f00000002c0)=0xdd, &(0x7f0000000300)=0x1) 10:14:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) [ 1341.166445][ T26] audit: type=1804 audit(1573208048.492:183): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir094637198/syzkaller.ZDVz7C/28/bus" dev="sda1" ino=17577 res=1 10:14:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getrusage(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 10:14:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "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"}}, 0x34b) 10:14:08 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "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"}}, 0x34b) 10:14:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:09 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getrusage(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 10:14:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "363df62355a4bba72cd136433e86aa8dc108af6167eee1ebcdc0f45e4c986bd99a4ca07b85e8d259cdac13cdd1436fefc8d5e183e32271ae94df9ab2fa6022b7c5c8e517c9d0c24bbea4bc3aa63997c40e4385120e9be592e601f7d822c8bf39450868f02a0928e10b48b0da0fc7c0063284d4c2cfbb6fb52601a9e476e3b9ab571b0ddcf55d09eb0a2ccc79fc05180ef1cd520f0b3be0f383c22d71d7a9618c129c1a6ef4b9cf06d2be4ba39efccdd551e9e00ed686bf85b5b203915c2d1b60b169779190438c68bc5beace88224f59c7d12e0c1523ec2a34b7e64419db8f9edf9286a31ee076a21da98877f642f8b2d2b481205b3a391157e13cb3de16a4eb"}}, 0x34b) 10:14:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "363df62355a4bba72cd136433e86aa8dc108af6167eee1ebcdc0f45e4c986bd99a4ca07b85e8d259cdac13cdd1436fefc8d5e183e32271ae94df9ab2fa6022b7c5c8e517c9d0c24bbea4bc3aa63997c40e4385120e9be592e601f7d822c8bf39450868f02a0928e10b48b0da0fc7c0063284d4c2cfbb6fb52601a9e476e3b9ab571b0ddcf55d09eb0a2ccc79fc05180ef1cd520f0b3be0f383c22d71d7a9618c129c1a6ef4b9cf06d2be4ba39efccdd551e9e00ed686bf85b5b203915c2d1b60b169779190438c68bc5beace88224f59c7d12e0c1523ec2a34b7e64419db8f9edf9286a31ee076a21da98877f642f8b2d2b481205b3a391157e13cb3de16a4eb"}}, 0x34b) 10:14:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "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"}}, 0x34b) 10:14:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x5, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) [ 1343.523742][T17351] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 1343.594213][T17353] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 10:14:11 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x3f, 0xff, 0x9e, 0x0, 0x80, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5a2d, 0x4, @perf_bp={0x0}, 0x801, 0x0, 0x9, 0x0, 0x8, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 10:14:11 executing program 3: r0 = userfaultfd(0x0) readv(r0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 10:14:11 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) dup2(r4, r3) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfd, "5e150b", "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"}}, 0x34b) 10:14:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1\x00'}, 0xf62c3dc8da425be8) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 10:14:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x0, @multicast2, 0x0, 0x0, '\xae\xbc\xca\x8a\te\xca\xbb\x1dR\xe4\x9b\b\xc4\xf7K'}, 0x2c) 10:14:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e50bfb0d61e18fbd2fe6a5dd80009d00010801000000000300f8d708e82f87", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:14:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000006180)=[{{&(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x6, 0x4, 0x6d, @local}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)="1eea330ee464d11c155676d66a3945161deaa1d5313db199e59561bb9fb77aff712abc7ac99b480f99a347c8116095da0115806aa952ae8de4367c48bb1812fcb81ad3a205ca6b2600b6fff02ad5e066e57a8ca1c4f7c5d803c893b40213b99d4e6adb96ddee8f623f66aa513f9cc8d763", 0x71}, {&(0x7f00000001c0)="8e481633405ab9f815f6c1b2386c60bb1a0a784f736dc1a090114476c6463276e21a46495b13f6c9cd0839f26926baf0e5c29c6d2886bd8137208bfba34500e4be5a68b9f0a0c11fb64d33e2209d2cf2722c9de382b74387f203f63240608829ced0247f97730d580919b1a07844347c0d2dee89599fc94f0f9f", 0x7a}, {&(0x7f0000000240)="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", 0x7e0}, {&(0x7f0000001240)="5577d64b4178c3c22830b2a07afcc7344273516556ca53162fc5e597949ebad6fb3adbe15dce30f20a8fdffc7f85e6bb308bea7a33c8e2c34f7d9402599048ce483fff", 0x43}, {&(0x7f00000012c0)}, {0x0}], 0x6, &(0x7f0000002500)=[{0xa0, 0x0, 0x0, "b0d809d97a58ba6c1d8737283ba38bce7ecd0605197692e3af8966bfccb49221a3afa6860648ed62700e897b5ddfda56440df7ad0030eb6fc589d7c9147758054d4cf061373f6dcb45c184e45517185b17ee8f0595d3158afe9558bcdb38250c3f6ac85770d78f6f3e58690e6eba4cc2ab1f2e902b2a4ccf54691cd4c380ba889695e0a8c25e773be12761804b"}, {0x30, 0x0, 0x0, "e3bf0c2ee35901a7a8d00a966356397ebbd681db7fbabdf158c0618958b1"}, {0x810, 0x107, 0x0, "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"}], 0x8e0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 10:14:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) dup3(r1, r0, 0x0) 10:14:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 10:14:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) lseek(r3, 0x0, 0x0) 10:14:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e50bfb0d61e18fbd2fe6a5dd80009d00010801000000000300f8d708e82f87", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:14:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000006180)=[{{&(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x6, 0x4, 0x6d, @local}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)="1eea330ee464d11c155676d66a3945161deaa1d5313db199e59561bb9fb77aff712abc7ac99b480f99a347c8116095da0115806aa952ae8de4367c48bb1812fcb81ad3a205ca6b2600b6fff02ad5e066e57a8ca1c4f7c5d803c893b40213b99d4e6adb96ddee8f623f66aa513f9cc8d763", 0x71}, {&(0x7f00000001c0)="8e481633405ab9f815f6c1b2386c60bb1a0a784f736dc1a090114476c6463276e21a46495b13f6c9cd0839f26926baf0e5c29c6d2886bd8137208bfba34500e4be5a68b9f0a0c11fb64d33e2209d2cf2722c9de382b74387f203f63240608829ced0247f97730d580919b1a07844347c0d2dee89599fc94f0f9f", 0x7a}, {&(0x7f0000000240)="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", 0x7e0}, {&(0x7f0000001240)="5577d64b4178c3c22830b2a07afcc7344273516556ca53162fc5e597949ebad6fb3adbe15dce30f20a8fdffc7f85e6bb308bea7a33c8e2c34f7d9402599048ce483fff", 0x43}, {&(0x7f00000012c0)}, {0x0}], 0x6, &(0x7f0000002500)=[{0xa0, 0x0, 0x0, "b0d809d97a58ba6c1d8737283ba38bce7ecd0605197692e3af8966bfccb49221a3afa6860648ed62700e897b5ddfda56440df7ad0030eb6fc589d7c9147758054d4cf061373f6dcb45c184e45517185b17ee8f0595d3158afe9558bcdb38250c3f6ac85770d78f6f3e58690e6eba4cc2ab1f2e902b2a4ccf54691cd4c380ba889695e0a8c25e773be12761804b"}, {0x30, 0x0, 0x0, "e3bf0c2ee35901a7a8d00a966356397ebbd681db7fbabdf158c0618958b1"}, {0x810, 0x107, 0x0, "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"}], 0x8e0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 10:14:12 executing program 5: set_mempolicy(0x4001, &(0x7f0000000040)=0x6c554818, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 10:14:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xff2b}]) 10:14:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000006180)=[{{&(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x6, 0x4, 0x6d, @local}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)="1eea330ee464d11c155676d66a3945161deaa1d5313db199e59561bb9fb77aff712abc7ac99b480f99a347c8116095da0115806aa952ae8de4367c48bb1812fcb81ad3a205ca6b2600b6fff02ad5e066e57a8ca1c4f7c5d803c893b40213b99d4e6adb96ddee8f623f66aa513f9cc8d763", 0x71}, {&(0x7f00000001c0)="8e481633405ab9f815f6c1b2386c60bb1a0a784f736dc1a090114476c6463276e21a46495b13f6c9cd0839f26926baf0e5c29c6d2886bd8137208bfba34500e4be5a68b9f0a0c11fb64d33e2209d2cf2722c9de382b74387f203f63240608829ced0247f97730d580919b1a07844347c0d2dee89599fc94f0f9f", 0x7a}, {&(0x7f0000000240)="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", 0x7e0}, {&(0x7f0000001240)="5577d64b4178c3c22830b2a07afcc7344273516556ca53162fc5e597949ebad6fb3adbe15dce30f20a8fdffc7f85e6bb308bea7a33c8e2c34f7d9402599048ce483fff", 0x43}, {&(0x7f00000012c0)}, {0x0}], 0x6, &(0x7f0000002500)=[{0xa0, 0x0, 0x0, "b0d809d97a58ba6c1d8737283ba38bce7ecd0605197692e3af8966bfccb49221a3afa6860648ed62700e897b5ddfda56440df7ad0030eb6fc589d7c9147758054d4cf061373f6dcb45c184e45517185b17ee8f0595d3158afe9558bcdb38250c3f6ac85770d78f6f3e58690e6eba4cc2ab1f2e902b2a4ccf54691cd4c380ba889695e0a8c25e773be12761804b"}, {0x30, 0x0, 0x0, "e3bf0c2ee35901a7a8d00a966356397ebbd681db7fbabdf158c0618958b1"}, {0x810, 0x107, 0x0, "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"}], 0x8e0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 10:14:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 10:14:12 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e50bfb0d61e18fbd2fe6a5dd80009d00010801000000000300f8d708e82f87", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:14:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002040)={0x2, &(0x7f0000002000)=[{0x80}, {0x6, 0x0, 0x0, 0x50000}]}) 10:14:12 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) read$alg(r1, 0x0, 0x0) 10:14:12 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000740)=""/246) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000240)={0x2000000000000232, &(0x7f0000000400)}) 10:14:12 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x0) 10:14:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 10:14:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, 0x0, &(0x7f0000000240)) 10:14:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000006180)=[{{&(0x7f0000000080)=@llc={0x1a, 0x200, 0x0, 0x6, 0x4, 0x6d, @local}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000100)="1eea330ee464d11c155676d66a3945161deaa1d5313db199e59561bb9fb77aff712abc7ac99b480f99a347c8116095da0115806aa952ae8de4367c48bb1812fcb81ad3a205ca6b2600b6fff02ad5e066e57a8ca1c4f7c5d803c893b40213b99d4e6adb96ddee8f623f66aa513f9cc8d763", 0x71}, {&(0x7f00000001c0)="8e481633405ab9f815f6c1b2386c60bb1a0a784f736dc1a090114476c6463276e21a46495b13f6c9cd0839f26926baf0e5c29c6d2886bd8137208bfba34500e4be5a68b9f0a0c11fb64d33e2209d2cf2722c9de382b74387f203f63240608829ced0247f97730d580919b1a07844347c0d2dee89599fc94f0f9f", 0x7a}, {&(0x7f0000000240)="c088c4d3ffbc53909cf083926e4f86d8b8439635bffae541e8fdb54d4bead95d434f68997f8d7db7b0d30c520c16adcea6fa96725612b4cdaea9d0eea1f9991c7839d724d1cb15caaecb4b81448d06c3fe56543c768dfb0e6aef1dd8fd72e57899600b1814af8a095ad01aedddab263e8fabac93b210d2fb5a8676b0154ce5a4faeb7e8ef0ecf5a1b9c2da9ddcb7484e32713ac3a4333483c8a9ba8f4243eb294eadafadfddc84c202a9b0b88e681ad1f2b6685a422ba79f605a38603310cc8ee4d1ebc77b31e52519eef265741acdd4be02aa0a96a2894d3ed0f8c9849f97992dfead887a5564661d6b316e3943f881f74d500c0bb9dd7b9cb1d3158fe8f4de7c7b7890fc4af8e4337d2a9aac2654a08890daa51d3fbc1303759ba3438b28d1ec03e2404e5c2b7f5f76bd0df49234f6ac148bb90b5cfc07f9e8b7eff91067b3d6422f95c7d387caaab4bde173f35de3fb1ec56ba0d647311d3a6a2bd1a60894302cd50692016ca8c19822d34b1c5d19867ec5dd34290500dfc5096004fa95c714c1e95d2d98a634b7f93df0af8776a21fc486c69e8a8f3c69ca226f78decdc8b8dcc4e9518969b0cc83c1cc8cfb5ebfcb54771bd4fd9284b32c7f901e74e2a673b6ad2e3246f43b53636ef2fe827aa724c2c07a2aba988f77598bbb3cd81227f53890f221cae3e40737e5ee8a36d703f9e818b701cac8d128befb42b2b0093fb46e2f6b525414f072667edb4f82521b986d613a2d69737fa1b5b44b25a8ca99a16c4e350dd62f5cd5232be8d626abc6fedf760ede31dfe3c2e668c00427d2947fd5e35cde8bf4701552f1d0a09a88abe852505d83512c2693fac35cdf19e51e6bc0f1c428f366e321a0ccd97b587fc1d8c7629401784355a677e56ebd2479a069ee17456ab2e0b5d3eb181676b1c93cc1aa333f6fe16555dd87e8deea49a3efdcf6e85891b4543e08b44c67fd7fa1cc1f0d183a764c97d3a0ea5cbf3f7174f71fd76c8bca5e07ed54cd1a5c3b45b272511f4a603f05414ec1c913843ee3267593a351b067205b525252f76873842644982ffb3526564eab8ec1c62831765f26b0a9951593858cca7ad8768aaacc81fcf51dc87296f9f3754baac6b2ec1b1037ec8434dc6c138f8c6d931b2965f37d889c4b77e4d897246d2ccdecaf886dbfd8c4ab68f0644298fc4ef455a203fca9cae2cfe1ee15bc069021e86781b89478052760e34ca77c3560a4bd94708333ba6dae46660f04e4076958bd431064a4296bc5ba07b1f12cf7a2cb6385da00f11b25b4f5a823a167b9da9e8adb1226dd659f7ff140fb12f6ac10099a695cd1482d9f0da262882fd9e5717872df1e0e0514d1f8f413ab3ce3f4596cc2bda7db9c8bfa76e5b4a1b5cf5ee6b35e2d1e57d10cc7333b7c77f9e539f848febac30bb5864639196af03af65dc41d75c26f46404ddf205d194cbf8f071a2f4f8d532490352b7a28c46913260a3ff7fa6995fe8d73f4b2a34bfab88a3446d8b99dc43466c335f9adff5f9705a307e6f94f5801771a72c12d3e99afbb7c2ba412bc77e56071b9c1dd6269ba2d14c1ba4a3707520d3b5d38113a33422aad79f7a0c3b7030aaf1172889b10b61afbd6155808b9184ecd5bdafd7b73e63341dc8c83a61a36106a284b3bc9e5e2d110ba8834248901d3869afb975187ae96d7ce2c905a7bacaf894df2cf4ec44c3f1d3f0accf74875b666995fff678a7c95bc0711454b5b778dc7ec985b8914237f389bd051317bcb553cf4e98d2b1f53958532d2cb74a4d0200ece71677aec595f3a178030dca50cafa4623c2172fca48e3465796adcbfefe70c6cec38988f995663a7048b0fccc498875502e7b48ec71a135f0d1256a5dbb100c413fd048afff9d9f610ec3ddca85bdb56d84b5e6680f257f559dd61c2dd28bcb3a2bd6365effd670aec6b3aeeed4586226356f3f6ef47f78f9a31d5e2d4d409307a0083d12d35a0f823bd52b0d314429c95a765082346a7696a30826ead95d66aa751e2540b0ba16daa79332f88f6e82fd3b32b2e287bcd5eafddd72786ab9d686add856643b526f9b79411130f24b4b1aed51bf54081a0c1fd9e3c7b7c2f2415dfc50e6b6f84ff15c55555b0ffa1f98ca7a00c7b411b2104fe552c326de77bf1e992b0cd860d6f23bdaddd9a8235c08dbfb2628de2056f44b2e98daeed394eb2059faaa1d58900acd75989ebc503b9056000e3d4738eafcf6ac233ea685092fd3bb688695e2600c6bd3b30ad76e77833ff9074fd7039f221f4cbaf49912fa11570423b985dddb7756a1b4da7022a08dc10bb0a22f5f717965a7abe5e7e2271014a27c0061cf986ef8903c7d47047c9bbd3c6fb3b5c627c79b2c1828716964a3b499406fc0dc64d8e62b98884e6c7089897e5eb910f8836468067f0198ffab0a90c361ce65b3c3c88a9e6e52935c108d57aa510c891f02e1e997b4b151ebf35263a49e5d2103c57b61a065855c94a8afe125b39f59eb0618c996b6f8cc069c944c77186ef4c51d5aa3822de2e06f38176893b195f635edc9cb31728894a0c82b25c0d76aecd00457a10a932036454d2adb16c292737919111f223b400788cef5260ea150754ac297f219b3dff3fa5447c8b66d5dbffe358d39232e000ce84b6ea9b7a7cce5dab517252d171bcf83692de36e33edf27914231df47db3c8f0f96f415a94ba378589e1c226a4683f7067873e8ffb6882030589401e0a8a285700cddb9d751fb3535588d65ef9d2be2f2ed2286a7fb87ef65bba66bc37b65aca27baa55fa4ada8e779323b1ba55dd5f151c1300ff2c0c2d53cbd6ba7ec9b9fe3ef283d6fe763efe31e852dcec2b1e29605bcb", 0x7e0}, {&(0x7f0000001240)="5577d64b4178c3c22830b2a07afcc7344273516556ca53162fc5e597949ebad6fb3adbe15dce30f20a8fdffc7f85e6bb308bea7a33c8e2c34f7d9402599048ce483fff", 0x43}, {&(0x7f00000012c0)}, {0x0}], 0x6, &(0x7f0000002500)=[{0xa0, 0x0, 