7660] ? pmd_pfn+0x1d0/0x1d0 [ 346.729881][ T7660] ? lock_downgrade+0x880/0x880 [ 346.734711][ T7660] ? swp_swapcount+0x540/0x540 [ 346.739453][ T7660] ? kasan_check_read+0x11/0x20 [ 346.744303][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 346.749393][ T7660] do_wp_page+0x5d8/0x16c0 [ 346.753787][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 346.759153][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 346.764259][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 346.769847][ T7660] ? find_held_lock+0x35/0x130 [ 346.774606][ T7660] ? handle_mm_fault+0x322/0xb30 [ 346.779551][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.785770][ T7660] ? kasan_check_read+0x11/0x20 [ 346.790604][ T7660] handle_mm_fault+0x43f/0xb30 [ 346.795408][ T7660] __do_page_fault+0x5ef/0xda0 [ 346.800164][ T7660] do_page_fault+0x71/0x581 [ 346.804642][ T7660] ? page_fault+0x8/0x30 [ 346.808869][ T7660] page_fault+0x1e/0x30 [ 346.813020][ T7660] RIP: 0033:0x42f20a [ 346.816894][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 346.836476][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 346.842527][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 346.850476][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 346.858426][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 346.866377][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 346.874338][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 346.883268][ T7660] memory: usage 88984kB, limit 0kB, failcnt 50 [ 346.889493][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.897019][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 346.903857][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:56200KB rss_huge:53248KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56196KB inactive_file:0KB active_file:0KB unevictable:0KB [ 346.925506][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=17950,uid=0 [ 346.940924][ T7660] Memory cgroup out of memory: Killed process 17950 (syz-executor.5) total-vm:72448kB, anon-rss:4244kB, file-rss:35824kB, shmem-rss:0kB [ 346.957524][ T1042] oom_reaper: reaped process 17950 (syz-executor.5), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 346.957869][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 346.978643][ T7643] CPU: 0 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 346.986441][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 346.996559][ T7643] Call Trace: [ 346.999830][ T7643] dump_stack+0x172/0x1f0 [ 347.004150][ T7643] dump_header+0x10f/0xb6c [ 347.008544][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 347.014324][ T7643] ? ___ratelimit+0x60/0x595 [ 347.018906][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.024010][ T7643] oom_kill_process.cold+0x10/0x15 [ 347.029113][ T7643] out_of_memory+0x79a/0x1280 [ 347.033782][ T7643] ? oom_killer_disable+0x280/0x280 [ 347.038956][ T7643] ? find_held_lock+0x35/0x130 [ 347.043704][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 347.049233][ T7643] ? memcg_event_wake+0x230/0x230 [ 347.054237][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.059345][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 347.064188][ T7643] try_charge+0x102c/0x15c0 [ 347.068685][ T7643] ? find_held_lock+0x35/0x130 [ 347.073437][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 347.078979][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.085201][ T7643] ? kasan_check_read+0x11/0x20 [ 347.090043][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 347.095568][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 347.100830][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 347.106442][ T7643] wp_page_copy+0x408/0x1740 [ 347.111286][ T7643] ? find_held_lock+0x35/0x130 [ 347.116127][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 347.120357][ T7643] ? lock_downgrade+0x880/0x880 [ 347.125183][ T7643] ? swp_swapcount+0x540/0x540 [ 347.129945][ T7643] ? kasan_check_read+0x11/0x20 [ 347.134774][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.139880][ T7643] do_wp_page+0x5d8/0x16c0 [ 347.144276][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 347.149627][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 347.154718][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 347.160242][ T7643] ? find_held_lock+0x35/0x130 [ 347.164987][ T7643] ? handle_mm_fault+0x322/0xb30 [ 347.169929][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.176161][ T7643] ? kasan_check_read+0x11/0x20 [ 347.181019][ T7643] handle_mm_fault+0x43f/0xb30 [ 347.185781][ T7643] __do_page_fault+0x5ef/0xda0 [ 347.190541][ T7643] do_page_fault+0x71/0x581 [ 347.195024][ T7643] ? page_fault+0x8/0x30 [ 347.199242][ T7643] page_fault+0x1e/0x30 [ 347.203372][ T7643] RIP: 0033:0x42f20a [ 347.207259][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 347.226933][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 347.233006][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 347.240963][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 347.248916][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 347.256876][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 347.264831][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 347.278042][ T7643] memory: usage 37932kB, limit 0kB, failcnt 110 [ 347.284347][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.291791][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.298676][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:28288KB rss_huge:26624KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28272KB inactive_file:0KB active_file:0KB unevictable:0KB [ 347.319883][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11793,uid=0 [ 347.335336][ T7643] Memory cgroup out of memory: Killed process 11793 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35828kB, shmem-rss:0kB [ 347.351160][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 347.362882][ T7643] CPU: 0 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 347.370702][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.380772][ T7643] Call Trace: [ 347.384057][ T7643] dump_stack+0x172/0x1f0 [ 347.388391][ T7643] dump_header+0x10f/0xb6c [ 347.392788][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 347.398577][ T7643] ? ___ratelimit+0x60/0x595 [ 347.403146][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.408258][ T7643] oom_kill_process.cold+0x10/0x15 [ 347.413352][ T7643] out_of_memory+0x79a/0x1280 [ 347.418007][ T7643] ? lock_downgrade+0x880/0x880 [ 347.422837][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.429060][ T7643] ? oom_killer_disable+0x280/0x280 [ 347.434262][ T7643] ? find_held_lock+0x35/0x130 [ 347.439011][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 347.444532][ T7643] ? memcg_event_wake+0x230/0x230 [ 347.449546][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.454647][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 347.459474][ T7643] try_charge+0x102c/0x15c0 [ 347.463957][ T7643] ? find_held_lock+0x35/0x130 [ 347.468719][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 347.474512][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.480729][ T7643] ? kasan_check_read+0x11/0x20 [ 347.485561][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 347.491092][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 347.496358][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 347.502054][ T7643] wp_page_copy+0x408/0x1740 [ 347.506632][ T7643] ? find_held_lock+0x35/0x130 [ 347.511382][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 347.515602][ T7643] ? lock_downgrade+0x880/0x880 [ 347.520446][ T7643] ? swp_swapcount+0x540/0x540 [ 347.525310][ T7643] ? kasan_check_read+0x11/0x20 [ 347.530307][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 347.535403][ T7643] do_wp_page+0x5d8/0x16c0 [ 347.539798][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 347.545152][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 347.550249][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 347.555792][ T7643] ? find_held_lock+0x35/0x130 [ 347.560536][ T7643] ? handle_mm_fault+0x322/0xb30 [ 347.565454][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.571760][ T7643] ? kasan_check_read+0x11/0x20 [ 347.576614][ T7643] handle_mm_fault+0x43f/0xb30 [ 347.581365][ T7643] __do_page_fault+0x5ef/0xda0 [ 347.586118][ T7643] do_page_fault+0x71/0x581 [ 347.590600][ T7643] ? page_fault+0x8/0x30 [ 347.594823][ T7643] page_fault+0x1e/0x30 [ 347.598956][ T7643] RIP: 0033:0x42f20a [ 347.602844][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 347.622424][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 347.628730][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 347.636678][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 347.644647][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 347.652598][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 347.662187][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 347.673537][ T7643] memory: usage 35608kB, limit 0kB, failcnt 116 [ 347.679866][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.687411][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 347.694305][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:26128KB rss_huge:24576KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:26112KB inactive_file:0KB active_file:0KB unevictable:0KB [ 347.715596][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=11724,uid=0 [ 347.731201][ T7643] Memory cgroup out of memory: Killed process 11724 (syz-executor.0) total-vm:72712kB, anon-rss:2216kB, file-rss:35808kB, shmem-rss:0kB [ 347.747324][ T7657] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 347.758367][ T7657] CPU: 0 PID: 7657 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 347.766270][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.776492][ T7657] Call Trace: [ 347.779775][ T7657] dump_stack+0x172/0x1f0 [ 347.784101][ T7657] dump_header+0x10f/0xb6c [ 347.788588][ T7657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 347.794386][ T7657] ? ___ratelimit+0x60/0x595 [ 347.798953][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 347.804042][ T7657] oom_kill_process.cold+0x10/0x15 [ 347.809158][ T7657] out_of_memory+0x79a/0x1280 [ 347.813815][ T7657] ? oom_killer_disable+0x280/0x280 [ 347.819001][ T7657] ? find_held_lock+0x35/0x130 [ 347.823749][ T7657] mem_cgroup_out_of_memory+0x1ca/0x230 [ 347.829280][ T7657] ? memcg_event_wake+0x230/0x230 [ 347.834292][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 347.839381][ T7657] ? _raw_spin_unlock+0x2d/0x50 [ 347.844219][ T7657] try_charge+0xa87/0x15c0 [ 347.848609][ T7657] ? find_held_lock+0x35/0x130 [ 347.853354][ T7657] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 347.858885][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.865108][ T7657] ? kasan_check_read+0x11/0x20 [ 347.869941][ T7657] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 347.875467][ T7657] mem_cgroup_try_charge+0x24d/0x5e0 [ 347.880732][ T7657] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 347.886347][ T7657] wp_page_copy+0x408/0x1740 [ 347.890914][ T7657] ? find_held_lock+0x35/0x130 [ 347.895662][ T7657] ? pmd_pfn+0x1d0/0x1d0 [ 347.899897][ T7657] ? lock_downgrade+0x880/0x880 [ 347.904745][ T7657] ? swp_swapcount+0x540/0x540 [ 347.909610][ T7657] ? kasan_check_read+0x11/0x20 [ 347.914441][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 347.919535][ T7657] do_wp_page+0x5d8/0x16c0 [ 347.923942][ T7657] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 347.929298][ T7657] __handle_mm_fault+0x22e8/0x3ec0 [ 347.934391][ T7657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 347.939913][ T7657] ? find_held_lock+0x35/0x130 [ 347.944655][ T7657] ? handle_mm_fault+0x322/0xb30 [ 347.949583][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.955817][ T7657] ? kasan_check_read+0x11/0x20 [ 347.960650][ T7657] handle_mm_fault+0x43f/0xb30 [ 347.965398][ T7657] __do_page_fault+0x5ef/0xda0 [ 347.970170][ T7657] do_page_fault+0x71/0x581 [ 347.974880][ T7657] ? page_fault+0x8/0x30 [ 347.979117][ T7657] page_fault+0x1e/0x30 [ 347.983261][ T7657] RIP: 0033:0x42f20a [ 347.987136][ T7657] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 348.006730][ T7657] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 348.012773][ T7657] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 348.020746][ T7657] RDX: 0000000001896930 RSI: 000000000189e970 RDI: 0000000000000003 [ 348.029068][ T7657] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001895940 [ 348.037021][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 348.051923][ T7657] R13: 0000000000711698 R14: 0000000000053108 R15: 0000000000002710 [ 348.060884][ T7657] memory: usage 42484kB, limit 0kB, failcnt 148 [ 348.067235][ T7657] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.074763][ T7657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.081704][ T7657] Memory cgroup stats for /syz4: cache:72KB rss:32544KB rss_huge:30720KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32548KB inactive_file:0KB active_file:0KB unevictable:0KB [ 348.103078][ T7657] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11751,uid=0 [ 348.118688][ T7657] Memory cgroup out of memory: Killed process 11751 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 348.134940][T20871] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 348.145109][T20871] CPU: 1 PID: 20871 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 348.153008][T20871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.163224][T20871] Call Trace: [ 348.166606][T20871] dump_stack+0x172/0x1f0 [ 348.170964][T20871] dump_header+0x10f/0xb6c [ 348.175365][T20871] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 348.181162][T20871] ? ___ratelimit+0x60/0x595 [ 348.185742][T20871] ? do_raw_spin_unlock+0x57/0x270 [ 348.190883][T20871] oom_kill_process.cold+0x10/0x15 [ 348.196009][T20871] out_of_memory+0x79a/0x1280 [ 348.200696][T20871] ? oom_killer_disable+0x280/0x280 [ 348.205895][T20871] ? find_held_lock+0x35/0x130 [ 348.210661][T20871] mem_cgroup_out_of_memory+0x1ca/0x230 [ 348.216198][T20871] ? memcg_event_wake+0x230/0x230 [ 348.221207][T20871] ? do_raw_spin_unlock+0x57/0x270 [ 348.226308][T20871] ? _raw_spin_unlock+0x2d/0x50 [ 348.231167][T20871] try_charge+0x102c/0x15c0 [ 348.235663][T20871] ? find_held_lock+0x35/0x130 [ 348.240412][T20871] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 348.245968][T20871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.252550][T20871] ? kasan_check_read+0x11/0x20 [ 348.257389][T20871] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 348.262929][T20871] mem_cgroup_try_charge+0x24d/0x5e0 [ 348.268387][T20871] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 348.274040][T20871] wp_page_copy+0x408/0x1740 [ 348.278623][T20871] ? find_held_lock+0x35/0x130 [ 348.283390][T20871] ? pmd_pfn+0x1d0/0x1d0 [ 348.287629][T20871] ? lock_downgrade+0x880/0x880 [ 348.292466][T20871] ? swp_swapcount+0x540/0x540 [ 348.297219][T20871] ? kasan_check_read+0x11/0x20 [ 348.302155][T20871] ? do_raw_spin_unlock+0x57/0x270 [ 348.307261][T20871] do_wp_page+0x5d8/0x16c0 [ 348.311675][T20871] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 348.317057][T20871] __handle_mm_fault+0x22e8/0x3ec0 [ 348.322147][T20871] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 348.327784][T20871] ? find_held_lock+0x35/0x130 [ 348.332542][T20871] ? handle_mm_fault+0x322/0xb30 [ 348.337474][T20871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.343713][T20871] ? kasan_check_read+0x11/0x20 [ 348.348564][T20871] handle_mm_fault+0x43f/0xb30 [ 348.353325][T20871] __do_page_fault+0x5ef/0xda0 [ 348.358078][T20871] do_page_fault+0x71/0x581 [ 348.362568][T20871] page_fault+0x1e/0x30 [ 348.366727][T20871] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 348.373043][T20871] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 348.392636][T20871] RSP: 0018:ffff888086e8f998 EFLAGS: 00010206 [ 348.398683][T20871] RAX: ffffed1010dd1f4b RBX: 0000000000000028 RCX: 0000000000000005 [ 348.406645][T20871] RDX: 0000000000000000 RSI: ffff888086e8fa30 RDI: 000000000070b058 [ 348.414609][T20871] RBP: ffff888086e8f9d0 R08: 0000000000006f6c R09: ffffed1010dd1f4b [ 348.422563][T20871] R10: ffffed1010dd1f4a R11: ffff888086e8fa57 R12: 000000000070b058 [ 348.430514][T20871] R13: ffff888086e8fa30 R14: 000000000070b080 R15: 00007ffffffff000 [ 348.438558][T20871] ? _copy_to_user+0xf7/0x120 [ 348.443235][T20871] inet_gifconf+0x21d/0x370 [ 348.447758][T20871] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 348.453387][T20871] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 348.459041][T20871] dev_ifconf+0xd2/0x240 [ 348.463266][T20871] sock_do_ioctl+0x266/0x300 [ 348.467855][T20871] ? compat_ifr_data_ioctl+0x160/0x160 [ 348.473328][T20871] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 348.479571][T20871] ? tomoyo_init_request_info+0x105/0x1d0 [ 348.485289][T20871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.493368][T20871] ? tomoyo_path_number_perm+0x263/0x520 [ 348.498986][T20871] sock_ioctl+0x32b/0x610 [ 348.503299][T20871] ? dlci_ioctl_set+0x40/0x40 [ 348.508142][T20871] ? __fget+0x35a/0x550 [ 348.512289][T20871] ? dlci_ioctl_set+0x40/0x40 [ 348.516954][T20871] do_vfs_ioctl+0xd6e/0x1390 [ 348.521549][T20871] ? ioctl_preallocate+0x210/0x210 [ 348.526651][T20871] ? __fget+0x381/0x550 [ 348.530797][T20871] ? ksys_dup3+0x3e0/0x3e0 [ 348.535194][T20871] ? nsecs_to_jiffies+0x30/0x30 [ 348.540028][T20871] ? tomoyo_file_ioctl+0x23/0x30 [ 348.544953][T20871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.551288][T20871] ? security_file_ioctl+0x93/0xc0 [ 348.556382][T20871] ksys_ioctl+0xab/0xd0 [ 348.560523][T20871] __x64_sys_ioctl+0x73/0xb0 [ 348.565105][T20871] do_syscall_64+0x103/0x610 [ 348.569689][T20871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 348.575570][T20871] RIP: 0033:0x458079 [ 348.579444][T20871] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.599046][T20871] RSP: 002b:00007f805cd04c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.607463][T20871] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 348.615426][T20871] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 348.623376][T20871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.631418][T20871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f805cd056d4 [ 348.639368][T20871] R13: 00000000004c145e R14: 00000000004d33e0 R15: 00000000ffffffff [ 348.651317][T20871] memory: usage 40172kB, limit 0kB, failcnt 154 [ 348.657674][T20871] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.665534][T20871] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 348.672379][T20871] Memory cgroup stats for /syz4: cache:72KB rss:30412KB rss_huge:28672KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30396KB inactive_file:0KB active_file:0KB unevictable:0KB [ 348.693853][T20871] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11773,uid=0 [ 348.709364][T20871] Memory cgroup out of memory: Killed process 11773 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 348.724773][ T1042] oom_reaper: reaped process 11773 (syz-executor.4), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 348.728619][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 348.751591][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 348.759408][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.769451][ T7660] Call Trace: [ 348.772738][ T7660] dump_stack+0x172/0x1f0 [ 348.777052][ T7660] dump_header+0x10f/0xb6c [ 348.781457][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 348.787265][ T7660] ? ___ratelimit+0x60/0x595 [ 348.791835][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 348.796939][ T7660] oom_kill_process.cold+0x10/0x15 [ 348.802043][ T7660] out_of_memory+0x79a/0x1280 [ 348.806826][ T7660] ? oom_killer_disable+0x280/0x280 [ 348.812004][ T7660] ? find_held_lock+0x35/0x130 [ 348.816764][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 348.822301][ T7660] ? memcg_event_wake+0x230/0x230 [ 348.827320][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 348.832423][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 348.837276][ T7660] try_charge+0x102c/0x15c0 [ 348.841757][ T7660] ? find_held_lock+0x35/0x130 [ 348.846540][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 348.852070][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.858289][ T7660] ? kasan_check_read+0x11/0x20 [ 348.863123][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 348.868652][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 348.873927][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 348.879640][ T7660] wp_page_copy+0x408/0x1740 [ 348.884214][ T7660] ? find_held_lock+0x35/0x130 [ 348.888957][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 348.893211][ T7660] ? lock_downgrade+0x880/0x880 [ 348.898042][ T7660] ? swp_swapcount+0x540/0x540 [ 348.902787][ T7660] ? kasan_check_read+0x11/0x20 [ 348.907705][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 348.912796][ T7660] do_wp_page+0x5d8/0x16c0 [ 348.917195][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 348.922572][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 348.927669][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 348.933195][ T7660] ? find_held_lock+0x35/0x130 [ 348.937937][ T7660] ? handle_mm_fault+0x322/0xb30 [ 348.942900][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 348.949154][ T7660] ? kasan_check_read+0x11/0x20 [ 348.954100][ T7660] handle_mm_fault+0x43f/0xb30 [ 348.958862][ T7660] __do_page_fault+0x5ef/0xda0 [ 348.963619][ T7660] do_page_fault+0x71/0x581 [ 348.968115][ T7660] ? page_fault+0x8/0x30 [ 348.972346][ T7660] page_fault+0x1e/0x30 [ 348.976569][ T7660] RIP: 0033:0x42f20a [ 348.980450][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 349.000136][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 349.006211][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 349.014169][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 349.022219][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 349.030168][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 349.038128][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 349.047827][ T7660] memory: usage 84600kB, limit 0kB, failcnt 56 [ 349.054011][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.061547][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.068457][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:51976KB rss_huge:49152KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:51980KB inactive_file:0KB active_file:0KB unevictable:0KB [ 349.090017][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11030,uid=0 [ 349.106281][ T7660] Memory cgroup out of memory: Killed process 11030 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35820kB, shmem-rss:0kB [ 349.126209][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 349.136252][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 349.144167][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.154213][ T7660] Call Trace: [ 349.157499][ T7660] dump_stack+0x172/0x1f0 [ 349.162104][ T7660] dump_header+0x10f/0xb6c [ 349.166560][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 349.172363][ T7660] ? ___ratelimit+0x60/0x595 [ 349.177024][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 349.182152][ T7660] oom_kill_process.cold+0x10/0x15 [ 349.187267][ T7660] out_of_memory+0x79a/0x1280 [ 349.191935][ T7660] ? lock_downgrade+0x880/0x880 [ 349.196772][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.203003][ T7660] ? oom_killer_disable+0x280/0x280 [ 349.208186][ T7660] ? find_held_lock+0x35/0x130 [ 349.212954][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 349.218491][ T7660] ? memcg_event_wake+0x230/0x230 [ 349.223519][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 349.228620][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 349.233475][ T7660] try_charge+0x102c/0x15c0 [ 349.237973][ T7660] ? find_held_lock+0x35/0x130 [ 349.242741][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 349.248267][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.254504][ T7660] ? kasan_check_read+0x11/0x20 [ 349.259371][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 349.265662][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 349.270949][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 349.276569][ T7660] wp_page_copy+0x408/0x1740 [ 349.281158][ T7660] ? find_held_lock+0x35/0x130 [ 349.285919][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 349.290172][ T7660] ? lock_downgrade+0x880/0x880 [ 349.295012][ T7660] ? swp_swapcount+0x540/0x540 [ 349.299786][ T7660] ? kasan_check_read+0x11/0x20 [ 349.304627][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 349.309728][ T7660] do_wp_page+0x5d8/0x16c0 [ 349.314139][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 349.319503][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 349.324617][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 349.331531][ T7660] ? find_held_lock+0x35/0x130 [ 349.336295][ T7660] ? handle_mm_fault+0x322/0xb30 [ 349.341232][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.347461][ T7660] ? kasan_check_read+0x11/0x20 [ 349.352294][ T7660] handle_mm_fault+0x43f/0xb30 [ 349.357041][ T7660] __do_page_fault+0x5ef/0xda0 [ 349.361805][ T7660] do_page_fault+0x71/0x581 [ 349.366299][ T7660] ? page_fault+0x8/0x30 [ 349.370531][ T7660] page_fault+0x1e/0x30 [ 349.374952][ T7660] RIP: 0033:0x42f20a [ 349.378836][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 349.398438][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 349.404605][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 349.412572][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 349.420619][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 349.437758][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 349.445717][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 349.454036][ T7660] memory: usage 82320kB, limit 0kB, failcnt 62 [ 349.460587][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.468125][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.475166][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:49844KB rss_huge:47104KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:49828KB inactive_file:0KB active_file:0KB unevictable:0KB [ 349.496845][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=11093,uid=0 [ 349.512440][ T7660] Memory cgroup out of memory: Killed process 11093 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35820kB, shmem-rss:0kB [ 349.527431][ T1042] oom_reaper: reaped process 11093 (syz-executor.5), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 349.533599][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 349.551100][ T7643] CPU: 0 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 349.558917][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.568961][ T7643] Call Trace: [ 349.572236][ T7643] dump_stack+0x172/0x1f0 [ 349.576544][ T7643] dump_header+0x10f/0xb6c [ 349.581003][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 349.586800][ T7643] ? ___ratelimit+0x60/0x595 [ 349.591381][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 349.596476][ T7643] oom_kill_process.cold+0x10/0x15 [ 349.601563][ T7643] out_of_memory+0x79a/0x1280 [ 349.606253][ T7643] ? oom_killer_disable+0x280/0x280 [ 349.611437][ T7643] ? find_held_lock+0x35/0x130 [ 349.616183][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 349.621761][ T7643] ? memcg_event_wake+0x230/0x230 [ 349.626842][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 349.631945][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 349.636775][ T7643] try_charge+0x102c/0x15c0 [ 349.641252][ T7643] ? find_held_lock+0x35/0x130 [ 349.646010][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 349.651546][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.657768][ T7643] ? kasan_check_read+0x11/0x20 [ 349.663979][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 349.669511][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 349.674804][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 349.680417][ T7643] wp_page_copy+0x408/0x1740 [ 349.684989][ T7643] ? find_held_lock+0x35/0x130 [ 349.689733][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 349.693964][ T7643] ? lock_downgrade+0x880/0x880 [ 349.698797][ T7643] ? swp_swapcount+0x540/0x540 [ 349.704753][ T7643] ? kasan_check_read+0x11/0x20 [ 349.709582][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 349.714671][ T7643] do_wp_page+0x5d8/0x16c0 [ 349.719328][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 349.724686][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 349.729778][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 349.735303][ T7643] ? find_held_lock+0x35/0x130 [ 349.740054][ T7643] ? handle_mm_fault+0x322/0xb30 [ 349.744970][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 349.751185][ T7643] ? kasan_check_read+0x11/0x20 [ 349.756016][ T7643] handle_mm_fault+0x43f/0xb30 [ 349.760760][ T7643] __do_page_fault+0x5ef/0xda0 [ 349.765504][ T7643] do_page_fault+0x71/0x581 [ 349.769987][ T7643] ? page_fault+0x8/0x30 [ 349.774210][ T7643] page_fault+0x1e/0x30 [ 349.778340][ T7643] RIP: 0033:0x42f20a [ 349.782274][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 349.801871][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 349.807926][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 349.815898][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 349.823854][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 349.831806][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 349.839768][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 349.848960][ T7643] memory: usage 33188kB, limit 0kB, failcnt 122 [ 349.855283][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.862727][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 349.869617][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:23964KB rss_huge:22528KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:23932KB inactive_file:0KB active_file:0KB unevictable:0KB [ 349.890806][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10990,uid=0 [ 349.906213][ T7643] Memory cgroup out of memory: Killed process 10990 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35820kB, shmem-rss:0kB [ 349.924559][ T7657] Memory cgroup out of memory: Killed process 20871 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB 00:01:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 349.945857][ T7660] Memory cgroup out of memory: Killed process 20015 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:35816kB, shmem-rss:0kB 00:01:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 350.020214][ T7643] Memory cgroup out of memory: Killed process 10930 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35812kB, shmem-rss:0kB [ 350.081940][ T7657] Memory cgroup out of memory: Killed process 20844 (syz-executor.4) total-vm:72580kB, anon-rss:2208kB, file-rss:35828kB, shmem-rss:0kB [ 350.144647][ T7660] Memory cgroup out of memory: Killed process 9064 (syz-executor.5) total-vm:72712kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB [ 350.194047][T20901] FS-Cache: Duplicate cookie detected [ 350.200040][T20901] FS-Cache: O-cookie c=00000000056ae304 [p=0000000061962380 fl=222 nc=0 na=1] [ 350.209254][T20901] FS-Cache: O-cookie d=000000008fd7d38b n=000000002e615eb1 [ 350.220910][T20901] FS-Cache: O-key=[10] '02000200000002000000' [ 350.227451][T20901] FS-Cache: N-cookie c=00000000bbcf017f [p=0000000061962380 fl=2 nc=0 na=1] [ 350.236462][T20901] FS-Cache: N-cookie d=000000008fd7d38b n=0000000045cbf1d9 [ 350.244029][T20901] FS-Cache: N-key=[10] '02000200000002000000' [ 350.274548][ T7643] Memory cgroup out of memory: Killed process 12668 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB 00:01:59 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 350.325889][ T7657] Memory cgroup out of memory: Killed process 20853 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35832kB, shmem-rss:0kB [ 350.406928][ T7657] Memory cgroup out of memory: Killed process 11794 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35828kB, shmem-rss:0kB 00:01:59 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 350.572685][ T7660] oom_kill_process: 8 callbacks suppressed [ 350.572700][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 350.587098][T20913] QAT: Invalid ioctl [ 350.606846][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 350.615213][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.625272][ T7660] Call Trace: [ 350.628573][ T7660] dump_stack+0x172/0x1f0 [ 350.632915][ T7660] dump_header+0x10f/0xb6c [ 350.637332][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 350.643141][ T7660] ? ___ratelimit+0x60/0x595 [ 350.647736][ T7660] oom_kill_process.cold+0x10/0x15 [ 350.652947][ T7660] out_of_memory+0x79a/0x1280 [ 350.657632][ T7660] ? oom_killer_disable+0x280/0x280 [ 350.662835][ T7660] ? find_held_lock+0x35/0x130 [ 350.667632][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 350.673198][ T7660] ? memcg_event_wake+0x230/0x230 [ 350.678268][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 350.683389][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 350.688285][ T7660] try_charge+0x102c/0x15c0 [ 350.692808][ T7660] ? find_held_lock+0x35/0x130 [ 350.697583][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 350.703130][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.709463][ T7660] ? kasan_check_read+0x11/0x20 [ 350.714313][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 350.719980][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 350.725279][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 350.730916][ T7660] wp_page_copy+0x408/0x1740 [ 350.735608][ T7660] ? find_held_lock+0x35/0x130 [ 350.740367][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 350.744600][ T7660] ? lock_downgrade+0x880/0x880 [ 350.749441][ T7660] ? swp_swapcount+0x540/0x540 [ 350.754204][ T7660] ? kasan_check_read+0x11/0x20 [ 350.759076][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 350.764198][ T7660] do_wp_page+0x5d8/0x16c0 [ 350.768698][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 350.774067][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 350.779202][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 350.784739][ T7660] ? find_held_lock+0x35/0x130 [ 350.789493][ T7660] ? handle_mm_fault+0x322/0xb30 [ 350.794442][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 350.800678][ T7660] ? kasan_check_read+0x11/0x20 [ 350.805517][ T7660] handle_mm_fault+0x43f/0xb30 [ 350.810278][ T7660] __do_page_fault+0x5ef/0xda0 [ 350.815046][ T7660] do_page_fault+0x71/0x581 [ 350.819562][ T7660] ? page_fault+0x8/0x30 [ 350.823797][ T7660] page_fault+0x1e/0x30 [ 350.827939][ T7660] RIP: 0033:0x42f20a [ 350.831844][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 350.851452][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 350.857515][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 350.865529][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 350.873585][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 350.881720][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 350.889678][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 350.898343][ T7660] memory: usage 75048kB, limit 0kB, failcnt 80 [ 350.905742][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 350.913448][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 350.920568][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:43320KB rss_huge:40960KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43288KB inactive_file:0KB active_file:0KB unevictable:0KB [ 350.942501][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8968,uid=0 [ 350.958080][ T7660] Memory cgroup out of memory: Killed process 8968 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 350.972422][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 350.972431][ T1042] oom_reaper: reaped process 8968 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 350.985661][ T7643] CPU: 1 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 351.001621][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.011686][ T7643] Call Trace: [ 351.015013][ T7643] dump_stack+0x172/0x1f0 [ 351.019371][ T7643] dump_header+0x10f/0xb6c [ 351.023813][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 351.029615][ T7643] ? ___ratelimit+0x60/0x595 [ 351.034198][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 351.039305][ T7643] oom_kill_process.cold+0x10/0x15 [ 351.044467][ T7643] out_of_memory+0x79a/0x1280 [ 351.049124][ T7643] ? oom_killer_disable+0x280/0x280 [ 351.054334][ T7643] ? find_held_lock+0x35/0x130 [ 351.059119][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 351.064660][ T7643] ? memcg_event_wake+0x230/0x230 [ 351.069668][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 351.074768][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 351.079614][ T7643] try_charge+0x102c/0x15c0 [ 351.084113][ T7643] ? find_held_lock+0x35/0x130 [ 351.088857][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 351.094392][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.100627][ T7643] ? kasan_check_read+0x11/0x20 [ 351.105457][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 351.110994][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 351.116274][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 351.121936][ T7643] wp_page_copy+0x408/0x1740 [ 351.126530][ T7643] ? find_held_lock+0x35/0x130 [ 351.131297][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 351.135540][ T7643] ? lock_downgrade+0x880/0x880 [ 351.140377][ T7643] ? swp_swapcount+0x540/0x540 [ 351.145122][ T7643] ? kasan_check_read+0x11/0x20 [ 351.149957][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 351.155061][ T7643] do_wp_page+0x5d8/0x16c0 [ 351.159475][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 351.164850][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 351.169968][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 351.175507][ T7643] ? find_held_lock+0x35/0x130 [ 351.180260][ T7643] ? handle_mm_fault+0x322/0xb30 [ 351.185194][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.191422][ T7643] ? kasan_check_read+0x11/0x20 [ 351.196263][ T7643] handle_mm_fault+0x43f/0xb30 [ 351.201067][ T7643] __do_page_fault+0x5ef/0xda0 [ 351.205816][ T7643] do_page_fault+0x71/0x581 [ 351.210305][ T7643] ? page_fault+0x8/0x30 [ 351.214539][ T7643] page_fault+0x1e/0x30 [ 351.218695][ T7643] RIP: 0033:0x42f20a [ 351.222580][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 351.242168][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 351.248225][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 351.256185][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 351.264163][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 351.272129][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 351.280110][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 351.295811][ T7643] memory: usage 26032kB, limit 0kB, failcnt 140 [ 351.302187][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.309858][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.316775][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:17452KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17436KB inactive_file:0KB active_file:0KB unevictable:0KB [ 351.338078][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=12684,uid=0 [ 351.353493][ T7643] Memory cgroup out of memory: Killed process 12684 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 351.368575][ T7657] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 351.369260][ T1042] oom_reaper: reaped process 12684 (syz-executor.0), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 351.380749][ T7657] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 351.397330][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.407384][ T7657] Call Trace: [ 351.410689][ T7657] dump_stack+0x172/0x1f0 [ 351.415032][ T7657] dump_header+0x10f/0xb6c [ 351.419473][ T7657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 351.431188][ T7657] ? ___ratelimit+0x60/0x595 [ 351.435882][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 351.441161][ T7657] oom_kill_process.cold+0x10/0x15 [ 351.446270][ T7657] out_of_memory+0x79a/0x1280 [ 351.450973][ T7657] ? oom_killer_disable+0x280/0x280 [ 351.457231][ T7657] ? find_held_lock+0x35/0x130 [ 351.462013][ T7657] mem_cgroup_out_of_memory+0x1ca/0x230 [ 351.467552][ T7657] ? memcg_event_wake+0x230/0x230 [ 351.472590][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 351.477708][ T7657] ? _raw_spin_unlock+0x2d/0x50 [ 351.482548][ T7657] try_charge+0x102c/0x15c0 [ 351.487045][ T7657] ? find_held_lock+0x35/0x130 [ 351.491893][ T7657] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 351.497521][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.503747][ T7657] ? kasan_check_read+0x11/0x20 [ 351.508592][ T7657] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 351.514141][ T7657] mem_cgroup_try_charge+0x24d/0x5e0 [ 351.519426][ T7657] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 351.526278][ T7657] wp_page_copy+0x408/0x1740 [ 351.530873][ T7657] ? find_held_lock+0x35/0x130 [ 351.535648][ T7657] ? pmd_pfn+0x1d0/0x1d0 [ 351.539895][ T7657] ? lock_downgrade+0x880/0x880 [ 351.544737][ T7657] ? swp_swapcount+0x540/0x540 [ 351.549517][ T7657] ? kasan_check_read+0x11/0x20 [ 351.554363][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 351.559469][ T7657] do_wp_page+0x5d8/0x16c0 [ 351.563877][ T7657] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 351.569237][ T7657] __handle_mm_fault+0x22e8/0x3ec0 [ 351.574349][ T7657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 351.579905][ T7657] ? find_held_lock+0x35/0x130 [ 351.584777][ T7657] ? handle_mm_fault+0x322/0xb30 [ 351.589709][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.595942][ T7657] ? kasan_check_read+0x11/0x20 [ 351.600784][ T7657] handle_mm_fault+0x43f/0xb30 [ 351.605546][ T7657] __do_page_fault+0x5ef/0xda0 [ 351.610343][ T7657] do_page_fault+0x71/0x581 [ 351.614845][ T7657] ? page_fault+0x8/0x30 [ 351.619086][ T7657] page_fault+0x1e/0x30 [ 351.623223][ T7657] RIP: 0033:0x42f20a [ 351.627115][ T7657] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 351.646722][ T7657] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 351.654212][ T7657] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 351.662180][ T7657] RDX: 0000000001896930 RSI: 000000000189e970 RDI: 0000000000000003 [ 351.670138][ T7657] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001895940 [ 351.678103][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 351.686076][ T7657] R13: 0000000000711698 R14: 0000000000053108 R15: 0000000000002710 [ 351.694423][ T7657] memory: usage 28316kB, limit 0kB, failcnt 185 [ 351.700838][ T7657] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.708534][ T7657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 351.715492][ T7657] Memory cgroup stats for /syz4: cache:72KB rss:19648KB rss_huge:18432KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19568KB inactive_file:0KB active_file:0KB unevictable:0KB [ 351.738966][ T7657] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15757,uid=0 [ 351.754960][ T7657] Memory cgroup out of memory: Killed process 15757 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 351.769245][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 351.770365][ T1042] oom_reaper: reaped process 15757 (syz-executor.4), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 351.781210][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 351.798026][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.808083][ T7660] Call Trace: [ 351.811382][ T7660] dump_stack+0x172/0x1f0 [ 351.815724][ T7660] dump_header+0x10f/0xb6c [ 351.820155][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 351.826133][ T7660] ? ___ratelimit+0x60/0x595 [ 351.830808][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 351.835919][ T7660] oom_kill_process.cold+0x10/0x15 [ 351.841021][ T7660] out_of_memory+0x79a/0x1280 [ 351.845694][ T7660] ? oom_killer_disable+0x280/0x280 [ 351.850900][ T7660] ? find_held_lock+0x35/0x130 [ 351.855678][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 351.861223][ T7660] ? memcg_event_wake+0x230/0x230 [ 351.866289][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 351.871415][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 351.876281][ T7660] try_charge+0x102c/0x15c0 [ 351.880801][ T7660] ? find_held_lock+0x35/0x130 [ 351.885567][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 351.891108][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.897336][ T7660] ? kasan_check_read+0x11/0x20 [ 351.902182][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 351.907743][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 351.913140][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 351.918764][ T7660] wp_page_copy+0x408/0x1740 [ 351.923343][ T7660] ? find_held_lock+0x35/0x130 [ 351.928099][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 351.932324][ T7660] ? lock_downgrade+0x880/0x880 [ 351.937156][ T7660] ? swp_swapcount+0x540/0x540 [ 351.941900][ T7660] ? kasan_check_read+0x11/0x20 [ 351.946748][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 351.951865][ T7660] do_wp_page+0x5d8/0x16c0 [ 351.956267][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 351.961632][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 351.966747][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 351.972293][ T7660] ? find_held_lock+0x35/0x130 [ 351.977063][ T7660] ? handle_mm_fault+0x322/0xb30 [ 351.982011][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 351.988249][ T7660] ? kasan_check_read+0x11/0x20 [ 351.993102][ T7660] handle_mm_fault+0x43f/0xb30 [ 351.997884][ T7660] __do_page_fault+0x5ef/0xda0 [ 352.002645][ T7660] do_page_fault+0x71/0x581 [ 352.007152][ T7660] ? page_fault+0x8/0x30 [ 352.011410][ T7660] page_fault+0x1e/0x30 [ 352.015555][ T7660] RIP: 0033:0x42f20a [ 352.019450][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 352.039087][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 352.045156][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 352.053125][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 352.061085][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 352.069042][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 352.076999][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 352.085253][ T7660] memory: usage 72720kB, limit 0kB, failcnt 86 [ 352.091408][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.098930][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.105831][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:41140KB rss_huge:38912KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 352.127423][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=8995,uid=0 [ 352.142738][ T7660] Memory cgroup out of memory: Killed process 8995 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 352.157028][T20905] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 352.157901][ T1042] oom_reaper: reaped process 8995 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 352.169439][T20905] CPU: 1 PID: 20905 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 352.186064][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.196115][T20905] Call Trace: [ 352.199416][T20905] dump_stack+0x172/0x1f0 [ 352.203746][T20905] dump_header+0x10f/0xb6c [ 352.208160][T20905] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 352.213965][T20905] ? ___ratelimit+0x60/0x595 [ 352.218549][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 352.223666][T20905] oom_kill_process.cold+0x10/0x15 [ 352.228790][T20905] out_of_memory+0x79a/0x1280 [ 352.233474][T20905] ? oom_killer_disable+0x280/0x280 [ 352.238676][T20905] ? find_held_lock+0x35/0x130 [ 352.243448][T20905] mem_cgroup_out_of_memory+0x1ca/0x230 [ 352.248992][T20905] ? memcg_event_wake+0x230/0x230 [ 352.254021][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 352.259130][T20905] ? _raw_spin_unlock+0x2d/0x50 [ 352.263983][T20905] try_charge+0x102c/0x15c0 [ 352.268479][T20905] ? find_held_lock+0x35/0x130 [ 352.273346][T20905] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 352.278899][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.285140][T20905] ? kasan_check_read+0x11/0x20 [ 352.289992][T20905] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 352.295627][T20905] mem_cgroup_try_charge+0x24d/0x5e0 [ 352.300923][T20905] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 352.306648][T20905] wp_page_copy+0x408/0x1740 [ 352.311239][T20905] ? find_held_lock+0x35/0x130 [ 352.316007][T20905] ? pmd_pfn+0x1d0/0x1d0 [ 352.320252][T20905] ? lock_downgrade+0x880/0x880 [ 352.325098][T20905] ? swp_swapcount+0x540/0x540 [ 352.329862][T20905] ? kasan_check_read+0x11/0x20 [ 352.334716][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 352.339859][T20905] do_wp_page+0x5d8/0x16c0 [ 352.344362][T20905] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 352.349741][T20905] __handle_mm_fault+0x22e8/0x3ec0 [ 352.354859][T20905] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 352.360412][T20905] ? find_held_lock+0x35/0x130 [ 352.365175][T20905] ? handle_mm_fault+0x322/0xb30 [ 352.370123][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.376369][T20905] ? kasan_check_read+0x11/0x20 [ 352.381243][T20905] handle_mm_fault+0x43f/0xb30 [ 352.386021][T20905] __do_page_fault+0x5ef/0xda0 [ 352.390802][T20905] do_page_fault+0x71/0x581 [ 352.395309][T20905] page_fault+0x1e/0x30 [ 352.399465][T20905] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 352.405790][T20905] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 352.425482][T20905] RSP: 0018:ffff888086e8f998 EFLAGS: 00010206 [ 352.431548][T20905] RAX: ffffed1010dd1f4b RBX: 0000000000000028 RCX: 0000000000000005 [ 352.439603][T20905] RDX: 0000000000000000 RSI: ffff888086e8fa30 RDI: 000000000070b058 [ 352.447579][T20905] RBP: ffff888086e8f9d0 R08: 0000000000006f6c R09: ffffed1010dd1f4b [ 352.455562][T20905] R10: ffffed1010dd1f4a R11: ffff888086e8fa57 R12: 000000000070b058 [ 352.463540][T20905] R13: ffff888086e8fa30 R14: 000000000070b080 R15: 00007ffffffff000 [ 352.471545][T20905] ? _copy_to_user+0xf7/0x120 [ 352.476235][T20905] inet_gifconf+0x21d/0x370 [ 352.480746][T20905] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 352.486484][T20905] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 352.493952][T20905] dev_ifconf+0xd2/0x240 [ 352.498196][T20905] sock_do_ioctl+0x266/0x300 [ 352.502765][T20905] ? compat_ifr_data_ioctl+0x160/0x160 [ 352.508212][T20905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 352.514446][T20905] ? tomoyo_init_request_info+0x105/0x1d0 [ 352.520274][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.526501][T20905] ? tomoyo_path_number_perm+0x263/0x520 [ 352.532139][T20905] sock_ioctl+0x32b/0x610 [ 352.536471][T20905] ? dlci_ioctl_set+0x40/0x40 [ 352.541195][T20905] ? __fget+0x35a/0x550 [ 352.545341][T20905] ? dlci_ioctl_set+0x40/0x40 [ 352.550000][T20905] do_vfs_ioctl+0xd6e/0x1390 [ 352.554583][T20905] ? ioctl_preallocate+0x210/0x210 [ 352.559701][T20905] ? __fget+0x381/0x550 [ 352.563865][T20905] ? ksys_dup3+0x3e0/0x3e0 [ 352.568352][T20905] ? lock_downgrade+0x880/0x880 [ 352.573188][T20905] ? tomoyo_file_ioctl+0x23/0x30 [ 352.578115][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.584358][T20905] ? security_file_ioctl+0x93/0xc0 [ 352.589462][T20905] ksys_ioctl+0xab/0xd0 [ 352.593626][T20905] __x64_sys_ioctl+0x73/0xb0 [ 352.598216][T20905] do_syscall_64+0x103/0x610 [ 352.602802][T20905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 352.608771][T20905] RIP: 0033:0x458079 [ 352.612779][T20905] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.632751][T20905] RSP: 002b:00007f55f2b22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.641162][T20905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 352.649129][T20905] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 352.657091][T20905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 352.665057][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55f2b236d4 [ 352.673102][T20905] R13: 00000000004c145e R14: 00000000004d33e0 R15: 00000000ffffffff [ 352.684952][T20905] memory: usage 88516kB, limit 0kB, failcnt 8 [ 352.691035][T20905] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.698566][T20905] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 352.705446][T20905] Memory cgroup stats for /syz1: cache:0KB rss:69132KB rss_huge:65536KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:69232KB inactive_file:0KB active_file:0KB unevictable:0KB [ 352.726930][T20905] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13591,uid=0 [ 352.742372][T20905] Memory cgroup out of memory: Killed process 13591 (syz-executor.1) total-vm:72580kB, anon-rss:4256kB, file-rss:35800kB, shmem-rss:0kB [ 352.756576][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 352.758262][ T1042] oom_reaper: reaped process 13591 (syz-executor.1), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 352.768801][ T7643] CPU: 1 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 352.787922][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.797976][ T7643] Call Trace: [ 352.801272][ T7643] dump_stack+0x172/0x1f0 [ 352.805612][ T7643] dump_header+0x10f/0xb6c [ 352.810032][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 352.815827][ T7643] ? ___ratelimit+0x60/0x595 [ 352.820406][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 352.825507][ T7643] oom_kill_process.cold+0x10/0x15 [ 352.830607][ T7643] out_of_memory+0x79a/0x1280 [ 352.835276][ T7643] ? oom_killer_disable+0x280/0x280 [ 352.840463][ T7643] ? find_held_lock+0x35/0x130 [ 352.845227][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 352.850759][ T7643] ? memcg_event_wake+0x230/0x230 [ 352.855777][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 352.860898][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 352.865750][ T7643] try_charge+0x102c/0x15c0 [ 352.870423][ T7643] ? find_held_lock+0x35/0x130 [ 352.875191][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 352.880730][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.886952][ T7643] ? kasan_check_read+0x11/0x20 [ 352.891794][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 352.897332][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 352.902621][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 352.908245][ T7643] wp_page_copy+0x408/0x1740 [ 352.912826][ T7643] ? find_held_lock+0x35/0x130 [ 352.917604][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 352.921850][ T7643] ? lock_downgrade+0x880/0x880 [ 352.926681][ T7643] ? swp_swapcount+0x540/0x540 [ 352.931432][ T7643] ? kasan_check_read+0x11/0x20 [ 352.936316][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 352.941437][ T7643] do_wp_page+0x5d8/0x16c0 [ 352.945845][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 352.951200][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 352.956321][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 352.962118][ T7643] ? find_held_lock+0x35/0x130 [ 352.966887][ T7643] ? handle_mm_fault+0x322/0xb30 [ 352.971818][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 352.978076][ T7643] ? kasan_check_read+0x11/0x20 [ 352.982914][ T7643] handle_mm_fault+0x43f/0xb30 [ 352.987668][ T7643] __do_page_fault+0x5ef/0xda0 [ 352.992418][ T7643] do_page_fault+0x71/0x581 [ 352.996920][ T7643] ? page_fault+0x8/0x30 [ 353.001166][ T7643] page_fault+0x1e/0x30 [ 353.005314][ T7643] RIP: 0033:0x42f20a [ 353.009199][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 353.028789][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 353.034844][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 353.042830][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 353.050798][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 353.058780][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 353.066775][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 353.074920][ T7643] memory: usage 23700kB, limit 0kB, failcnt 146 [ 353.081172][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.088695][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.095740][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:15284KB rss_huge:14336KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15268KB inactive_file:0KB active_file:0KB unevictable:0KB [ 353.116989][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9109,uid=0 [ 353.132293][ T7643] Memory cgroup out of memory: Killed process 9109 (syz-executor.0) total-vm:72712kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB [ 353.146404][ T7657] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 353.148037][ T1042] oom_reaper: reaped process 9109 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.158714][ T7657] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 353.175159][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.185212][ T7657] Call Trace: [ 353.188516][ T7657] dump_stack+0x172/0x1f0 [ 353.192847][ T7657] dump_header+0x10f/0xb6c [ 353.197252][ T7657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 353.203038][ T7657] ? ___ratelimit+0x60/0x595 [ 353.207627][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 353.212737][ T7657] oom_kill_process.cold+0x10/0x15 [ 353.217858][ T7657] out_of_memory+0x79a/0x1280 [ 353.222531][ T7657] ? oom_killer_disable+0x280/0x280 [ 353.227721][ T7657] ? find_held_lock+0x35/0x130 [ 353.232672][ T7657] mem_cgroup_out_of_memory+0x1ca/0x230 [ 353.238224][ T7657] ? memcg_event_wake+0x230/0x230 [ 353.243237][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 353.248339][ T7657] ? _raw_spin_unlock+0x2d/0x50 [ 353.253201][ T7657] try_charge+0x102c/0x15c0 [ 353.257687][ T7657] ? find_held_lock+0x35/0x130 [ 353.262439][ T7657] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 353.267978][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.274217][ T7657] ? kasan_check_read+0x11/0x20 [ 353.281056][ T7657] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 353.286596][ T7657] mem_cgroup_try_charge+0x24d/0x5e0 [ 353.291884][ T7657] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 353.297587][ T7657] wp_page_copy+0x408/0x1740 [ 353.302167][ T7657] ? find_held_lock+0x35/0x130 [ 353.306927][ T7657] ? pmd_pfn+0x1d0/0x1d0 [ 353.311166][ T7657] ? lock_downgrade+0x880/0x880 [ 353.316011][ T7657] ? swp_swapcount+0x540/0x540 [ 353.320756][ T7657] ? kasan_check_read+0x11/0x20 [ 353.325609][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 353.330711][ T7657] do_wp_page+0x5d8/0x16c0 [ 353.335478][ T7657] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 353.340856][ T7657] __handle_mm_fault+0x22e8/0x3ec0 [ 353.345966][ T7657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 353.351506][ T7657] ? find_held_lock+0x35/0x130 [ 353.356268][ T7657] ? handle_mm_fault+0x322/0xb30 [ 353.361200][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.367433][ T7657] ? kasan_check_read+0x11/0x20 [ 353.372469][ T7657] handle_mm_fault+0x43f/0xb30 [ 353.377231][ T7657] __do_page_fault+0x5ef/0xda0 [ 353.381986][ T7657] do_page_fault+0x71/0x581 [ 353.386484][ T7657] ? page_fault+0x8/0x30 [ 353.390720][ T7657] page_fault+0x1e/0x30 [ 353.394853][ T7657] RIP: 0033:0x42f20a [ 353.398730][ T7657] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 353.418320][ T7657] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 353.424377][ T7657] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 353.432363][ T7657] RDX: 0000000001896930 RSI: 000000000189e970 RDI: 0000000000000003 [ 353.440331][ T7657] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001895940 [ 353.448294][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 353.456256][ T7657] R13: 0000000000711698 R14: 0000000000053108 R15: 0000000000002710 [ 353.464730][ T7657] memory: usage 26012kB, limit 0kB, failcnt 191 [ 353.470995][ T7657] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.478528][ T7657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.485428][ T7657] Memory cgroup stats for /syz4: cache:72KB rss:17504KB rss_huge:16384KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17424KB inactive_file:0KB active_file:0KB unevictable:0KB [ 353.507103][ T7657] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=15734,uid=0 [ 353.522544][ T7657] Memory cgroup out of memory: Killed process 15734 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 353.536805][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 353.537940][ T1042] oom_reaper: reaped process 15734 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 353.548748][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 353.565535][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.575764][ T7660] Call Trace: [ 353.579058][ T7660] dump_stack+0x172/0x1f0 [ 353.583388][ T7660] dump_header+0x10f/0xb6c [ 353.587802][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 353.593602][ T7660] ? ___ratelimit+0x60/0x595 [ 353.598182][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 353.603291][ T7660] oom_kill_process.cold+0x10/0x15 [ 353.608401][ T7660] out_of_memory+0x79a/0x1280 [ 353.613076][ T7660] ? oom_killer_disable+0x280/0x280 [ 353.618271][ T7660] ? find_held_lock+0x35/0x130 [ 353.623035][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 353.628559][ T7660] ? memcg_event_wake+0x230/0x230 [ 353.633756][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 353.638866][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 353.643718][ T7660] try_charge+0x102c/0x15c0 [ 353.648199][ T7660] ? find_held_lock+0x35/0x130 [ 353.652948][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 353.659980][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.666215][ T7660] ? kasan_check_read+0x11/0x20 [ 353.671049][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 353.676601][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 353.681886][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 353.687526][ T7660] wp_page_copy+0x408/0x1740 [ 353.692101][ T7660] ? find_held_lock+0x35/0x130 [ 353.696858][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 353.701151][ T7660] ? lock_downgrade+0x880/0x880 [ 353.706000][ T7660] ? swp_swapcount+0x540/0x540 [ 353.710756][ T7660] ? kasan_check_read+0x11/0x20 [ 353.715601][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 353.720702][ T7660] do_wp_page+0x5d8/0x16c0 [ 353.725103][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 353.730459][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 353.735566][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 353.741114][ T7660] ? find_held_lock+0x35/0x130 [ 353.745866][ T7660] ? handle_mm_fault+0x322/0xb30 [ 353.750786][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 353.757019][ T7660] ? kasan_check_read+0x11/0x20 [ 353.761859][ T7660] handle_mm_fault+0x43f/0xb30 [ 353.766620][ T7660] __do_page_fault+0x5ef/0xda0 [ 353.771367][ T7660] do_page_fault+0x71/0x581 [ 353.775863][ T7660] ? page_fault+0x8/0x30 [ 353.780113][ T7660] page_fault+0x1e/0x30 [ 353.784250][ T7660] RIP: 0033:0x42f20a [ 353.788130][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 353.807724][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 353.813768][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 353.821716][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 353.829667][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 353.837620][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 353.845583][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 353.853725][ T7660] memory: usage 70348kB, limit 0kB, failcnt 92 [ 353.859942][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.867457][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 353.874354][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:38968KB rss_huge:36864KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:38944KB inactive_file:0KB active_file:0KB unevictable:0KB [ 353.895928][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=9021,uid=0 [ 353.911226][ T7660] Memory cgroup out of memory: Killed process 9021 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 353.925490][T20905] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 353.926329][ T1042] oom_reaper: reaped process 9021 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 353.937663][T20905] CPU: 1 PID: 20905 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 353.954213][T20905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.964617][T20905] Call Trace: [ 353.967916][T20905] dump_stack+0x172/0x1f0 [ 353.972237][T20905] dump_header+0x10f/0xb6c [ 353.976638][T20905] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 353.982424][T20905] ? ___ratelimit+0x60/0x595 [ 353.987002][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 353.992128][T20905] oom_kill_process.cold+0x10/0x15 [ 353.997220][T20905] out_of_memory+0x79a/0x1280 [ 354.001895][T20905] ? oom_killer_disable+0x280/0x280 [ 354.007086][T20905] ? find_held_lock+0x35/0x130 [ 354.011848][T20905] mem_cgroup_out_of_memory+0x1ca/0x230 [ 354.017668][T20905] ? memcg_event_wake+0x230/0x230 [ 354.022671][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 354.027772][T20905] ? _raw_spin_unlock+0x2d/0x50 [ 354.032609][T20905] try_charge+0x102c/0x15c0 [ 354.037107][T20905] ? find_held_lock+0x35/0x130 [ 354.041871][T20905] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 354.047688][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.053938][T20905] ? kasan_check_read+0x11/0x20 [ 354.058850][T20905] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 354.064400][T20905] mem_cgroup_try_charge+0x24d/0x5e0 [ 354.069685][T20905] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 354.075295][T20905] wp_page_copy+0x408/0x1740 [ 354.079880][T20905] ? find_held_lock+0x35/0x130 [ 354.084641][T20905] ? pmd_pfn+0x1d0/0x1d0 [ 354.088910][T20905] ? lock_downgrade+0x880/0x880 [ 354.094008][T20905] ? swp_swapcount+0x540/0x540 [ 354.098757][T20905] ? kasan_check_read+0x11/0x20 [ 354.103588][T20905] ? do_raw_spin_unlock+0x57/0x270 [ 354.108689][T20905] do_wp_page+0x5d8/0x16c0 [ 354.113095][T20905] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 354.118448][T20905] __handle_mm_fault+0x22e8/0x3ec0 [ 354.123543][T20905] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 354.129073][T20905] ? find_held_lock+0x35/0x130 [ 354.133814][T20905] ? handle_mm_fault+0x322/0xb30 [ 354.138742][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.144978][T20905] ? kasan_check_read+0x11/0x20 [ 354.149828][T20905] handle_mm_fault+0x43f/0xb30 [ 354.154592][T20905] __do_page_fault+0x5ef/0xda0 [ 354.159348][T20905] do_page_fault+0x71/0x581 [ 354.163832][T20905] page_fault+0x1e/0x30 [ 354.167977][T20905] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 354.174292][T20905] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 354.193889][T20905] RSP: 0018:ffff888086e8f998 EFLAGS: 00010206 [ 354.199936][T20905] RAX: ffffed1010dd1f4b RBX: 0000000000000028 RCX: 0000000000000005 [ 354.207892][T20905] RDX: 0000000000000000 RSI: ffff888086e8fa30 RDI: 000000000070b058 [ 354.215853][T20905] RBP: ffff888086e8f9d0 R08: 0000000000006f6c R09: ffffed1010dd1f4b [ 354.223801][T20905] R10: ffffed1010dd1f4a R11: ffff888086e8fa57 R12: 000000000070b058 [ 354.231761][T20905] R13: ffff888086e8fa30 R14: 000000000070b080 R15: 00007ffffffff000 [ 354.239735][T20905] ? _copy_to_user+0xf7/0x120 [ 354.244408][T20905] inet_gifconf+0x21d/0x370 [ 354.248911][T20905] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 354.254544][T20905] ? in_dev_dump_addr.isra.0+0x260/0x260 [ 354.260156][T20905] dev_ifconf+0xd2/0x240 [ 354.264393][T20905] sock_do_ioctl+0x266/0x300 [ 354.268969][T20905] ? compat_ifr_data_ioctl+0x160/0x160 [ 354.274407][T20905] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.280639][T20905] ? tomoyo_init_request_info+0x105/0x1d0 [ 354.286351][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.292576][T20905] ? tomoyo_path_number_perm+0x263/0x520 [ 354.298188][T20905] sock_ioctl+0x32b/0x610 [ 354.302495][T20905] ? dlci_ioctl_set+0x40/0x40 [ 354.307165][T20905] ? __fget+0x35a/0x550 [ 354.311318][T20905] ? dlci_ioctl_set+0x40/0x40 [ 354.315980][T20905] do_vfs_ioctl+0xd6e/0x1390 [ 354.320549][T20905] ? ioctl_preallocate+0x210/0x210 [ 354.325654][T20905] ? __fget+0x381/0x550 [ 354.329893][T20905] ? ksys_dup3+0x3e0/0x3e0 [ 354.334295][T20905] ? lock_downgrade+0x880/0x880 [ 354.339224][T20905] ? tomoyo_file_ioctl+0x23/0x30 [ 354.344143][T20905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.350369][T20905] ? security_file_ioctl+0x93/0xc0 [ 354.355509][T20905] ksys_ioctl+0xab/0xd0 [ 354.359660][T20905] __x64_sys_ioctl+0x73/0xb0 [ 354.364246][T20905] do_syscall_64+0x103/0x610 [ 354.368840][T20905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.375154][T20905] RIP: 0033:0x458079 [ 354.379025][T20905] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.399166][T20905] RSP: 002b:00007f55f2b22c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.407571][T20905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 354.415544][T20905] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 354.423496][T20905] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 354.436657][T20905] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f55f2b236d4 [ 354.444892][T20905] R13: 00000000004c145e R14: 00000000004d33e0 R15: 00000000ffffffff [ 354.453189][T20905] memory: usage 83616kB, limit 0kB, failcnt 22 [ 354.459475][T20905] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 354.467008][T20905] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 354.473849][T20905] Memory cgroup stats for /syz1: cache:0KB rss:64952KB rss_huge:61440KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:65016KB inactive_file:0KB active_file:0KB unevictable:0KB [ 354.496596][T20905] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20905,uid=0 [ 354.511980][T20905] Memory cgroup out of memory: Killed process 20905 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:35864kB, shmem-rss:0kB [ 354.526201][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 354.526728][ T1042] oom_reaper: reaped process 20905 (syz-executor.1), now anon-rss:0kB, file-rss:34904kB, shmem-rss:0kB [ 354.537000][ T7643] CPU: 1 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 354.555425][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.565476][ T7643] Call Trace: [ 354.568774][ T7643] dump_stack+0x172/0x1f0 [ 354.573099][ T7643] dump_header+0x10f/0xb6c [ 354.577515][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 354.577528][ T7643] ? ___ratelimit+0x60/0x595 [ 354.577542][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 354.577556][ T7643] oom_kill_process.cold+0x10/0x15 [ 354.577569][ T7643] out_of_memory+0x79a/0x1280 [ 354.577586][ T7643] ? oom_killer_disable+0x280/0x280 [ 354.577595][ T7643] ? find_held_lock+0x35/0x130 [ 354.577616][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 354.600107][ T7643] ? memcg_event_wake+0x230/0x230 [ 354.609867][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 354.625399][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 354.625417][ T7643] try_charge+0x102c/0x15c0 [ 354.625430][ T7643] ? find_held_lock+0x35/0x130 [ 354.625448][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 354.625463][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.625480][ T7643] ? kasan_check_read+0x11/0x20 [ 354.625506][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 354.625528][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 354.640509][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 354.649740][ T7643] wp_page_copy+0x408/0x1740 [ 354.661507][ T7643] ? find_held_lock+0x35/0x130 [ 354.671860][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 354.682759][ T7643] ? lock_downgrade+0x880/0x880 [ 354.692065][ T7643] ? swp_swapcount+0x540/0x540 [ 354.701124][ T7643] ? kasan_check_read+0x11/0x20 [ 354.710687][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 354.715792][ T7643] do_wp_page+0x5d8/0x16c0 [ 354.715811][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 354.715833][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 354.715851][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 354.715863][ T7643] ? find_held_lock+0x35/0x130 [ 354.715877][ T7643] ? handle_mm_fault+0x322/0xb30 [ 354.715904][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.715919][ T7643] ? kasan_check_read+0x11/0x20 [ 354.715934][ T7643] handle_mm_fault+0x43f/0xb30 [ 354.715952][ T7643] __do_page_fault+0x5ef/0xda0 [ 354.715974][ T7643] do_page_fault+0x71/0x581 [ 354.731021][ T7643] ? page_fault+0x8/0x30 [ 354.741300][ T7643] page_fault+0x1e/0x30 [ 354.757267][ T7643] RIP: 0033:0x42f20a [ 354.757281][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 354.757287][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 354.757297][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 354.757305][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 354.757311][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 354.757318][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 354.757325][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 354.770175][ T7643] memory: usage 21300kB, limit 0kB, failcnt 152 [ 354.779860][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 354.803500][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 354.803508][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:13120KB rss_huge:12288KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13088KB inactive_file:0KB active_file:0KB unevictable:0KB [ 354.817660][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=8926,uid=0 [ 354.833749][ T7643] Memory cgroup out of memory: Killed process 8926 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 354.958348][ T7652] Memory cgroup out of memory: Killed process 13873 (syz-executor.3) total-vm:72712kB, anon-rss:4260kB, file-rss:35820kB, shmem-rss:0kB [ 354.980773][ T1042] oom_reaper: reaped process 13873 (syz-executor.3), now anon-rss:0kB, file-rss:34860kB, shmem-rss:0kB [ 354.995433][ T7657] Memory cgroup out of memory: Killed process 8943 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 355.021247][ T1042] oom_reaper: reaped process 8943 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 355.038865][ T7646] Memory cgroup out of memory: Killed process 11837 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35844kB, shmem-rss:0kB [ 355.074324][ T7646] Memory cgroup out of memory: Killed process 11797 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 355.116259][ T7660] Memory cgroup out of memory: Killed process 9041 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 355.144449][ T1042] oom_reaper: reaped process 9041 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 355.155644][ T7643] Memory cgroup out of memory: Killed process 8977 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 355.179170][ T1042] oom_reaper: reaped process 8977 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 355.196476][ T7652] Memory cgroup out of memory: Killed process 20829 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:35860kB, shmem-rss:0kB [ 355.238068][ T7657] Memory cgroup out of memory: Killed process 8971 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 355.261200][ T1042] oom_reaper: reaped process 8971 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 355.265124][ T7657] Memory cgroup out of memory: Killed process 8994 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 355.291596][ T7646] Memory cgroup out of memory: Killed process 11814 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35840kB, shmem-rss:0kB [ 355.326633][T20899] chnl_net:caif_netlink_parms(): no params data found [ 355.330608][ T7660] Memory cgroup out of memory: Killed process 9086 (syz-executor.5) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 355.376501][ T7643] Memory cgroup out of memory: Killed process 9081 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 355.431842][ T7652] Memory cgroup out of memory: Killed process 20825 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35860kB, shmem-rss:0kB [ 355.451662][ T7657] Memory cgroup out of memory: Killed process 9036 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 355.474337][ T1042] oom_reaper: reaped process 9036 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 355.493156][ T7646] Memory cgroup out of memory: Killed process 11060 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35816kB, shmem-rss:0kB [ 355.537951][ T7660] Memory cgroup out of memory: Killed process 10965 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 355.585280][ T7643] oom_kill_process: 16 callbacks suppressed [ 355.585294][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 355.601337][ T7643] CPU: 1 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 355.609170][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.619223][ T7643] Call Trace: [ 355.622529][ T7643] dump_stack+0x172/0x1f0 [ 355.626861][ T7643] dump_header+0x10f/0xb6c [ 355.631361][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 355.637167][ T7643] ? ___ratelimit+0x60/0x595 [ 355.641758][ T7643] oom_kill_process.cold+0x10/0x15 [ 355.646867][ T7643] out_of_memory+0x79a/0x1280 [ 355.651549][ T7643] ? oom_killer_disable+0x280/0x280 [ 355.656739][ T7643] ? find_held_lock+0x35/0x130 [ 355.664114][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 355.669679][ T7643] ? memcg_event_wake+0x230/0x230 [ 355.674704][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 355.679809][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 355.684650][ T7643] try_charge+0x102c/0x15c0 [ 355.689148][ T7643] ? find_held_lock+0x35/0x130 [ 355.693900][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 355.699447][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.705674][ T7643] ? kasan_check_read+0x11/0x20 [ 355.710505][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 355.716043][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 355.721320][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 355.726958][ T7643] wp_page_copy+0x408/0x1740 [ 355.731526][ T7643] ? find_held_lock+0x35/0x130 [ 355.736284][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 355.740515][ T7643] ? lock_downgrade+0x880/0x880 [ 355.745349][ T7643] ? swp_swapcount+0x540/0x540 [ 355.750124][ T7643] ? kasan_check_read+0x11/0x20 [ 355.754970][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 355.760069][ T7643] do_wp_page+0x5d8/0x16c0 [ 355.764491][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 355.769855][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 355.774962][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 355.780505][ T7643] ? find_held_lock+0x35/0x130 [ 355.785250][ T7643] ? handle_mm_fault+0x322/0xb30 [ 355.790169][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.796407][ T7643] ? kasan_check_read+0x11/0x20 [ 355.801245][ T7643] handle_mm_fault+0x43f/0xb30 [ 355.805994][ T7643] __do_page_fault+0x5ef/0xda0 [ 355.810738][ T7643] do_page_fault+0x71/0x581 [ 355.815232][ T7643] ? page_fault+0x8/0x30 [ 355.819461][ T7643] page_fault+0x1e/0x30 [ 355.823591][ T7643] RIP: 0033:0x42f20a [ 355.827466][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 355.847404][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 355.853449][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 355.861406][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 355.869358][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 355.877317][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 355.885276][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 355.893425][ T7643] memory: usage 14312kB, limit 0kB, failcnt 170 [ 355.899768][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 355.907298][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 355.907304][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:6596KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6572KB inactive_file:0KB active_file:0KB unevictable:0KB [ 355.907378][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=9146,uid=0 [ 355.907481][ T7643] Memory cgroup out of memory: Killed process 9146 (syz-executor.0) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 355.948167][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 355.966621][ T7652] CPU: 1 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 355.982117][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.992155][ T7652] Call Trace: [ 355.992176][ T7652] dump_stack+0x172/0x1f0 [ 355.992193][ T7652] dump_header+0x10f/0xb6c [ 355.992208][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 355.992220][ T7652] ? ___ratelimit+0x60/0x595 [ 355.992234][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 355.992250][ T7652] oom_kill_process.cold+0x10/0x15 [ 356.004235][ T7652] out_of_memory+0x79a/0x1280 [ 356.004254][ T7652] ? oom_killer_disable+0x280/0x280 [ 356.004266][ T7652] ? find_held_lock+0x35/0x130 [ 356.004286][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 356.004298][ T7652] ? memcg_event_wake+0x230/0x230 [ 356.004317][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 356.014680][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 356.014697][ T7652] try_charge+0x102c/0x15c0 [ 356.014709][ T7652] ? find_held_lock+0x35/0x130 [ 356.014728][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 356.014745][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.014763][ T7652] ? kasan_check_read+0x11/0x20 [ 356.014780][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 356.014797][ T7652] mem_cgroup_try_charge+0x24d/0x5e0 [ 356.014817][ T7652] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 356.029696][ T7652] wp_page_copy+0x408/0x1740 [ 356.045164][ T7652] ? find_held_lock+0x35/0x130 [ 356.045185][ T7652] ? pmd_pfn+0x1d0/0x1d0 [ 356.045199][ T7652] ? lock_downgrade+0x880/0x880 [ 356.045212][ T7652] ? swp_swapcount+0x540/0x540 [ 356.045228][ T7652] ? kasan_check_read+0x11/0x20 [ 356.045240][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 356.045258][ T7652] do_wp_page+0x5d8/0x16c0 [ 356.055449][ T7652] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 356.055474][ T7652] __handle_mm_fault+0x22e8/0x3ec0 [ 356.055492][ T7652] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 356.055504][ T7652] ? find_held_lock+0x35/0x130 [ 356.055517][ T7652] ? handle_mm_fault+0x322/0xb30 [ 356.055538][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.055553][ T7652] ? kasan_check_read+0x11/0x20 [ 356.055570][ T7652] handle_mm_fault+0x43f/0xb30 [ 356.055592][ T7652] __do_page_fault+0x5ef/0xda0 [ 356.055614][ T7652] do_page_fault+0x71/0x581 [ 356.055628][ T7652] ? page_fault+0x8/0x30 [ 356.055640][ T7652] page_fault+0x1e/0x30 [ 356.055652][ T7652] RIP: 0033:0x42f20a [ 356.055665][ T7652] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 356.055672][ T7652] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 356.055683][ T7652] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 356.055691][ T7652] RDX: 0000000002a40930 RSI: 0000000002a48970 RDI: 0000000000000003 [ 356.055699][ T7652] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a3f940 [ 356.055706][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 356.055713][ T7652] R13: 0000000000711698 R14: 00000000000558a9 R15: 0000000000002710 [ 356.061623][ T7652] memory: usage 57536kB, limit 0kB, failcnt 26 [ 356.069958][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 356.084128][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 356.092246][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:43544KB rss_huge:40960KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43392KB inactive_file:4KB active_file:0KB unevictable:0KB [ 356.108290][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11949,uid=0 [ 356.128853][ T7652] Memory cgroup out of memory: Killed process 11949 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:35840kB, shmem-rss:0kB [ 356.144729][ T7657] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 356.170668][ T7657] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 356.182856][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.192083][ T7657] Call Trace: [ 356.204316][ T7657] dump_stack+0x172/0x1f0 [ 356.204335][ T7657] dump_header+0x10f/0xb6c [ 356.204350][ T7657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 356.204364][ T7657] ? ___ratelimit+0x60/0x595 [ 356.204385][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 356.204403][ T7657] oom_kill_process.cold+0x10/0x15 [ 356.238109][ T7657] out_of_memory+0x79a/0x1280 [ 356.238127][ T7657] ? oom_killer_disable+0x280/0x280 [ 356.238145][ T7657] ? find_held_lock+0x35/0x130 [ 356.238165][ T7657] mem_cgroup_out_of_memory+0x1ca/0x230 [ 356.238180][ T7657] ? memcg_event_wake+0x230/0x230 [ 356.254138][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 356.254153][ T7657] ? _raw_spin_unlock+0x2d/0x50 [ 356.254170][ T7657] try_charge+0x102c/0x15c0 [ 356.254181][ T7657] ? find_held_lock+0x35/0x130 [ 356.254199][ T7657] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 356.270116][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.270133][ T7657] ? kasan_check_read+0x11/0x20 [ 356.270150][ T7657] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 356.270165][ T7657] mem_cgroup_try_charge+0x24d/0x5e0 [ 356.270184][ T7657] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 356.270201][ T7657] wp_page_copy+0x408/0x1740 [ 356.270214][ T7657] ? find_held_lock+0x35/0x130 [ 356.270232][ T7657] ? pmd_pfn+0x1d0/0x1d0 [ 356.270248][ T7657] ? lock_downgrade+0x880/0x880 [ 356.290689][ T7657] ? swp_swapcount+0x540/0x540 [ 356.327020][ T7657] ? kasan_check_read+0x11/0x20 [ 356.327036][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 356.327052][ T7657] do_wp_page+0x5d8/0x16c0 [ 356.327071][ T7657] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 356.327092][ T7657] __handle_mm_fault+0x22e8/0x3ec0 [ 356.327110][ T7657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 356.327123][ T7657] ? find_held_lock+0x35/0x130 [ 356.327141][ T7657] ? handle_mm_fault+0x322/0xb30 [ 356.543278][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.549509][ T7657] ? kasan_check_read+0x11/0x20 [ 356.554366][ T7657] handle_mm_fault+0x43f/0xb30 [ 356.559136][ T7657] __do_page_fault+0x5ef/0xda0 [ 356.563885][ T7657] do_page_fault+0x71/0x581 [ 356.568373][ T7657] ? page_fault+0x8/0x30 [ 356.572593][ T7657] page_fault+0x1e/0x30 [ 356.576738][ T7657] RIP: 0033:0x42f20a [ 356.580626][ T7657] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 356.600222][ T7657] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 356.606279][ T7657] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 356.614263][ T7657] RDX: 0000000001896930 RSI: 000000000189e970 RDI: 0000000000000003 [ 356.622223][ T7657] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001895940 [ 356.630177][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 356.638132][ T7657] R13: 0000000000711698 R14: 0000000000053108 R15: 0000000000002710 [ 356.650327][ T7657] memory: usage 14320kB, limit 0kB, failcnt 221 [ 356.652963][T20899] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.656708][ T7657] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 356.669546][T20899] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.673123][ T7657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 356.687040][T20899] device bridge_slave_0 entered promiscuous mode [ 356.692927][ T7657] Memory cgroup stats for /syz4: cache:72KB rss:6604KB rss_huge:6144KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6572KB inactive_file:0KB active_file:0KB unevictable:0KB [ 356.715359][ T7657] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9079,uid=0 [ 356.730759][ T7657] Memory cgroup out of memory: Killed process 9079 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 356.745743][ T1042] oom_reaper: reaped process 9079 (syz-executor.4), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 356.757009][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 356.790246][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 356.798098][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.808154][ T7646] Call Trace: [ 356.811449][ T7646] dump_stack+0x172/0x1f0 [ 356.815779][ T7646] dump_header+0x10f/0xb6c [ 356.820202][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 356.826005][ T7646] ? ___ratelimit+0x60/0x595 [ 356.830590][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 356.835695][ T7646] oom_kill_process.cold+0x10/0x15 [ 356.840800][ T7646] out_of_memory+0x79a/0x1280 [ 356.845479][ T7646] ? oom_killer_disable+0x280/0x280 [ 356.850668][ T7646] ? find_held_lock+0x35/0x130 [ 356.855534][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 356.861079][ T7646] ? memcg_event_wake+0x230/0x230 [ 356.866126][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 356.871243][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 356.876092][ T7646] try_charge+0x102c/0x15c0 [ 356.880586][ T7646] ? find_held_lock+0x35/0x130 [ 356.885358][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 356.890970][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.897205][ T7646] ? kasan_check_read+0x11/0x20 [ 356.902053][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 356.907596][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 356.912882][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 356.918511][ T7646] wp_page_copy+0x408/0x1740 [ 356.923092][ T7646] ? find_held_lock+0x35/0x130 [ 356.927860][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 356.932099][ T7646] ? lock_downgrade+0x880/0x880 [ 356.936945][ T7646] ? swp_swapcount+0x540/0x540 [ 356.941714][ T7646] ? kasan_check_read+0x11/0x20 [ 356.946565][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 356.951678][ T7646] do_wp_page+0x5d8/0x16c0 [ 356.956099][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 356.961474][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 356.966589][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 356.972129][ T7646] ? find_held_lock+0x35/0x130 [ 356.976891][ T7646] ? handle_mm_fault+0x322/0xb30 [ 356.981831][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 356.988067][ T7646] ? kasan_check_read+0x11/0x20 [ 356.993026][ T7646] handle_mm_fault+0x43f/0xb30 [ 356.997779][ T7646] __do_page_fault+0x5ef/0xda0 [ 357.002555][ T7646] do_page_fault+0x71/0x581 [ 357.007044][ T7646] ? page_fault+0x8/0x30 [ 357.011267][ T7646] page_fault+0x1e/0x30 [ 357.015398][ T7646] RIP: 0033:0x42f20a [ 357.019269][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 357.038862][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 357.044915][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 357.052964][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 357.060937][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 357.068891][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 357.076842][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 357.089543][ T7646] memory: usage 73888kB, limit 0kB, failcnt 51 [ 357.089550][T20899] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.089574][T20899] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.095851][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.110054][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.124353][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:56260KB rss_huge:53248KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:56276KB inactive_file:0KB active_file:0KB unevictable:0KB [ 357.127709][T20899] device bridge_slave_1 entered promiscuous mode [ 357.146097][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15709,uid=0 [ 357.146200][ T7646] Memory cgroup out of memory: Killed process 15709 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35808kB, shmem-rss:0kB [ 357.181248][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 357.194203][ T7660] CPU: 0 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 357.202020][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.212082][ T7660] Call Trace: [ 357.215376][ T7660] dump_stack+0x172/0x1f0 [ 357.219709][ T7660] dump_header+0x10f/0xb6c [ 357.224124][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 357.229925][ T7660] ? ___ratelimit+0x60/0x595 [ 357.234510][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 357.239618][ T7660] oom_kill_process.cold+0x10/0x15 [ 357.244729][ T7660] out_of_memory+0x79a/0x1280 [ 357.249409][ T7660] ? oom_killer_disable+0x280/0x280 [ 357.254601][ T7660] ? find_held_lock+0x35/0x130 [ 357.259375][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 357.264914][ T7660] ? memcg_event_wake+0x230/0x230 [ 357.269940][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 357.275047][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 357.279883][ T7660] try_charge+0x102c/0x15c0 [ 357.284379][ T7660] ? find_held_lock+0x35/0x130 [ 357.289131][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 357.294661][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.300922][ T7660] ? kasan_check_read+0x11/0x20 [ 357.305754][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 357.311304][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 357.316587][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 357.322202][ T7660] wp_page_copy+0x408/0x1740 [ 357.326770][ T7660] ? find_held_lock+0x35/0x130 [ 357.331514][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 357.335759][ T7660] ? lock_downgrade+0x880/0x880 [ 357.340598][ T7660] ? swp_swapcount+0x540/0x540 [ 357.345342][ T7660] ? kasan_check_read+0x11/0x20 [ 357.350173][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 357.355263][ T7660] do_wp_page+0x5d8/0x16c0 [ 357.359673][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 357.365039][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 357.370153][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 357.375765][ T7660] ? find_held_lock+0x35/0x130 [ 357.380522][ T7660] ? handle_mm_fault+0x322/0xb30 [ 357.385443][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.391662][ T7660] ? kasan_check_read+0x11/0x20 [ 357.396490][ T7660] handle_mm_fault+0x43f/0xb30 [ 357.401248][ T7660] __do_page_fault+0x5ef/0xda0 [ 357.406004][ T7660] do_page_fault+0x71/0x581 [ 357.410489][ T7660] ? page_fault+0x8/0x30 [ 357.414710][ T7660] page_fault+0x1e/0x30 [ 357.418842][ T7660] RIP: 0033:0x42f20a [ 357.422741][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 357.442327][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 357.448371][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 357.456322][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 357.464277][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 357.472241][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 357.480211][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 357.489220][ T7660] memory: usage 61048kB, limit 0kB, failcnt 134 [ 357.497960][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.505545][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.505553][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:30264KB rss_huge:28672KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30256KB inactive_file:0KB active_file:0KB unevictable:0KB [ 357.505625][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=10996,uid=0 [ 357.505717][ T7660] Memory cgroup out of memory: Killed process 10996 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 357.554393][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 357.575811][ T7643] CPU: 0 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 357.583623][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.583635][ T7643] Call Trace: [ 357.596954][ T7643] dump_stack+0x172/0x1f0 [ 357.601442][ T7643] dump_header+0x10f/0xb6c [ 357.605932][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 357.611718][ T7643] ? ___ratelimit+0x60/0x595 [ 357.616302][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 357.621394][ T7643] oom_kill_process.cold+0x10/0x15 [ 357.626492][ T7643] out_of_memory+0x79a/0x1280 [ 357.631161][ T7643] ? oom_killer_disable+0x280/0x280 [ 357.636339][ T7643] ? find_held_lock+0x35/0x130 [ 357.641088][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 357.646613][ T7643] ? memcg_event_wake+0x230/0x230 [ 357.651621][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 357.656715][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 357.662908][ T7643] try_charge+0x102c/0x15c0 [ 357.667407][ T7643] ? find_held_lock+0x35/0x130 [ 357.672160][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 357.677694][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.683917][ T7643] ? kasan_check_read+0x11/0x20 [ 357.688755][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 357.694291][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 357.699564][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 357.705178][ T7643] wp_page_copy+0x408/0x1740 [ 357.709769][ T7643] ? find_held_lock+0x35/0x130 [ 357.714522][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 357.718744][ T7643] ? lock_downgrade+0x880/0x880 [ 357.723577][ T7643] ? swp_swapcount+0x540/0x540 [ 357.728324][ T7643] ? kasan_check_read+0x11/0x20 [ 357.733160][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 357.738277][ T7643] do_wp_page+0x5d8/0x16c0 [ 357.742690][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 357.748072][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 357.753176][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 357.758710][ T7643] ? find_held_lock+0x35/0x130 [ 357.763556][ T7643] ? handle_mm_fault+0x322/0xb30 [ 357.768483][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 357.774714][ T7643] ? kasan_check_read+0x11/0x20 [ 357.779549][ T7643] handle_mm_fault+0x43f/0xb30 [ 357.784300][ T7643] __do_page_fault+0x5ef/0xda0 [ 357.789054][ T7643] do_page_fault+0x71/0x581 [ 357.793545][ T7643] ? page_fault+0x8/0x30 [ 357.797772][ T7643] page_fault+0x1e/0x30 [ 357.801916][ T7643] RIP: 0033:0x42f20a [ 357.805795][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 357.825394][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 357.831449][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 357.839417][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 357.847368][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 357.855417][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 357.863370][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 357.874793][ T7643] memory: usage 11904kB, limit 0kB, failcnt 176 [ 357.881058][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.889177][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 357.896513][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:4424KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4392KB inactive_file:0KB active_file:0KB unevictable:0KB [ 357.917875][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10960,uid=0 [ 357.933837][ T7643] Memory cgroup out of memory: Killed process 10960 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 357.946921][ T7643] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 357.960960][ T7643] CPU: 0 PID: 7643 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 357.968777][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.968782][ T7643] Call Trace: [ 357.968803][ T7643] dump_stack+0x172/0x1f0 [ 357.968820][ T7643] dump_header+0x10f/0xb6c [ 357.968833][ T7643] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 357.968846][ T7643] ? ___ratelimit+0x60/0x595 [ 357.968866][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 357.982180][ T7643] oom_kill_process.cold+0x10/0x15 [ 357.990884][ T7643] out_of_memory+0x79a/0x1280 [ 358.001318][ T7643] ? lock_downgrade+0x880/0x880 [ 358.011590][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.021157][ T7643] ? oom_killer_disable+0x280/0x280 [ 358.032573][ T7643] ? find_held_lock+0x35/0x130 [ 358.032597][ T7643] mem_cgroup_out_of_memory+0x1ca/0x230 [ 358.042856][ T7643] ? memcg_event_wake+0x230/0x230 [ 358.047878][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 358.047893][ T7643] ? _raw_spin_unlock+0x2d/0x50 [ 358.047915][ T7643] try_charge+0x102c/0x15c0 [ 358.057836][ T7643] ? find_held_lock+0x35/0x130 [ 358.057858][ T7643] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 358.057873][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.057892][ T7643] ? kasan_check_read+0x11/0x20 [ 358.067119][ T7643] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 358.067136][ T7643] mem_cgroup_try_charge+0x24d/0x5e0 [ 358.067161][ T7643] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 358.078909][ T7643] wp_page_copy+0x408/0x1740 [ 358.078922][ T7643] ? find_held_lock+0x35/0x130 [ 358.078940][ T7643] ? pmd_pfn+0x1d0/0x1d0 [ 358.078957][ T7643] ? lock_downgrade+0x880/0x880 [ 358.089401][ T7643] ? swp_swapcount+0x540/0x540 [ 358.100271][ T7643] ? kasan_check_read+0x11/0x20 [ 358.109573][ T7643] ? do_raw_spin_unlock+0x57/0x270 [ 358.118620][ T7643] do_wp_page+0x5d8/0x16c0 [ 358.118639][ T7643] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 358.118659][ T7643] __handle_mm_fault+0x22e8/0x3ec0 [ 358.118680][ T7643] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 358.128244][ T7643] ? find_held_lock+0x35/0x130 [ 358.128259][ T7643] ? handle_mm_fault+0x322/0xb30 [ 358.128280][ T7643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.128300][ T7643] ? kasan_check_read+0x11/0x20 [ 358.137786][ T7643] handle_mm_fault+0x43f/0xb30 [ 358.137807][ T7643] __do_page_fault+0x5ef/0xda0 [ 358.137830][ T7643] do_page_fault+0x71/0x581 [ 358.148283][ T7643] ? page_fault+0x8/0x30 [ 358.148297][ T7643] page_fault+0x1e/0x30 [ 358.148308][ T7643] RIP: 0033:0x42f20a [ 358.148324][ T7643] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 358.158608][ T7643] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 358.158623][ T7643] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 358.158631][ T7643] RDX: 0000000002361930 RSI: 0000000002369970 RDI: 0000000000000003 [ 358.158647][ T7643] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002360940 [ 358.169772][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 358.169779][ T7643] R13: 0000000000711698 R14: 000000000005309a R15: 0000000000002710 [ 358.244969][ T7643] memory: usage 9584kB, limit 0kB, failcnt 182 [ 358.264628][ T7643] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.273266][ T7643] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.291951][T20899] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 358.300784][ T7643] Memory cgroup stats for /syz0: cache:0KB rss:2252KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 358.323356][T11769] IPVS: stopping master sync thread 20060 ... [ 358.330125][T20899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 358.331618][ T7643] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=10994,uid=0 [ 358.355033][T11769] IPVS: stopping backup sync thread 20058 ... [ 358.361237][ T7643] Memory cgroup out of memory: Killed process 10994 (syz-executor.0) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 358.391931][T20899] team0: Port device team_slave_0 added [ 358.404789][T20899] team0: Port device team_slave_1 added [ 358.412033][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 358.426124][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 358.433947][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.443986][ T7652] Call Trace: [ 358.447276][ T7652] dump_stack+0x172/0x1f0 [ 358.447294][ T7652] dump_header+0x10f/0xb6c [ 358.447311][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 358.456015][ T7652] ? ___ratelimit+0x60/0x595 [ 358.456029][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 358.456045][ T7652] oom_kill_process.cold+0x10/0x15 [ 358.466414][ T7652] out_of_memory+0x79a/0x1280 [ 358.466432][ T7652] ? oom_killer_disable+0x280/0x280 [ 358.466448][ T7652] ? find_held_lock+0x35/0x130 [ 358.476625][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 358.476637][ T7652] ? memcg_event_wake+0x230/0x230 [ 358.476657][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 358.486477][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 358.486493][ T7652] try_charge+0x102c/0x15c0 [ 358.486509][ T7652] ? find_held_lock+0x35/0x130 [ 358.498463][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 358.498479][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.498495][ T7652] ? kasan_check_read+0x11/0x20 [ 358.498511][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 358.508595][ T7652] mem_cgroup_try_charge+0x24d/0x5e0 [ 358.508613][ T7652] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 358.508632][ T7652] wp_page_copy+0x408/0x1740 [ 358.517954][ T7652] ? find_held_lock+0x35/0x130 [ 358.517972][ T7652] ? pmd_pfn+0x1d0/0x1d0 [ 358.517988][ T7652] ? lock_downgrade+0x880/0x880 [ 358.528355][ T7652] ? swp_swapcount+0x540/0x540 [ 358.528372][ T7652] ? kasan_check_read+0x11/0x20 [ 358.528386][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 358.528404][ T7652] do_wp_page+0x5d8/0x16c0 [ 358.539451][ T7652] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 358.550236][ T7652] __handle_mm_fault+0x22e8/0x3ec0 [ 358.560406][ T7652] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 358.569369][ T7652] ? find_held_lock+0x35/0x130 [ 358.578960][ T7652] ? handle_mm_fault+0x322/0xb30 [ 358.588869][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.588891][ T7652] ? kasan_check_read+0x11/0x20 [ 358.598634][ T7652] handle_mm_fault+0x43f/0xb30 [ 358.598658][ T7652] __do_page_fault+0x5ef/0xda0 [ 358.609274][ T7652] do_page_fault+0x71/0x581 [ 358.609296][ T7652] ? page_fault+0x8/0x30 [ 358.618942][ T7652] page_fault+0x1e/0x30 [ 358.629988][ T7652] RIP: 0033:0x42f20a [ 358.639468][ T7652] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 358.648161][ T7652] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 358.648179][ T7652] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 358.648191][ T7652] RDX: 0000000002a40930 RSI: 0000000002a48970 RDI: 0000000000000003 [ 358.648203][ T7652] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a3f940 [ 358.656206][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 358.656213][ T7652] R13: 0000000000711698 R14: 00000000000558a9 R15: 0000000000002710 [ 358.659474][ T7652] memory: usage 54688kB, limit 0kB, failcnt 32 [ 358.714110][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.722209][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 358.742942][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:41328KB rss_huge:38912KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41228KB inactive_file:4KB active_file:0KB unevictable:0KB [ 358.764658][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20904,uid=0 [ 358.780540][ T7652] Memory cgroup out of memory: Killed process 20904 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:35840kB, shmem-rss:0kB [ 358.800585][ T7657] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 358.816958][ T7657] CPU: 1 PID: 7657 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 358.825070][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.835119][ T7657] Call Trace: [ 358.835140][ T7657] dump_stack+0x172/0x1f0 [ 358.835163][ T7657] dump_header+0x10f/0xb6c [ 358.835177][ T7657] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 358.835191][ T7657] ? ___ratelimit+0x60/0x595 [ 358.835205][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 358.835219][ T7657] oom_kill_process.cold+0x10/0x15 [ 358.835239][ T7657] out_of_memory+0x79a/0x1280 [ 358.842835][ T7657] ? oom_killer_disable+0x280/0x280 [ 358.853270][ T7657] ? find_held_lock+0x35/0x130 [ 358.863311][ T7657] mem_cgroup_out_of_memory+0x1ca/0x230 [ 358.873072][ T7657] ? memcg_event_wake+0x230/0x230 [ 358.883527][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 358.894139][ T7657] ? _raw_spin_unlock+0x2d/0x50 [ 358.894164][ T7657] try_charge+0x102c/0x15c0 [ 358.894176][ T7657] ? find_held_lock+0x35/0x130 [ 358.894195][ T7657] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 358.894211][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.894227][ T7657] ? kasan_check_read+0x11/0x20 [ 358.894244][ T7657] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 358.904184][ T7657] mem_cgroup_try_charge+0x24d/0x5e0 [ 358.904204][ T7657] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 358.904222][ T7657] wp_page_copy+0x408/0x1740 [ 358.904234][ T7657] ? find_held_lock+0x35/0x130 [ 358.904252][ T7657] ? pmd_pfn+0x1d0/0x1d0 [ 358.915940][ T7657] ? lock_downgrade+0x880/0x880 [ 358.915954][ T7657] ? swp_swapcount+0x540/0x540 [ 358.915970][ T7657] ? kasan_check_read+0x11/0x20 [ 358.915984][ T7657] ? do_raw_spin_unlock+0x57/0x270 [ 358.916001][ T7657] do_wp_page+0x5d8/0x16c0 [ 358.927746][ T7657] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 358.927770][ T7657] __handle_mm_fault+0x22e8/0x3ec0 [ 358.927787][ T7657] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 358.927800][ T7657] ? find_held_lock+0x35/0x130 [ 358.927813][ T7657] ? handle_mm_fault+0x322/0xb30 [ 358.927834][ T7657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 358.938216][ T7657] ? kasan_check_read+0x11/0x20 [ 358.949202][ T7657] handle_mm_fault+0x43f/0xb30 [ 358.949222][ T7657] __do_page_fault+0x5ef/0xda0 [ 358.949243][ T7657] do_page_fault+0x71/0x581 [ 358.949256][ T7657] ? page_fault+0x8/0x30 [ 358.949269][ T7657] page_fault+0x1e/0x30 [ 358.949282][ T7657] RIP: 0033:0x42f20a [ 358.960633][ T7657] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 358.969676][ T7657] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 358.979435][ T7657] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 358.988929][ T7657] RDX: 0000000001896930 RSI: 000000000189e970 RDI: 0000000000000003 [ 358.999390][ T7657] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001895940 [ 359.015076][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 359.015083][ T7657] R13: 0000000000711698 R14: 0000000000053108 R15: 0000000000002710 [ 359.023343][ T7657] memory: usage 11948kB, limit 0kB, failcnt 227 [ 359.031437][ T7657] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.046572][ T7657] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.062987][ T7657] Memory cgroup stats for /syz4: cache:72KB rss:4432KB rss_huge:4096KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4400KB inactive_file:0KB active_file:0KB unevictable:0KB [ 359.085732][ T7657] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=9096,uid=0 [ 359.102333][ T7657] Memory cgroup out of memory: Killed process 9096 (syz-executor.4) total-vm:72580kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 359.136597][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 359.157310][ T7646] CPU: 1 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 359.181684][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.181689][ T7646] Call Trace: [ 359.181711][ T7646] dump_stack+0x172/0x1f0 [ 359.181728][ T7646] dump_header+0x10f/0xb6c [ 359.181742][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 359.181755][ T7646] ? ___ratelimit+0x60/0x595 [ 359.181769][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 359.181784][ T7646] oom_kill_process.cold+0x10/0x15 [ 359.181802][ T7646] out_of_memory+0x79a/0x1280 [ 359.211817][ T7646] ? oom_killer_disable+0x280/0x280 [ 359.211831][ T7646] ? find_held_lock+0x35/0x130 [ 359.211852][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 359.211864][ T7646] ? memcg_event_wake+0x230/0x230 [ 359.211884][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 359.229631][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 359.229654][ T7646] try_charge+0x102c/0x15c0 [ 359.229666][ T7646] ? find_held_lock+0x35/0x130 [ 359.229684][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 359.229703][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.243307][ T7646] ? kasan_check_read+0x11/0x20 [ 359.254094][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 359.254112][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 359.254138][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 359.254155][ T7646] wp_page_copy+0x408/0x1740 [ 359.254168][ T7646] ? find_held_lock+0x35/0x130 [ 359.254187][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 359.254201][ T7646] ? lock_downgrade+0x880/0x880 [ 359.254215][ T7646] ? swp_swapcount+0x540/0x540 [ 359.254231][ T7646] ? kasan_check_read+0x11/0x20 [ 359.254248][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 359.269849][ T7646] do_wp_page+0x5d8/0x16c0 [ 359.280055][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 359.289900][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 359.300187][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 359.310290][ T7646] ? find_held_lock+0x35/0x130 [ 359.319609][ T7646] ? handle_mm_fault+0x322/0xb30 [ 359.329879][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.341120][ T7646] ? kasan_check_read+0x11/0x20 [ 359.352273][ T7646] handle_mm_fault+0x43f/0xb30 [ 359.364025][ T7646] __do_page_fault+0x5ef/0xda0 [ 359.374074][ T7646] do_page_fault+0x71/0x581 [ 359.374090][ T7646] ? page_fault+0x8/0x30 [ 359.374103][ T7646] page_fault+0x1e/0x30 [ 359.374120][ T7646] RIP: 0033:0x42f20a [ 359.374140][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 359.384664][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 359.384675][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 359.384681][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 359.384688][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 359.384695][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 359.384702][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 359.407076][ T7646] memory: usage 71004kB, limit 0kB, failcnt 57 [ 359.422359][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.430815][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 359.450847][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:54060KB rss_huge:51200KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:54132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 359.459561][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15741,uid=0 [ 359.473726][ T7646] Memory cgroup out of memory: Killed process 15741 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35800kB, shmem-rss:0kB [ 359.517592][ T7660] Memory cgroup out of memory: Killed process 11020 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 359.644864][ T7643] Memory cgroup out of memory: Killed process 7643 (syz-executor.0) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 359.670279][ T7652] Memory cgroup out of memory: Killed process 11970 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35840kB, shmem-rss:0kB [ 359.696562][T20899] device hsr_slave_0 entered promiscuous mode [ 359.701812][ T7652] Memory cgroup out of memory: Killed process 20813 (syz-executor.3) total-vm:72844kB, anon-rss:2220kB, file-rss:35816kB, shmem-rss:0kB [ 359.734909][ T7657] Memory cgroup out of memory: Killed process 20885 (syz-executor.4) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 359.757102][ T7646] Memory cgroup out of memory: Killed process 12623 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 359.773581][ T1042] oom_reaper: reaped process 12623 (syz-executor.1), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 359.784354][ T7660] Memory cgroup out of memory: Killed process 11041 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 359.800268][T20899] device hsr_slave_1 entered promiscuous mode [ 359.808965][ T7652] Memory cgroup out of memory: Killed process 20851 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35832kB, shmem-rss:0kB [ 359.835232][ T1042] oom_reaper: reaped process 11041 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 359.836190][ T7657] Memory cgroup out of memory: Killed process 7657 (syz-executor.4) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 359.863671][ T1042] oom_reaper: reaped process 20851 (syz-executor.3), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 359.873217][ T7646] Memory cgroup out of memory: Killed process 12636 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:35796kB, shmem-rss:0kB [ 359.926149][ T7646] Memory cgroup out of memory: Killed process 8814 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 359.956787][ T7660] Memory cgroup out of memory: Killed process 11054 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 359.981748][ T7652] Memory cgroup out of memory: Killed process 20872 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35832kB, shmem-rss:0kB [ 360.006554][ T1042] oom_reaper: reaped process 20872 (syz-executor.3), now anon-rss:0kB, file-rss:34872kB, shmem-rss:0kB [ 360.025713][ T7646] Memory cgroup out of memory: Killed process 8880 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.046387][ T7660] Memory cgroup out of memory: Killed process 11084 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.069187][ T1042] oom_reaper: reaped process 8880 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 360.087683][ T7660] Memory cgroup out of memory: Killed process 11100 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.119420][ T7652] Memory cgroup out of memory: Killed process 20020 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35816kB, shmem-rss:0kB [ 360.147617][ T1042] oom_reaper: reaped process 20020 (syz-executor.3), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 360.162227][ T7646] Memory cgroup out of memory: Killed process 8915 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.211101][ T7660] Memory cgroup out of memory: Killed process 11109 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.243047][ T7652] Memory cgroup out of memory: Killed process 20023 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35816kB, shmem-rss:0kB [ 360.260902][ T1042] oom_reaper: reaped process 20023 (syz-executor.3), now anon-rss:0kB, file-rss:34856kB, shmem-rss:0kB [ 360.278678][ T7646] Memory cgroup out of memory: Killed process 8973 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.297875][ T7660] Memory cgroup out of memory: Killed process 11121 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.325663][ T1042] oom_reaper: reaped process 11121 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 360.338864][ T7652] Memory cgroup out of memory: Killed process 18043 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:35812kB, shmem-rss:0kB [ 360.369835][ T7646] Memory cgroup out of memory: Killed process 9024 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.392258][ T1042] oom_reaper: reaped process 9024 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 360.408250][ T7652] Memory cgroup out of memory: Killed process 19974 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:35800kB, shmem-rss:0kB [ 360.442052][ T7660] Memory cgroup out of memory: Killed process 11157 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.479778][ T7646] Memory cgroup out of memory: Killed process 9062 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.504740][ T7652] Memory cgroup out of memory: Killed process 18014 (syz-executor.3) total-vm:72452kB, anon-rss:2196kB, file-rss:35796kB, shmem-rss:0kB [ 360.526528][ T1042] oom_reaper: reaped process 18014 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 360.538267][ T7660] Memory cgroup out of memory: Killed process 11181 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.562659][ T7660] Memory cgroup out of memory: Killed process 13426 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 360.591532][ T7646] Memory cgroup out of memory: Killed process 9084 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 360.638116][ T7652] oom_kill_process: 31 callbacks suppressed [ 360.638131][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 360.655084][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 360.663600][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.673654][ T7652] Call Trace: [ 360.676972][ T7652] dump_stack+0x172/0x1f0 [ 360.681327][ T7652] dump_header+0x10f/0xb6c [ 360.685743][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 360.691563][ T7652] ? ___ratelimit+0x60/0x595 [ 360.696172][ T7652] oom_kill_process.cold+0x10/0x15 [ 360.701279][ T7652] out_of_memory+0x79a/0x1280 [ 360.706050][ T7652] ? oom_killer_disable+0x280/0x280 [ 360.711246][ T7652] ? find_held_lock+0x35/0x130 [ 360.716045][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 360.721931][ T7652] ? memcg_event_wake+0x230/0x230 [ 360.726977][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 360.732103][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 360.736951][ T7652] try_charge+0x102c/0x15c0 [ 360.741449][ T7652] ? find_held_lock+0x35/0x130 [ 360.746241][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 360.752399][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.758740][ T7652] ? kasan_check_read+0x11/0x20 [ 360.763622][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 360.769169][ T7652] mem_cgroup_try_charge+0x24d/0x5e0 [ 360.774461][ T7652] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 360.780094][ T7652] wp_page_copy+0x408/0x1740 [ 360.784678][ T7652] ? find_held_lock+0x35/0x130 [ 360.789451][ T7652] ? pmd_pfn+0x1d0/0x1d0 [ 360.793958][ T7652] ? lock_downgrade+0x880/0x880 [ 360.800388][ T7652] ? swp_swapcount+0x540/0x540 [ 360.807240][ T7652] ? kasan_check_read+0x11/0x20 [ 360.812617][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 360.818683][ T7652] do_wp_page+0x5d8/0x16c0 [ 360.825093][ T7652] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 360.830715][ T7652] __handle_mm_fault+0x22e8/0x3ec0 [ 360.835827][ T7652] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 360.841350][ T7652] ? find_held_lock+0x35/0x130 [ 360.847051][ T7652] ? handle_mm_fault+0x322/0xb30 [ 360.853489][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.861137][ T7652] ? kasan_check_read+0x11/0x20 [ 360.866059][ T7652] handle_mm_fault+0x43f/0xb30 [ 360.873015][ T7652] __do_page_fault+0x5ef/0xda0 [ 360.878127][ T7652] do_page_fault+0x71/0x581 [ 360.885663][ T7652] ? page_fault+0x8/0x30 [ 360.889884][ T7652] page_fault+0x1e/0x30 [ 360.894047][ T7652] RIP: 0033:0x42f20a [ 360.897928][ T7652] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 360.918742][ T7652] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 360.925416][ T7652] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 360.934152][ T7652] RDX: 0000000002a40930 RSI: 0000000002a48970 RDI: 0000000000000003 [ 360.942102][ T7652] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a3f940 [ 360.950059][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 360.960294][ T7652] R13: 0000000000711698 R14: 00000000000558a9 R15: 0000000000002710 [ 360.971725][ T7652] memory: usage 33584kB, limit 0kB, failcnt 92 [ 360.978203][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 360.985735][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 360.985743][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:21764KB rss_huge:20480KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:21748KB inactive_file:0KB active_file:0KB unevictable:0KB [ 361.014895][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8996,uid=0 [ 361.034492][ T7652] Memory cgroup out of memory: Killed process 8996 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 361.061316][ T1042] oom_reaper: reaped process 8996 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 361.079280][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 361.111819][ T7660] CPU: 0 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 361.119664][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.133885][ T7660] Call Trace: [ 361.137420][ T7660] dump_stack+0x172/0x1f0 [ 361.141755][ T7660] dump_header+0x10f/0xb6c [ 361.146170][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 361.152238][ T7660] ? ___ratelimit+0x60/0x595 [ 361.157791][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 361.162909][ T7660] oom_kill_process.cold+0x10/0x15 [ 361.176562][ T7660] out_of_memory+0x79a/0x1280 [ 361.181343][ T7660] ? oom_killer_disable+0x280/0x280 [ 361.186535][ T7660] ? find_held_lock+0x35/0x130 [ 361.191506][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 361.197049][ T7660] ? memcg_event_wake+0x230/0x230 [ 361.202525][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 361.208268][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 361.214339][ T7660] try_charge+0x102c/0x15c0 [ 361.218842][ T7660] ? find_held_lock+0x35/0x130 [ 361.223699][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 361.229409][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.235659][ T7660] ? kasan_check_read+0x11/0x20 [ 361.240509][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 361.246229][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 361.251961][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 361.258049][ T7660] wp_page_copy+0x408/0x1740 [ 361.262656][ T7660] ? find_held_lock+0x35/0x130 [ 361.268748][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 361.275768][ T7660] ? lock_downgrade+0x880/0x880 [ 361.282897][ T7660] ? swp_swapcount+0x540/0x540 [ 361.287670][ T7660] ? kasan_check_read+0x11/0x20 [ 361.287687][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 361.287704][ T7660] do_wp_page+0x5d8/0x16c0 [ 361.287721][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 361.287742][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 361.315028][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 361.317422][T20899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.321110][ T7660] ? find_held_lock+0x35/0x130 [ 361.333060][ T7660] ? handle_mm_fault+0x322/0xb30 [ 361.336261][T20899] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.338014][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.338030][ T7660] ? kasan_check_read+0x11/0x20 [ 361.338049][ T7660] handle_mm_fault+0x43f/0xb30 [ 361.364917][ T7660] __do_page_fault+0x5ef/0xda0 [ 361.369040][T20899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.369735][ T7660] do_page_fault+0x71/0x581 [ 361.380524][T20899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.384980][ T7660] ? page_fault+0x8/0x30 [ 361.384992][ T7660] page_fault+0x1e/0x30 [ 361.385003][ T7660] RIP: 0033:0x42f20a [ 361.385015][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 361.385027][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 361.407802][T20899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.409619][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 361.436492][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 00:02:10 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 361.436500][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 361.436507][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 361.436514][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 361.489101][ T7660] memory: usage 35576kB, limit 0kB, failcnt 236 [ 361.495780][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 00:02:10 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 361.509679][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.521072][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:6524KB rss_huge:6144KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6516KB inactive_file:0KB active_file:0KB unevictable:0KB [ 361.544428][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13430,uid=0 [ 361.561748][ T7660] Memory cgroup out of memory: Killed process 13430 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 361.581847][ T1042] oom_reaper: reaped process 13430 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 361.593697][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 361.607102][ T7646] CPU: 1 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 361.617144][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.627214][ T7646] Call Trace: [ 361.630608][ T7646] dump_stack+0x172/0x1f0 [ 361.634966][ T7646] dump_header+0x10f/0xb6c [ 361.639394][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 361.648184][ T7646] ? ___ratelimit+0x60/0x595 [ 361.654219][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 361.664621][ T7646] oom_kill_process.cold+0x10/0x15 [ 361.671138][ T7646] out_of_memory+0x79a/0x1280 [ 361.682301][ T7646] ? oom_killer_disable+0x280/0x280 [ 361.687611][ T7646] ? find_held_lock+0x35/0x130 [ 361.694421][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 361.700056][ T7646] ? memcg_event_wake+0x230/0x230 [ 361.713358][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 361.718921][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 361.723778][ T7646] try_charge+0x102c/0x15c0 [ 361.729153][ T7646] ? find_held_lock+0x35/0x130 [ 361.731228][T20923] QAT: Invalid ioctl [ 361.734043][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 361.734069][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.751579][ T7646] ? kasan_check_read+0x11/0x20 [ 361.758957][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 361.765111][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 361.771613][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 361.780206][ T7646] wp_page_copy+0x408/0x1740 [ 361.784972][ T7646] ? find_held_lock+0x35/0x130 [ 361.790200][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 361.794800][ T7646] ? lock_downgrade+0x880/0x880 [ 361.801492][ T7646] ? swp_swapcount+0x540/0x540 [ 361.806256][ T7646] ? kasan_check_read+0x11/0x20 [ 361.812861][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 361.818670][ T7646] do_wp_page+0x5d8/0x16c0 [ 361.823252][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 361.828635][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 361.835068][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 361.840600][ T7646] ? find_held_lock+0x35/0x130 [ 361.845732][ T7646] ? handle_mm_fault+0x322/0xb30 [ 361.852166][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.865107][ T7646] ? kasan_check_read+0x11/0x20 [ 361.870329][ T7646] handle_mm_fault+0x43f/0xb30 [ 361.876569][ T7646] __do_page_fault+0x5ef/0xda0 [ 361.883845][ T7646] do_page_fault+0x71/0x581 [ 361.888450][ T7646] ? page_fault+0x8/0x30 [ 361.893745][ T7646] page_fault+0x1e/0x30 [ 361.898097][ T7646] RIP: 0033:0x42f20a [ 361.903283][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 361.928211][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 361.935324][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 361.943553][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 361.951890][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 361.960968][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 361.968937][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 361.977471][ T7646] memory: usage 47584kB, limit 0kB, failcnt 159 [ 361.983846][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 361.994720][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.995772][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.003004][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.016618][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:32476KB rss_huge:30720KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32444KB inactive_file:0KB active_file:0KB unevictable:0KB [ 362.039859][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=10982,uid=0 [ 362.045724][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.056374][ T7646] Memory cgroup out of memory: Killed process 10982 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 362.081937][ T1042] oom_reaper: reaped process 10982 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 362.086519][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.093247][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 362.107800][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.116929][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 362.120370][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.128189][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.128194][ T7652] Call Trace: [ 362.128216][ T7652] dump_stack+0x172/0x1f0 [ 362.128235][ T7652] dump_header+0x10f/0xb6c [ 362.155157][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.155889][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 362.160834][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.168445][ T7652] ? ___ratelimit+0x60/0x595 [ 362.168461][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 362.168477][ T7652] oom_kill_process.cold+0x10/0x15 [ 362.168491][ T7652] out_of_memory+0x79a/0x1280 [ 362.168509][ T7652] ? oom_killer_disable+0x280/0x280 [ 362.174898][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.182278][ T7652] ? find_held_lock+0x35/0x130 [ 362.186918][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.192047][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 362.197672][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.203626][ T7652] ? memcg_event_wake+0x230/0x230 [ 362.214014][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.220479][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 362.220494][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 362.220510][ T7652] try_charge+0x102c/0x15c0 [ 362.220521][ T7652] ? find_held_lock+0x35/0x130 [ 362.220539][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 362.226275][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.235096][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.235116][ T7652] ? kasan_check_read+0x11/0x20 [ 362.235133][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 362.235151][ T7652] mem_cgroup_try_charge+0x24d/0x5e0 [ 362.242723][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.248707][ T7652] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 362.248726][ T7652] wp_page_copy+0x408/0x1740 [ 362.248738][ T7652] ? find_held_lock+0x35/0x130 [ 362.248756][ T7652] ? pmd_pfn+0x1d0/0x1d0 [ 362.254602][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.262291][ T7652] ? lock_downgrade+0x880/0x880 [ 362.268108][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.272227][ T7652] ? swp_swapcount+0x540/0x540 [ 362.277521][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.281632][ T7652] ? kasan_check_read+0x11/0x20 [ 362.287811][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.295022][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 362.295041][ T7652] do_wp_page+0x5d8/0x16c0 [ 362.295059][ T7652] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 362.295080][ T7652] __handle_mm_fault+0x22e8/0x3ec0 [ 362.302091][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.306159][ T7652] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 362.306173][ T7652] ? find_held_lock+0x35/0x130 [ 362.306186][ T7652] ? handle_mm_fault+0x322/0xb30 [ 362.306209][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.312481][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.317119][ T7652] ? kasan_check_read+0x11/0x20 [ 362.317139][ T7652] handle_mm_fault+0x43f/0xb30 [ 362.317158][ T7652] __do_page_fault+0x5ef/0xda0 [ 362.317179][ T7652] do_page_fault+0x71/0x581 [ 362.325734][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.331330][ T7652] ? page_fault+0x8/0x30 [ 362.336796][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.340885][ T7652] page_fault+0x1e/0x30 [ 362.345940][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.354298][ T7652] RIP: 0033:0x42f20a [ 362.354312][ T7652] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 362.354319][ T7652] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 362.354329][ T7652] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 362.354336][ T7652] RDX: 0000000002a40930 RSI: 0000000002a48970 RDI: 0000000000000003 00:02:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 362.354343][ T7652] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a3f940 [ 362.354356][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 362.579450][ T7652] R13: 0000000000711698 R14: 00000000000558a9 R15: 0000000000002710 [ 362.589696][ T7652] memory: usage 31148kB, limit 0kB, failcnt 134 [ 362.596374][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.605163][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 362.614422][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:19600KB rss_huge:18432KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:19576KB inactive_file:0KB active_file:0KB unevictable:0KB [ 362.637845][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9018,uid=0 [ 362.657236][ T7652] Memory cgroup out of memory: Killed process 9018 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 362.672966][ T1042] oom_reaper: reaped process 9018 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 362.685367][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 362.714898][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 362.722765][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.732905][ T7660] Call Trace: [ 362.736187][ T7660] dump_stack+0x172/0x1f0 [ 362.740509][ T7660] dump_header+0x10f/0xb6c [ 362.745099][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 362.750997][ T7660] ? ___ratelimit+0x60/0x595 [ 362.755572][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 362.760668][ T7660] oom_kill_process.cold+0x10/0x15 [ 362.765775][ T7660] out_of_memory+0x79a/0x1280 [ 362.770440][ T7660] ? oom_killer_disable+0x280/0x280 [ 362.775621][ T7660] ? find_held_lock+0x35/0x130 [ 362.780462][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 362.785990][ T7660] ? memcg_event_wake+0x230/0x230 [ 362.791001][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 362.796106][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 362.800954][ T7660] try_charge+0x102c/0x15c0 [ 362.805538][ T7660] ? find_held_lock+0x35/0x130 [ 362.811188][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 362.816719][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.822943][ T7660] ? kasan_check_read+0x11/0x20 [ 362.827780][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 362.833312][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 362.838601][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 362.844229][ T7660] wp_page_copy+0x408/0x1740 [ 362.849072][ T7660] ? find_held_lock+0x35/0x130 [ 362.853832][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 362.858066][ T7660] ? lock_downgrade+0x880/0x880 [ 362.862903][ T7660] ? swp_swapcount+0x540/0x540 [ 362.867656][ T7660] ? kasan_check_read+0x11/0x20 [ 362.872490][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 362.877687][ T7660] do_wp_page+0x5d8/0x16c0 [ 362.882178][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 362.887552][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 362.892650][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 362.898214][ T7660] ? find_held_lock+0x35/0x130 [ 362.902971][ T7660] ? handle_mm_fault+0x322/0xb30 [ 362.907921][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.914419][ T7660] ? kasan_check_read+0x11/0x20 [ 362.919254][ T7660] handle_mm_fault+0x43f/0xb30 [ 362.924015][ T7660] __do_page_fault+0x5ef/0xda0 [ 362.928782][ T7660] do_page_fault+0x71/0x581 [ 362.933301][ T7660] ? page_fault+0x8/0x30 [ 362.937541][ T7660] page_fault+0x1e/0x30 [ 362.941678][ T7660] RIP: 0033:0x42f20a [ 362.945571][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 362.965265][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 00:02:11 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 362.971340][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 362.979399][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 362.987353][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 362.995306][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 363.003263][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 00:02:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 363.109938][ T7660] memory: usage 33168kB, limit 0kB, failcnt 242 [ 363.116764][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.125307][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.132424][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:4388KB rss_huge:4096KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4372KB inactive_file:0KB active_file:0KB unevictable:0KB [ 363.136127][T20925] IPVS: ftp: loaded support on port[0] = 21 [ 363.154832][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13438,uid=0 [ 363.176001][ T7660] Memory cgroup out of memory: Killed process 13438 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 363.191175][ T1042] oom_reaper: reaped process 13438 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 363.199826][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 363.213945][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 363.221762][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.231819][ T7646] Call Trace: [ 363.235104][ T7646] dump_stack+0x172/0x1f0 [ 363.235124][ T7646] dump_header+0x10f/0xb6c [ 363.235138][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 363.235155][ T7646] ? ___ratelimit+0x60/0x595 [ 363.243880][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 363.254350][ T7646] oom_kill_process.cold+0x10/0x15 [ 363.254365][ T7646] out_of_memory+0x79a/0x1280 [ 363.254382][ T7646] ? oom_killer_disable+0x280/0x280 [ 363.254398][ T7646] ? find_held_lock+0x35/0x130 [ 363.264618][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 363.264632][ T7646] ? memcg_event_wake+0x230/0x230 [ 363.264650][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 363.264667][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 363.274511][ T7646] try_charge+0x102c/0x15c0 [ 363.274526][ T7646] ? find_held_lock+0x35/0x130 [ 363.274545][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 363.274568][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.274582][ T7646] ? kasan_check_read+0x11/0x20 [ 363.274596][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 363.274609][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 363.274624][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 363.274639][ T7646] wp_page_copy+0x408/0x1740 [ 363.274653][ T7646] ? find_held_lock+0x35/0x130 [ 363.285387][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 363.285403][ T7646] ? lock_downgrade+0x880/0x880 [ 363.285421][ T7646] ? swp_swapcount+0x540/0x540 [ 363.285435][ T7646] ? kasan_check_read+0x11/0x20 [ 363.285447][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 363.285460][ T7646] do_wp_page+0x5d8/0x16c0 [ 363.285476][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 363.285494][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 363.285510][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 363.285520][ T7646] ? find_held_lock+0x35/0x130 [ 363.285533][ T7646] ? handle_mm_fault+0x322/0xb30 [ 363.295806][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.305268][ T7646] ? kasan_check_read+0x11/0x20 [ 363.305287][ T7646] handle_mm_fault+0x43f/0xb30 [ 363.305307][ T7646] __do_page_fault+0x5ef/0xda0 [ 363.305329][ T7646] do_page_fault+0x71/0x581 [ 363.315608][ T7646] ? page_fault+0x8/0x30 [ 363.315622][ T7646] page_fault+0x1e/0x30 [ 363.315632][ T7646] RIP: 0033:0x42f20a [ 363.315645][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 363.315657][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 363.327862][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 363.338660][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 363.338667][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 363.338673][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 363.338680][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 363.359033][ T7646] memory: usage 45264kB, limit 0kB, failcnt 165 [ 363.367708][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.367716][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.367723][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:30312KB rss_huge:28672KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30280KB inactive_file:0KB active_file:0KB unevictable:0KB [ 363.398620][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20852,uid=0 [ 363.409376][ T7646] Memory cgroup out of memory: Killed process 20852 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 363.473712][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 363.482204][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 363.498386][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.498391][ T7652] Call Trace: [ 363.498413][ T7652] dump_stack+0x172/0x1f0 [ 363.498430][ T7652] dump_header+0x10f/0xb6c [ 363.498444][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 363.498463][ T7652] ? ___ratelimit+0x60/0x595 [ 363.514470][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 363.514489][ T7652] oom_kill_process.cold+0x10/0x15 [ 363.514504][ T7652] out_of_memory+0x79a/0x1280 [ 363.514522][ T7652] ? oom_killer_disable+0x280/0x280 [ 363.528534][ T7652] ? find_held_lock+0x35/0x130 [ 363.528556][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 363.528567][ T7652] ? memcg_event_wake+0x230/0x230 [ 363.528585][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 363.556746][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 363.556772][ T7652] try_charge+0x102c/0x15c0 [ 363.556790][ T7652] ? find_held_lock+0x35/0x130 [ 363.556809][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 363.587362][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.587379][ T7652] ? kasan_check_read+0x11/0x20 [ 363.587397][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 363.587416][ T7652] mem_cgroup_try_charge+0x24d/0x5e0 [ 363.605819][ T7652] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 363.605837][ T7652] wp_page_copy+0x408/0x1740 [ 363.605851][ T7652] ? find_held_lock+0x35/0x130 [ 363.605873][ T7652] ? pmd_pfn+0x1d0/0x1d0 [ 363.619224][ T7652] ? lock_downgrade+0x880/0x880 [ 363.627945][ T7652] ? swp_swapcount+0x540/0x540 [ 363.627961][ T7652] ? kasan_check_read+0x11/0x20 [ 363.627974][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 363.627991][ T7652] do_wp_page+0x5d8/0x16c0 [ 363.628011][ T7652] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 363.638389][ T7652] __handle_mm_fault+0x22e8/0x3ec0 [ 363.648571][ T7652] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 363.648585][ T7652] ? find_held_lock+0x35/0x130 [ 363.648598][ T7652] ? handle_mm_fault+0x322/0xb30 [ 363.648620][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.660099][ T7652] ? kasan_check_read+0x11/0x20 [ 363.670382][ T7652] handle_mm_fault+0x43f/0xb30 [ 363.680499][ T7652] __do_page_fault+0x5ef/0xda0 [ 363.689812][ T7652] do_page_fault+0x71/0x581 [ 363.700724][ T7652] ? page_fault+0x8/0x30 [ 363.711856][ T7652] page_fault+0x1e/0x30 [ 363.722657][ T7652] RIP: 0033:0x42f20a [ 363.732839][ T7652] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 363.741805][ T7652] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 363.751395][ T7652] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 363.761597][ T7652] RDX: 0000000002a40930 RSI: 0000000002a48970 RDI: 0000000000000003 [ 363.771431][ T7652] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002a3f940 [ 363.782049][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 363.782061][ T7652] R13: 0000000000711698 R14: 00000000000558a9 R15: 0000000000002710 [ 363.807195][ T7652] memory: usage 26248kB, limit 0kB, failcnt 140 [ 363.858552][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.879933][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 363.891315][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:17428KB rss_huge:16384KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17404KB inactive_file:0KB active_file:0KB unevictable:0KB [ 363.934101][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9054,uid=0 00:02:12 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 363.958433][ T7652] Memory cgroup out of memory: Killed process 9054 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 363.982135][T20899] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 363.993379][T20899] CPU: 1 PID: 20899 Comm: syz-executor.2 Not tainted 5.1.0-rc1 #28 [ 364.001298][T20899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.013090][T20899] Call Trace: [ 364.016373][T20899] dump_stack+0x172/0x1f0 [ 364.020874][T20899] dump_header+0x10f/0xb6c [ 364.025279][T20899] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 364.031104][T20899] ? ___ratelimit+0x60/0x595 [ 364.035785][T20899] ? do_raw_spin_unlock+0x57/0x270 [ 364.040896][T20899] oom_kill_process.cold+0x10/0x15 [ 364.046005][T20899] out_of_memory+0x79a/0x1280 [ 364.050685][T20899] ? oom_killer_disable+0x280/0x280 [ 364.055876][T20899] ? find_held_lock+0x35/0x130 [ 364.060647][T20899] mem_cgroup_out_of_memory+0x1ca/0x230 [ 364.066173][T20899] ? memcg_event_wake+0x230/0x230 [ 364.071199][T20899] ? do_raw_spin_unlock+0x57/0x270 [ 364.076300][T20899] ? _raw_spin_unlock+0x2d/0x50 [ 364.081174][T20899] try_charge+0x102c/0x15c0 [ 364.085675][T20899] ? find_held_lock+0x35/0x130 [ 364.090431][T20899] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 364.095969][T20899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.102228][T20899] ? kasan_check_read+0x11/0x20 [ 364.107097][T20899] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 364.112653][T20899] mem_cgroup_try_charge+0x24d/0x5e0 [ 364.117991][T20899] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 364.124180][T20899] __handle_mm_fault+0x1e1f/0x3ec0 [ 364.129311][T20899] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 364.134873][T20899] ? find_held_lock+0x35/0x130 [ 364.139750][T20899] ? handle_mm_fault+0x322/0xb30 [ 364.144705][T20899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.150966][T20899] ? kasan_check_read+0x11/0x20 [ 364.155841][T20899] handle_mm_fault+0x43f/0xb30 [ 364.160623][T20899] __do_page_fault+0x5ef/0xda0 [ 364.165404][T20899] do_page_fault+0x71/0x581 [ 364.169944][T20899] ? page_fault+0x8/0x30 [ 364.174223][T20899] page_fault+0x1e/0x30 [ 364.178762][T20899] RIP: 0033:0x402e52 [ 364.181291][T20928] IPVS: ftp: loaded support on port[0] = 21 [ 364.182661][T20899] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 364.209203][T20899] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 364.215297][T20899] RAX: 0000000000000000 RBX: 0000000000058859 RCX: 0000000000411d50 [ 364.223359][T20899] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 364.231713][T20899] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001886940 [ 364.239687][T20899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 364.247655][T20899] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 364.257570][T20899] memory: usage 6848kB, limit 0kB, failcnt 790 [ 