0x0, "b0d809d97a58ba6c1d8737283ba38bce7ecd0605197692e3af8966bfccb49221a3afa6860648ed62700e897b5ddfda56440df7ad0030eb6fc589d7c9147758054d4cf061373f6dcb45c184e45517185b17ee8f0595d3158afe9558bcdb38250c3f6ac85770d78f6f3e58690e6eba4cc2ab1f2e902b2a4ccf54691cd4c380ba889695e0a8c25e773be12761804b"}, {0x30, 0x0, 0x0, "e3bf0c2ee35901a7a8d00a966356397ebbd681db7fbabdf158c0618958b1"}, {0x810, 0x107, 0x0, "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"}], 0x8e0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 10:14:12 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e50bfb0d61e18fbd2fe6a5dd80009d00010801000000000300f8d708e82f87", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 10:14:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x98) 10:14:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b07, &(0x7f00000000c0)='wlan1\x00\xa2\xb8y\xe1\x04\xbe\x00\x00\t\x00\x00\x00\x00\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') 10:14:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r2}]}}}]}, 0x3c}}, 0x0) 10:14:13 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fanotify_init(0x76, 0x0) 10:14:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00') pidfd_send_signal(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffdffa}, 0x0) 10:14:13 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000440)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stet\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000380)=@in={0x2, 0x4e23, @rand_addr=0x7fffffff}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000005600)=[{0x0}], 0x1}, 0x40000040) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000005740)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) gettid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r4, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=""/79}, 0x20) 10:14:13 executing program 4: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace$getregset(0x4201, r0, 0x0, &(0x7f0000000200)={0x0}) 10:14:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 10:14:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x140) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x101, 0x42a601) name_to_handle_at(r2, 0x0, &(0x7f0000000400)={0x24, 0x9, "30e1a80c1e6f6d31f75f523ca6cfc21bd67eff6c13850ba823eefc17"}, &(0x7f00000004c0), 0x1000) r3 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000280)={0x17, 0xe1, &(0x7f0000000300)="c7e691119736c4308feacffa5dc51256f49ea03626153767ff51fc5db8710286b4c0263f9525db3a2620c1f442f5517ced71c6c96ef1043c6b8be2b52bf874bc56278e09a913c51fbca52f7f43cf0eba1a5fa820ca055649879527ffd635413b5c2bcc9f3a5a7b25b39c1695ae8b49c7a7286d0b105a3379b8e436e79672a7babc63f188442775c376b84e5bcad2231485b2cad87e428105d3cd8c5af7979ef60e0d1f7af357f6c367929255e012bb575de0dbcec8781b1c072f3ced55776c8bd4603c91c15a371211d3d5a69e1922765627d1baaa3e138e406b13b509be93ac5b"}) fchdir(r1) r4 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) inotify_init() unlink(&(0x7f0000000040)='./file0\x00') write(r4, &(0x7f0000000600)="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", 0x200) sendfile(r4, r5, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) r6 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) ioctl$FICLONE(r6, 0x40049409, 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, &(0x7f0000000040)=0xffffff18) mq_getsetattr(r0, 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000800)=ANY=[@ANYBLOB]) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xfff9, 0x9, 0x281, 0x2, 0x9, 0x0, 0x9b, 0x7, 0x7c, 0x30}) 10:14:13 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0/file0\x00', 0xc000, 0x0) 10:14:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") unshare(0x400) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 10:14:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0xe9b038d1c8b8214d}, 0x14}}, 0x0) 10:14:13 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@dev]}, 0x14) [ 1346.557838][ T26] audit: type=1800 audit(1573208053.882:184): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=820 res=0 10:14:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xfffffffffffffc1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="65660f388079020f01d06566660f3881800f00f210d3baa10066ed66b8010000000f01d9440f20c066350c000000440f22c00f350f0198f29764f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200040000000009002f6465"], 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:14 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10000000012, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:14:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 10:14:14 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffe07a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) 10:14:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) [ 1347.034683][ T26] audit: type=1326 audit(1573208054.362:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d05a code=0x0 10:14:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_STATS_ENABLED={0x8}]}}}]}, 0x3c}}, 0x0) 10:14:14 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfffffdd2) 10:14:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) 10:14:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000340)={'mangle\x00'}, &(0x7f00000003c0)=0x54) 10:14:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xfffffffffffffc1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="65660f388079020f01d06566660f3881800f00f210d3baa10066ed66b8010000000f01d9440f20c066350c000000440f22c00f350f0198f29764f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200040000000009002f6465"], 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1347.531640][T18128] IPVS: ftp: loaded support on port[0] = 21 10:14:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1000000000000277, 0x400000000000) [ 1347.705618][T18235] netlink: 'syz-executor.4': attribute type 42 has an invalid length. 10:14:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0046686, 0x0) 10:14:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@deltclass={0x38, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}, [@TCA_RATE={0x8}, @TCA_RATE={0x8}]}, 0x38}}, 0x0) 10:14:15 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xfffffffffffffc1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="65660f388079020f01d06566660f3881800f00f210d3baa10066ed66b8010000000f01d9440f20c066350c000000440f22c00f350f0198f29764f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200040000000009002f6465"], 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0046686, 0x0) 10:14:15 executing program 2: r0 = socket$inet(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000240007031dfffd946fa2830020200a0009000400001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 10:14:15 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:15 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e10000000000000fc04651432149fb7d5ef19f6bb37c719f65b8b599c33b3cdb7e7ea336e1ec226d868d3fc3ed20bc35898a1cc81bfe3a18243e9756835b5d4f71cf819f6d235587a11b13569610c687e48231550c396f854f5c47eba590694476d3bd366b83d1b1629a392b81ae061c73a49179f9f3bde1fad11e0bc20cc5babb9451efe385891a34d80b3783d641f38dad827b2197816876820052bb0cc0eed573ba5de1bf1a1f6177812d58a7b20883e9f343af69bda5531f975fe539bd26140c96ca5783be95c609f2dd084a12e3fe0b5825c347cb024e28f7bb48cdf7f94fd0dcfd4245183a1ac448fdb979f1c56dd823016d9ea92906b4f088075e4e3171df0f95158e3936d9cc4175d88e69efe7cc16a640d42de8c513bf7059f75c332670f790c71a574aa8629f435c1c437477f17de186c3cfa6c3d111d4c27b8f1ef186605b2be61b5df6cf81e539182555b0a4e1bbddb8dd8505f51f7d4f969f6beaad7428e7ad438ceb6902b663dc2d6aaf6f55b0fb84f2c2126391f74c865896b3d7208d1d71bb2c736752c59f7b9c9bdbede6368e7396373445c2e62990394ea039b01a717531ea863a61efa29cbf6e5a982af9d49284e7091a6bd265c152f08461fda67fab8694ae9775d9c43a8035de806a47a3a715ab982bb31f60d0cce40540c655d267157376a8856e8ab28140da80becd7a9ed8a92156f665854264c412954232e19602ecfa5ce680dc6f602a9e078f387c420efb55aa87341d0caffe9f507fabbd7d35af526a525f0528023985da8aaae670a534e5c93abf0efcc27a9cf1fe5d1903f04f7769bbfe2276dfa567812981a4771846938d23ea748238ece814870d40b167582352e840b73b13ee5d8a0937a5694cb94590f2c5f1a0b79be942a6379d2de2894f52278f17f8bbe220c09f4c7b5799ef6b0abdd620eccb1e6b6d8d5359e3fb374257ac68f6f0282dd0e19ecc43d0fa7146de2617800bd1263217de867db643f7813245fd806bddc69515ebe7aa3d9d8165cc9347e689f53bda20604ddd2cc15a83a36336e5a2c44a9197bbf7fd53df8bf576fb407b5b9156c484de907c84be3a20a2844f0d374ae8ae05d8e19caf3b65fc91accbba8995743724c1d6cc2ad7c4f548878f7e3fe0adf9f77642e3787f73d84a15ab2cfd11521a62d7dce00eaab0092eb6e438f0c22052bff35bfbb22cf6f477f1b34c60b8518467263f1fedadf202e5030c78ee6210a90ecad7e17eaa3c6bd2c34238137e4a6f551ad041fcb3e52bd4e45ed235152f8d67242d0b6cc4a66a6126f9fa9707bd68812bcb2286a590aefcfff6fe56327bb34d195b0c3769013c61c4ebff865c02cb451a8669976dd5ea499499e3ad6670859902919db5930969556a10f8b89222c37325c129b066fec16354059056898cc72ee1748451a22d6d2f4e55c657669ddd2ab9fbfeef7eb322f17bb7548c84ea006037cf5aabbc589d2333e9fd727b71063acf7404a17c658dd1d67fe0b857e8604b13f5fec04d58a9f8fbe62c6db8905dae4dfbd2c920526bb8a7dc16ff943c269db4d4b594f2e4e20e9f2753eaf8ce12ac9b465903af92811ed903ac9a29200928dd017128aa7845172dfc96ce21c86a4a5cf424f9f00150e73199ae5693e35b94bfb2217bb44d210bac3c10165f4970da4c7f3e8212d0424acd492dd2e7647927331a904a5a5a1c738f8c6414a28c271374b98cd47cbfefb640a376ed1f863a9b495fc32bdf55f7fdf9c7c882a2417b3fcb23523cf20e60f344d52bb69eb31f9e81812ea703b0d2ccaa966d4cbf707cff4cb256131df60e57a09533ec7ee699be40fc03dd75fc6976e8fcf9aa8a1555ee36cce5469366863aa499a690ca520afb7699a464ef49825f2c5a2343ff4d8b3485b58daab83abc8984e16d17ae23ebef050270b169acd719f2c88e9b3ea173717662ea9e869f842d649bb900a6b357b820c27b2aea6bbd68d3de5c2429a75ff9d6d6f8f77b9de0c49af636bc695ec57b9c6756fcc6e01ffb973ac8553adcd41dc5127224d7afff5e02a0b411c99baa293bd0d654c122bdf04cd03e20df5052eb47ec295b224bd8c6affb6f3766da9f956de40ea7b4beac939b6c885b4be1cb5fcac6b6f758eac2cc945438ef7cace882ed23b47e0824951683f3c21bad8d09420a44de38020fe83bcdd7082228bf06c8f2180770a9779d7c3d9aeec8765294003ed683cca7815ce1ed4410132d0dee687fd482784ffcbbe04bad5238c39dc520bca05a0b53a0bce664cca0bcd0c66c7cb91a073fd8256a0adf5b48d3b58b4e95db03f1ff749cae52d1575503854f01ab40d10e96e713b2b817621e2471acfe272c2563e780783d83e8c486b40c89e273efc5a746402596dcbab753ff5cb6fd13677f30874f32a8c7d7be3a5c91616a98e27aa76509c9ae9e75568bacefec48357f94e475f752319703e96a5750e8793fecc904c3c36752f6b346b9910fc124fc9982ddfeb905a5de3d49c32c4e97868b01ec427b3489e66f08b46a8838fd8734f22bb5c74e5a6f625fa1c6b98016b43c6caa9f28922e7377c831fbaabe4fc27b828eec7420893dde2fa487fe4ea0eddd6001f25322af7f56b9a5c6b254a84da98bd2118486b0f000c56753e0fbd32c56b1db576dcc266d578cc209502d5db5a93f1f2d1525e67d1a900347b7ca5f398f91eed167ebee13974fcaf1df28eb3d4878261791fd7d5e6751bdf2d8868ca874c0d08a533112d769ee0c1885f197ce78297d605f810caf1bce17df021348a60225e820aa24264c9b90565978fe14e2e0fbcd092df49df7033a3e57326047a47907fabfded1b4bb1575500d93fea0d24006e5b08051b43bfdecfa0322efc54cb163f08fa4ded9014d18f5af0df922a54b9d74012a1b33d7e91fbcc63423e326b305d88086fa0c4aac329dd29609d2f1fc2885f5b1646ae52373276952855de5305f81369132dd2cc94aa7ffc3e019f0a8a426f95b4de56c13bae285436f4d3b2add404029a91bc783f48772f17df52536ab9013697db4623b2e84f4320f3426a7c1368fc69cc352aaa57edbbe0a5e5f685615ab78e948cff0db5fee2eed1743ad1cfaae678eb95d9a04a3f6b6764bbd55152adbee03ee093c368ec8e94c5e14778220ad4874eb077e7716fb848d51ee810617e7a546d2792df2e569deb80fc023b1fa63f041b7460e654862d8ef5e6ec0ae7bd240571f4893ea0c041a2dd114b215ae2c00a5e890e6b540e95fd9dce8b420a477ded77790d8fb4352406f53bb97c634d90ae3c9c25d4fab59a6107c289647fa4e77d92b934e85ace5237e8302eec53d59c928c751a86a3cc86913aa4a7eb33d8fef96e8ab5a130dd44e5b76950284f6923dd5245464c8157ace30f6723d5683179e74187e2725bb310308223181d13ac8a597e12c2a6d1a2fa281d1afa936adbaa05fca91724f3d7d2a6ef83bcf7a5878de1868af7996a21242d72ac0df7f3e7f35187eca23016884f29992a26f307c889804714585fe4fdef646f2074386af35d32ef2059781beceb5d3c6e1706fd77fd3835a69c8e8f4c482c9e5483859c98c616d902ea7cc6820e95587c33fa138cf13532e8926aff28205a1ec594e2f760dad0d45045efe94430c988fdf0eac514eac052413212f44bc40654244a754df62dd98eaccfc8b96ddc9edb4f53080f7c9202c944118ae9340e3d450d319c475bdbb7d54c54ea26d5fa82e605bae7f42d26ec89825b45fc20bcd6100b222769610ad71bd1d64118e59aeb157a98815d71a019acec4b0b508514ae60a2e5a17d6ec2d108d14af51c67cb4f067020f2a6d4efd7d8c93ec2a4ef15d346fa0efe663a3b6c3847c5a6c2be5818012459e1fcf582850e002beaa845a02f7bec94dff43d5f65c66bc641ae271ee2a6d99c88a1675d29681acbb166d7cd914333f37861b50691c534b3518c723a19a0d92653308211b2acb3a334bc32e973502ece85a7d16d2f16c5abfa568ebce53b663db6edcbe829814c38b75fa18d05e7700e51683f6857e8e42161689136440257606a1c8cfb494eef93244ee7fbd185c8593ac6348204f65282b14b2ad6ec4f902e8c7f08653a40e3b7a9f9bcd398517148c42e711b9d659711107a2027b211c9888675fa10467340a5d0f7b346a1ad9fdf172544ee33d3e1d5a6daa3bdfcde8e8e387619004f462258edc1a3f805f3ae5c53caa5ce5d628e6a6f9fe8d5cc3c97235d678a188eb17e9347fd6fa2677f24fac21376ddc30df072879eb8752352940aa78b7f96de77891198e4a94f3bfca06d07644c6d59d3803fbe89387ebd15ff2a9900ef978d1cbccd1e73b09facc5aed1193a23d4999e4ee3b9bd0c5b829d7721d54d3152b4436e248ff845f22b05b09fa8aa4afed849dac553a34affc974fe770cc965789dfe8472b0aeb0bed59986ddfc02e2a3d54b396c59a65d7d544eb8c26dc7b869b4ec88bd82d96b84f5b1e37326ec5ad9398a86d3a1ed29855b96415b0dd919326ddf98a9055b3f267cd65c3fd67da2d39ef343095f3ed35122f100a8ef94b846b777e46cbedae8e1020a102bd69352d1d59c9b0c7ec2bb26df0bae955181f19158e0bed366905cbfe6d85fbe8cbe7261335f88bfac2c975ab7e117a65733b38f8aaf58fcc30cb366d6c5383687164e519eafc17f2effaff855ac1d9213db532445221143e4ad9e0bc5b723fd91d43b5bcfd4e16290dccbc8a0d11e90ce0fbda8e299ca398bfe5e3bd76f32571612ac96181f0aafd3b616279805a2384010087366f2148c2b2a71dc43fc6877d9c1d0f73dd2b2d6ff22e8ca5eafbfd90d7f14954f88ee6d288c90d0ce821c3d6a3f34e87f79978214119650c05bee9a60f1d5835a85c33d32437b2f6dcca492c44d41711a5100fa1297928429d436c65c6378eb228e876758473aa5d6ea4b3a6f2316bc3c0afa96b7e9b0d43093389caadef98c12b95444063b965477505373c3c39c8ff7eff1ce4e87b70ed0b061e53386ceb9d5740559b76072390757c12fcc9b21e6636b85fed767cab045645471aca1179e98c107af40d1f8b5ec0309715db9a9b186d38d81e2cd836b475cdb80651becc90d4d682860ff7e3248c5cbe1a344ec80b5d30c51d74474818e6b79dae396a98b0ea231a3937c0652243972a99c8c7d6146e631d31563a92ff143260177c8595d13faa0d049afc295900d81d9143154ad339d6ba82b35e7136d46a4f18a9b91e82bee9d267b5904c15671fa9745aaefadcd354a16e17d4345a36c44b05c29c5df6f9ec4b1a8c355681dafb133c93e064d375cfae00eb5c48ef38fadb801278dcaa8c5c87c70226da58514075e8905b83217998cf5322fc0f2eab8ac614cddf5096e9098f72a8dae34e52df03763d65a6dac187d64988ab1942a08ffb0c484e2d95d48d744d8bf48ccba558f2a05fe72ed3a33ce8671fcf7d7c09b985af24e4a019245a6f4113f8c6944a61a673fd77d2029950d1555f7593614606b231456d476300ed0cf5e8baa4a46c6a101f032e7483ad02160a343755bfe41cc8684f0b0c28358291581b46e6ee71541b7d5b3232832f55d30ac14786267af9d4fe8d1da3647fed6f7a68970bf82a09dba043732aa08369e71dd91819cc7f9a93ba74d1e569fe2c27541535986410be31d722c2103b12174c3d4918db417dd89bfb3ddd455d625ca236d9e85931010cc17f7360f0d444048dc8e06722e0174af67505e8912b8dad6be38ad5e2ebe8e4b70ae8e4f0f5b6f8aaa8ebc11d7081cf34c9b"], 0xfffffdd2) 10:14:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0046686, 0x0) [ 1348.593997][ T9376] device bridge_slave_1 left promiscuous mode [ 1348.600322][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.680291][ T9376] device bridge_slave_0 left promiscuous mode [ 1348.687903][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.204182][ T9376] device hsr_slave_0 left promiscuous mode [ 1351.251633][ T9376] device hsr_slave_1 left promiscuous mode [ 1351.308855][ T9376] team0 (unregistering): Port device team_slave_1 removed [ 1351.325892][ T9376] team0 (unregistering): Port device team_slave_0 removed [ 1351.341144][ T9376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.380233][ T9376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1351.541069][ T9376] bond0 (unregistering): Released all slaves 10:14:20 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:20 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:20 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0046686, 0x0) 10:14:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xfffffffffffffc1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="65660f388079020f01d06566660f3881800f00f210d3baa10066ed66b8010000000f01d9440f20c066350c000000440f22c00f350f0198f29764f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200040000000009002f6465"], 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:20 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfffffdd2) 10:14:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xa93f) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0xcffa808b513f9ded, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffcb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:21 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:21 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) 10:14:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:21 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) 10:14:21 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000200)='/dev/cec#\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe03) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) [ 1354.425625][T18315] sp0: Synchronizing with TNC 10:14:21 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) fallocate(r0, 0x10, 0x0, 0x4) 10:14:22 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r0, 0x800060c0045005, &(0x7f0000000140)=0x40000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfffffdd2) 10:14:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000001000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) 10:14:22 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) 10:14:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) 10:14:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) dup2(r1, r0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1354.900489][T18315] sp0: Synchronizing with TNC 10:14:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000005700)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000013000100010000080000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a0004000a0004001c00"], 0x2c}}, 0x0) 10:14:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) 10:14:22 executing program 2: socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) arch_prctl$ARCH_GET_FS(0x1003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) r2 = userfaultfd(0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280), 0x10, &(0x7f00000002c0)}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) read(r2, &(0x7f0000009f9c)=""/100, 0x64) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) 10:14:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:22 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r0+10000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) 10:14:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 10:14:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) 10:14:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) [ 1356.135416][T18609] sp1: Synchronizing with TNC 10:14:23 executing program 1: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @loopback}}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000000)=[{0x18, 0x84}], 0x1f}, 0xfc) [ 1356.156708][T18606] sp0: Synchronizing with TNC 10:14:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 10:14:23 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_open_procfs(0x0, 0x0) pkey_alloc(0x0, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 10:14:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x81000000, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) socketpair(0x11, 0x4, 0x1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000a00)=r3) 10:14:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:24 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r0+10000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) 10:14:24 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000080)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 10:14:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) [ 1357.163892][T18654] sp0: Synchronizing with TNC [ 1357.447932][T18669] sp0: Synchronizing with TNC 10:14:24 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_open_procfs(0x0, 0x0) pkey_alloc(0x0, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 10:14:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e00000029008151e00f80ecdb4cb904024865161a000700050000098589a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 1357.941642][T18691] netlink: 'syz-executor.5': attribute type 7 has an invalid length. 10:14:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000180)) 10:14:25 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r0+10000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) 10:14:25 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x81000000, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) socketpair(0x11, 0x4, 0x1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000a00)=r3) 10:14:25 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x2, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 1358.408132][T18697] sp0: Synchronizing with TNC 10:14:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000000), 0x0) ftruncate(r3, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2011, r3, 0x0) 10:14:26 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_open_procfs(0x0, 0x0) pkey_alloc(0x0, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 10:14:26 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x10001, 0x4) poll(&(0x7f0000000040)=[{r0}], 0x7, 0x0) 10:14:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) 10:14:26 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r0+10000000}}, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) 10:14:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x2c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:14:27 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x81000000, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) socketpair(0x11, 0x4, 0x1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000a00)=r3) 10:14:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x11cc1}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000300)) dup2(r1, r0) 10:14:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000000), 0x0) ftruncate(r3, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2011, r3, 0x0) 10:14:27 executing program 0: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x500}, 0x90) 10:14:27 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_open_procfs(0x0, 0x0) pkey_alloc(0x0, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) keyctl$chown(0x4, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 10:14:28 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000000)=@ethtool_regs={0x4f}}) 10:14:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x800000000f) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x8, 0x4) dup2(r0, r1) 10:14:28 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}], {0x10, 0x5}}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) socket$packet(0x11, 0x2, 0x300) 10:14:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x8}}]}) 10:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x3b7, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x33, 0x119, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0xc, 0x1, [@typed={0x6, 0x6, @u32=0x8}]}]}, 0x24}}, 0x0) 10:14:28 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x81000000, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) socketpair(0x11, 0x4, 0x1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000040)="8a", 0x1}], 0x1, 0x0) move_pages(0x0, 0x4101, &(0x7f0000000300)=[&(0x7f0000005000/0x2000)=nil], &(0x7f0000000380)=[0x1], 0x0, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000a00)=r3) [ 1361.703377][T18992] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1361.717854][T18987] overlayfs: conflicting lowerdir path 10:14:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x7, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 10:14:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000080), 0x87f1a7) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000010b778"]) [ 1362.213658][T18987] overlayfs: workdir and upperdir must reside under the same mount 10:14:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000000), 0x0) ftruncate(r3, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2011, r3, 0x0) 10:14:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:14:29 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}], {0x10, 0x5}}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) socket$packet(0x11, 0x2, 0x300) 10:14:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x2}}, 0x2e) 10:14:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:14:30 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:30 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75a4e0159f860e33823bf47843535af3a818d057ef622662eeb208b33f209975e2c24316681233fc626ba2af632dc3150afd5f94459908d3a17683c08e0a1c80638e5e3e864b8946f30fd18faa16f02b2830982be94b57f97e49980adf47df042d760c0a30323e7ab4db2dca67b1904737328a374de84429e4c38866a2a33c531e8d03ea84a31a5760dca6af12e81d32530d2eb95141ec5c5d4a1bd2fa7aa1c9545a9b824d13fed5a717db5585e8cef0e890868ecdc300b433fc5f1ec9ea680da4e37ef200"/232], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26c) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:14:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getrandom(&(0x7f0000000140)=""/185, 0xb9, 0x2) [ 1363.441347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.447247][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.521519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.527519][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:14:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 1363.601377][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.607456][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1363.681403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1363.687246][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:14:31 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}], {0x10, 0x5}}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) socket$packet(0x11, 0x2, 0x300) 10:14:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000000), 0x0) ftruncate(r3, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1, 0x2011, r3, 0x0) 10:14:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@alu={0x8000000201a7f2f, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 10:14:31 executing program 3: syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d", 0x2) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000640)={0x4, 0x0, [{0x8, 0x0, 0x80000001}, {0x5, 0x0, 0x3}, {0x0, 0x0, 0x5}, {0x0, 0x0, 0x1}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:14:32 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543976167e74735bfeb92974cfcaadd589f212c8b97b693479ba8cf635b391a000000000000000000"], 0x97) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 10:14:32 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') [ 1365.131336][ C1] protocol 88fb is buggy, dev hsr_slave_0 10:14:32 executing program 0: fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000040)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000c40)={{}, {}, [{}, {}], {}, [{}, {}], {0x10, 0x5}}, 0x44, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10) socket$packet(0x11, 0x2, 0x300) [ 1366.151789][ T26] audit: type=1800 audit(1573208073.482:186): pid=19230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="cpuacct.usage_sys" dev="sda1" ino=16530 res=0 10:14:33 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x710000}}, [0x0, 0x0, 0x0, 0x4000000000000000]}) 10:14:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a199000036002908000000000000000002000000c702000089990100ffffffff0000b5160000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 10:14:33 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543976167e74735bfeb92974cfcaadd589f212c8b97b693479ba8cf635b391a000000000000000000"], 0x97) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 10:14:33 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') 10:14:33 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') [ 1366.316049][T19589] use of bytesused == 0 is deprecated and will be removed in the future, [ 1366.391495][T19589] use the actual size instead. 