364.263948][T20899] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.273470][T20899] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.280603][T20899] Memory cgroup stats for /syz2: cache:80KB rss:176KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 364.301822][T20899] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20899,uid=0 [ 364.317432][T20899] Memory cgroup out of memory: Killed process 20899 (syz-executor.2) total-vm:72320kB, anon-rss:80kB, file-rss:34816kB, shmem-rss:0kB [ 364.331573][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 364.332027][ T1042] oom_reaper: reaped process 20899 (syz-executor.2), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 364.341745][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 364.361902][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.371989][ T7660] Call Trace: [ 364.375385][ T7660] dump_stack+0x172/0x1f0 [ 364.379733][ T7660] dump_header+0x10f/0xb6c [ 364.384162][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 364.389990][ T7660] ? ___ratelimit+0x60/0x595 [ 364.394591][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.400476][ T7660] oom_kill_process.cold+0x10/0x15 [ 364.405726][ T7660] out_of_memory+0x79a/0x1280 [ 364.410426][ T7660] ? oom_killer_disable+0x280/0x280 [ 364.415613][ T7660] ? find_held_lock+0x35/0x130 [ 364.420373][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 364.428526][ T7660] ? memcg_event_wake+0x230/0x230 [ 364.442115][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.447239][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 364.452088][ T7660] try_charge+0x102c/0x15c0 [ 364.456585][ T7660] ? find_held_lock+0x35/0x130 [ 364.462087][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 364.467725][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.474407][ T7660] ? kasan_check_read+0x11/0x20 [ 364.479537][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 364.485085][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 364.492535][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 364.498446][ T7660] wp_page_copy+0x408/0x1740 [ 364.503507][ T7660] ? find_held_lock+0x35/0x130 [ 364.508280][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 364.512520][ T7660] ? lock_downgrade+0x880/0x880 [ 364.517356][ T7660] ? swp_swapcount+0x540/0x540 [ 364.523284][ T7660] ? kasan_check_read+0x11/0x20 [ 364.528140][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.533443][ T7660] do_wp_page+0x5d8/0x16c0 [ 364.537896][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 364.543288][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 364.548423][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 364.554999][ T7660] ? find_held_lock+0x35/0x130 [ 364.559778][ T7660] ? handle_mm_fault+0x322/0xb30 [ 364.564728][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.570979][ T7660] ? kasan_check_read+0x11/0x20 [ 364.575821][ T7660] handle_mm_fault+0x43f/0xb30 [ 364.581243][ T7660] __do_page_fault+0x5ef/0xda0 [ 364.586018][ T7660] do_page_fault+0x71/0x581 [ 364.590539][ T7660] ? page_fault+0x8/0x30 [ 364.595996][ T7660] page_fault+0x1e/0x30 [ 364.600241][ T7660] RIP: 0033:0x42f20a [ 364.604126][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 364.623905][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 364.629969][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 364.637930][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 364.645911][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 364.654145][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 364.662300][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 364.672101][ T7660] memory: usage 30824kB, limit 0kB, failcnt 248 [ 364.678564][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.701392][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 364.709863][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:2244KB rss_huge:2048KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 364.731728][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=13442,uid=0 [ 364.748828][ T7660] Memory cgroup out of memory: Killed process 13442 (syz-executor.5) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 364.776987][ T7660] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 364.789015][ T7660] CPU: 1 PID: 7660 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 364.797164][ T7660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.809345][ T7660] Call Trace: [ 364.812714][ T7660] dump_stack+0x172/0x1f0 [ 364.817048][ T7660] dump_header+0x10f/0xb6c [ 364.821499][ T7660] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 364.827392][ T7660] ? ___ratelimit+0x60/0x595 [ 364.832004][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.837140][ T7660] oom_kill_process.cold+0x10/0x15 [ 364.842430][ T7660] out_of_memory+0x79a/0x1280 [ 364.847120][ T7660] ? lock_downgrade+0x880/0x880 [ 364.852521][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.860588][ T7660] ? oom_killer_disable+0x280/0x280 [ 364.865790][ T7660] ? find_held_lock+0x35/0x130 [ 364.870680][ T7660] mem_cgroup_out_of_memory+0x1ca/0x230 [ 364.876304][ T7660] ? memcg_event_wake+0x230/0x230 [ 364.881316][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.886419][ T7660] ? _raw_spin_unlock+0x2d/0x50 [ 364.891269][ T7660] try_charge+0x102c/0x15c0 [ 364.895924][ T7660] ? find_held_lock+0x35/0x130 [ 364.901487][ T7660] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 364.907124][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.913625][ T7660] ? kasan_check_read+0x11/0x20 [ 364.918557][ T7660] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 364.924215][ T7660] mem_cgroup_try_charge+0x24d/0x5e0 [ 364.929522][ T7660] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 364.935424][ T7660] wp_page_copy+0x408/0x1740 [ 364.939995][ T7660] ? find_held_lock+0x35/0x130 [ 364.944761][ T7660] ? pmd_pfn+0x1d0/0x1d0 [ 364.949010][ T7660] ? lock_downgrade+0x880/0x880 [ 364.953851][ T7660] ? swp_swapcount+0x540/0x540 [ 364.958610][ T7660] ? kasan_check_read+0x11/0x20 [ 364.963469][ T7660] ? do_raw_spin_unlock+0x57/0x270 [ 364.968584][ T7660] do_wp_page+0x5d8/0x16c0 [ 364.973019][ T7660] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 364.978409][ T7660] __handle_mm_fault+0x22e8/0x3ec0 [ 364.983530][ T7660] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 364.989091][ T7660] ? find_held_lock+0x35/0x130 [ 364.993851][ T7660] ? handle_mm_fault+0x322/0xb30 [ 364.998792][ T7660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.005030][ T7660] ? kasan_check_read+0x11/0x20 [ 365.009901][ T7660] handle_mm_fault+0x43f/0xb30 [ 365.014695][ T7660] __do_page_fault+0x5ef/0xda0 [ 365.019447][ T7660] do_page_fault+0x71/0x581 [ 365.023951][ T7660] ? page_fault+0x8/0x30 [ 365.029767][ T7660] page_fault+0x1e/0x30 [ 365.034020][ T7660] RIP: 0033:0x42f20a [ 365.037908][ T7660] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 365.057960][ T7660] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 365.064022][ T7660] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 365.071987][ T7660] RDX: 000000000269a930 RSI: 00000000026a2970 RDI: 0000000000000003 [ 365.079978][ T7660] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002699940 [ 365.088038][ T7660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 365.096009][ T7660] R13: 0000000000711698 R14: 000000000005316b R15: 0000000000002710 [ 365.105417][ T7660] memory: usage 28504kB, limit 0kB, failcnt 254 [ 365.111688][ T7660] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 365.119277][ T7660] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 365.126892][ T7660] Memory cgroup stats for /syz5: cache:120KB rss:76KB rss_huge:0KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:0KB active_file:0KB unevictable:0KB [ 365.147930][ T7660] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=7660,uid=0 [ 365.163657][ T7660] Memory cgroup out of memory: Killed process 7660 (syz-executor.5) total-vm:72316kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB [ 365.178348][ T1042] oom_reaper: reaped process 7660 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 365.178560][ T7646] Memory cgroup out of memory: Killed process 20909 (syz-executor.1) total-vm:72580kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB [ 365.218018][ T7652] Memory cgroup out of memory: Killed process 9108 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 365.225178][ T1042] oom_reaper: reaped process 20909 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 365.251421][ T7646] Memory cgroup out of memory: Killed process 10882 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 365.270270][ T1042] oom_reaper: reaped process 10882 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 365.284920][ T7652] Memory cgroup out of memory: Killed process 9126 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 365.309016][ T1042] oom_reaper: reaped process 9126 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 365.322384][ T7646] Memory cgroup out of memory: Killed process 10945 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 365.340128][ T1042] oom_reaper: reaped process 10945 (syz-executor.1), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB [ 365.351832][ T7652] Memory cgroup out of memory: Killed process 9188 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 365.478659][ T7646] Memory cgroup out of memory: Killed process 11021 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 365.587614][ T7652] Memory cgroup out of memory: Killed process 20810 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 365.609931][ T1042] oom_reaper: reaped process 20810 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 365.623101][ T7646] Memory cgroup out of memory: Killed process 11036 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 365.660557][ T7646] oom_kill_process: 9 callbacks suppressed [ 365.660574][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 365.678098][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 365.685953][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.696004][ T7646] Call Trace: [ 365.699285][ T7646] dump_stack+0x172/0x1f0 [ 365.703660][ T7646] dump_header+0x10f/0xb6c [ 365.708068][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 365.713854][ T7646] ? ___ratelimit+0x60/0x595 [ 365.718429][ T7646] oom_kill_process.cold+0x10/0x15 [ 365.723535][ T7646] out_of_memory+0x79a/0x1280 [ 365.728200][ T7646] ? lock_downgrade+0x880/0x880 [ 365.733034][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.739279][ T7646] ? oom_killer_disable+0x280/0x280 [ 365.744475][ T7646] ? find_held_lock+0x35/0x130 [ 365.749231][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 365.754760][ T7646] ? memcg_event_wake+0x230/0x230 [ 365.759773][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 365.764882][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 365.769731][ T7646] try_charge+0x102c/0x15c0 [ 365.774235][ T7646] ? find_held_lock+0x35/0x130 [ 365.778992][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 365.784545][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.790791][ T7646] ? kasan_check_read+0x11/0x20 [ 365.795635][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 365.801223][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 365.806501][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 365.812141][ T7646] wp_page_copy+0x408/0x1740 [ 365.816724][ T7646] ? find_held_lock+0x35/0x130 [ 365.821476][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 365.825719][ T7646] ? lock_downgrade+0x880/0x880 [ 365.830564][ T7646] ? swp_swapcount+0x540/0x540 [ 365.835425][ T7646] ? kasan_check_read+0x11/0x20 [ 365.840272][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 365.845438][ T7646] do_wp_page+0x5d8/0x16c0 [ 365.849867][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 365.855246][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 365.860367][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 365.866161][ T7646] ? find_held_lock+0x35/0x130 [ 365.872055][ T7646] ? handle_mm_fault+0x322/0xb30 [ 365.877000][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.883243][ T7646] ? kasan_check_read+0x11/0x20 [ 365.888104][ T7646] handle_mm_fault+0x43f/0xb30 [ 365.892878][ T7646] __do_page_fault+0x5ef/0xda0 [ 365.897671][ T7646] do_page_fault+0x71/0x581 [ 365.902280][ T7646] ? page_fault+0x8/0x30 [ 365.906828][ T7646] page_fault+0x1e/0x30 [ 365.911193][ T7646] RIP: 0033:0x42f20a [ 365.915159][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 365.934747][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 365.940897][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 365.948873][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 365.956848][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 365.964810][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 365.972779][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 365.982312][ T7646] memory: usage 31460kB, limit 0kB, failcnt 213 [ 365.993334][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.004876][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.011834][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:17308KB rss_huge:16384KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17292KB inactive_file:0KB active_file:0KB unevictable:0KB [ 366.034773][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11052,uid=0 [ 366.050382][ T7646] Memory cgroup out of memory: Killed process 11052 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 366.080690][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 366.096415][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 366.104265][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.114320][ T7652] Call Trace: [ 366.117625][ T7652] dump_stack+0x172/0x1f0 [ 366.122247][ T7652] dump_header+0x10f/0xb6c [ 366.126676][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 366.132591][ T7652] ? ___ratelimit+0x60/0x595 [ 366.137179][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 366.142293][ T7652] oom_kill_process.cold+0x10/0x15 [ 366.147406][ T7652] out_of_memory+0x79a/0x1280 [ 366.152087][ T7652] ? oom_killer_disable+0x280/0x280 [ 366.157284][ T7652] ? find_held_lock+0x35/0x130 [ 366.162403][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 366.167946][ T7652] ? memcg_event_wake+0x230/0x230 [ 366.172998][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 366.178304][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 366.183185][ T7652] try_charge+0x102c/0x15c0 [ 366.187684][ T7652] ? find_held_lock+0x35/0x130 [ 366.192453][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 366.198000][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 366.203552][ T7652] ? find_held_lock+0x35/0x130 [ 366.208323][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 366.213875][ T7652] __memcg_kmem_charge_memcg+0x7c/0x130 [ 366.219422][ T7652] ? memcg_kmem_put_cache+0xb0/0xb0 [ 366.224626][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 366.230203][ T7652] __memcg_kmem_charge+0x136/0x300 [ 366.235340][ T7652] __alloc_pages_nodemask+0x437/0x7e0 [ 366.241230][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.247487][ T7652] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 366.253269][ T7652] ? copy_process.part.0+0x1d08/0x7980 [ 366.258732][ T7652] ? lockdep_hardirqs_on+0x418/0x5d0 [ 366.264018][ T7652] ? trace_hardirqs_on+0x67/0x230 [ 366.269110][ T7652] ? kasan_check_read+0x11/0x20 [ 366.274053][ T7652] copy_process.part.0+0x3e0/0x7980 [ 366.279272][ T7652] ? __lock_acquire+0x548/0x3fb0 [ 366.284296][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 366.289393][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 366.294253][ T7652] ? __might_fault+0x12b/0x1e0 [ 366.299006][ T7652] ? __cleanup_sighand+0x60/0x60 [ 366.304156][ T7652] ? lock_downgrade+0x880/0x880 [ 366.309365][ T7652] _do_fork+0x257/0xfd0 [ 366.313526][ T7652] ? fork_idle+0x1d0/0x1d0 [ 366.317965][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.323509][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 366.328988][ T7652] ? do_syscall_64+0x26/0x610 [ 366.333714][ T7652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.339765][ T7652] ? do_syscall_64+0x26/0x610 [ 366.344447][ T7652] __x64_sys_clone+0xbf/0x150 [ 366.349116][ T7652] do_syscall_64+0x103/0x610 [ 366.353709][ T7652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.359676][ T7652] RIP: 0033:0x45664a [ 366.363569][ T7652] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 366.383174][ T7652] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 366.391589][ T7652] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045664a [ 366.399559][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 366.407535][ T7652] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002a3f940 [ 366.415495][ T7652] R10: 0000000002a3fc10 R11: 0000000000000246 R12: 0000000000000001 [ 366.423551][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 366.433176][ T7652] memory: usage 14524kB, limit 0kB, failcnt 172 [ 366.439763][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.449043][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.456030][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:6592KB rss_huge:6144KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6560KB inactive_file:0KB active_file:0KB unevictable:0KB [ 366.456351][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20907,uid=0 [ 366.495604][ T7652] Memory cgroup out of memory: Killed process 20907 (syz-executor.3) total-vm:72580kB, anon-rss:2204kB, file-rss:34816kB, shmem-rss:0kB [ 366.511178][ T1042] oom_reaper: reaped process 20907 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 366.523305][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 366.555296][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 366.563149][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.573390][ T7646] Call Trace: [ 366.576687][ T7646] dump_stack+0x172/0x1f0 [ 366.581005][ T7646] dump_header+0x10f/0xb6c [ 366.585423][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 366.591211][ T7646] ? ___ratelimit+0x60/0x595 [ 366.595812][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 366.600923][ T7646] oom_kill_process.cold+0x10/0x15 [ 366.606016][ T7646] out_of_memory+0x79a/0x1280 [ 366.610694][ T7646] ? oom_killer_disable+0x280/0x280 [ 366.615880][ T7646] ? find_held_lock+0x35/0x130 [ 366.620743][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 366.632817][ T7646] ? memcg_event_wake+0x230/0x230 [ 366.637846][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 366.642951][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 366.647789][ T7646] try_charge+0x102c/0x15c0 [ 366.652273][ T7646] ? find_held_lock+0x35/0x130 [ 366.657110][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 366.662649][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.668871][ T7646] ? kasan_check_read+0x11/0x20 [ 366.673716][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 366.679249][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 366.684525][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 366.690140][ T7646] wp_page_copy+0x408/0x1740 [ 366.694709][ T7646] ? find_held_lock+0x35/0x130 [ 366.699735][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 366.703974][ T7646] ? lock_downgrade+0x880/0x880 [ 366.708808][ T7646] ? swp_swapcount+0x540/0x540 [ 366.713557][ T7646] ? kasan_check_read+0x11/0x20 [ 366.718393][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 366.723492][ T7646] do_wp_page+0x5d8/0x16c0 [ 366.727912][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 366.733267][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 366.738375][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 366.743904][ T7646] ? find_held_lock+0x35/0x130 [ 366.748687][ T7646] ? handle_mm_fault+0x322/0xb30 [ 366.753612][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.759840][ T7646] ? kasan_check_read+0x11/0x20 [ 366.764783][ T7646] handle_mm_fault+0x43f/0xb30 [ 366.769549][ T7646] __do_page_fault+0x5ef/0xda0 [ 366.774410][ T7646] do_page_fault+0x71/0x581 [ 366.778899][ T7646] ? page_fault+0x8/0x30 [ 366.783141][ T7646] page_fault+0x1e/0x30 [ 366.787279][ T7646] RIP: 0033:0x42f20a [ 366.791167][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 366.810771][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 366.816834][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 366.824792][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 366.834591][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 366.842568][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 00:02:15 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 366.850551][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 366.863402][ T7646] memory: usage 28760kB, limit 0kB, failcnt 219 [ 366.878674][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.889583][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 366.900842][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:15156KB rss_huge:14336KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15140KB inactive_file:0KB active_file:0KB unevictable:0KB [ 366.929252][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11062,uid=0 00:02:15 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:15 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 366.945313][ T7646] Memory cgroup out of memory: Killed process 11062 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 366.968686][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 366.985749][ T7646] CPU: 1 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 366.993582][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.003671][ T7646] Call Trace: [ 367.006994][ T7646] dump_stack+0x172/0x1f0 [ 367.011371][ T7646] dump_header+0x10f/0xb6c [ 367.015803][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 367.021614][ T7646] ? ___ratelimit+0x60/0x595 [ 367.026343][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.031460][ T7646] oom_kill_process.cold+0x10/0x15 [ 367.031486][ T7646] out_of_memory+0x79a/0x1280 [ 367.041272][ T7646] ? lock_downgrade+0x880/0x880 [ 367.046130][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.052470][ T7646] ? oom_killer_disable+0x280/0x280 [ 367.057720][ T7646] ? find_held_lock+0x35/0x130 [ 367.062811][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 367.068385][ T7646] ? memcg_event_wake+0x230/0x230 [ 367.073438][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.078798][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 367.083643][ T7646] try_charge+0x102c/0x15c0 [ 367.083657][ T7646] ? find_held_lock+0x35/0x130 [ 367.083675][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 367.083697][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.104813][ T7646] ? kasan_check_read+0x11/0x20 [ 367.109654][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 367.115198][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 367.120481][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 367.126101][ T7646] wp_page_copy+0x408/0x1740 [ 367.130848][ T7646] ? find_held_lock+0x35/0x130 [ 367.135611][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 367.139858][ T7646] ? lock_downgrade+0x880/0x880 [ 367.144880][ T7646] ? swp_swapcount+0x540/0x540 [ 367.149640][ T7646] ? kasan_check_read+0x11/0x20 [ 367.154492][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.159600][ T7646] do_wp_page+0x5d8/0x16c0 [ 367.164031][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 367.169399][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 367.174518][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 367.180058][ T7646] ? find_held_lock+0x35/0x130 [ 367.185590][ T7646] ? handle_mm_fault+0x322/0xb30 [ 367.190529][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.196768][ T7646] ? kasan_check_read+0x11/0x20 [ 367.201611][ T7646] handle_mm_fault+0x43f/0xb30 [ 367.206368][ T7646] __do_page_fault+0x5ef/0xda0 [ 367.211125][ T7646] do_page_fault+0x71/0x581 [ 367.215703][ T7646] ? page_fault+0x8/0x30 [ 367.219945][ T7646] page_fault+0x1e/0x30 [ 367.224098][ T7646] RIP: 0033:0x42f20a [ 367.228006][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 367.247695][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 367.253747][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 367.261880][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 367.269839][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 367.277998][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 367.286573][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 00:02:16 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 367.323263][ T7646] memory: usage 26388kB, limit 0kB, failcnt 225 [ 367.329758][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.338359][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.346216][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:13004KB rss_huge:12288KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:12988KB inactive_file:0KB active_file:0KB unevictable:0KB [ 367.377922][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11085,uid=0 [ 367.408692][ T7646] Memory cgroup out of memory: Killed process 11085 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 367.424777][ T1042] oom_reaper: reaped process 11085 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 367.437497][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 367.452097][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 367.459934][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.459947][ T7652] Call Trace: [ 367.459971][ T7652] dump_stack+0x172/0x1f0 [ 367.473342][ T7652] dump_header+0x10f/0xb6c [ 367.482089][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 367.487905][ T7652] ? ___ratelimit+0x60/0x595 [ 367.487920][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 367.487939][ T7652] oom_kill_process.cold+0x10/0x15 [ 367.487952][ T7652] out_of_memory+0x79a/0x1280 [ 367.487969][ T7652] ? oom_killer_disable+0x280/0x280 [ 367.487984][ T7652] ? find_held_lock+0x35/0x130 [ 367.497701][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 367.497714][ T7652] ? memcg_event_wake+0x230/0x230 [ 367.497732][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 367.497750][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 367.507613][ T7652] try_charge+0x102c/0x15c0 [ 367.507626][ T7652] ? find_held_lock+0x35/0x130 [ 367.507644][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 367.507659][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 367.517604][ T7652] ? find_held_lock+0x35/0x130 [ 367.517618][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 367.517642][ T7652] __memcg_kmem_charge_memcg+0x7c/0x130 [ 367.528204][ T7652] ? memcg_kmem_put_cache+0xb0/0xb0 [ 367.538218][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 367.538233][ T7652] __memcg_kmem_charge+0x136/0x300 [ 367.538251][ T7652] __alloc_pages_nodemask+0x437/0x7e0 [ 367.538265][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.538279][ T7652] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 367.538298][ T7652] ? copy_process.part.0+0x1d08/0x7980 [ 367.547931][ T7652] ? lockdep_hardirqs_on+0x418/0x5d0 [ 367.559106][ T7652] ? trace_hardirqs_on+0x67/0x230 [ 367.559120][ T7652] ? kasan_check_read+0x11/0x20 [ 367.559139][ T7652] copy_process.part.0+0x3e0/0x7980 [ 367.559153][ T7652] ? __lock_acquire+0x548/0x3fb0 [ 367.559166][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 367.559185][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 367.569484][ T7652] ? __might_fault+0x12b/0x1e0 [ 367.580685][ T7652] ? __cleanup_sighand+0x60/0x60 [ 367.591326][ T7652] ? lock_downgrade+0x880/0x880 [ 367.603084][ T7652] _do_fork+0x257/0xfd0 [ 367.614745][ T7652] ? fork_idle+0x1d0/0x1d0 [ 367.614771][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.614782][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.614800][ T7652] ? do_syscall_64+0x26/0x610 [ 367.625890][ T7652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.625906][ T7652] ? do_syscall_64+0x26/0x610 [ 367.625925][ T7652] __x64_sys_clone+0xbf/0x150 [ 367.625940][ T7652] do_syscall_64+0x103/0x610 [ 367.625954][ T7652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.625984][ T7652] RIP: 0033:0x45664a [ 367.636138][ T7652] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 367.636145][ T7652] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 367.636159][ T7652] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045664a [ 367.636167][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 367.636179][ T7652] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002a3f940 [ 367.646219][ T7652] R10: 0000000002a3fc10 R11: 0000000000000246 R12: 0000000000000001 [ 367.646226][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 367.679555][ T7652] memory: usage 12092kB, limit 0kB, failcnt 178 [ 367.695075][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.709868][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 367.721495][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:4412KB rss_huge:4096KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4380KB inactive_file:0KB active_file:0KB unevictable:0KB [ 367.750623][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20826,uid=0 [ 367.761926][ T7652] Memory cgroup out of memory: Killed process 20826 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 367.802612][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 367.825726][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 367.854967][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.854973][ T7646] Call Trace: [ 367.854998][ T7646] dump_stack+0x172/0x1f0 [ 367.855016][ T7646] dump_header+0x10f/0xb6c [ 367.855031][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 367.855044][ T7646] ? ___ratelimit+0x60/0x595 [ 367.855059][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.855076][ T7646] oom_kill_process.cold+0x10/0x15 [ 367.879147][ T7646] out_of_memory+0x79a/0x1280 [ 367.879164][ T7646] ? oom_killer_disable+0x280/0x280 [ 367.879176][ T7646] ? find_held_lock+0x35/0x130 [ 367.879198][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 367.879213][ T7646] ? memcg_event_wake+0x230/0x230 [ 367.897067][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.897085][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 367.897102][ T7646] try_charge+0x102c/0x15c0 [ 367.897118][ T7646] ? find_held_lock+0x35/0x130 [ 367.904907][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 367.904924][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.904941][ T7646] ? kasan_check_read+0x11/0x20 [ 367.904957][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 367.915143][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 367.915161][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 367.915178][ T7646] wp_page_copy+0x408/0x1740 [ 367.915195][ T7646] ? find_held_lock+0x35/0x130 [ 367.924895][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 367.924911][ T7646] ? lock_downgrade+0x880/0x880 [ 367.924924][ T7646] ? swp_swapcount+0x540/0x540 [ 367.924941][ T7646] ? kasan_check_read+0x11/0x20 [ 367.924958][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 367.934723][ T7646] do_wp_page+0x5d8/0x16c0 [ 367.934742][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 367.934762][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 367.934781][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 367.944694][ T7646] ? find_held_lock+0x35/0x130 [ 367.944709][ T7646] ? handle_mm_fault+0x322/0xb30 [ 367.944729][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.944748][ T7646] ? kasan_check_read+0x11/0x20 [ 367.955476][ T7646] handle_mm_fault+0x43f/0xb30 [ 367.955499][ T7646] __do_page_fault+0x5ef/0xda0 [ 367.955524][ T7646] do_page_fault+0x71/0x581 [ 367.965499][ T7646] ? page_fault+0x8/0x30 [ 367.965512][ T7646] page_fault+0x1e/0x30 [ 367.965522][ T7646] RIP: 0033:0x42f20a [ 367.965536][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 367.965547][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 367.974779][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 367.974787][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 367.974793][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 367.974801][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 367.974808][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 367.983426][ T7646] memory: usage 24112kB, limit 0kB, failcnt 231 [ 367.992005][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.009108][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.018790][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:10852KB rss_huge:10240KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10836KB inactive_file:0KB active_file:0KB unevictable:0KB [ 368.031989][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11098,uid=0 [ 368.043295][ T7646] Memory cgroup out of memory: Killed process 11098 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 368.079058][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 368.091921][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 368.097839][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.097844][ T7652] Call Trace: [ 368.097872][ T7652] dump_stack+0x172/0x1f0 [ 368.097891][ T7652] dump_header+0x10f/0xb6c [ 368.097905][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 368.097920][ T7652] ? ___ratelimit+0x60/0x595 [ 368.097934][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 368.097950][ T7652] oom_kill_process.cold+0x10/0x15 [ 368.106334][ T7652] out_of_memory+0x79a/0x1280 [ 368.106353][ T7652] ? oom_killer_disable+0x280/0x280 [ 368.106364][ T7652] ? find_held_lock+0x35/0x130 [ 368.106393][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 368.106413][ T7652] ? memcg_event_wake+0x230/0x230 [ 368.130019][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 368.130034][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 368.130050][ T7652] try_charge+0x102c/0x15c0 [ 368.130060][ T7652] ? find_held_lock+0x35/0x130 [ 368.130084][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 368.144114][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 368.144132][ T7652] ? find_held_lock+0x35/0x130 [ 368.144145][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 368.144171][ T7652] __memcg_kmem_charge_memcg+0x7c/0x130 [ 368.160085][ T7652] ? memcg_kmem_put_cache+0xb0/0xb0 [ 368.160100][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 368.160114][ T7652] __memcg_kmem_charge+0x136/0x300 [ 368.160132][ T7652] __alloc_pages_nodemask+0x437/0x7e0 [ 368.160146][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.160163][ T7652] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 368.176191][ T7652] ? copy_process.part.0+0x1d08/0x7980 [ 368.176208][ T7652] ? lockdep_hardirqs_on+0x418/0x5d0 [ 368.176222][ T7652] ? trace_hardirqs_on+0x67/0x230 [ 368.176240][ T7652] ? kasan_check_read+0x11/0x20 [ 368.189893][ T7652] copy_process.part.0+0x3e0/0x7980 [ 368.189910][ T7652] ? __lock_acquire+0x548/0x3fb0 [ 368.189924][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 368.189945][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 368.218122][ T7652] ? __might_fault+0x12b/0x1e0 [ 368.218145][ T7652] ? __cleanup_sighand+0x60/0x60 [ 368.218160][ T7652] ? lock_downgrade+0x880/0x880 [ 368.218184][ T7652] _do_fork+0x257/0xfd0 [ 368.248361][ T7652] ? fork_idle+0x1d0/0x1d0 [ 368.248397][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.248408][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.248425][ T7652] ? do_syscall_64+0x26/0x610 [ 368.268084][ T7652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.268098][ T7652] ? do_syscall_64+0x26/0x610 [ 368.268116][ T7652] __x64_sys_clone+0xbf/0x150 [ 368.268135][ T7652] do_syscall_64+0x103/0x610 [ 368.281574][ T7652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.290273][ T7652] RIP: 0033:0x45664a [ 368.300644][ T7652] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 368.310857][ T7652] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 368.320724][ T7652] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045664a [ 368.331272][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 368.341360][ T7652] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002a3f940 [ 368.350928][ T7652] R10: 0000000002a3fc10 R11: 0000000000000246 R12: 0000000000000001 [ 368.361197][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 368.383401][ T7652] memory: usage 9788kB, limit 0kB, failcnt 184 [ 368.400920][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.434942][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 368.447583][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:2252KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2228KB inactive_file:0KB active_file:0KB unevictable:0KB [ 368.492366][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20835,uid=0 [ 368.560057][ T7652] Memory cgroup out of memory: Killed process 20835 (syz-executor.3) total-vm:72448kB, anon-rss:2196kB, file-rss:34816kB, shmem-rss:0kB [ 368.643755][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 368.674526][T20934] IPVS: ftp: loaded support on port[0] = 21 [ 368.708388][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 368.716249][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.716255][ T7646] Call Trace: [ 368.716277][ T7646] dump_stack+0x172/0x1f0 [ 368.716295][ T7646] dump_header+0x10f/0xb6c [ 368.716309][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 368.716322][ T7646] ? ___ratelimit+0x60/0x595 [ 368.716344][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 368.716365][ T7646] oom_kill_process.cold+0x10/0x15 [ 368.716381][ T7646] out_of_memory+0x79a/0x1280 [ 368.716401][ T7646] ? oom_killer_disable+0x280/0x280 [ 368.716413][ T7646] ? find_held_lock+0x35/0x130 [ 368.716436][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 368.716446][ T7646] ? memcg_event_wake+0x230/0x230 [ 368.716466][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 368.731211][T20933] IPVS: ftp: loaded support on port[0] = 21 [ 368.734142][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 368.734160][ T7646] try_charge+0x102c/0x15c0 [ 368.734172][ T7646] ? find_held_lock+0x35/0x130 [ 368.734190][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 368.734205][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.734225][ T7646] ? kasan_check_read+0x11/0x20 [ 368.826333][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 368.831895][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 368.837592][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 368.843213][ T7646] wp_page_copy+0x408/0x1740 [ 368.847791][ T7646] ? find_held_lock+0x35/0x130 [ 368.852547][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 368.856774][ T7646] ? lock_downgrade+0x880/0x880 [ 368.861612][ T7646] ? swp_swapcount+0x540/0x540 [ 368.866359][ T7646] ? kasan_check_read+0x11/0x20 [ 368.871352][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 368.876513][ T7646] do_wp_page+0x5d8/0x16c0 [ 368.880942][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 368.886473][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 368.891573][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 368.897116][ T7646] ? find_held_lock+0x35/0x130 [ 368.901978][ T7646] ? handle_mm_fault+0x322/0xb30 [ 368.906902][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 368.913143][ T7646] ? kasan_check_read+0x11/0x20 [ 368.917985][ T7646] handle_mm_fault+0x43f/0xb30 [ 368.922743][ T7646] __do_page_fault+0x5ef/0xda0 [ 368.927496][ T7646] do_page_fault+0x71/0x581 [ 368.931988][ T7646] ? page_fault+0x8/0x30 [ 368.936215][ T7646] page_fault+0x1e/0x30 [ 368.940354][ T7646] RIP: 0033:0x42f20a [ 368.944251][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 368.963851][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 368.969924][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 368.977898][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 368.985867][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 368.993816][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 369.002271][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 369.011584][ T7646] memory: usage 21804kB, limit 0kB, failcnt 237 [ 369.017959][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.025529][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.032519][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:8700KB rss_huge:8192KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:8684KB inactive_file:0KB active_file:0KB unevictable:0KB [ 369.053763][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=11111,uid=0 [ 369.069188][ T7646] Memory cgroup out of memory: Killed process 11111 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 369.083789][ T7652] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 369.094236][ T1042] oom_reaper: reaped process 11111 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 369.096209][ T7652] CPU: 0 PID: 7652 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 369.114521][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.124573][ T7652] Call Trace: [ 369.124600][ T7652] dump_stack+0x172/0x1f0 [ 369.124617][ T7652] dump_header+0x10f/0xb6c [ 369.124631][ T7652] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 369.124650][ T7652] ? ___ratelimit+0x60/0x595 [ 369.132248][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 369.132265][ T7652] oom_kill_process.cold+0x10/0x15 [ 369.142463][ T7652] out_of_memory+0x79a/0x1280 [ 369.152230][ T7652] ? oom_killer_disable+0x280/0x280 [ 369.162355][ T7652] ? find_held_lock+0x35/0x130 [ 369.172326][ T7652] mem_cgroup_out_of_memory+0x1ca/0x230 [ 369.177868][ T7652] ? memcg_event_wake+0x230/0x230 [ 369.177890][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 369.177903][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 369.177918][ T7652] try_charge+0x102c/0x15c0 [ 369.177929][ T7652] ? find_held_lock+0x35/0x130 [ 369.177945][ T7652] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 369.177960][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 369.188089][ T7652] ? find_held_lock+0x35/0x130 [ 369.197678][ T7652] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 369.197700][ T7652] __memcg_kmem_charge_memcg+0x7c/0x130 [ 369.197713][ T7652] ? memcg_kmem_put_cache+0xb0/0xb0 [ 369.197727][ T7652] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 369.197740][ T7652] __memcg_kmem_charge+0x136/0x300 [ 369.197761][ T7652] __alloc_pages_nodemask+0x437/0x7e0 [ 369.208053][ T7652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.208074][ T7652] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 369.208090][ T7652] ? copy_process.part.0+0x1d08/0x7980 [ 369.208105][ T7652] ? lockdep_hardirqs_on+0x418/0x5d0 [ 369.208123][ T7652] ? trace_hardirqs_on+0x67/0x230 [ 369.218391][ T7652] ? kasan_check_read+0x11/0x20 [ 369.218411][ T7652] copy_process.part.0+0x3e0/0x7980 [ 369.218429][ T7652] ? __lock_acquire+0x548/0x3fb0 [ 369.229478][ T7652] ? do_raw_spin_unlock+0x57/0x270 [ 369.229495][ T7652] ? _raw_spin_unlock+0x2d/0x50 [ 369.229517][ T7652] ? __might_fault+0x12b/0x1e0 [ 369.229538][ T7652] ? __cleanup_sighand+0x60/0x60 [ 369.240282][ T7652] ? lock_downgrade+0x880/0x880 [ 369.250739][ T7652] _do_fork+0x257/0xfd0 [ 369.262690][ T7652] ? fork_idle+0x1d0/0x1d0 [ 369.273488][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.283330][ T7652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.293423][ T7652] ? do_syscall_64+0x26/0x610 [ 369.303344][ T7652] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.313143][ T7652] ? do_syscall_64+0x26/0x610 [ 369.322156][ T7652] __x64_sys_clone+0xbf/0x150 [ 369.332182][ T7652] do_syscall_64+0x103/0x610 [ 369.342270][ T7652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.352985][ T7652] RIP: 0033:0x45664a [ 369.362220][ T7652] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 369.371984][ T7652] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 369.399989][ T7652] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045664a [ 369.399997][ T7652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 369.400003][ T7652] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000002a3f940 [ 369.400011][ T7652] R10: 0000000002a3fc10 R11: 0000000000000246 R12: 0000000000000001 [ 369.400018][ T7652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 369.447038][ T7652] memory: usage 7432kB, limit 0kB, failcnt 190 [ 369.453185][ T7652] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.462514][ T7652] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.475622][ T7652] Memory cgroup stats for /syz3: cache:0KB rss:84KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB [ 369.475673][ T7652] inactive_anon:0KB active_anon:60KB inactive_file:0KB active_file:0KB unevictable:0KB [ 369.504722][ T7652] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=7652,uid=0 [ 369.538770][ T7652] Memory cgroup out of memory: Killed process 7652 (syz-executor.3) total-vm:72316kB, anon-rss:104kB, file-rss:35712kB, shmem-rss:0kB [ 369.558568][ T7646] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 369.569487][ T7646] CPU: 0 PID: 7646 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 369.577325][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.587366][ T7646] Call Trace: [ 369.590641][ T7646] dump_stack+0x172/0x1f0 [ 369.594978][ T7646] dump_header+0x10f/0xb6c [ 369.599377][ T7646] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 369.605172][ T7646] ? ___ratelimit+0x60/0x595 [ 369.609761][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 369.614854][ T7646] oom_kill_process.cold+0x10/0x15 [ 369.619943][ T7646] out_of_memory+0x79a/0x1280 [ 369.624621][ T7646] ? oom_killer_disable+0x280/0x280 [ 369.629806][ T7646] ? find_held_lock+0x35/0x130 [ 369.634559][ T7646] mem_cgroup_out_of_memory+0x1ca/0x230 [ 369.640103][ T7646] ? memcg_event_wake+0x230/0x230 [ 369.646192][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 369.651387][ T7646] ? _raw_spin_unlock+0x2d/0x50 [ 369.656235][ T7646] try_charge+0x102c/0x15c0 [ 369.662507][ T7646] ? find_held_lock+0x35/0x130 [ 369.667270][ T7646] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 369.672812][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.679034][ T7646] ? kasan_check_read+0x11/0x20 [ 369.683901][ T7646] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 369.689429][ T7646] mem_cgroup_try_charge+0x24d/0x5e0 [ 369.694702][ T7646] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 369.700323][ T7646] wp_page_copy+0x408/0x1740 [ 369.704899][ T7646] ? find_held_lock+0x35/0x130 [ 369.709644][ T7646] ? pmd_pfn+0x1d0/0x1d0 [ 369.713868][ T7646] ? lock_downgrade+0x880/0x880 [ 369.718719][ T7646] ? swp_swapcount+0x540/0x540 [ 369.723901][ T7646] ? kasan_check_read+0x11/0x20 [ 369.728842][ T7646] ? do_raw_spin_unlock+0x57/0x270 [ 369.733948][ T7646] do_wp_page+0x5d8/0x16c0 [ 369.738691][ T7646] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 369.744070][ T7646] __handle_mm_fault+0x22e8/0x3ec0 [ 369.749316][ T7646] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 369.754865][ T7646] ? find_held_lock+0x35/0x130 [ 369.759616][ T7646] ? handle_mm_fault+0x322/0xb30 [ 369.766706][ T7646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.772933][ T7646] ? kasan_check_read+0x11/0x20 [ 369.777838][ T7646] handle_mm_fault+0x43f/0xb30 [ 369.782602][ T7646] __do_page_fault+0x5ef/0xda0 [ 369.787352][ T7646] do_page_fault+0x71/0x581 [ 369.791858][ T7646] ? page_fault+0x8/0x30 [ 369.796184][ T7646] page_fault+0x1e/0x30 [ 369.800322][ T7646] RIP: 0033:0x42f20a [ 369.804195][ T7646] Code: 48 29 e8 31 c9 48 81 fb 40 16 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 48 89 4a 08 <48> 89 46 08 48 8d 4a 10 8b 05 5c 5d 62 00 85 c0 0f 84 3a f7 ff ff [ 369.823796][ T7646] RSP: 002b:0000000000a4fbe0 EFLAGS: 00010206 [ 369.829951][ T7646] RAX: 0000000000018691 RBX: 0000000000711640 RCX: 0000000000008041 [ 369.837908][ T7646] RDX: 0000000001a0a930 RSI: 0000000001a12970 RDI: 0000000000000003 [ 369.845883][ T7646] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001a09940 [ 369.854018][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000711698 [ 369.861989][ T7646] R13: 0000000000711698 R14: 0000000000055944 R15: 0000000000002710 [ 369.871745][ T7646] memory: usage 19416kB, limit 0kB, failcnt 243 [ 369.878237][ T7646] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.890413][T11769] device bridge_slave_1 left promiscuous mode [ 369.897716][ T7646] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 369.899795][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.905001][ T7646] Memory cgroup stats for /syz1: cache:0KB rss:6532KB rss_huge:6144KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6516KB inactive_file:0KB active_file:0KB unevictable:0KB [ 369.932989][ T7646] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=13436,uid=0 [ 369.948946][ T7646] Memory cgroup out of memory: Killed process 13436 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 369.964154][ T1042] oom_reaper: reaped process 13436 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 369.983218][ T7646] Memory cgroup out of memory: Killed process 13446 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 370.003212][T11769] device bridge_slave_0 left promiscuous mode [ 370.012335][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.013071][ T7646] Memory cgroup out of memory: Killed process 13458 (syz-executor.1) total-vm:72448kB, anon-rss:2200kB, file-rss:34816kB, shmem-rss:0kB [ 370.034511][ T1042] oom_reaper: reaped process 13458 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 370.053944][ T7646] Memory cgroup out of memory: Killed process 7646 (syz-executor.1) total-vm:72316kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB [ 371.787577][T11769] device hsr_slave_1 left promiscuous mode [ 371.839940][T11769] device hsr_slave_0 left promiscuous mode [ 371.901480][T11769] team0 (unregistering): Port device team_slave_1 removed [ 371.916097][T11769] team0 (unregistering): Port device team_slave_0 removed [ 371.930857][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 371.971109][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 372.063413][T11769] bond0 (unregistering): Released all slaves [ 372.172742][T20928] chnl_net:caif_netlink_parms(): no params data found 00:02:21 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:21 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 372.481885][T20925] chnl_net:caif_netlink_parms(): no params data found 00:02:21 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 372.620895][T20928] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.636675][T20928] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.649171][T20928] device bridge_slave_0 entered promiscuous mode [ 372.660331][T20928] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.673740][T20928] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.691710][T20928] device bridge_slave_1 entered promiscuous mode [ 372.719780][T20925] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.727140][T20925] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.737648][T20925] device bridge_slave_0 entered promiscuous mode [ 372.747329][T20925] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.754782][T20925] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.762518][T20925] device bridge_slave_1 entered promiscuous mode [ 372.770896][T20928] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 372.781926][T20928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 372.828841][T20925] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 372.842378][T20925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 372.857426][T20928] team0: Port device team_slave_0 added [ 372.870713][T20934] chnl_net:caif_netlink_parms(): no params data found [ 372.882020][T20928] team0: Port device team_slave_1 added [ 372.977383][T20928] device hsr_slave_0 entered promiscuous mode [ 373.034717][T20928] device hsr_slave_1 entered promiscuous mode [ 373.074887][T20933] chnl_net:caif_netlink_parms(): no params data found [ 373.092688][T20925] team0: Port device team_slave_0 added [ 373.126966][T20925] team0: Port device team_slave_1 added [ 373.218750][T20933] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.234234][T20933] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.253043][T20933] device bridge_slave_0 entered promiscuous mode [ 373.262793][T20933] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.280939][T20933] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.292137][T20933] device bridge_slave_1 entered promiscuous mode [ 373.309293][T20934] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.321966][T20934] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.339716][T20934] device bridge_slave_0 entered promiscuous mode [ 373.348789][T20934] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.356798][T20934] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.365212][T20934] device bridge_slave_1 entered promiscuous mode [ 373.415068][T20925] device hsr_slave_0 entered promiscuous mode [ 373.444634][T20925] device hsr_slave_1 entered promiscuous mode [ 373.504172][T20925] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.511391][T20925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.518803][T20925] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.525890][T20925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.562467][T20934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 373.572675][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.593859][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.630154][T20934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 373.652060][T20933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 373.678200][T20933] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 373.762768][T20933] team0: Port device team_slave_0 added [ 373.773591][T20934] team0: Port device team_slave_0 added [ 373.817615][T20933] team0: Port device team_slave_1 added [ 373.845231][T20934] team0: Port device team_slave_1 added [ 373.885745][T20938] IPVS: ftp: loaded support on port[0] = 21 [ 373.936963][T20933] device hsr_slave_0 entered promiscuous mode [ 373.984609][T20933] device hsr_slave_1 entered promiscuous mode [ 374.027167][T20925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.094525][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.102424][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.116987][T20928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.167095][T20934] device hsr_slave_0 entered promiscuous mode [ 374.204775][T20934] device hsr_slave_1 entered promiscuous mode [ 374.268023][T20925] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.306543][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.319899][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.329496][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.336710][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.352447][T20928] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.370486][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.379893][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.389418][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.396790][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.405573][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.413863][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.422063][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.462490][T20933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.474942][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 374.483779][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.496240][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.506475][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.515310][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.522427][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.530966][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.540193][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.549602][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.559759][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.568661][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.575770][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.583807][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.592468][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.623798][T20933] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.644716][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.653608][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.662697][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.671497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.680648][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.689671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.698842][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.708590][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.717794][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.725984][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.733748][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.742448][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.751144][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.759913][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.768634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.775845][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.785338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.793820][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.801735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.810209][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.823568][T20928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.834959][T20928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.852703][T20925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.861418][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.875684][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.884498][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.892916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.901584][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.918751][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.928020][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.937171][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.944409][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.981730][T20928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.024228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 375.049358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 375.059339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 375.068689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 375.077896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 375.086671][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 375.096465][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 375.105575][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.114443][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 375.127309][T20934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.149909][T20925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.176759][T20941] QAT: Invalid ioctl [ 375.190210][T20933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.215101][T20933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 375.239184][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 375.260331][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.274591][T20941] oom_kill_process: 3 callbacks suppressed [ 375.274662][T20941] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 375.307285][T20938] chnl_net:caif_netlink_parms(): no params data found [ 375.333725][T20933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.344674][T20941] CPU: 0 PID: 20941 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 375.352683][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.359073][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.362732][T20941] Call Trace: [ 375.362757][T20941] dump_stack+0x172/0x1f0 [ 375.362780][T20941] dump_header+0x10f/0xb6c [ 375.382008][T20941] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 375.387847][T20941] ? ___ratelimit+0x60/0x595 [ 375.392342][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.392475][T20941] oom_kill_process.cold+0x10/0x15 [ 375.404755][T20941] out_of_memory+0x79a/0x1280 [ 375.409448][T20941] ? retint_kernel+0x2d/0x2d [ 375.414076][T20941] ? oom_killer_disable+0x280/0x280 [ 375.419290][T20941] mem_cgroup_out_of_memory+0x1ca/0x230 [ 375.419762][T20934] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.425180][T20941] ? memcg_event_wake+0x230/0x230 [ 375.425204][T20941] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 375.425219][T20941] ? cgroup_file_notify+0x140/0x1b0 [ 375.425234][T20941] memory_max_write+0x169/0x300 [ 375.425249][T20941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 375.425265][T20941] ? mem_cgroup_write+0x360/0x360 [ 375.425283][T20941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 375.425299][T20941] cgroup_file_write+0x245/0x7a0 [ 375.425319][T20941] ? mem_cgroup_write+0x360/0x360 [ 375.478595][T20941] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 375.484256][T20941] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 375.484421][T20947] QAT: Invalid ioctl [ 375.489891][T20941] kernfs_fop_write+0x2ba/0x480 [ 375.489915][T20941] __vfs_write+0x8d/0x110 [ 375.489934][T20941] ? kernfs_fop_open+0xd90/0xd90 [ 375.506175][T20934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.507930][T20941] __kernel_write+0x110/0x3b0 [ 375.522901][T20941] write_pipe_buf+0x15d/0x1f0 [ 375.527584][T20941] ? do_splice_direct+0x2a0/0x2a0 [ 375.532599][T20934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.542937][T20941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.549195][T20941] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 375.555290][T20941] __splice_from_pipe+0x395/0x7d0 [ 375.556981][T20934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.560340][T20941] ? do_splice_direct+0x2a0/0x2a0 [ 375.560360][T20941] ? do_splice_direct+0x2a0/0x2a0 [ 375.560377][T20941] splice_from_pipe+0x108/0x170 [ 375.577146][T20941] ? splice_shrink_spd+0xd0/0xd0 [ 375.577173][T20941] ? security_file_permission+0x94/0x380 [ 375.577192][T20941] default_file_splice_write+0x3c/0x90 [ 375.598301][T20941] ? generic_splice_sendpage+0x50/0x50 [ 375.603817][T20941] direct_splice_actor+0x126/0x1a0 [ 375.608944][T20941] splice_direct_to_actor+0x369/0x970 [ 375.614332][T20941] ? generic_pipe_buf_nosteal+0x10/0x10 [ 375.619999][T20941] ? do_splice_to+0x190/0x190 [ 375.624682][T20941] do_splice_direct+0x1da/0x2a0 [ 375.629564][T20941] ? splice_direct_to_actor+0x970/0x970 [ 375.635120][T20941] ? audit_add_tree_rule.cold+0x37/0x37 [ 375.640662][T20941] ? __sb_start_write+0x1ac/0x360 [ 375.645688][T20941] do_sendfile+0x597/0xd00 [ 375.650123][T20941] ? do_compat_pwritev64+0x1c0/0x1c0 [ 375.655420][T20941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 375.662688][T20941] __x64_sys_sendfile64+0x1dd/0x220 [ 375.667884][T20941] ? __ia32_sys_sendfile+0x230/0x230 [ 375.673167][T20941] ? __ia32_sys_sendfile+0x230/0x230 [ 375.678465][T20941] do_syscall_64+0x103/0x610 [ 375.683041][T20941] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.689005][T20941] RIP: 0033:0x458079 [ 375.692910][T20941] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.712502][T20941] RSP: 002b:00007fb95465cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 375.720919][T20941] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 375.728886][T20941] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 375.736874][T20941] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.744932][T20941] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fb95465d6d4 [ 375.752902][T20941] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 375.780942][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.789454][T20941] memory: usage 9236kB, limit 0kB, failcnt 240 [ 375.811606][T20941] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 375.827032][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.844232][T20941] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 375.844582][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.858231][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.859205][T20941] Memory cgroup stats for /syz4: cache:72KB rss:2176KB rss_huge:2048KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 375.875293][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 375.899854][T20941] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20940,uid=0 [ 375.909708][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.917780][T20941] Memory cgroup out of memory: Killed process 20940 (syz-executor.4) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 375.924215][T20952] QAT: Invalid ioctl [ 375.939248][T20947] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 375.943456][ T1042] oom_reaper: reaped process 20940 (syz-executor.4), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 375.952829][T20947] CPU: 0 PID: 20947 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 375.971177][T20947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.972327][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.981228][T20947] Call Trace: [ 375.981253][T20947] dump_stack+0x172/0x1f0 [ 375.981274][T20947] dump_header+0x10f/0xb6c [ 375.981289][T20947] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 375.981302][T20947] ? ___ratelimit+0x60/0x595 [ 375.981322][T20947] ? do_raw_spin_unlock+0x57/0x270 [ 375.988372][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.991598][T20947] oom_kill_process.cold+0x10/0x15 [ 376.013214][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.015939][T20947] out_of_memory+0x79a/0x1280 [ 376.015958][T20947] ? oom_killer_disable+0x280/0x280 [ 376.015971][T20947] ? cgroup_file_notify+0x140/0x1b0 [ 376.015992][T20947] mem_cgroup_out_of_memory+0x1ca/0x230 [ 376.016004][T20947] ? memcg_event_wake+0x230/0x230 [ 376.016027][T20947] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 376.016041][T20947] ? cgroup_file_notify+0x140/0x1b0 [ 376.016058][T20947] memory_max_write+0x169/0x300 [ 376.016071][T20947] ? kernfs_fop_write+0x204/0x480 [ 376.016087][T20947] ? mem_cgroup_write+0x360/0x360 [ 376.016102][T20947] ? lock_acquire+0x16f/0x3f0 [ 376.016115][T20947] ? kernfs_fop_write+0x227/0x480 [ 376.016132][T20947] cgroup_file_write+0x245/0x7a0 [ 376.016144][T20947] ? mem_cgroup_write+0x360/0x360 [ 376.016156][T20947] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 376.016174][T20947] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 376.016187][T20947] kernfs_fop_write+0x2ba/0x480 [ 376.016206][T20947] __vfs_write+0x8d/0x110 [ 376.016224][T20947] ? kernfs_fop_open+0xd90/0xd90 [ 376.025305][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.028533][T20947] __kernel_write+0x110/0x3b0 [ 376.064642][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.067749][T20947] write_pipe_buf+0x15d/0x1f0 [ 376.073641][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.077783][T20947] ? do_splice_direct+0x2a0/0x2a0 [ 376.077801][T20947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.077813][T20947] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 376.077829][T20947] __splice_from_pipe+0x395/0x7d0 [ 376.077841][T20947] ? do_splice_direct+0x2a0/0x2a0 [ 376.077860][T20947] ? do_splice_direct+0x2a0/0x2a0 [ 376.077873][T20947] splice_from_pipe+0x108/0x170 [ 376.077889][T20947] ? splice_shrink_spd+0xd0/0xd0 [ 376.077915][T20947] ? security_file_permission+0x94/0x380 [ 376.077932][T20947] default_file_splice_write+0x3c/0x90 [ 376.077943][T20947] ? generic_splice_sendpage+0x50/0x50 [ 376.077963][T20947] direct_splice_actor+0x126/0x1a0 [ 376.095549][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.097754][T20947] splice_direct_to_actor+0x369/0x970 [ 376.103410][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.107686][T20947] ? generic_pipe_buf_nosteal+0x10/0x10 [ 376.107706][T20947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.107718][T20947] ? do_splice_to+0x190/0x190 [ 376.107750][T20947] ? rw_verify_area+0x118/0x360 [ 376.107767][T20947] do_splice_direct+0x1da/0x2a0 [ 376.107781][T20947] ? splice_direct_to_actor+0x970/0x970 [ 376.107803][T20947] ? rcu_read_lock_sched_held+0x110/0x130 [ 376.107817][T20947] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 376.107830][T20947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.107843][T20947] ? __sb_start_write+0x1ac/0x360 [ 376.107860][T20947] do_sendfile+0x597/0xd00 [ 376.107883][T20947] ? do_compat_pwritev64+0x1c0/0x1c0 [ 376.125575][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.128268][T20947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.128288][T20947] ? put_timespec64+0xda/0x140 [ 376.150338][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.153681][T20947] __x64_sys_sendfile64+0x1dd/0x220 [ 376.153701][T20947] ? __ia32_sys_sendfile+0x230/0x230 [ 376.169674][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.171209][T20947] ? do_syscall_64+0x26/0x610 [ 376.171232][T20947] ? lockdep_hardirqs_on+0x418/0x5d0 [ 376.182273][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.183559][T20947] ? trace_hardirqs_on+0x67/0x230 [ 376.183584][T20947] do_syscall_64+0x103/0x610 [ 376.199673][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.203481][T20947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.220270][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.225067][T20947] RIP: 0033:0x458079 [ 376.225082][T20947] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.225089][T20947] RSP: 002b:00007fec23a5dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 376.225101][T20947] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 376.225108][T20947] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 376.225115][T20947] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 376.225123][T20947] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fec23a5e6d4 [ 376.225130][T20947] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 376.506374][T20947] memory: usage 9124kB, limit 0kB, failcnt 189 [ 376.513402][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.565433][T20947] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.586114][T20938] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.601197][T20947] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 376.606468][T20938] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.613090][T20947] Memory cgroup stats for /syz0: cache:0KB rss:2168KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 376.648117][T20956] QAT: Invalid ioctl [ 376.653388][T20938] device bridge_slave_0 entered promiscuous mode [ 376.656117][T20947] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20944,uid=0 [ 376.687911][T20938] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.703730][T20938] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.712749][T20938] device bridge_slave_1 entered promiscuous mode [ 376.765703][T20947] Memory cgroup out of memory: Killed process 20944 (syz-executor.0) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 376.785266][T20928] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 376.786549][ T1042] oom_reaper: reaped process 20944 (syz-executor.0), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 376.797457][T20928] CPU: 0 PID: 20928 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 376.814528][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.819155][T20938] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 376.824588][T20928] Call Trace: [ 376.824620][T20928] dump_stack+0x172/0x1f0 [ 376.824638][T20928] dump_header+0x10f/0xb6c [ 376.824653][T20928] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 376.824668][T20928] ? ___ratelimit+0x60/0x595 [ 376.824695][T20928] ? do_raw_spin_unlock+0x57/0x270 [ 376.824711][T20928] oom_kill_process.cold+0x10/0x15 [ 376.824726][T20928] out_of_memory+0x79a/0x1280 [ 376.824742][T20928] ? oom_killer_disable+0x280/0x280 [ 376.824752][T20928] ? find_held_lock+0x35/0x130 [ 376.824773][T20928] mem_cgroup_out_of_memory+0x1ca/0x230 [ 376.824785][T20928] ? memcg_event_wake+0x230/0x230 [ 376.824807][T20928] ? do_raw_spin_unlock+0x57/0x270 [ 376.845056][T20928] ? _raw_spin_unlock+0x2d/0x50 [ 376.845077][T20928] try_charge+0x102c/0x15c0 [ 376.851356][T20938] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 376.855468][T20928] ? find_held_lock+0x35/0x130 [ 376.855491][T20928] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 376.855507][T20928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.855524][T20928] ? kasan_check_read+0x11/0x20 [ 376.855540][T20928] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 376.855555][T20928] mem_cgroup_try_charge+0x24d/0x5e0 [ 376.855572][T20928] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 376.855591][T20928] __handle_mm_fault+0x1e1f/0x3ec0 [ 376.855610][T20928] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 376.855622][T20928] ? find_held_lock+0x35/0x130 [ 376.855636][T20928] ? handle_mm_fault+0x322/0xb30 [ 376.855654][T20928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.855679][T20928] ? kasan_check_read+0x11/0x20 [ 376.855699][T20928] handle_mm_fault+0x43f/0xb30 [ 376.855720][T20928] __do_page_fault+0x5ef/0xda0 [ 376.855739][T20928] do_page_fault+0x71/0x581 [ 376.855752][T20928] ? page_fault+0x8/0x30 [ 376.855765][T20928] page_fault+0x1e/0x30 [ 376.855774][T20928] RIP: 0033:0x402e52 [ 376.855787][T20928] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 376.855793][T20928] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 376.855803][T20928] RAX: 0000000000000000 RBX: 000000000005bc51 RCX: 0000000000411d50 [ 376.855808][T20928] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 376.855815][T20928] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001e00940 [ 376.855821][T20928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 376.855828][T20928] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 376.962983][T20928] memory: usage 6868kB, limit 0kB, failcnt 252 [ 377.082677][T20928] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.091299][T20928] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 00:02:25 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:25 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 377.099594][T20928] Memory cgroup stats for /syz4: cache:72KB rss:68KB rss_huge:0KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 377.120773][T20928] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20928,uid=0 [ 377.140720][T20928] Memory cgroup out of memory: Killed process 20928 (syz-executor.4) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 377.179048][T20938] team0: Port device team_slave_0 added [ 377.186551][ T1042] oom_reaper: reaped process 20928 (syz-executor.4), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 377.199958][T20954] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 377.206273][T20938] team0: Port device team_slave_1 added [ 377.212006][T20954] CPU: 0 PID: 20954 Comm: syz-executor.2 Not tainted 5.1.0-rc1 #28 [ 377.224254][T20954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.234404][T20954] Call