10:14:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a199000036002908000000000000000002000000c702000089990100ffffffff0000b5160000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 1366.803896][T19608] net_ratelimit: 19 callbacks suppressed [ 1366.804051][T19608] netlink: zone id is out of range 10:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x710000}}, [0x0, 0x0, 0x0, 0x4000000000000000]}) [ 1366.947284][T19608] netlink: zone id is out of range [ 1366.992808][T19608] netlink: zone id is out of range [ 1367.188158][T19608] netlink: del zone limit has 4 unknown bytes [ 1367.202439][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1367.209743][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:14:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a199000036002908000000000000000002000000c702000089990100ffffffff0000b5160000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 10:14:34 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543976167e74735bfeb92974cfcaadd589f212c8b97b693479ba8cf635b391a000000000000000000"], 0x97) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 10:14:34 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') 10:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x710000}}, [0x0, 0x0, 0x0, 0x4000000000000000]}) [ 1367.538996][T19617] netlink: zone id is out of range [ 1367.652580][T19617] netlink: zone id is out of range [ 1367.704715][T19617] netlink: zone id is out of range [ 1367.820869][T19617] netlink: del zone limit has 4 unknown bytes 10:14:36 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:36 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') 10:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="fffbffff35c8d19a02bc27"], 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058565d, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x710000}}, [0x0, 0x0, 0x0, 0x4000000000000000]}) 10:14:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a199000036002908000000000000000002000000c702000089990100ffffffff0000b5160000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 10:14:36 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) getpid() r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x105, 0x101b, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543976167e74735bfeb92974cfcaadd589f212c8b97b693479ba8cf635b391a000000000000000000"], 0x97) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 10:14:36 executing program 3: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') 10:14:36 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:36 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:36 executing program 0: mkdir(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() geteuid() lstat(&(0x7f0000000600)='./file1/file0\x00', &(0x7f0000000640)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x19, &(0x7f00000000c0), 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x19, &(0x7f00000000c0), 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x19, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x19, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="060000001d249116cc5dacdb3a248edd4abc36d715e33aef3c7cfa27da93a84b0f31b7818ed970f5785312688828409486f66c7afa2ccda5d37e490d133125cb96ee104dccd1761f4f365c3e6438e1c731f1904980afb42dd645c9bf1ee23cd574a35b39bc278c4c80452625bab7c481def40a6f4c931bc759fd33"], 0x8) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000007c0)=0xe8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x19, &(0x7f00000000c0), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x19, &(0x7f00000000c0), 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x19, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000000c0), 0x8) syz_open_dev$mouse(&(0x7f00000010c0)='/dev/input/mouse#\x00', 0x0, 0x20a00) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') 10:14:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x4000000000000010, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x200, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) fcntl$dupfd(r6, 0x5b4ae38f399d8a64, 0xffffffffffffffff) dup3(r5, r2, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) 10:14:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) syz_open_procfs(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x28) read$alg(r0, &(0x7f0000000380)=""/4096, 0x20001380) 10:14:37 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x4000000000000010, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x200, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) fcntl$dupfd(r6, 0x5b4ae38f399d8a64, 0xffffffffffffffff) dup3(r5, r2, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) 10:14:37 executing program 0: ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b10") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x1b7, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000e9f15a6c19ff6d300000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000200000000000000000000000000400"/112], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x37, &(0x7f00000000c0)={@rand_addr="d0a8f78b15111dabd0b5bb068e587207"}, 0x20) 10:14:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="700100002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x170}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 10:14:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a000100636f64656c0000004c0002"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 10:14:38 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x105, 0x0) [ 1371.376226][T19894] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:39 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:39 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x4000000000000010, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x200, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) fcntl$dupfd(r6, 0x5b4ae38f399d8a64, 0xffffffffffffffff) dup3(r5, r2, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) 10:14:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 10:14:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$search(0x1e, 0x0, 0x0, 0x0, 0xfffffffffffffff9) 10:14:39 executing program 0: unshare(0x20060400) io_setup(0x1, &(0x7f0000000140)=0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_submit(r0, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}]) 10:14:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r4, 0x4000000000000010, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x200, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) fcntl$dupfd(r6, 0x5b4ae38f399d8a64, 0xffffffffffffffff) dup3(r5, r2, 0x40000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c) 10:14:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) getsockopt$inet6_int(r2, 0x29, 0x1, &(0x7f0000b67000), &(0x7f0000000080)=0x4) 10:14:40 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=@nullb='#..:],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 10:14:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000600)='nv\x00', 0x199) close(r1) [ 1373.580326][T20133] libceph: resolve '#..' (ret=-3): failed [ 1373.590533][T20133] libceph: parse_ips bad ip '#..:],0::0' [ 1373.647661][T20160] libceph: resolve '#..' (ret=-3): failed [ 1373.736988][T20160] libceph: parse_ips bad ip '#..:],0::0' 10:14:41 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:41 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) getpgrp(0xffffffffffffffff) r3 = socket(0x10, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a1824c0b41c36e6cd07ca217ba230c1885b3e9f816996917b9bcad136641fcefb0897a12a353db75981ae51b"], 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x5}, &(0x7f0000000080)=0x90) pause() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) 10:14:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xc0}}, 0x0) 10:14:41 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=@nullb='#..:],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 10:14:41 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="0d00000000003639408fa3a3ba27660199783b0a82f79b32a746225086600a38e07d4db88a66859c3c015307b680ab73e03d53555c97e8e37d01da4d44a994354a9fa3f355214e", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 10:14:41 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) read(r1, &(0x7f0000000080)=""/254, 0xfe) 10:14:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r5 = dup2(r4, r3) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1374.258571][T20254] libceph: resolve '#..' (ret=-3): failed [ 1374.293936][T20254] libceph: parse_ips bad ip '#..:],0::0' 10:14:41 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=@nullb='#..:],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 10:14:41 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x80045104, 0x0) [ 1374.612197][T20272] libceph: resolve '#..' (ret=-3): failed [ 1374.655930][T20272] libceph: parse_ips bad ip '#..:],0::0' 10:14:42 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(&(0x7f0000000040)=@nullb='#..:],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 10:14:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 10:14:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x24, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_PMTUDISC={0x8, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r3}]]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4024088}, 0x28800) [ 1375.016095][T20286] libceph: resolve '#..' (ret=-3): failed [ 1375.041954][T20286] libceph: parse_ips bad ip '#..:],0::0' [ 1375.102813][T20342] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 10:14:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7ff}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000a8a989000000007ba79554354cdddb4e667263a7192ff58eb16f88b9663da5668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8fef4aa6dac6acb5ded04e5435e7a3bfaab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7de6e38d2d29be9a5adffffff7f00000000428958b132e07900"], 0x10}}, 0x0) 10:14:43 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) read(r1, &(0x7f0000000080)=""/254, 0xfe) 10:14:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x2000000000012, 0x5, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffff9c}, 0x3c) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r0, &(0x7f0000000180), 0x0}, 0x18) 10:14:43 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x3}, {0x200000000006}]}) 10:14:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1219, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x20}}, 0x0) 10:14:43 executing program 4: r0 = socket$inet(0x2, 0x20008000000003, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8}, 0x8) 10:14:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], 0x7e7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c22b05725756044631106505417b018daf77639c896ca15650ff62d3e089e80d33f94f8fe81872cdbb4aae61ea7b31d4215c0f52272e554ac5a4c67b9cf63bcf2a510b90779fc4b8ec266e0e6d4588c2f93b3ad09242310e3bcfd59f961e68b5d931fb4483297f0b63f9d8ec73a09124aece8bbb08e698ac058d32abbb"], 0x110) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, 0x0) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$midi(0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1376.506369][T20426] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 10:14:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1219, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x20}}, 0x0) 10:14:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c22b05725756044631106505417b018daf77639c896ca15650ff62d3e089e80d33f94f8fe81872cdbb4aae61ea7b31d4215c0f52272e554ac5a4c67b9cf63bcf2a510b90779fc4b8ec266e0e6d4588c2f93b3ad09242310e3bcfd59f961e68b5d931fb4483297f0b63f9d8ec73a09124aece8bbb08e698ac058d32abbb"], 0x110) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, 0x0) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$midi(0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1376.985535][T20469] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 10:14:45 executing program 5: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, &(0x7f0000000280)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000080)={'sha512-generic\x00'}}) 10:14:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f00000017c0), 0x3cc, 0x1f000000) 10:14:45 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_\xcb\x10_bond\x00\x85\x00', &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES32=0x0, @ANYPTR, @ANYBLOB="621233ea"]]]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 10:14:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1219, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x20}}, 0x0) 10:14:45 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) read(r1, &(0x7f0000000080)=""/254, 0xfe) 10:14:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c22b05725756044631106505417b018daf77639c896ca15650ff62d3e089e80d33f94f8fe81872cdbb4aae61ea7b31d4215c0f52272e554ac5a4c67b9cf63bcf2a510b90779fc4b8ec266e0e6d4588c2f93b3ad09242310e3bcfd59f961e68b5d931fb4483297f0b63f9d8ec73a09124aece8bbb08e698ac058d32abbb"], 0x110) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, 0x0) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$midi(0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10:14:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() getpid() r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c22b05725756044631106505417b018daf77639c896ca15650ff62d3e089e80d33f94f8fe81872cdbb4aae61ea7b31d4215c0f52272e554ac5a4c67b9cf63bcf2a510b90779fc4b8ec266e0e6d4588c2f93b3ad09242310e3bcfd59f961e68b5d931fb4483297f0b63f9d8ec73a09124aece8bbb08e698ac058d32abbb"], 0x110) ptrace(0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0xb8) ptrace$pokeuser(0x6, r0, 0x388, 0x0) r2 = creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, 0x0) getpid() write(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = syz_open_dev$midi(0x0, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f00000003c0)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1378.708098][T20480] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 10:14:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r2, 0x1219, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}]}]}, 0x20}}, 0x0) 10:14:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x7, 0xe005}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) 10:14:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000240)=@known='system.sockprotoname\x00', &(0x7f0000000280)=""/2, 0x2) [ 1379.090268][T20605] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 10:14:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400103, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 10:14:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00db35979f5c450600272fe429c42a9e59cd202e"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="141b2bcf26079cd555dcd4476372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147eefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x18c) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) 10:14:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f00000017c0), 0x3cc, 0x1f000000) 10:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x99a1, 0x20000000000036, 0x829, 0x0, 0x0, {0x2, 0x1000000, 0x1000000}, [@nested={0x2c7, 0x0, [@typed={0x9989, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 10:14:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1379.498631][T20620] net_ratelimit: 24 callbacks suppressed [ 1379.498639][T20620] netlink: zone id is out of range [ 1379.551883][T20620] netlink: zone id is out of range 10:14:46 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) read(r1, &(0x7f0000000080)=""/254, 0xfe) [ 1379.604571][T20620] netlink: zone id is out of range [ 1379.710972][T20620] netlink: del zone limit has 4 unknown bytes 10:14:47 executing program 5: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) [ 1379.817972][T20636] overlayfs: filesystem on './file0' not supported as upperdir 10:14:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000400)={0xa0}, 0xa0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) 10:14:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f00000017c0), 0x3cc, 0x1f000000) 10:14:47 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00db35979f5c450600272fe429c42a9e59cd202e"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="141b2bcf26079cd555dcd4476372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147eefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x18c) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) 10:14:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffcc}, [@ldst={0x5, 0x3, 0x5, 0x0, 0xa}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) [ 1380.125460][ T9376] device bridge_slave_1 left promiscuous mode [ 1380.147225][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state 10:14:47 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="1c0000001e0081dc68b70f002189c6090c0000000000000000000800", 0x1c}], 0x1}, 0x0) [ 1380.238824][ T9376] device bridge_slave_0 left promiscuous mode [ 1380.249435][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state 10:14:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"54abec7338595f275a2292c45ff078f1cbbf04241d1c3421ec9bf61b2221bc18246e74f0001e36735c2ad340bf94ad2a35cfc5d0953a3b2bfd41e2e051c6765447395415a9b05dffbe957e300168dc46f8377130fd28e50a805a6005ab6167da65430e3fcc214d7893c6d91026b5f5192f346a367dbc8ae5df0fd099b4e7a6dadd7f555b203f504eda86e0e8d8c5f319604db5a686750d03bf3a67210063e9a17ca0a1ccd80a7d57cb034b828b784b14c9e5dd70ca358c6819c3df7f4443dced6d9a56bb54eac6538cc61c5e9ef3bda9feeb62cbe4f0e1d1c7f6cbbcada85dbb247b0551773f0734e6f4733db49c22e497557c2f74bfa0e4af9b6228643f180d9f9e1e2bcdf0c35a5b8c388e728b574a066e190800db7b42573f534b8f60e8f756dc4d8dec7ad58b0474fc002851b265cc72099d43115828ac723e73009150fcf7196b4133e2988d4b0fc459e57293afef8837fa0d5d24b984a95cb4bdc48fc9c6e73ebee6b1a3239b2c0eef7c751ccb9f2dcdc3c69173db48df6b5d6e59e6465283de675a8d053e7f3abf86f43006a5a0c6225a589c12583e767b9d817f17bf690444a18e6f8a35b2cb4b60c191efbb16393560b568ee6c82bed918aa4a34b575ac9966b395aafa7fc3b7f467b484eb7d2617e0a240e8acbc2a7e02b650f7d1be52f462be20faa32dd88eb041e2c46b24ed7ab79c10f05296f5461f4ebda25dd7b9908da4be62b0871b169016fab8aae31c7ba45e5b30b7556a062999f43d2dbb9995d2d5de72ffe885bf6bce45caa470933c0906807da75cd38533d8f16d875452c543b259e78215011d2be638eab023513cfe0693d3107e17cfc87e038fc7d1db232d15307fe1d2a818d0a4bde2c53d221111ffa646514dd1fbd3c011b058f79c6fb0a31857ea309018bf72180a434611195c975cf5e285777231b6f158ecaf212183600379fe9762277c13cb6cde9cc0178b883fd1f210180e599f8eb33d33a9ff0f70db1de485b2f2434f2707bf9a54bb6aff687c515c430d5087f4d53a57adf7c97a06dcc61d7733a93dc505d57d8d5c83bf83e345a979307d708756c3f0f1c53a28883b665fda239019f32fc6f07d700d05023e9ef5b66d4b6be57ffd6fe39703fd4eed61535568f47ee51eff8290618e8387d0ba0d00c5bc4585d2d85688af46bb1da08bf42901634cb10e6b03ee276c16980090b59f3c57b428ae0a7ede758c781e2a5a8585e903adde0a0a281a7779a59067d82985655d9138b75042970e11aee4b95b8bcf232473767cca0139b2c2fb40045c6e031950c314015db2524c3f2fe941f249d158a44aa14774e61b2ee185bdfea8f317e440a39533c6db7ffd3c2b626c1e1e088bcebc59526b016cc6a0e4b766c3f00f619d366e5a4378bc15f805a6fb8c9400"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@block={'block', 0x3d, 0x400}}, {@cruft='cruft'}]}) 10:14:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x9}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100), 0x2) 10:14:48 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00db35979f5c450600272fe429c42a9e59cd202e"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="141b2bcf26079cd555dcd4476372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147eefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x18c) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) 10:14:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"54abec7338595f275a2292c45ff078f1cbbf04241d1c3421ec9bf61b2221bc18246e74f0001e36735c2ad340bf94ad2a35cfc5d0953a3b2bfd41e2e051c6765447395415a9b05dffbe957e300168dc46f8377130fd28e50a805a6005ab6167da65430e3fcc214d7893c6d91026b5f5192f346a367dbc8ae5df0fd099b4e7a6dadd7f555b203f504eda86e0e8d8c5f319604db5a686750d03bf3a67210063e9a17ca0a1ccd80a7d57cb034b828b784b14c9e5dd70ca358c6819c3df7f4443dced6d9a56bb54eac6538cc61c5e9ef3bda9feeb62cbe4f0e1d1c7f6cbbcada85dbb247b0551773f0734e6f4733db49c22e497557c2f74bfa0e4af9b6228643f180d9f9e1e2bcdf0c35a5b8c388e728b574a066e190800db7b42573f534b8f60e8f756dc4d8dec7ad58b0474fc002851b265cc72099d43115828ac723e73009150fcf7196b4133e2988d4b0fc459e57293afef8837fa0d5d24b984a95cb4bdc48fc9c6e73ebee6b1a3239b2c0eef7c751ccb9f2dcdc3c69173db48df6b5d6e59e6465283de675a8d053e7f3abf86f43006a5a0c6225a589c12583e767b9d817f17bf690444a18e6f8a35b2cb4b60c191efbb16393560b568ee6c82bed918aa4a34b575ac9966b395aafa7fc3b7f467b484eb7d2617e0a240e8acbc2a7e02b650f7d1be52f462be20faa32dd88eb041e2c46b24ed7ab79c10f05296f5461f4ebda25dd7b9908da4be62b0871b169016fab8aae31c7ba45e5b30b7556a062999f43d2dbb9995d2d5de72ffe885bf6bce45caa470933c0906807da75cd38533d8f16d875452c543b259e78215011d2be638eab023513cfe0693d3107e17cfc87e038fc7d1db232d15307fe1d2a818d0a4bde2c53d221111ffa646514dd1fbd3c011b058f79c6fb0a31857ea309018bf72180a434611195c975cf5e285777231b6f158ecaf212183600379fe9762277c13cb6cde9cc0178b883fd1f210180e599f8eb33d33a9ff0f70db1de485b2f2434f2707bf9a54bb6aff687c515c430d5087f4d53a57adf7c97a06dcc61d7733a93dc505d57d8d5c83bf83e345a979307d708756c3f0f1c53a28883b665fda239019f32fc6f07d700d05023e9ef5b66d4b6be57ffd6fe39703fd4eed61535568f47ee51eff8290618e8387d0ba0d00c5bc4585d2d85688af46bb1da08bf42901634cb10e6b03ee276c16980090b59f3c57b428ae0a7ede758c781e2a5a8585e903adde0a0a281a7779a59067d82985655d9138b75042970e11aee4b95b8bcf232473767cca0139b2c2fb40045c6e031950c314015db2524c3f2fe941f249d158a44aa14774e61b2ee185bdfea8f317e440a39533c6db7ffd3c2b626c1e1e088bcebc59526b016cc6a0e4b766c3f00f619d366e5a4378bc15f805a6fb8c9400"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:14:48 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00db35979f5c450600272fe429c42a9e59cd202e"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x43, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000001400), 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001000)="141b2bcf26079cd555dcd4476372dc330cf51bab44674c3d5dc06ed34b728ccd61ecd94291ddbfb6d56a0be142be1211da3f93b15e3daba51f1f713ee0dde48fcf6fa0ac7147eefef6ed1c372b2eaee4b125246c032b096a3269101c18802ccc6b92731d2e8910761e26967722280f78d28b77c7217f11ca10ef92f402c62557306eff3b65f01b92eb13d9bdb07536a98752663b4a9d3b2ab33d86bf722df4e8d04481593794c6ec3a5068fa68dda8917b0eb9576cf302eaada490897d315bd4e7", 0xc1, 0x5, &(0x7f00000002c0)={0xa, 0x0, 0x40000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x18c) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) [ 1381.383785][ T9376] device hsr_slave_0 left promiscuous mode 10:14:48 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="f84474c9dbd1ee7f642c1d8922163706ce236fa020b3", 0x16) [ 1381.435180][T20788] overlayfs: conflicting lowerdir path [ 1381.441510][ T9376] device hsr_slave_1 left promiscuous mode [ 1381.508978][ T9376] team0 (unregistering): Port device team_slave_1 removed [ 1381.514106][ T26] audit: type=1400 audit(1573208088.832:187): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=20791 comm="syz-executor.1" 10:14:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7c, 0x4) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1a1}]) [ 1381.587926][ T9376] team0 (unregistering): Port device team_slave_0 removed [ 1381.661083][ T9376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.728906][ T9376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.761404][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1381.767358][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1381.869414][ T9376] bond0 (unregistering): Released all slaves 10:14:49 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp6\x00') preadv(r3, &(0x7f00000017c0), 0x3cc, 0x1f000000) 10:14:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x9}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100), 0x2) 10:14:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0xe0, 0x10, 0x7, 0x0, 0x0, {0x0, 0xf0ffff, 0x600}, [@nested={0xcc, 0x0, [@generic="532c3e889a65766b1c614d", @typed={0x8, 0x0, @u32}, @generic="152b378a4d835dc7be6023405a59a33b78fe3e293863b1801c2457c243cb049712ff443be62062b3ba9afd2b3a7fa0c08aa29a08c0062478b666741bc9fb7451945c7a780163d5443224294b1dcb49b1a99d19b028afb7a31b459dc5469e1d4b9e7ca0113838abbd00aa8b10db99086e5c25cbd56abc200079431854bb9f3ca5a6845b4add3c1b1a4a15b07b55dc076baed10f9206b79ef3d31ed66b2dd3f24580d4d529c31c2503dbcaafc31e6b002e2255"]}]}, 0xe0}}, 0x0) 10:14:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00007d9fc8)={0x0, 0x0, &(0x7f0000a40000)={&(0x7f0000b9e000)=@migrate={0xb8, 0x21, 0x411, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast1}}, [@migrate={0x5c, 0x11, [{@in6=@loopback, @in=@multicast2}, {@in6=@mcast1, @in6=@mcast1}]}, @policy_type={0xc, 0x10, {0xffffffffffffffff}}]}, 0xb8}}, 0x0) 10:14:49 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000033001901000000000000000004000000ffd38d9b0c0001000600060009"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x11001, 0x0) 10:14:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x43, 0x4) sendto$inet6(r0, &(0x7f0000000140)="030400000300600000000000fff57b016d2763bd56373780398d417500e50600591f301ee616d5c0184374a7ffe4ec5fe0654786a701009360c8180355a95ba514d40008efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a90000000000803e770afd6e9ef5837dc65a2367e39e21d913a23bb7", 0x78, 0x0, 0x0, 0x0) [ 1382.161340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.167206][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:14:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x9}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100), 0x2) 10:14:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newae={0x40, 0x1e, 0x58d, 0x0, 0x0, {{@in=@broadcast}, @in6=@empty}}, 0x40}}, 0x0) [ 1382.321307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1382.327231][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:14:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x200000000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe77, &(0x7f0000000240)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000a00000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0) 10:14:49 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f0605"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:14:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x9}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100), 0x2) 10:14:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7c, 0x4) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1a1}]) 10:14:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffff7010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) [ 1382.585528][T20930] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.5'. 10:14:50 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f0000000080), &(0x7f0000000040)=0x4) 10:14:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000000040)) [ 1382.817141][T20988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xc6f40200, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x9}]}}}]}, 0x3c}}, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) 10:14:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 10:14:50 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x74, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x74}}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x50000000000443) open(0x0, 0x0, 0x5) 10:14:50 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000040)="11"}) 10:14:50 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 10:14:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffff7010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 10:14:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f0605"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:14:50 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000040)="11"}) [ 1383.708026][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7c, 0x4) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1a1}]) 10:14:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x74, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x74}}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x50000000000443) open(0x0, 0x0, 0x5) 10:14:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 10:14:51 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000040)="11"}) 10:14:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffff7010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 10:14:51 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000040)="11"}) 10:14:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x74, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x74}}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x50000000000443) open(0x0, 0x0, 0x5) 10:14:51 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0}) 10:14:51 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r2 = socket$inet6(0xa, 0x3, 0x100000000000ff) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x27) r3 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r3, 0x0, 0x2b1, 0x0) 10:14:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x6, 0x7, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x0, 0x1, 0x0, r2}, @exit]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r3, 0x6c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 10:14:51 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f0605"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:14:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffff7010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 10:14:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x7c, 0x4) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x1a1}]) 10:14:51 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x10}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, r1, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x74, r1, 0x0, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}]}, 0x74}}, 0x8000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x50000000000443) open(0x0, 0x0, 0x5) 10:14:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 10:14:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000002000/0x9000)=nil, 0x9000}, &(0x7f0000000080)=0x10) [ 1384.570137][T21230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:14:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e060804000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) 10:14:52 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xc, 0x2, [{}], "59a3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "9949"}]}, {0x0, [0x0, 0x0, 0xe1]}}, &(0x7f0000000700)=""/244, 0x45, 0xf4, 0x1}, 0x20) 10:14:52 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 10:14:52 executing program 4: setrlimit(0x8, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00005e5000/0x1000)=nil, 0x1000, 0x0, 0x2011, r0, 0x0) [ 1384.922127][ T26] audit: type=1800 audit(1573208092.252:188): pid=21292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=17025 res=0 10:14:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e060804000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) 10:14:52 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000f0605"], 0x7}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:14:52 executing program 4: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) [ 1385.361331][ C0] net_ratelimit: 10 callbacks suppressed [ 1385.361340][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1385.373455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1385.381650][T21387] dns_resolver: Unsupported server list version (0) [ 1385.401165][T21387] dns_resolver: Unsupported server list version (0) [ 1385.425132][T21472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:52 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2}, &(0x7f0000000240)=0x8) 10:14:52 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r3, 0x0, 0x80000008000000b) 10:14:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e060804000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) 10:14:52 executing program 5: mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 10:14:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1385.682699][T21479] syz-executor.5 (21479): attempted to duplicate a private mapping with mremap. This is not supported. 10:14:53 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x8ff}}], 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x7}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 10:14:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x81) dup2(r4, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/230) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r7}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) dup2(r2, r5) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r8, 0x0, &(0x7f000089b000)}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000540)={0x0, r8, 0xffff, 0x507b}) r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r10, r9) 10:14:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="24000000140081563e060804000f000010ff0100000060003f03546fabca1b4e7906a6bd", 0x24}], 0x1}, 0x0) 10:14:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$sock(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="85bb0f881cab9ca80ac39452d71df9b62f", 0xff00}], 0x1}}], 0x1, 0x40048010) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000800)=""/4096, 0x1f800, 0x0, 0x0, 0x661) 10:14:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x12, 0x7, 0x4, 0x8c8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x2}, 0x3c) 10:14:53 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13000000, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x492492492492785, 0x0) 10:14:53 executing program 2: clone(0xdd7aefbec375eda3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, &(0x7f00000001c0)) 10:14:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$sock(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="85bb0f881cab9ca80ac39452d71df9b62f", 0xff00}], 0x1}}], 0x1, 0x40048010) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000800)=""/4096, 0x1f800, 0x0, 0x0, 0x661) 10:14:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr="01b5ef85910252e6c4efa9bca4e63135"}, {0xa, 0x0, 0x0, @rand_addr="d9ae84d566afd5258cac14436b02c484"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006]}, 0x5c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x2a}, 0x2}, 0x0) 10:14:53 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x81) dup2(r4, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/230) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r7}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) dup2(r2, r5) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r8, 0x0, &(0x7f000089b000)}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000540)={0x0, r8, 0xffff, 0x507b}) r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r10, r9) [ 1386.458272][T21621] CBQ: class 80360000 has bad quantum==14, repaired. 10:14:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$sock(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="85bb0f881cab9ca80ac39452d71df9b62f", 0xff00}], 0x1}}], 0x1, 0x40048010) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000800)=""/4096, 0x1f800, 0x0, 0x0, 0x661) [ 1386.540822][T21626] IPVS: ftp: loaded support on port[0] = 21 10:14:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr="01b5ef85910252e6c4efa9bca4e63135"}, {0xa, 0x0, 0x0, @rand_addr="d9ae84d566afd5258cac14436b02c484"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006]}, 0x5c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x2a}, 0x2}, 0x0) 10:14:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x2, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) 10:14:54 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13000000, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x492492492492785, 0x0) 10:14:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr="01b5ef85910252e6c4efa9bca4e63135"}, {0xa, 0x0, 0x0, @rand_addr="d9ae84d566afd5258cac14436b02c484"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006]}, 0x5c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x2a}, 0x2}, 0x0) [ 1386.839890][T21744] IPVS: ftp: loaded support on port[0] = 21 [ 1386.860107][T21747] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:14:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$sock(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="85bb0f881cab9ca80ac39452d71df9b62f", 0xff00}], 0x1}}], 0x1, 0x40048010) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000800)=""/4096, 0x1f800, 0x0, 0x0, 0x661) 10:14:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x81) dup2(r4, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/230) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r7}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) dup2(r2, r5) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r8, 0x0, &(0x7f000089b000)}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000540)={0x0, r8, 0xffff, 0x507b}) r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r10, r9) [ 1386.937992][T21749] CBQ: class 80370000 has bad quantum==14, repaired. 10:14:54 executing program 2: clone(0xdd7aefbec375eda3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:54 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13000000, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x492492492492785, 0x0) 10:14:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r0, r1, r1], 0x40000000000000e6) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 10:14:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x100000000000ff) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr="01b5ef85910252e6c4efa9bca4e63135"}, {0xa, 0x0, 0x0, @rand_addr="d9ae84d566afd5258cac14436b02c484"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10006]}, 0x5c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x2a}, 0x2}, 0x0) 10:14:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x100000003, 0x3ff, 0x1}, 0x1f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000080), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) [ 1387.384484][T21772] IPVS: ftp: loaded support on port[0] = 21 [ 1387.407266][T21769] CBQ: class 80380000 has bad quantum==14, repaired. 10:14:54 executing program 3: syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00\xc0\x87\xeaU\x01\x1e\x14\xc9\xe3G\xdd\x1fU\xa6\x02j\x1c\xb7\xe0g\xf3\xc5w\x98\x1c\t\x94\xa1\xe8\r\x90\xd4\x9dh\xbd\xbc\x91\xfa\xb9\xc1\xc7\xf0c\xe6v\xe80xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x81) dup2(r4, r3) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000380)=""/230) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r7}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a250b388d101af1158aec7455e37b"}, {0xa, 0x0, 0x0, @local}, r7}}, 0x48) dup2(r2, r5) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r8, 0x0, &(0x7f000089b000)}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000540)={0x0, r8, 0xffff, 0x507b}) r9 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r10, r9) 10:14:54 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x13000000, &(0x7f00000002c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180), 0x492492492492785, 0x0) 10:14:54 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x1a, 0x60fef99c7a647665, 0x0, 0x0, {0x0, 0xf0}}, 0x14}}, 0x0) r0 = socket(0x10, 0x800000000080003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 10:14:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'.\x00\x00\x00\x00\x00\b\xf4\xff\xff\xff\x00\x02\x00\x02\x00', 0x1}) 10:14:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@fat=@uid={'uid'}}]}) 10:14:55 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) 10:14:55 executing program 2: clone(0xdd7aefbec375eda3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:55 executing program 4: r0 = socket$inet6(0xa, 0x80805, 0x0) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="87", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000005c0)="f8", 0x1}], 0x1}}], 0x2, 0x0) [ 1387.961874][T21799] CBQ: class 80390000 has bad quantum==14, repaired. 10:14:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x230) [ 1388.101035][T21809] IPVS: ftp: loaded support on port[0] = 21 10:14:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 10:14:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xff000000, @loopback}], 0x1c) 10:14:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x7}, 0x10) write(r0, &(0x7f0000000140)="2400000052001f0014f9f407000904000a00071010000100feffffff0800000000000000", 0x24) 10:14:55 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 10:14:55 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind(r0, &(0x7f0000000380)=@in={0x3, 0x0, @remote}, 0x80) 10:14:55 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x10d, 0xb, &(0x7f0000000400)={0x0, {{0x2, 0x0, @local}}}, 0x90) 10:14:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000100)=0xfe39) 10:14:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 10:14:55 executing program 1: socketpair$tipc(0x1e, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0xfffffeb7) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 10:14:56 executing program 2: clone(0xdd7aefbec375eda3, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 10:14:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="e1", 0x1}], 0x1}}], 0x1, 0x4000841) 10:14:56 executing program 4: dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) symlink(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)='./bus/file0\x00') quotactl(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x0) 10:14:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x80', 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e24, 0x9d81, @ipv4={[], [], @local}}, {0xa, 0x0, 0x0, @loopback}}, 0x5c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1388.997667][T22010] IPVS: ftp: loaded support on port[0] = 21 [ 1389.140406][T22070] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 10:14:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xff000000, @loopback}], 0x1c) 10:14:56 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000680), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 10:14:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 10:14:56 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 10:14:56 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 10:14:56 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000680), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 10:14:57 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl(r0, 0x40044103, &(0x7f0000000000)) 10:14:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:14:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) get_robust_list(r3, 0x0, 0x0) 10:14:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 1389.858326][T22103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000680), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) [ 1389.957938][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) get_robust_list(r3, 0x0, 0x0) 10:14:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xff000000, @loopback}], 0x1c) 10:14:57 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 10:14:57 executing program 0: r0 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#!'], 0x2) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x1) execveat(r0, &(0x7f0000000240)='\x00', 0x0, 0x0, 0x1000) 10:14:57 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000680), 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 10:14:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) get_robust_list(r3, 0x0, 0x0) 10:14:57 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 1390.408149][T22127] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 10:14:57 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) 10:14:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) get_robust_list(r3, 0x0, 0x0) 10:14:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 10:14:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c65300a96de86d81aacdb3ba584580de2bfff37e108271614dfd5e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:14:58 executing program 1: futex(0x0, 0x10b, 0x0, 0x0, 0x0, 0x0) 10:14:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000180)) 10:14:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xff000000, @loopback}], 0x1c) 10:14:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c65300a96de86d81aacdb3ba584580de2bfff37e108271614dfd5e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:14:58 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x8, 0x0, &(0x7f0000000080)) 10:14:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x18) 10:14:58 executing program 2: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 10:14:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 10:14:58 executing program 5: futex(&(0x7f0000000080), 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 10:14:58 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x5eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)) 10:14:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c65300a96de86d81aacdb3ba584580de2bfff37e108271614dfd5e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:14:58 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), 0x4) 10:14:58 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000300)={0xffff, 0xc0, 0x0, 0x7127, 0x30, 0x8}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9, 0x0, 0x0, [], 0x6}, {0x4, 0x0, 0x7}, {}, {0x5, 0x0, 0x9}, {0x5, 0x0, 0x3}, {0x3}, {0x80000001, 0x7}, {0x5, 0x0, 0x0, [], 0x81}, {}, {0x0, 0x0, 0x6}, {}, {0x0, 0x0, 0x0, [], 0xa}, {0x0, 0x0, 0xda}, {0x0, 0x0, 0x6}, {0x7, 0x0, 0x1ff}]}}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x3d, 0x0, [0xadba, 0x1, 0x1]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10:14:58 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0xffffffff00000000, 0xd1, &(0x7f0000000000), 0x4) 10:14:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}]}, 0x38}}, 0x0) 10:14:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c65300a96de86d81aacdb3ba584580de2bfff37e108271614dfd5e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 10:14:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}}) 10:14:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0xf00, {0x6, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 10:14:59 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, 0x0, 0x600) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read(0xffffffffffffffff, 0x0, 0x600) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 10:14:59 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, 0x0, &(0x7f0000000080)) 10:14:59 executing program 1: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xbe199e0d447a8e42, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fe99f56245000000000000c61f7281c46fff5e00", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c4}}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 10:14:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x3, &(0x7f0000000080)=""/154, 0x9a) 10:14:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:14:59 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:14:59 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="24000000220007031dfffd946f610500020000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 10:14:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0xf00, {0x6, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 10:15:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x3, &(0x7f0000000080)=""/154, 0x9a) 10:15:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:15:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0xf00, {0x6, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 10:15:00 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x3, &(0x7f0000000080)=""/154, 0x9a) 10:15:00 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, 0x0, 0x3, 0xf00, {0x6, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 10:15:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:15:01 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:15:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="071f080000000000972e00c6fe76cf075768acd251e36def2300020000", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 10:15:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syslog(0x3, &(0x7f0000000080)=""/154, 0x9a) 10:15:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) set_mempolicy(0x0, 0x0, 0x0) 10:15:01 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x40801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0xba}) 10:15:01 executing program 0: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="0701000000000000000000000000000000000000000000000000000000000000eb9316088a64b36ef08dcc3568bfd1dfc76d9a6985000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000001eb8ad2492349530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d06e8d694ed413c98e40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000045ebd1d257476f5afe"], 0x234) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 10:15:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 10:15:01 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x0, 0x131, 0x0, 0x0}) 10:15:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:15:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:15:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r0, r1) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x1a, 0x0, &(0x7f0000000000)) 10:15:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 10:15:02 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x40801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0xba}) 10:15:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x0, 0x131, 0x0, 0x0}) 10:15:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 10:15:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)='S', 0x1}], 0x2) 10:15:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x0, 0x131, 0x0, 0x0}) 10:15:02 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x40801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0xba}) 10:15:02 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f000039a000/0x4000)=nil, 0x4) 10:15:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 10:15:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 10:15:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004008}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 10:15:03 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x0, 0x131, 0x0, 0x0}) 10:15:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) 10:15:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r3, &(0x7f0000000540), 0x1000) dup3(r2, r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) 10:15:03 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x40801) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0xba}) 10:15:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10:15:03 executing program 1: r0 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffe97, &(0x7f0000000100)={&(0x7f0000003780)=ANY=[@ANYBLOB="14000000010a33d8908d47610a00000000000035"], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 1395.830963][T22568] vivid-009: kernel_thread() failed 10:15:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in6=@dev}, {@in=@dev, 0x0, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'de\x11late\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x87\xde\xc9\x83\x00'}}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x180}}, 0x0) 10:15:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r3, &(0x7f0000000540), 0x1000) dup3(r2, r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) 10:15:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) [ 1395.934749][T22582] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 1395.934749][T22582] program syz-executor.3 not setting count and/or reply_len properly 10:15:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x40800) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'memory'}]}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x29) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) 10:15:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) [ 1396.404000][T22605] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 1396.404000][T22605] program syz-executor.3 not setting count and/or reply_len properly 10:15:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="35d4a7cf18000000629841c900"}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000000100), 0xa0, 0x0) 10:15:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) 10:15:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r3, &(0x7f0000000540), 0x1000) dup3(r2, r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) 10:15:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10:15:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x40800) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'memory'}]}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x29) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) 10:15:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1396.833232][T22616] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 1396.833232][T22616] program syz-executor.3 not setting count and/or reply_len properly 10:15:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}}, 0x0) 10:15:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r1, &(0x7f0000000540), 0x1000) dup3(r0, r1, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) read$FUSE(r3, &(0x7f0000000540), 0x1000) dup3(r2, r3, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) 10:15:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="aefdda9d240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d766a83cf89441cb69d952f41bdd2ac8bb8c43b460", 0x34}, {&(0x7f0000000100)="aa1d484e24002000a84d4583671e120755272bb736be94d9fc56c9953fbd80630600007704a71e023a27b2", 0x2b}], 0x2) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 10:15:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x40800) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'memory'}]}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x29) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) 10:15:04 executing program 5: unshare(0x28060600) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') readahead(r0, 0x0, 0x0) [ 1397.324723][T22744] sg_write: data in/out 2097152/1 bytes for SCSI command 0x4-- guessing data in; [ 1397.324723][T22744] program syz-executor.3 not setting count and/or reply_len properly 10:15:04 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x7ff}, 0x0, 0x0, 0x0) 10:15:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000300050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) [ 1397.703761][T22859] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1397.792381][T22864] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:15:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) 10:15:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(0x0, 0x0, 0x40800) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'memory'}]}, 0x8) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x29) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0xc0) 10:15:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) 10:15:05 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x63a}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 10:15:05 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x7ff}, 0x0, 0x0, 0x0) 10:15:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000300050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) [ 1398.450774][T22877] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:15:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000300050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) [ 1398.676931][T22992] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 10:15:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) 10:15:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904014865161a000300050000000089a108b555e75486cd5edc2976d153b4b6", 0x2e}], 0x1}, 0x0) [ 1399.020327][T22998] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1399.108001][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f3ca7b0a: rx timeout, send abort [ 1399.127982][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000cacb5bcb: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1399.142845][ C1] vcan0: j1939_xtp_rx_abort_one: 0x00000000eb8ca314: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. 10:15:06 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x7ff}, 0x0, 0x0, 0x0) [ 1399.142863][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1399.163597][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1399.170086][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1399.176556][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1399.183070][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1399.189492][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 1399.196002][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1399.202476][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 10:15:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x8, 0x5, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}}, 0x0) [ 1399.316902][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1399.323444][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found 10:15:06 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x101b, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d08b26f5521b1ac0543978e05e200f2ef4214efd76167e74735bfeb92974cfcaadd589f252c8b00b693479bfe5d85dc391a000000000000000000000000001000006ff084b1b5abdcac51192d0ed2041d98dd132e41832df904bb33f721df25ccfbdf2ac06e27f31a6c9dffc3902d00090d7c2bd31c203263b523d1ce4fc0ae9501cbf73f81ea970535"], 0xb1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 10:15:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) [ 1399.395989][ C0] vcan0: j1939_tp_rxtimer: 0x00000000cacb5bcb: rx timeout, send abort [ 1399.617488][ C1] vcan0: j1939_tp_rxtimer: 0x00000000f3ca7b0a: abort rx timeout. Force session deactivation 10:15:07 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0xe0003f01, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000020000000000000000030006000000f9180200ee00e0000054d81458106fe8b90002000100000000000000030200044a7b030005000000000002000000e0003f010000000000fca0d971e9fd2bb4b88e524ae03e6521c84c7afa5c0000f30f16cd3ba77e4d5a8a682d271d4e0b57a07686d8cd335d8541ca148e882dc5bafceed2dedb06c1d956fcc7e08e6dc8bbcceb36c800"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000080), 0x1000000000000072) 10:15:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 10:15:07 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) syz_open_pts(r0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x7ff}, 0x0, 0x0, 0x0) 10:15:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr="0048554c0d442b7f84076f2e89f1d3fa"}, {@in=@local, 0x0, 0x6c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 10:15:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 10:15:08 executing program 4: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="a3", 0x1}], 0x1) write(r3, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000785000), 0x34a) writev(r3, &(0x7f00000013c0)=[{&(0x7f00000000c0)="da", 0x1}], 0x1) close(r3) sendmmsg$alg(r4, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf0ff7f) [ 1401.204882][T23046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1401.410419][T23046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1401.430525][T23046] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:15:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) 10:15:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 10:15:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0xc, "8daedee890014356db56f809924c1007ccfc14b3cd29345a8123f028ecbdcff9", "93444eaca412f35fba348bad588daa665272040d2bbb69a6077167cefd2da003", "f7587afebfad26b0022e2f8626d77919a9924116623ad9167b9d045b27d513be", "acdf1b6470d2a585292e5f44388b2ed938bd4b275663c65dbb11ef822f4059df", "a9e5e3d4278635b451f2edc02f07e635ae92b2c8d65b8eff01eea45a068f5c2c", "1f21a1e609de22ad5799be55"}}) 10:15:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) 10:15:09 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) [ 1402.287766][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1402.491177][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1402.542135][T23066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 10:15:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000bc0)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000002300)="98", 0x155a9}}, 0x4000) 10:15:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 10:15:09 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) [ 1402.774536][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ed1cca73: rx timeout, send abort 10:15:10 executing program 2: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$inet6(0xa, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1) 10:15:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 10:15:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) [ 1403.145077][ C0] vcan0: j1939_tp_rxtimer: 0x0000000027fe2ee1: rx timeout, send abort [ 1403.235701][ C0] vcan0: j1939_xtp_rx_abort_one: 0x000000009f7fe3bf: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1403.250133][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1403.250615][ C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000a0c607e5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1403.256656][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1403.277451][ C1] ================================================================== [ 1403.285524][ C1] BUG: KASAN: use-after-free in __lock_acquire+0x3a8b/0x4a00 [ 1403.292893][ C1] Read of size 8 at addr ffff88808f3d1080 by task ksoftirqd/1/16 [ 1403.300620][ C1] [ 1403.302953][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.4.0-rc6+ #0 [ 1403.310311][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.320368][ C1] Call Trace: [ 1403.323670][ C1] dump_stack+0x197/0x210 [ 1403.328031][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1403.333113][ C1] print_address_description.constprop.0.cold+0xd4/0x30b [ 1403.340141][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1403.345173][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1403.350201][ C1] __kasan_report.cold+0x1b/0x41 [ 1403.355414][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1403.360445][ C1] kasan_report+0x12/0x20 [ 1403.364784][ C1] __asan_report_load8_noabort+0x14/0x20 [ 1403.370423][ C1] __lock_acquire+0x3a8b/0x4a00 [ 1403.375363][ C1] ? can_receive+0x34e/0x530 [ 1403.379956][ C1] ? can_rcv+0x133/0x1b0 [ 1403.384266][ C1] ? __netif_receive_skb_one_core+0x113/0x1a0 [ 1403.390336][ C1] ? j1939_session_get_by_addr+0x52/0x60 [ 1403.395968][ C1] ? mark_held_locks+0xf0/0xf0 [ 1403.400729][ C1] ? __netdev_printk+0x274/0x283 [ 1403.405673][ C1] lock_acquire+0x190/0x410 [ 1403.410179][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 1403.415901][ C1] _raw_spin_lock_bh+0x33/0x50 [ 1403.420250][ C0] vcan0: j1939_tp_rxtimer: 0x00000000ed1cca73: abort rx timeout. Force session deactivation [ 1403.420659][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 1403.420672][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 1403.420684][ C1] j1939_tp_recv+0x413/0x9b0 [ 1403.420703][ C1] j1939_can_recv+0x4bb/0x620 [ 1403.451044][ C1] can_rcv_filter+0x292/0x8e0 [ 1403.455717][ C1] can_receive+0x2e7/0x530 [ 1403.460131][ C1] can_rcv+0x133/0x1b0 [ 1403.464193][ C1] ? can_receive+0x530/0x530 [ 1403.468780][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 1403.474672][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 1403.480580][ C1] ? lock_acquire+0x190/0x410 [ 1403.485258][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1403.491499][ C1] __netif_receive_skb+0x2c/0x1d0 [ 1403.496515][ C1] process_backlog+0x206/0x750 [ 1403.501266][ C1] ? net_rx_action+0x27b/0x1120 [ 1403.506132][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 1403.511421][ C1] net_rx_action+0x508/0x1120 [ 1403.516105][ C1] ? napi_busy_loop+0x970/0x970 [ 1403.520953][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1403.526592][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1403.532576][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1403.538820][ C1] __do_softirq+0x262/0x98c [ 1403.543329][ C1] ? takeover_tasklets+0x820/0x820 [ 1403.548439][ C1] run_ksoftirqd+0x8e/0x110 [ 1403.552939][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 1403.557881][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 1403.564118][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1403.570376][ C1] ? __kthread_parkme+0x108/0x1c0 [ 1403.575406][ C1] ? __kasan_check_read+0x11/0x20 [ 1403.580428][ C1] kthread+0x361/0x430 [ 1403.584493][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 1403.590730][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1403.596448][ C1] ret_from_fork+0x24/0x30 [ 1403.600857][ C1] [ 1403.602046][T23267] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1403.603173][ C1] Allocated by task 9: [ 1403.603188][ C1] save_stack+0x23/0x90 [ 1403.603199][ C1] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1403.603209][ C1] kasan_kmalloc+0x9/0x10 [ 1403.603218][ C1] __kmalloc_node_track_caller+0x4e/0x70 [ 1403.603304][ C1] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1403.603319][ C1] __alloc_skb+0x10b/0x5e0 [ 1403.644072][ C1] _sctp_make_chunk+0x5e/0x280 [ 1403.648862][ C1] sctp_make_init_ack+0x4c8/0xdc0 [ 1403.653877][ C1] sctp_sf_do_5_1B_init+0x95b/0xe50 [ 1403.659073][ C1] sctp_do_sm+0x121/0x5170 [ 1403.663486][ C1] sctp_endpoint_bh_rcv+0x409/0x8d0 [ 1403.668676][ C1] sctp_inq_push+0x1e4/0x280 [ 1403.670992][ C0] vcan0: j1939_tp_rxtimer: 0x0000000027fe2ee1: abort rx timeout. Force session deactivation [ 1403.673321][ C1] sctp_rcv+0xfde/0x35f0 [ 1403.673338][ C1] sctp6_rcv+0x17/0x30 [ 1403.691739][ C1] ip6_protocol_deliver_rcu+0x2fe/0x1670 [ 1403.697368][ C1] ip6_input_finish+0x84/0x170 [ 1403.702125][ C1] ip6_input+0xe4/0x3f0 [ 1403.706272][ C1] ip6_rcv_finish+0x1de/0x310 [ 1403.710935][ C1] ipv6_rcv+0x10e/0x420 [ 1403.715085][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 1403.720966][ C1] __netif_receive_skb+0x2c/0x1d0 [ 1403.725982][ C1] process_backlog+0x206/0x750 [ 1403.730737][ C1] net_rx_action+0x508/0x1120 [ 1403.735404][ C1] __do_softirq+0x262/0x98c [ 1403.739889][ C1] [ 1403.742222][ C1] Freed by task 9: [ 1403.745960][ C1] save_stack+0x23/0x90 [ 1403.750111][ C1] __kasan_slab_free+0x102/0x150 [ 1403.755142][ C1] kasan_slab_free+0xe/0x10 [ 1403.759635][ C1] kfree+0x10a/0x2c0 [ 1403.763524][ C1] skb_free_head+0x93/0xb0 [ 1403.766450][T23267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1403.767958][ C1] skb_release_data+0x42d/0x7c0 [ 1403.767969][ C1] skb_release_all+0x4d/0x60 [ 1403.767979][ C1] consume_skb+0xfb/0x3b0 [ 1403.767990][ C1] sctp_chunk_put+0x192/0x280 [ 1403.768001][ C1] sctp_chunk_free+0x56/0x70 [ 1403.768014][ C1] sctp_packet_transmit+0x1219/0x36c0 [ 1403.768024][ C1] sctp_outq_flush_ctrl.constprop.0+0x73c/0xd30 [ 1403.768033][ C1] sctp_outq_flush+0xe8/0x2780 [ 1403.768042][ C1] sctp_outq_uncork+0x6c/0x80 [ 1403.768051][ C1] sctp_do_sm+0x3c3a/0x5170 [ 1403.768063][ C1] sctp_endpoint_bh_rcv+0x409/0x8d0 [ 1403.768072][ C1] sctp_inq_push+0x1e4/0x280 [ 1403.768082][ C1] sctp_rcv+0xfde/0x35f0 [ 1403.768093][ C1] sctp6_rcv+0x17/0x30 [ 1403.768104][ C1] ip6_protocol_deliver_rcu+0x2fe/0x1670 [ 1403.768123][ C1] ip6_input_finish+0x84/0x170 [ 1403.780248][ C1] ip6_input+0xe4/0x3f0 [ 1403.780263][ C1] ip6_rcv_finish+0x1de/0x310 [ 1403.819372][ C1] ipv6_rcv+0x10e/0x420 [ 1403.819390][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 1403.819406][ C1] __netif_receive_skb+0x2c/0x1d0 [ 1403.861103][ C1] process_backlog+0x206/0x750 [ 1403.861114][ C1] net_rx_action+0x508/0x1120 [ 1403.861125][ C1] __do_softirq+0x262/0x98c [ 1403.861128][ C1] [ 1403.861136][ C1] The buggy address belongs to the object at ffff88808f3d0000 [ 1403.861136][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 1403.861151][ C1] The buggy address is located 4224 bytes inside of [ 1403.861151][ C1] 8192-byte region [ffff88808f3d0000, ffff88808f3d2000) [ 1403.919848][ C1] The buggy address belongs to the page: [ 1403.925475][ C1] page:ffffea00023cf400 refcount:1 mapcount:0 mapping:ffff8880aa4021c0 index:0x0 compound_mapcount: 0 [ 1403.925489][ C1] flags: 0x1fffc0000010200(slab|head) [ 1403.925506][ C1] raw: 01fffc0000010200 ffffea000292c108 ffffea00018ab208 ffff8880aa4021c0 [ 1403.925523][ C1] raw: 0000000000000000 ffff88808f3d0000 0000000100000001 0000000000000000 [ 1403.958960][ C1] page dumped because: kasan: bad access detected [ 1403.965365][ C1] [ 1403.967705][ C1] Memory state around the buggy address: [ 1403.973336][ C1] ffff88808f3d0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.981402][ C1] ffff88808f3d1000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.989463][ C1] >ffff88808f3d1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.998211][ C1] ^ [ 1404.002283][ C1] ffff88808f3d1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1404.010348][ C1] ffff88808f3d1180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1404.018435][ C1] ================================================================== [ 1404.026491][ C1] Disabling lock debugging due to kernel taint [ 1404.032640][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 1404.039235][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 5.4.0-rc6+ #0 [ 1404.047990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.057484][T23267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.058041][ C1] Call Trace: [ 1404.058062][ C1] dump_stack+0x197/0x210 [ 1404.058084][ C1] panic+0x2e3/0x75c [ 1404.076828][ C1] ? add_taint.cold+0x16/0x16 [ 1404.081512][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1404.086540][ C1] ? trace_hardirqs_off+0x62/0x240 [ 1404.091652][ C1] ? trace_hardirqs_off+0x59/0x240 [ 1404.096767][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1404.101792][ C1] end_report+0x47/0x4f [ 1404.105954][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1404.110971][ C1] __kasan_report.cold+0xe/0x41 [ 1404.115827][ C1] ? __lock_acquire+0x3a8b/0x4a00 [ 1404.120858][ C1] kasan_report+0x12/0x20 [ 1404.125193][ C1] __asan_report_load8_noabort+0x14/0x20 [ 1404.130822][ C1] __lock_acquire+0x3a8b/0x4a00 [ 1404.135675][ C1] ? can_receive+0x34e/0x530 [ 1404.140262][ C1] ? can_rcv+0x133/0x1b0 [ 1404.144503][ C1] ? __netif_receive_skb_one_core+0x113/0x1a0 [ 1404.146920][ T3901] kobject: 'loop3' (000000001c761732): kobject_uevent_env [ 1404.150570][ C1] ? j1939_session_get_by_addr+0x52/0x60 [ 1404.150591][ C1] ? mark_held_locks+0xf0/0xf0 [ 1404.168054][ C1] ? __netdev_printk+0x274/0x283 [ 1404.173002][ C1] lock_acquire+0x190/0x410 [ 1404.177510][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 1404.183153][ C1] _raw_spin_lock_bh+0x33/0x50 [ 1404.187922][ C1] ? j1939_session_get_by_addr+0x2d/0x60 [ 1404.193551][ C1] j1939_session_get_by_addr+0x2d/0x60 [ 1404.199009][ C1] j1939_tp_recv+0x413/0x9b0 [ 1404.203606][ C1] j1939_can_recv+0x4bb/0x620 [ 1404.208287][ C1] can_rcv_filter+0x292/0x8e0 [ 1404.212975][ C1] can_receive+0x2e7/0x530 [ 1404.217406][ C1] can_rcv+0x133/0x1b0 [ 1404.221490][ C1] ? can_receive+0x530/0x530 [ 1404.225425][ T3901] kobject: 'loop3' (000000001c761732): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1404.226211][ C1] __netif_receive_skb_one_core+0x113/0x1a0 [ 1404.226230][ C1] ? __netif_receive_skb_core+0x3450/0x3450 [ 1404.248139][ C1] ? lock_acquire+0x190/0x410 [ 1404.252825][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1404.259081][ C1] __netif_receive_skb+0x2c/0x1d0 [ 1404.264116][ C1] process_backlog+0x206/0x750 [ 1404.268875][ C1] ? net_rx_action+0x27b/0x1120 [ 1404.273731][ C1] ? lockdep_hardirqs_on+0x19e/0x5e0 [ 1404.279024][ C1] net_rx_action+0x508/0x1120 [ 1404.283715][ C1] ? napi_busy_loop+0x970/0x970 [ 1404.288563][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1404.294116][ C1] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1404.300092][ C1] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1404.306350][ C1] __do_softirq+0x262/0x98c [ 1404.310860][ C1] ? takeover_tasklets+0x820/0x820 [ 1404.315969][ C1] run_ksoftirqd+0x8e/0x110 [ 1404.320476][ C1] smpboot_thread_fn+0x6a3/0xa40 [ 1404.323586][ T3901] kobject: 'loop0' (00000000153630ed): kobject_uevent_env [ 1404.325461][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 1404.338787][ C1] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1404.345160][ C1] ? __kthread_parkme+0x108/0x1c0 [ 1404.347783][ T3901] kobject: 'loop0' (00000000153630ed): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1404.350181][ C1] ? __kasan_check_read+0x11/0x20 [ 1404.350194][ C1] kthread+0x361/0x430 [ 1404.350213][ C1] ? smpboot_register_percpu_thread+0x390/0x390 [ 1404.375644][ C1] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1404.381377][ C1] ret_from_fork+0x24/0x30 [ 1404.387260][ C1] Kernel Offset: disabled [ 1404.391582][ C1] Rebooting in 86400 seconds..