Trace: [ 377.237712][T20954] dump_stack+0x172/0x1f0 [ 377.242062][T20954] dump_header+0x10f/0xb6c [ 377.242085][T20954] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 377.252314][T20954] ? ___ratelimit+0x60/0x595 [ 377.256991][T20954] ? do_raw_spin_unlock+0x57/0x270 [ 377.257010][T20954] oom_kill_process.cold+0x10/0x15 [ 377.257024][T20954] out_of_memory+0x79a/0x1280 [ 377.257040][T20954] ? retint_kernel+0x2d/0x2d [ 377.257053][T20954] ? oom_killer_disable+0x280/0x280 [ 377.257077][T20954] mem_cgroup_out_of_memory+0x1ca/0x230 [ 377.257088][T20954] ? memcg_event_wake+0x230/0x230 [ 377.257106][T20954] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 377.257123][T20954] ? cgroup_file_notify+0x140/0x1b0 [ 377.257139][T20954] memory_max_write+0x169/0x300 [ 377.257156][T20954] ? mem_cgroup_write+0x360/0x360 [ 377.257174][T20954] cgroup_file_write+0x245/0x7a0 [ 377.257187][T20954] ? mem_cgroup_write+0x360/0x360 [ 377.257201][T20954] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 377.257219][T20954] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 377.257234][T20954] kernfs_fop_write+0x2ba/0x480 [ 377.257252][T20954] __vfs_write+0x8d/0x110 [ 377.257264][T20954] ? kernfs_fop_open+0xd90/0xd90 [ 377.257277][T20954] __kernel_write+0x110/0x3b0 [ 377.257294][T20954] write_pipe_buf+0x15d/0x1f0 [ 377.257307][T20954] ? do_splice_direct+0x2a0/0x2a0 [ 377.257320][T20954] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 377.257336][T20954] __splice_from_pipe+0x395/0x7d0 [ 377.257347][T20954] ? do_splice_direct+0x2a0/0x2a0 [ 377.257365][T20954] ? do_splice_direct+0x2a0/0x2a0 [ 377.257377][T20954] splice_from_pipe+0x108/0x170 [ 377.257394][T20954] ? splice_shrink_spd+0xd0/0xd0 [ 377.276974][T20954] ? generic_splice_sendpage+0x50/0x50 [ 377.276991][T20954] default_file_splice_write+0x3c/0x90 [ 377.277002][T20954] ? generic_splice_sendpage+0x50/0x50 [ 377.277019][T20954] direct_splice_actor+0x126/0x1a0 [ 377.277034][T20954] splice_direct_to_actor+0x369/0x970 [ 377.277051][T20954] ? generic_pipe_buf_nosteal+0x10/0x10 [ 377.287815][T20954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.287827][T20954] ? do_splice_to+0x190/0x190 [ 377.287845][T20954] ? rw_verify_area+0x118/0x360 [ 377.287860][T20954] do_splice_direct+0x1da/0x2a0 [ 377.287874][T20954] ? splice_direct_to_actor+0x970/0x970 [ 377.287896][T20954] ? rcu_read_lock_sched_held+0x110/0x130 [ 377.287909][T20954] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 377.287922][T20954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.287934][T20954] ? __sb_start_write+0x1ac/0x360 [ 377.287952][T20954] do_sendfile+0x597/0xd00 [ 377.287973][T20954] ? do_compat_pwritev64+0x1c0/0x1c0 [ 377.287984][T20954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.288003][T20954] ? put_timespec64+0xda/0x140 [ 377.304047][T20954] __x64_sys_sendfile64+0x1dd/0x220 [ 377.304066][T20954] ? __ia32_sys_sendfile+0x230/0x230 [ 377.314023][T20954] ? do_syscall_64+0x26/0x610 [ 377.314055][T20954] ? lockdep_hardirqs_on+0x418/0x5d0 [ 377.329595][T20954] ? trace_hardirqs_on+0x67/0x230 [ 377.329617][T20954] do_syscall_64+0x103/0x610 [ 377.344399][T20954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.344411][T20954] RIP: 0033:0x458079 [ 377.344426][T20954] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.344433][T20954] RSP: 002b:00007f0f6314bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 377.344445][T20954] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 377.344452][T20954] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 377.344460][T20954] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.344469][T20954] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f0f6314c6d4 [ 377.344477][T20954] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 377.418529][T20954] memory: usage 8964kB, limit 0kB, failcnt 791 [ 377.444736][T20954] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.467084][T20954] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.478408][T20954] Memory cgroup stats for /syz2: cache:80KB rss:2172KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 377.497873][T20954] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20953,uid=0 [ 377.505783][T20954] Memory cgroup out of memory: Killed process 20953 (syz-executor.2) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 377.528142][T20933] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 377.532872][ T1042] oom_reaper: reaped process 20953 (syz-executor.2), now anon-rss:0kB, file-rss:34748kB, shmem-rss:0kB [ 377.537897][T20933] CPU: 0 PID: 20933 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 377.561813][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.561819][T20933] Call Trace: [ 377.561841][T20933] dump_stack+0x172/0x1f0 [ 377.561859][T20933] dump_header+0x10f/0xb6c [ 377.561873][T20933] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 377.561887][T20933] ? ___ratelimit+0x60/0x595 [ 377.561902][T20933] ? do_raw_spin_unlock+0x57/0x270 [ 377.561917][T20933] oom_kill_process.cold+0x10/0x15 [ 377.561940][T20933] out_of_memory+0x79a/0x1280 [ 377.561964][T20933] ? oom_killer_disable+0x280/0x280 [ 377.561980][T20933] ? find_held_lock+0x35/0x130 [ 377.586376][T20933] mem_cgroup_out_of_memory+0x1ca/0x230 [ 377.586387][T20933] ? memcg_event_wake+0x230/0x230 [ 377.586407][T20933] ? do_raw_spin_unlock+0x57/0x270 [ 377.586420][T20933] ? _raw_spin_unlock+0x2d/0x50 [ 377.586435][T20933] try_charge+0x102c/0x15c0 [ 377.586447][T20933] ? find_held_lock+0x35/0x130 [ 377.586466][T20933] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 377.586483][T20933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.586503][T20933] ? kasan_check_read+0x11/0x20 [ 377.611025][T20933] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 377.611041][T20933] mem_cgroup_try_charge+0x24d/0x5e0 [ 377.611059][T20933] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 377.611077][T20933] __handle_mm_fault+0x1e1f/0x3ec0 [ 377.611094][T20933] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 377.611106][T20933] ? find_held_lock+0x35/0x130 [ 377.611128][T20933] ? handle_mm_fault+0x322/0xb30 [ 377.624771][T20933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.652947][T20933] ? kasan_check_read+0x11/0x20 [ 377.652966][T20933] handle_mm_fault+0x43f/0xb30 [ 377.652987][T20933] __do_page_fault+0x5ef/0xda0 [ 377.653005][T20933] do_page_fault+0x71/0x581 [ 377.653020][T20933] ? page_fault+0x8/0x30 [ 377.653033][T20933] page_fault+0x1e/0x30 [ 377.653046][T20933] RIP: 0033:0x402e52 [ 377.653062][T20933] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 377.653068][T20933] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 377.653078][T20933] RAX: 0000000000000000 RBX: 000000000005bf3d RCX: 0000000000411d50 [ 377.653084][T20933] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 377.653091][T20933] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000292b940 [ 377.653097][T20933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 377.653104][T20933] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 377.680108][T20933] memory: usage 27636kB, limit 0kB, failcnt 263 [ 377.715728][T20933] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.732922][T20933] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 377.746089][T20933] Memory cgroup stats for /syz5: cache:120KB rss:112KB rss_huge:0KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 377.760445][T20933] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20933,uid=0 [ 377.774203][T20933] Memory cgroup out of memory: Killed process 20933 (syz-executor.5) total-vm:72320kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 377.784953][T20925] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 377.788845][ T1042] oom_reaper: reaped process 20933 (syz-executor.5), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 377.793133][T20925] CPU: 0 PID: 20925 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 377.802369][T20925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.069353][T20925] Call Trace: [ 378.073001][T20925] dump_stack+0x172/0x1f0 [ 378.077323][T20925] dump_header+0x10f/0xb6c [ 378.081725][T20925] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 378.087794][T20925] ? ___ratelimit+0x60/0x595 [ 378.092387][T20925] ? do_raw_spin_unlock+0x57/0x270 [ 378.097500][T20925] oom_kill_process.cold+0x10/0x15 [ 378.102618][T20925] out_of_memory+0x79a/0x1280 [ 378.107737][T20925] ? oom_killer_disable+0x280/0x280 [ 378.112918][T20925] ? find_held_lock+0x35/0x130 [ 378.117771][T20925] mem_cgroup_out_of_memory+0x1ca/0x230 [ 378.124029][T20925] ? memcg_event_wake+0x230/0x230 [ 378.129066][T20925] ? do_raw_spin_unlock+0x57/0x270 [ 378.134177][T20925] ? _raw_spin_unlock+0x2d/0x50 [ 378.139210][T20925] try_charge+0x102c/0x15c0 [ 378.143706][T20925] ? find_held_lock+0x35/0x130 [ 378.148590][T20925] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 378.154132][T20925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.160469][T20925] ? kasan_check_read+0x11/0x20 [ 378.165317][T20925] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 378.170858][T20925] mem_cgroup_try_charge+0x24d/0x5e0 [ 378.176140][T20925] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 378.181758][T20925] __handle_mm_fault+0x1e1f/0x3ec0 [ 378.186870][T20925] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 378.192420][T20925] ? find_held_lock+0x35/0x130 [ 378.197168][T20925] ? handle_mm_fault+0x322/0xb30 [ 378.202140][T20925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.208382][T20925] ? kasan_check_read+0x11/0x20 [ 378.213305][T20925] handle_mm_fault+0x43f/0xb30 [ 378.218075][T20925] __do_page_fault+0x5ef/0xda0 [ 378.222935][T20925] do_page_fault+0x71/0x581 [ 378.227430][T20925] ? page_fault+0x8/0x30 [ 378.231669][T20925] page_fault+0x1e/0x30 [ 378.235813][T20925] RIP: 0033:0x402e52 [ 378.239692][T20925] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 378.259299][T20925] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 378.265385][T20925] RAX: 0000000000000000 RBX: 000000000005bf0e RCX: 0000000000411d50 [ 378.273633][T20925] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 378.281602][T20925] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000daf940 [ 378.289581][T20925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 378.297543][T20925] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 378.310488][T20925] memory: usage 6752kB, limit 0kB, failcnt 197 [ 378.316783][T20925] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.325302][T20925] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.332262][T20925] Memory cgroup stats for /syz0: cache:0KB rss:60KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 378.352791][T20925] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20925,uid=0 [ 378.368500][T20925] Memory cgroup out of memory: Killed process 20925 (syz-executor.0) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 378.383174][ T1042] oom_reaper: reaped process 20925 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 378.450878][T20958] IPVS: ftp: loaded support on port[0] = 21 00:02:27 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 378.579847][T20934] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 378.590962][T20934] CPU: 0 PID: 20934 Comm: syz-executor.2 Not tainted 5.1.0-rc1 #28 [ 378.598868][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.608917][T20934] Call Trace: [ 378.612226][T20934] dump_stack+0x172/0x1f0 [ 378.616584][T20934] dump_header+0x10f/0xb6c [ 378.621155][T20934] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 378.629235][T20934] ? ___ratelimit+0x60/0x595 [ 378.633841][T20934] ? do_raw_spin_unlock+0x57/0x270 [ 378.638962][T20934] oom_kill_process.cold+0x10/0x15 [ 378.644073][T20934] out_of_memory+0x79a/0x1280 [ 378.648754][T20934] ? lock_downgrade+0x880/0x880 [ 378.653601][T20934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.659852][T20934] ? oom_killer_disable+0x280/0x280 [ 378.665050][T20934] ? find_held_lock+0x35/0x130 [ 378.670094][T20934] mem_cgroup_out_of_memory+0x1ca/0x230 [ 378.676534][T20934] ? memcg_event_wake+0x230/0x230 [ 378.681569][T20934] ? do_raw_spin_unlock+0x57/0x270 [ 378.686685][T20934] ? _raw_spin_unlock+0x2d/0x50 [ 378.691547][T20934] try_charge+0x102c/0x15c0 [ 378.696066][T20934] ? find_held_lock+0x35/0x130 [ 378.701718][T20934] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 378.707552][T20934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.713801][T20934] ? kasan_check_read+0x11/0x20 [ 378.718690][T20934] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 378.726415][T20934] mem_cgroup_try_charge+0x24d/0x5e0 [ 378.731705][T20934] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 378.737348][T20934] __handle_mm_fault+0x1e1f/0x3ec0 [ 378.742468][T20934] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 378.748620][T20934] ? find_held_lock+0x35/0x130 [ 378.753409][T20934] ? handle_mm_fault+0x322/0xb30 [ 378.758356][T20934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.764598][T20934] ? kasan_check_read+0x11/0x20 [ 378.769493][T20934] handle_mm_fault+0x43f/0xb30 [ 378.775641][T20934] __do_page_fault+0x5ef/0xda0 [ 378.780412][T20934] do_page_fault+0x71/0x581 [ 378.784914][T20934] ? page_fault+0x8/0x30 [ 378.789252][T20934] page_fault+0x1e/0x30 [ 378.793421][T20934] RIP: 0033:0x402e52 [ 378.797316][T20934] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 378.816922][T20934] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 378.823015][T20934] RAX: 0000000000000000 RBX: 000000000005c25e RCX: 0000000000411d50 [ 378.830999][T20934] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 378.838972][T20934] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000aa3940 [ 378.846956][T20934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 378.854944][T20934] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 378.884211][T20934] memory: usage 6584kB, limit 0kB, failcnt 799 [ 378.890769][T20934] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.907111][T20934] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 378.914411][T20934] Memory cgroup stats for /syz2: cache:80KB rss:52KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 378.935625][T20934] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20934,uid=0 [ 378.951174][T20934] Memory cgroup out of memory: Killed process 20934 (syz-executor.2) total-vm:72320kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 378.965486][ T1042] oom_reaper: reaped process 20934 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 00:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 380.146428][T20938] device hsr_slave_0 entered promiscuous mode [ 380.194697][T20938] device hsr_slave_1 entered promiscuous mode 00:02:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:29 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 381.127832][T20960] IPVS: ftp: loaded support on port[0] = 21 [ 381.753702][T20958] chnl_net:caif_netlink_parms(): no params data found [ 381.771253][T20960] chnl_net:caif_netlink_parms(): no params data found [ 381.797078][T20938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.829570][T20958] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.840391][T20958] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.849101][T20958] device bridge_slave_0 entered promiscuous mode [ 381.923994][T20964] IPVS: ftp: loaded support on port[0] = 21 [ 382.306853][T20938] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.319722][T20958] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.328129][T20958] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.337205][T20958] device bridge_slave_1 entered promiscuous mode [ 382.347436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.355553][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.826525][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.841327][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.850049][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.857154][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.865587][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.874380][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.882725][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.889919][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.897553][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.906573][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.915443][T20960] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.922524][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.930866][T20960] device bridge_slave_0 entered promiscuous mode [ 382.942387][T20960] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.950157][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.958028][T20960] device bridge_slave_1 entered promiscuous mode [ 383.385435][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.397126][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.407305][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.418464][T20958] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 383.439929][T20958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 383.469777][T20960] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 383.479805][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.488429][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.497547][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.947290][T20960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 383.973917][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.983277][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.992113][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.000824][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.020424][T20958] team0: Port device team_slave_0 added [ 384.030476][T20960] team0: Port device team_slave_0 added [ 384.040151][T20960] team0: Port device team_slave_1 added [ 384.050478][T20938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 384.063416][T20958] team0: Port device team_slave_1 added [ 384.074719][T20964] chnl_net:caif_netlink_parms(): no params data found [ 384.576577][T20960] device hsr_slave_0 entered promiscuous mode [ 384.614722][T20960] device hsr_slave_1 entered promiscuous mode [ 384.705990][T20958] device hsr_slave_0 entered promiscuous mode [ 384.744797][T20958] device hsr_slave_1 entered promiscuous mode [ 384.794420][T11769] IPVS: stopping master sync thread 20224 ... [ 384.799795][T20964] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.807744][T11769] IPVS: stopping backup sync thread 20223 ... [ 384.813980][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.821850][T20964] device bridge_slave_0 entered promiscuous mode [ 384.830156][T20964] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.837457][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.845704][T20964] device bridge_slave_1 entered promiscuous mode [ 384.859966][T20938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.868418][T11769] IPVS: stopping master sync thread 20193 ... [ 384.881369][T11769] IPVS: stopping backup sync thread 20192 ... [ 384.892291][T20964] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 384.916959][T11769] IPVS: stopping master sync thread 20222 ... [ 384.923461][T11769] IPVS: stopping backup sync thread 20221 ... [ 384.930207][T20964] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 384.954850][T11769] IPVS: stopping master sync thread 20174 ... [ 384.965334][T11769] IPVS: stopping backup sync thread 20173 ... [ 384.980728][T20964] team0: Port device team_slave_0 added [ 384.989972][T20964] team0: Port device team_slave_1 added [ 384.996591][T11769] IPVS: stopping master sync thread 20187 ... [ 385.003289][T11769] IPVS: stopping backup sync thread 20186 ... [ 385.011807][T20960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.058211][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.060323][T20967] QAT: Invalid ioctl [ 385.066901][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.120740][T20967] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 385.131722][T20967] CPU: 1 PID: 20967 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 385.139722][T20967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.139727][T20967] Call Trace: [ 385.139753][T20967] dump_stack+0x172/0x1f0 [ 385.139773][T20967] dump_header+0x10f/0xb6c [ 385.139790][T20967] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 385.139804][T20967] ? ___ratelimit+0x60/0x595 [ 385.139821][T20967] ? do_raw_spin_unlock+0x57/0x270 [ 385.139838][T20967] oom_kill_process.cold+0x10/0x15 [ 385.139853][T20967] out_of_memory+0x79a/0x1280 [ 385.139871][T20967] ? __sched_text_start+0x8/0x8 [ 385.139885][T20967] ? oom_killer_disable+0x280/0x280 [ 385.139905][T20967] mem_cgroup_out_of_memory+0x1ca/0x230 [ 385.139922][T20967] ? memcg_event_wake+0x230/0x230 [ 385.167971][T20967] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 385.167995][T20967] ? cgroup_file_notify+0x140/0x1b0 [ 385.168014][T20967] memory_max_write+0x169/0x300 [ 385.168029][T20967] ? kernfs_fop_write+0x204/0x480 [ 385.168044][T20967] ? mem_cgroup_write+0x360/0x360 [ 385.168058][T20967] ? lock_acquire+0x16f/0x3f0 [ 385.168072][T20967] ? kernfs_fop_write+0x227/0x480 [ 385.168089][T20967] cgroup_file_write+0x245/0x7a0 [ 385.168107][T20967] ? mem_cgroup_write+0x360/0x360 [ 385.187545][T20967] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 385.187566][T20967] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 385.187586][T20967] kernfs_fop_write+0x2ba/0x480 [ 385.197610][T20967] __vfs_write+0x8d/0x110 [ 385.197623][T20967] ? kernfs_fop_open+0xd90/0xd90 [ 385.197638][T20967] __kernel_write+0x110/0x3b0 [ 385.197657][T20967] write_pipe_buf+0x15d/0x1f0 [ 385.197672][T20967] ? do_splice_direct+0x2a0/0x2a0 [ 385.197689][T20967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.197702][T20967] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 385.197722][T20967] __splice_from_pipe+0x395/0x7d0 [ 385.197736][T20967] ? do_splice_direct+0x2a0/0x2a0 [ 385.197757][T20967] ? do_splice_direct+0x2a0/0x2a0 [ 385.214079][T20967] splice_from_pipe+0x108/0x170 [ 385.214095][T20967] ? splice_shrink_spd+0xd0/0xd0 [ 385.214120][T20967] ? security_file_permission+0x94/0x380 [ 385.214138][T20967] default_file_splice_write+0x3c/0x90 [ 385.214149][T20967] ? generic_splice_sendpage+0x50/0x50 [ 385.214166][T20967] direct_splice_actor+0x126/0x1a0 [ 385.224185][T20967] splice_direct_to_actor+0x369/0x970 [ 385.224201][T20967] ? generic_pipe_buf_nosteal+0x10/0x10 [ 385.224221][T20967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.224234][T20967] ? do_splice_to+0x190/0x190 [ 385.224253][T20967] ? rw_verify_area+0x118/0x360 [ 385.224270][T20967] do_splice_direct+0x1da/0x2a0 [ 385.224287][T20967] ? splice_direct_to_actor+0x970/0x970 [ 385.224309][T20967] ? rcu_read_lock_sched_held+0x110/0x130 [ 385.224325][T20967] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 385.234335][T20967] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.234351][T20967] ? __sb_start_write+0x1ac/0x360 [ 385.234368][T20967] do_sendfile+0x597/0xd00 [ 385.234394][T20967] ? do_compat_pwritev64+0x1c0/0x1c0 [ 385.234421][T20967] __x64_sys_sendfile64+0x1dd/0x220 [ 385.234437][T20967] ? __ia32_sys_sendfile+0x230/0x230 [ 385.234451][T20967] ? do_syscall_64+0x26/0x610 [ 385.234470][T20967] ? lockdep_hardirqs_on+0x418/0x5d0 [ 385.249060][T20967] ? trace_hardirqs_on+0x67/0x230 [ 385.249082][T20967] do_syscall_64+0x103/0x610 [ 385.249102][T20967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 385.270196][T20967] RIP: 0033:0x458079 [ 385.270214][T20967] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.270226][T20967] RSP: 002b:00007f052b907c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 385.284130][T20967] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 385.284137][T20967] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 385.284144][T20967] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.284151][T20967] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f052b9086d4 [ 385.284159][T20967] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 385.343233][T20967] memory: usage 9052kB, limit 0kB, failcnt 193 [ 385.360500][T20967] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 385.367200][T20964] device hsr_slave_0 entered promiscuous mode [ 385.555456][T20967] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 385.562654][T20967] Memory cgroup stats for /syz3: cache:0KB rss:2168KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 385.585142][T20964] device hsr_slave_1 entered promiscuous mode [ 385.592000][T20967] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20966,uid=0 [ 385.608737][T20967] Memory cgroup out of memory: Killed process 20966 (syz-executor.3) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 385.627550][ T1042] oom_reaper: reaped process 20966 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 385.645903][T20960] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.707568][T20958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.736118][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.748586][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 00:02:34 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 385.756477][T20938] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 385.759064][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.773718][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.774348][T20938] CPU: 0 PID: 20938 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 385.782532][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.788806][T20938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.788811][T20938] Call Trace: [ 385.788837][T20938] dump_stack+0x172/0x1f0 [ 385.788856][T20938] dump_header+0x10f/0xb6c [ 385.788875][T20938] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 385.797749][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.807101][T20938] ? ___ratelimit+0x60/0x595 [ 385.807116][T20938] ? do_raw_spin_unlock+0x57/0x270 [ 385.807133][T20938] oom_kill_process.cold+0x10/0x15 [ 385.807147][T20938] out_of_memory+0x79a/0x1280 [ 385.807169][T20938] ? lock_downgrade+0x880/0x880 [ 385.812795][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.814753][T20938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.814772][T20938] ? oom_killer_disable+0x280/0x280 [ 385.814783][T20938] ? find_held_lock+0x35/0x130 [ 385.814805][T20938] mem_cgroup_out_of_memory+0x1ca/0x230 [ 385.819210][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.825031][T20938] ? memcg_event_wake+0x230/0x230 [ 385.825049][T20938] ? do_raw_spin_unlock+0x57/0x270 [ 385.825064][T20938] ? _raw_spin_unlock+0x2d/0x50 [ 385.825081][T20938] try_charge+0x102c/0x15c0 [ 385.835109][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.837870][T20938] ? find_held_lock+0x35/0x130 [ 385.843881][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.848166][T20938] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 385.848187][T20938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.848203][T20938] ? kasan_check_read+0x11/0x20 [ 385.848217][T20938] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 385.848238][T20938] mem_cgroup_try_charge+0x24d/0x5e0 [ 385.863298][T20958] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.864763][T20938] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 385.864783][T20938] __handle_mm_fault+0x1e1f/0x3ec0 [ 385.864800][T20938] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 385.864813][T20938] ? find_held_lock+0x35/0x130 [ 385.864835][T20938] ? handle_mm_fault+0x322/0xb30 [ 385.898158][T20958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.899090][T20938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 385.904236][T20958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.909027][T20938] ? kasan_check_read+0x11/0x20 [ 385.928588][T20958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.934356][T20938] handle_mm_fault+0x43f/0xb30 [ 385.934376][T20938] __do_page_fault+0x5ef/0xda0 [ 385.934397][T20938] do_page_fault+0x71/0x581 [ 385.946180][T20938] ? page_fault+0x8/0x30 [ 385.946192][T20938] page_fault+0x1e/0x30 [ 385.946202][T20938] RIP: 0033:0x402e52 [ 385.946216][T20938] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 385.946223][T20938] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 385.946238][T20938] RAX: 0000000000000000 RBX: 000000000005e038 RCX: 0000000000411d50 [ 386.094017][T20938] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 386.101981][T20938] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001d5c940 [ 386.109944][T20938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 386.117894][T20938] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 386.129060][T20938] memory: usage 6688kB, limit 0kB, failcnt 201 [ 386.135590][T20938] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 386.143045][T20938] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 386.149988][T20938] Memory cgroup stats for /syz3: cache:0KB rss:60KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 386.164389][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.170396][T20938] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20938,uid=0 [ 386.193813][T20938] Memory cgroup out of memory: Killed process 20938 (syz-executor.3) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 386.198569][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 386.224802][ T1042] oom_reaper: reaped process 20938 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 386.236866][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 386.246460][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 386.255621][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 386.264205][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.269409][T20973] QAT: Invalid ioctl [ 386.271320][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.282999][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 386.291517][T20973] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 386.291776][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 386.310349][T20973] CPU: 0 PID: 20973 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 386.310512][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.318257][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.318263][T20973] Call Trace: [ 386.318289][T20973] dump_stack+0x172/0x1f0 [ 386.318311][T20973] dump_header+0x10f/0xb6c [ 386.318326][T20973] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 386.318349][T20973] ? ___ratelimit+0x60/0x595 [ 386.325443][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.335426][T20973] ? do_raw_spin_unlock+0x57/0x270 [ 386.335446][T20973] oom_kill_process.cold+0x10/0x15 [ 386.335463][T20973] out_of_memory+0x79a/0x1280 [ 386.339283][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 386.343051][T20973] ? __sched_text_start+0x8/0x8 [ 386.343068][T20973] ? oom_killer_disable+0x280/0x280 [ 386.343091][T20973] mem_cgroup_out_of_memory+0x1ca/0x230 [ 386.348310][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 386.353287][T20973] ? memcg_event_wake+0x230/0x230 [ 386.353308][T20973] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 386.353328][T20973] ? cgroup_file_notify+0x140/0x1b0 [ 386.358688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.365098][T20973] memory_max_write+0x169/0x300 [ 386.365116][T20973] ? kernfs_fop_write+0x204/0x480 [ 386.365132][T20973] ? mem_cgroup_write+0x360/0x360 [ 386.365150][T20973] ? lock_acquire+0x16f/0x3f0 [ 386.370930][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.375336][T20973] ? kernfs_fop_write+0x227/0x480 [ 386.375356][T20973] cgroup_file_write+0x245/0x7a0 [ 386.375372][T20973] ? mem_cgroup_write+0x360/0x360 [ 386.375390][T20973] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 386.380615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.387940][T20973] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 386.387957][T20973] kernfs_fop_write+0x2ba/0x480 [ 386.387976][T20973] __vfs_write+0x8d/0x110 [ 386.393513][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.397993][T20973] ? kernfs_fop_open+0xd90/0xd90 [ 386.398013][T20973] __kernel_write+0x110/0x3b0 [ 386.398030][T20973] write_pipe_buf+0x15d/0x1f0 [ 386.398043][T20973] ? do_splice_direct+0x2a0/0x2a0 [ 386.398064][T20973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.404261][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 386.411465][T20973] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 386.411483][T20973] __splice_from_pipe+0x395/0x7d0 [ 386.411500][T20973] ? do_splice_direct+0x2a0/0x2a0 [ 386.417064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 386.422652][T20973] ? do_splice_direct+0x2a0/0x2a0 [ 386.422665][T20973] splice_from_pipe+0x108/0x170 [ 386.422679][T20973] ? splice_shrink_spd+0xd0/0xd0 [ 386.422703][T20973] ? security_file_permission+0x94/0x380 [ 386.428738][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 386.435866][T20973] default_file_splice_write+0x3c/0x90 [ 386.435896][T20973] ? generic_splice_sendpage+0x50/0x50 [ 386.435918][T20973] direct_splice_actor+0x126/0x1a0 [ 386.441296][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 386.445782][T20973] splice_direct_to_actor+0x369/0x970 [ 386.445799][T20973] ? generic_pipe_buf_nosteal+0x10/0x10 [ 386.445818][T20973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.445837][T20973] ? do_splice_to+0x190/0x190 [ 386.451310][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 386.455524][T20973] ? rw_verify_area+0x118/0x360 [ 386.455540][T20973] do_splice_direct+0x1da/0x2a0 [ 386.455558][T20973] ? splice_direct_to_actor+0x970/0x970 [ 386.464126][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 386.468368][T20973] ? rcu_read_lock_sched_held+0x110/0x130 [ 386.468382][T20973] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 386.468403][T20973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.473990][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 386.478328][T20973] ? __sb_start_write+0x1ac/0x360 [ 386.478345][T20973] do_sendfile+0x597/0xd00 [ 386.478369][T20973] ? do_compat_pwritev64+0x1c0/0x1c0 [ 386.478381][T20973] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.478399][T20973] ? put_timespec64+0xda/0x140 [ 386.484840][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 386.494510][T20973] __x64_sys_sendfile64+0x1dd/0x220 [ 386.494528][T20973] ? __ia32_sys_sendfile+0x230/0x230 [ 386.494542][T20973] ? do_syscall_64+0x26/0x610 [ 386.494557][T20973] ? lockdep_hardirqs_on+0x418/0x5d0 [ 386.494577][T20973] ? trace_hardirqs_on+0x67/0x230 [ 386.520782][T20960] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.522151][T20973] do_syscall_64+0x103/0x610 [ 386.527419][T20960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.531472][T20973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.531484][T20973] RIP: 0033:0x458079 [ 386.531501][T20973] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 386.817183][T20973] RSP: 002b:00007f0a738a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.825598][T20973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 386.833551][T20973] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 386.841518][T20973] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 386.849490][T20973] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f0a738a66d4 [ 386.857456][T20973] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 386.869591][T20973] memory: usage 11120kB, limit 0kB, failcnt 358 [ 386.875991][T20973] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 386.883510][T20973] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 386.890528][T20973] Memory cgroup stats for /syz1: cache:0KB rss:2188KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 386.911746][T20973] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20970,uid=0 [ 386.929333][T20973] Memory cgroup out of memory: Killed process 20970 (syz-executor.1) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 386.945879][ T1042] oom_reaper: reaped process 20970 (syz-executor.1), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 386.958371][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.968045][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.976230][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 386.984377][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 386.992531][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.003085][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.012366][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.021288][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:02:35 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:35 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 387.227027][T20958] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 387.254244][T20958] CPU: 0 PID: 20958 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 387.262162][T20958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.272215][T20958] Call Trace: [ 387.275511][T20958] dump_stack+0x172/0x1f0 [ 387.279849][T20958] dump_header+0x10f/0xb6c [ 387.284261][T20958] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 387.290059][T20958] ? ___ratelimit+0x60/0x595 [ 387.294644][T20958] ? do_raw_spin_unlock+0x57/0x270 [ 387.299758][T20958] oom_kill_process.cold+0x10/0x15 [ 387.304887][T20958] out_of_memory+0x79a/0x1280 [ 387.309591][T20958] ? lock_downgrade+0x880/0x880 [ 387.314456][T20958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.320711][T20958] ? oom_killer_disable+0x280/0x280 [ 387.325926][T20958] ? find_held_lock+0x35/0x130 [ 387.330718][T20958] mem_cgroup_out_of_memory+0x1ca/0x230 [ 387.336286][T20958] ? memcg_event_wake+0x230/0x230 [ 387.341330][T20958] ? do_raw_spin_unlock+0x57/0x270 [ 387.346454][T20958] ? _raw_spin_unlock+0x2d/0x50 [ 387.351325][T20958] try_charge+0x102c/0x15c0 [ 387.356105][T20958] ? find_held_lock+0x35/0x130 [ 387.360893][T20958] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 387.366451][T20958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.372789][T20958] ? kasan_check_read+0x11/0x20 [ 387.377669][T20958] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 387.383223][T20958] mem_cgroup_try_charge+0x24d/0x5e0 [ 387.388534][T20958] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 387.394344][T20958] __handle_mm_fault+0x1e1f/0x3ec0 [ 387.399443][T20958] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 387.404973][T20958] ? find_held_lock+0x35/0x130 [ 387.409718][T20958] ? handle_mm_fault+0x322/0xb30 [ 387.414637][T20958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 387.426789][T20958] ? kasan_check_read+0x11/0x20 [ 387.434226][T20958] handle_mm_fault+0x43f/0xb30 [ 387.438975][T20958] __do_page_fault+0x5ef/0xda0 [ 387.443725][T20958] do_page_fault+0x71/0x581 [ 387.448225][T20958] ? page_fault+0x8/0x30 [ 387.452445][T20958] page_fault+0x1e/0x30 [ 387.456593][T20958] RIP: 0033:0x402e52 [ 387.460474][T20958] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 387.480062][T20958] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 387.486118][T20958] RAX: 0000000000000000 RBX: 000000000005e4fb RCX: 0000000000411d50 [ 387.494078][T20958] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 387.502040][T20958] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000290c940 [ 387.509998][T20958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 387.517951][T20958] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 387.532460][T20958] memory: usage 8744kB, limit 0kB, failcnt 366 [ 387.544200][T20958] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 387.551701][T20958] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 387.559055][T20958] Memory cgroup stats for /syz1: cache:0KB rss:44KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 387.580208][T20958] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20958,uid=0 [ 387.600576][T20958] Memory cgroup out of memory: Killed process 20958 (syz-executor.1) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB 00:02:36 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 387.627855][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.640290][T20964] 8021q: adding VLAN 0 to HW filter on device bond0 00:02:36 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 387.697254][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 387.711211][ T7658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.739264][T20964] 8021q: adding VLAN 0 to HW filter on device team0 00:02:36 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 387.939261][T20960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.957372][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 387.975616][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.994607][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.001693][ T7649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.010277][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 388.019124][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 388.028072][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.035195][ T7649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.071631][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 388.088738][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 388.098378][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 388.107253][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 388.116582][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 388.126574][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 388.135182][T20977] QAT: Invalid ioctl [ 388.147791][T20977] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 388.159867][T20977] CPU: 1 PID: 20977 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 388.167808][T20977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.177888][T20977] Call Trace: [ 388.181177][T20977] dump_stack+0x172/0x1f0 [ 388.185505][T20977] dump_header+0x10f/0xb6c [ 388.185523][T20977] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 388.185538][T20977] ? ___ratelimit+0x60/0x595 [ 388.185555][T20977] ? do_raw_spin_unlock+0x57/0x270 [ 388.185571][T20977] oom_kill_process.cold+0x10/0x15 [ 388.185586][T20977] out_of_memory+0x79a/0x1280 [ 388.185604][T20977] ? __sched_text_start+0x8/0x8 [ 388.185620][T20977] ? oom_killer_disable+0x280/0x280 [ 388.185634][T20977] ? cgroup_file_notify+0x140/0x1b0 [ 388.185654][T20977] mem_cgroup_out_of_memory+0x1ca/0x230 [ 388.185670][T20977] ? memcg_event_wake+0x230/0x230 [ 388.195914][T20977] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 388.210777][T20977] ? cgroup_file_notify+0x140/0x1b0 [ 388.210797][T20977] memory_max_write+0x169/0x300 [ 388.230674][T20977] ? kernfs_fop_write+0x204/0x480 [ 388.230700][T20977] ? mem_cgroup_write+0x360/0x360 [ 388.252205][T20977] ? lock_acquire+0x16f/0x3f0 [ 388.252221][T20977] ? kernfs_fop_write+0x227/0x480 [ 388.252241][T20977] cgroup_file_write+0x245/0x7a0 [ 388.271859][T20977] ? mem_cgroup_write+0x360/0x360 [ 388.271881][T20977] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 388.293032][T20977] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 388.293052][T20977] kernfs_fop_write+0x2ba/0x480 [ 388.303509][T20977] __vfs_write+0x8d/0x110 [ 388.308023][T20977] ? kernfs_fop_open+0xd90/0xd90 [ 388.312968][T20977] __kernel_write+0x110/0x3b0 [ 388.312992][T20977] write_pipe_buf+0x15d/0x1f0 [ 388.322330][T20977] ? do_splice_direct+0x2a0/0x2a0 [ 388.327349][T20977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.327363][T20977] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 388.327381][T20977] __splice_from_pipe+0x395/0x7d0 [ 388.327396][T20977] ? do_splice_direct+0x2a0/0x2a0 [ 388.327416][T20977] ? do_splice_direct+0x2a0/0x2a0 [ 388.327430][T20977] splice_from_pipe+0x108/0x170 [ 388.327446][T20977] ? splice_shrink_spd+0xd0/0xd0 [ 388.327471][T20977] ? security_file_permission+0x94/0x380 [ 388.327489][T20977] default_file_splice_write+0x3c/0x90 [ 388.327501][T20977] ? generic_splice_sendpage+0x50/0x50 [ 388.327516][T20977] direct_splice_actor+0x126/0x1a0 [ 388.327537][T20977] splice_direct_to_actor+0x369/0x970 [ 388.344880][T20977] ? generic_pipe_buf_nosteal+0x10/0x10 [ 388.354898][T20977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.354917][T20977] ? do_splice_to+0x190/0x190 [ 388.354941][T20977] ? rw_verify_area+0x118/0x360 [ 388.354966][T20977] do_splice_direct+0x1da/0x2a0 [ 388.355003][T20977] ? splice_direct_to_actor+0x970/0x970 [ 388.355025][T20977] ? rcu_read_lock_sched_held+0x110/0x130 [ 388.355038][T20977] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 388.355050][T20977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 388.355066][T20977] ? __sb_start_write+0x1ac/0x360 [ 388.370431][T20977] do_sendfile+0x597/0xd00 [ 388.386432][T20977] ? do_compat_pwritev64+0x1c0/0x1c0 [ 388.386448][T20977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 388.386463][T20977] ? put_timespec64+0xda/0x140 [ 388.386488][T20977] __x64_sys_sendfile64+0x1dd/0x220 [ 388.386505][T20977] ? __ia32_sys_sendfile+0x230/0x230 [ 388.386520][T20977] ? do_syscall_64+0x26/0x610 [ 388.386535][T20977] ? lockdep_hardirqs_on+0x418/0x5d0 [ 388.386550][T20977] ? trace_hardirqs_on+0x67/0x230 [ 388.386565][T20977] do_syscall_64+0x103/0x610 [ 388.386583][T20977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 388.386594][T20977] RIP: 0033:0x458079 [ 388.386612][T20977] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.386618][T20977] RSP: 002b:00007fbc523c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 388.386629][T20977] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 388.386636][T20977] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 388.386643][T20977] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 388.386650][T20977] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fbc523c86d4 [ 388.386657][T20977] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 388.400545][T20977] memory: usage 8900kB, limit 0kB, failcnt 253 [ 388.452614][T20964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.526855][T20980] IPVS: ftp: loaded support on port[0] = 21 [ 388.557679][T20977] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 388.598134][T20977] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 388.631213][T20977] Memory cgroup stats for /syz4: cache:72KB rss:2212KB rss_huge:2048KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 388.645101][T20981] IPVS: ftp: loaded support on port[0] = 21 [ 388.658462][T20964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.664675][T20977] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20974,uid=0 [ 388.685827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 388.693920][T20977] Memory cgroup out of memory: Killed process 20974 (syz-executor.4) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 388.722917][ T1042] oom_reaper: reaped process 20974 (syz-executor.4), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB [ 388.736917][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 388.745579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 388.753888][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.764557][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 388.773539][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.784671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.803746][T20964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.964169][T20986] IPVS: ftp: loaded support on port[0] = 21 [ 389.031222][T20984] QAT: Invalid ioctl [ 389.091560][T20984] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 389.140907][T20984] CPU: 1 PID: 20984 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 389.148858][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.158928][T20984] Call Trace: [ 389.162325][T20984] dump_stack+0x172/0x1f0 [ 389.166684][T20984] dump_header+0x10f/0xb6c [ 389.171102][T20984] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 389.176956][T20984] ? ___ratelimit+0x60/0x595 [ 389.181569][T20984] ? do_raw_spin_unlock+0x57/0x270 [ 389.186697][T20984] oom_kill_process.cold+0x10/0x15 [ 389.191806][T20984] out_of_memory+0x79a/0x1280 [ 389.196497][T20984] ? __sched_text_start+0x8/0x8 [ 389.201353][T20984] ? oom_killer_disable+0x280/0x280 [ 389.206562][T20984] mem_cgroup_out_of_memory+0x1ca/0x230 [ 389.212105][T20984] ? memcg_event_wake+0x230/0x230 [ 389.217140][T20984] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 389.222962][T20984] ? cgroup_file_notify+0x140/0x1b0 [ 389.228164][T20984] memory_max_write+0x169/0x300 [ 389.233023][T20984] ? retint_kernel+0x2d/0x2d [ 389.237619][T20984] ? mem_cgroup_write+0x360/0x360 [ 389.242747][T20984] cgroup_file_write+0x245/0x7a0 [ 389.247692][T20984] ? mem_cgroup_write+0x360/0x360 [ 389.252721][T20984] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 389.258453][T20984] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 389.264084][T20984] kernfs_fop_write+0x2ba/0x480 [ 389.268942][T20984] __vfs_write+0x8d/0x110 [ 389.273272][T20984] ? kernfs_fop_open+0xd90/0xd90 [ 389.278398][T20984] __kernel_write+0x110/0x3b0 [ 389.283077][T20984] write_pipe_buf+0x15d/0x1f0 [ 389.287755][T20984] ? do_splice_direct+0x2a0/0x2a0 [ 389.292765][T20984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.299019][T20984] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 389.305198][T20984] __splice_from_pipe+0x395/0x7d0 [ 389.310331][T20984] ? do_splice_direct+0x2a0/0x2a0 [ 389.315350][T20984] ? do_splice_direct+0x2a0/0x2a0 [ 389.320374][T20984] splice_from_pipe+0x108/0x170 [ 389.325426][T20984] ? splice_shrink_spd+0xd0/0xd0 [ 389.330388][T20984] ? security_file_permission+0x94/0x380 [ 389.336022][T20984] default_file_splice_write+0x3c/0x90 [ 389.341479][T20984] ? generic_splice_sendpage+0x50/0x50 [ 389.346946][T20984] direct_splice_actor+0x126/0x1a0 [ 389.352051][T20984] splice_direct_to_actor+0x369/0x970 [ 389.357420][T20984] ? generic_pipe_buf_nosteal+0x10/0x10 [ 389.362956][T20984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.369208][T20984] ? do_splice_to+0x190/0x190 [ 389.373870][T20984] ? rw_verify_area+0x118/0x360 [ 389.378731][T20984] do_splice_direct+0x1da/0x2a0 [ 389.383572][T20984] ? splice_direct_to_actor+0x970/0x970 [ 389.389110][T20984] ? rcu_read_lock_sched_held+0x110/0x130 [ 389.395000][T20984] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 389.400462][T20984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.406716][T20984] ? __sb_start_write+0x1ac/0x360 [ 389.411735][T20984] do_sendfile+0x597/0xd00 [ 389.416168][T20984] ? do_compat_pwritev64+0x1c0/0x1c0 [ 389.421456][T20984] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 389.427701][T20984] ? put_timespec64+0xda/0x140 [ 389.432466][T20984] __x64_sys_sendfile64+0x1dd/0x220 [ 389.437675][T20984] ? __ia32_sys_sendfile+0x230/0x230 [ 389.442954][T20984] ? do_syscall_64+0x26/0x610 [ 389.447641][T20984] ? lockdep_hardirqs_on+0x418/0x5d0 [ 389.452919][T20984] ? trace_hardirqs_on+0x67/0x230 [ 389.457940][T20984] do_syscall_64+0x103/0x610 [ 389.462546][T20984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 389.468417][T20984] RIP: 0033:0x458079 [ 389.472291][T20984] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.491880][T20984] RSP: 002b:00007fe12ab8bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.500291][T20984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 389.508271][T20984] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 389.516259][T20984] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.524222][T20984] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fe12ab8c6d4 [ 389.532212][T20984] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff 00:02:38 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:38 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 389.562895][T20984] memory: usage 8532kB, limit 0kB, failcnt 198 [ 389.570774][T20984] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.611736][T20984] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.620286][T20984] Memory cgroup stats for /syz0: cache:0KB rss:2156KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 389.658957][T20984] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20983,uid=0 [ 389.676346][T20984] Memory cgroup out of memory: Killed process 20983 (syz-executor.0) total-vm:72452kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 389.694272][ T1042] oom_reaper: reaped process 20983 (syz-executor.0), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 389.705457][T20960] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 389.705471][T20960] CPU: 1 PID: 20960 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 389.705477][T20960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 389.705481][T20960] Call Trace: [ 389.705503][T20960] dump_stack+0x172/0x1f0 [ 389.705520][T20960] dump_header+0x10f/0xb6c [ 389.705536][T20960] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 389.705551][T20960] ? ___ratelimit+0x60/0x595 [ 389.705566][T20960] ? do_raw_spin_unlock+0x57/0x270 [ 389.705582][T20960] oom_kill_process.cold+0x10/0x15 [ 389.705596][T20960] out_of_memory+0x79a/0x1280 [ 389.705625][T20960] ? oom_killer_disable+0x280/0x280 [ 389.705636][T20960] ? find_held_lock+0x35/0x130 [ 389.705657][T20960] mem_cgroup_out_of_memory+0x1ca/0x230 [ 389.733730][T20960] ? memcg_event_wake+0x230/0x230 [ 389.751874][T20960] ? do_raw_spin_unlock+0x57/0x270 [ 389.766628][T20960] ? _raw_spin_unlock+0x2d/0x50 [ 389.766646][T20960] try_charge+0x102c/0x15c0 [ 389.766658][T20960] ? find_held_lock+0x35/0x130 [ 389.766677][T20960] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 389.766693][T20960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.766710][T20960] ? kasan_check_read+0x11/0x20 [ 389.766727][T20960] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 389.766743][T20960] mem_cgroup_try_charge+0x24d/0x5e0 [ 389.766761][T20960] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 389.766780][T20960] __handle_mm_fault+0x1e1f/0x3ec0 [ 389.786924][T20960] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 389.786938][T20960] ? find_held_lock+0x35/0x130 [ 389.786952][T20960] ? handle_mm_fault+0x322/0xb30 [ 389.786973][T20960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 389.786990][T20960] ? kasan_check_read+0x11/0x20 [ 389.787009][T20960] handle_mm_fault+0x43f/0xb30 [ 389.797204][T20960] __do_page_fault+0x5ef/0xda0 [ 389.797225][T20960] do_page_fault+0x71/0x581 [ 389.797238][T20960] ? page_fault+0x8/0x30 [ 389.797251][T20960] page_fault+0x1e/0x30 [ 389.797262][T20960] RIP: 0033:0x402e52 [ 389.797276][T20960] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 389.797283][T20960] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 389.797294][T20960] RAX: 0000000000000000 RBX: 000000000005edc8 RCX: 0000000000411d50 [ 389.797302][T20960] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 389.797310][T20960] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000204c940 [ 389.797317][T20960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 389.797329][T20960] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 389.810201][T20960] memory: usage 6352kB, limit 0kB, failcnt 265 [ 389.824038][T20960] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.834715][T20960] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 389.845781][T20960] Memory cgroup stats for /syz4: cache:72KB rss:40KB rss_huge:0KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 389.856423][T20960] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20960,uid=0 [ 389.866249][T20960] Memory cgroup out of memory: Killed process 20960 (syz-executor.4) total-vm:72320kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 389.878547][ T1042] oom_reaper: reaped process 20960 (syz-executor.4), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 390.132588][T20980] chnl_net:caif_netlink_parms(): no params data found 00:02:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 390.356890][T20964] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 390.375599][T20964] CPU: 0 PID: 20964 Comm: syz-executor.0 Not tainted 5.1.0-rc1 #28 [ 390.383608][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.393671][T20964] Call Trace: [ 390.396955][T20964] dump_stack+0x172/0x1f0 [ 390.401266][T20964] dump_header+0x10f/0xb6c [ 390.405666][T20964] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 390.411449][T20964] ? ___ratelimit+0x60/0x595 [ 390.416017][T20964] ? do_raw_spin_unlock+0x57/0x270 [ 390.421107][T20964] oom_kill_process.cold+0x10/0x15 [ 390.426211][T20964] out_of_memory+0x79a/0x1280 [ 390.430868][T20964] ? lock_downgrade+0x880/0x880 [ 390.435694][T20964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.441910][T20964] ? oom_killer_disable+0x280/0x280 [ 390.447098][T20964] ? find_held_lock+0x35/0x130 [ 390.451858][T20964] mem_cgroup_out_of_memory+0x1ca/0x230 [ 390.457379][T20964] ? memcg_event_wake+0x230/0x230 [ 390.462381][T20964] ? do_raw_spin_unlock+0x57/0x270 [ 390.467468][T20964] ? _raw_spin_unlock+0x2d/0x50 [ 390.472293][T20964] try_charge+0x102c/0x15c0 [ 390.476784][T20964] ? find_held_lock+0x35/0x130 [ 390.481541][T20964] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 390.487075][T20964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.495368][T20964] ? kasan_check_read+0x11/0x20 [ 390.500199][T20964] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 390.505725][T20964] mem_cgroup_try_charge+0x24d/0x5e0 [ 390.511099][T20964] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 390.516717][T20964] __handle_mm_fault+0x1e1f/0x3ec0 [ 390.521807][T20964] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 390.527338][T20964] ? find_held_lock+0x35/0x130 [ 390.532093][T20964] ? handle_mm_fault+0x322/0xb30 [ 390.537017][T20964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 390.543237][T20964] ? kasan_check_read+0x11/0x20 [ 390.548085][T20964] handle_mm_fault+0x43f/0xb30 [ 390.552847][T20964] __do_page_fault+0x5ef/0xda0 [ 390.557679][T20964] do_page_fault+0x71/0x581 [ 390.562162][T20964] ? page_fault+0x8/0x30 [ 390.566380][T20964] page_fault+0x1e/0x30 [ 390.570509][T20964] RIP: 0033:0x402e52 [ 390.574396][T20964] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 390.593985][T20964] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 390.600122][T20964] RAX: 0000000000000000 RBX: 000000000005efc0 RCX: 0000000000411d50 [ 390.608074][T20964] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 390.616041][T20964] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001bb7940 [ 390.624002][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 390.631967][T20964] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 390.641404][T20964] memory: usage 6216kB, limit 0kB, failcnt 206 [ 390.674385][T20964] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.684284][T20964] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 390.691167][T20964] Memory cgroup stats for /syz0: cache:0KB rss:40KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB 00:02:39 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 390.728311][T20964] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20964,uid=0 [ 390.753841][T20964] Memory cgroup out of memory: Killed process 20964 (syz-executor.0) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 390.760147][T20989] IPVS: ftp: loaded support on port[0] = 21 [ 390.794487][ T1042] oom_reaper: reaped process 20964 (syz-executor.0), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 00:02:39 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 391.089813][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.097120][T20980] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.105245][T20980] device bridge_slave_0 entered promiscuous mode 00:02:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 391.181078][T20986] chnl_net:caif_netlink_parms(): no params data found [ 391.206832][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.213888][T20980] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.222433][T20980] device bridge_slave_1 entered promiscuous mode [ 391.405985][T20980] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 391.428092][T20981] chnl_net:caif_netlink_parms(): no params data found [ 391.441680][T20986] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.449164][T20986] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.457330][T20986] device bridge_slave_0 entered promiscuous mode [ 391.516590][T20980] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 391.531063][T20986] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.538334][T20986] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.546411][T20986] device bridge_slave_1 entered promiscuous mode [ 391.661029][T20980] team0: Port device team_slave_0 added [ 391.670748][T20980] team0: Port device team_slave_1 added [ 391.678961][T20986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 391.756607][T20986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 391.777083][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.789011][T20981] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.797696][T20981] device bridge_slave_0 entered promiscuous mode [ 391.809762][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.817727][T20981] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.826231][T20981] device bridge_slave_1 entered promiscuous mode [ 391.878368][T20980] device hsr_slave_0 entered promiscuous mode [ 391.934701][T20980] device hsr_slave_1 entered promiscuous mode [ 391.974688][T20994] IPVS: ftp: loaded support on port[0] = 21 [ 392.042134][T20981] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 392.056588][T20981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 392.066987][T20986] team0: Port device team_slave_0 added [ 392.078912][T20989] chnl_net:caif_netlink_parms(): no params data found [ 392.101472][T20986] team0: Port device team_slave_1 added [ 392.156995][T20986] device hsr_slave_0 entered promiscuous mode [ 392.194707][T20986] device hsr_slave_1 entered promiscuous mode [ 392.275812][T20981] team0: Port device team_slave_0 added [ 392.315974][T20981] team0: Port device team_slave_1 added [ 392.426124][T20994] chnl_net:caif_netlink_parms(): no params data found [ 392.449001][T20989] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.457422][T20989] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.465911][T20989] device bridge_slave_0 entered promiscuous mode [ 392.558588][T20989] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.565901][T20989] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.573583][T20989] device bridge_slave_1 entered promiscuous mode [ 392.595611][T20989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 392.656785][T20981] device hsr_slave_0 entered promiscuous mode [ 392.694592][T20981] device hsr_slave_1 entered promiscuous mode [ 392.735977][T20989] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 392.758253][T20994] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.766138][T20994] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.774778][T20994] device bridge_slave_0 entered promiscuous mode [ 392.866195][T20994] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.873304][T20994] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.882041][T20994] device bridge_slave_1 entered promiscuous mode [ 392.893499][T20989] team0: Port device team_slave_0 added [ 392.959876][T20989] team0: Port device team_slave_1 added [ 392.970220][T20980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.991581][T20986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.056869][T20989] device hsr_slave_0 entered promiscuous mode [ 393.094623][T20989] device hsr_slave_1 entered promiscuous mode [ 393.193920][T20986] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.202477][T20994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 393.215285][T20994] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 393.241624][T20994] team0: Port device team_slave_0 added [ 393.262406][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.270213][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.278331][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 393.286542][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 393.297340][T20980] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.377601][T20994] team0: Port device team_slave_1 added [ 393.390230][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.399235][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.407846][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.414941][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.423075][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.432109][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.441260][ T7674] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.448412][ T7674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.456989][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.466019][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.549400][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.558708][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.567360][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.577418][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.584530][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.593650][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.602755][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.611627][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.618868][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.627154][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.636036][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.645093][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.653642][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.662960][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.671274][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.691275][T20986] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 393.702409][T20986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.726991][T20981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.752390][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.761850][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.770776][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.779473][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.788497][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.797180][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.806091][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.815314][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.823950][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 393.833020][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 393.841649][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.849384][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 393.864396][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 393.872736][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 393.881394][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 393.890170][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 393.973100][T20980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.982889][T20981] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.990531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.000194][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.036923][T20994] device hsr_slave_0 entered promiscuous mode [ 394.074577][T20994] device hsr_slave_1 entered promiscuous mode [ 394.191407][T20986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.202368][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.211839][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.221022][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.228138][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.237548][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.246359][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.255377][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.262432][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.272112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.318039][T20989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.330918][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.346887][T20980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.416598][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.452818][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.461421][T20997] QAT: Invalid ioctl [ 394.468014][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.549825][T20997] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 394.561588][T21003] QAT: Invalid ioctl [ 394.566010][T20997] CPU: 1 PID: 20997 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 394.573908][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.583952][T20997] Call Trace: [ 394.587251][T20997] dump_stack+0x172/0x1f0 [ 394.587271][T20997] dump_header+0x10f/0xb6c [ 394.587287][T20997] ? oom_kill_process.cold+0x5/0x15 [ 394.587302][T20997] oom_kill_process.cold+0x10/0x15 [ 394.587319][T20997] out_of_memory+0x79a/0x1280 [ 394.606357][T20997] ? __sched_text_start+0x8/0x8 [ 394.606376][T20997] ? oom_killer_disable+0x280/0x280 [ 394.606401][T20997] mem_cgroup_out_of_memory+0x1ca/0x230 [ 394.606420][T20997] ? memcg_event_wake+0x230/0x230 [ 394.621759][T20997] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 394.621777][T20997] ? cgroup_file_notify+0x140/0x1b0 [ 394.621797][T20997] memory_max_write+0x169/0x300 [ 394.632337][T20997] ? lockdep_hardirqs_on+0x418/0x5d0 [ 394.632359][T20997] ? mem_cgroup_write+0x360/0x360 [ 394.632372][T20997] ? lock_acquire+0x16f/0x3f0 [ 394.632391][T20997] ? kernfs_fop_write+0x227/0x480 [ 394.643366][T20997] cgroup_file_write+0x245/0x7a0 [ 394.643385][T20997] ? mem_cgroup_write+0x360/0x360 [ 394.643404][T20997] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 394.653523][T20997] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 394.653541][T20997] kernfs_fop_write+0x2ba/0x480 [ 394.653563][T20997] __vfs_write+0x8d/0x110 [ 394.663247][T20997] ? kernfs_fop_open+0xd90/0xd90 [ 394.663270][T20997] __kernel_write+0x110/0x3b0 [ 394.663289][T20997] write_pipe_buf+0x15d/0x1f0 [ 394.663306][T20997] ? do_splice_direct+0x2a0/0x2a0 [ 394.673309][T20997] ? do_splice_direct+0x2a0/0x2a0 [ 394.673332][T20997] __splice_from_pipe+0x395/0x7d0 [ 394.673347][T20997] ? do_splice_direct+0x2a0/0x2a0 [ 394.673367][T20997] ? do_splice_direct+0x2a0/0x2a0 [ 394.684261][T20997] splice_from_pipe+0x108/0x170 [ 394.684279][T20997] ? splice_shrink_spd+0xd0/0xd0 [ 394.684303][T20997] ? retint_kernel+0x2d/0x2d [ 394.684325][T20997] default_file_splice_write+0x3c/0x90 [ 394.684336][T20997] ? generic_splice_sendpage+0x50/0x50 [ 394.684350][T20997] direct_splice_actor+0x126/0x1a0 [ 394.684368][T20997] splice_direct_to_actor+0x369/0x970 [ 394.694835][T20997] ? generic_pipe_buf_nosteal+0x10/0x10 [ 394.694858][T20997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.694870][T20997] ? do_splice_to+0x190/0x190 [ 394.694889][T20997] ? rw_verify_area+0x118/0x360 [ 394.694905][T20997] do_splice_direct+0x1da/0x2a0 [ 394.694923][T20997] ? splice_direct_to_actor+0x970/0x970 [ 394.704159][T20997] ? rcu_read_lock_sched_held+0x110/0x130 [ 394.704175][T20997] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 394.704189][T20997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 394.704210][T20997] ? __sb_start_write+0x1ac/0x360 [ 394.704228][T20997] do_sendfile+0x597/0xd00 [ 394.704252][T20997] ? do_compat_pwritev64+0x1c0/0x1c0 [ 394.713580][T20997] __x64_sys_sendfile64+0x1dd/0x220 [ 394.713600][T20997] ? __ia32_sys_sendfile+0x230/0x230 [ 394.713615][T20997] ? do_syscall_64+0x26/0x610 [ 394.713634][T20997] ? lockdep_hardirqs_on+0x418/0x5d0 [ 394.723659][T20997] ? trace_hardirqs_on+0x67/0x230 [ 394.723682][T20997] do_syscall_64+0x103/0x610 [ 394.723702][T20997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.723724][T20997] RIP: 0033:0x458079 [ 394.733760][T20997] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.733769][T20997] RSP: 002b:00007f1939da3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.733783][T20997] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 394.733791][T20997] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 394.733800][T20997] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 394.733808][T20997] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f1939da46d4 [ 394.733821][T20997] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 394.812996][T20997] memory: usage 8604kB, limit 0kB, failcnt 202 [ 394.853038][T20997] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 394.874956][T20997] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 394.890811][T20997] Memory cgroup stats for /syz3: cache:0KB rss:2128KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 394.913472][T20997] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20996,uid=0 [ 395.026605][T20997] Memory cgroup out of memory: Killed process 20996 (syz-executor.3) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 395.027524][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.049443][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.058110][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.067604][ T1042] oom_reaper: reaped process 20996 (syz-executor.3), now anon-rss:0kB, file-rss:34868kB, shmem-rss:0kB [ 395.079447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.088018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.098018][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.106984][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.120792][T20981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.133659][T20981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.151124][T20989] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.161721][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.177410][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.236376][T20986] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 395.248591][T20986] CPU: 0 PID: 20986 Comm: syz-executor.3 Not tainted 5.1.0-rc1 #28 [ 395.256602][T20986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.261349][T20981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.266664][T20986] Call Trace: [ 395.266688][T20986] dump_stack+0x172/0x1f0 [ 395.266705][T20986] dump_header+0x10f/0xb6c [ 395.266724][T20986] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 395.266738][T20986] ? ___ratelimit+0x60/0x595 [ 395.266752][T20986] ? do_raw_spin_unlock+0x57/0x270 [ 395.266769][T20986] oom_kill_process.cold+0x10/0x15 [ 395.276804][T20986] out_of_memory+0x79a/0x1280 [ 395.276820][T20986] ? lock_downgrade+0x880/0x880 [ 395.276833][T20986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.276847][T20986] ? oom_killer_disable+0x280/0x280 [ 395.276857][T20986] ? find_held_lock+0x35/0x130 [ 395.276879][T20986] mem_cgroup_out_of_memory+0x1ca/0x230 [ 395.337223][T20986] ? memcg_event_wake+0x230/0x230 [ 395.342229][T20986] ? do_raw_spin_unlock+0x57/0x270 [ 395.347342][T20986] ? _raw_spin_unlock+0x2d/0x50 [ 395.352201][T20986] try_charge+0x102c/0x15c0 [ 395.356701][T20986] ? find_held_lock+0x35/0x130 [ 395.361449][T20986] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 395.366980][T20986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.373205][T20986] ? kasan_check_read+0x11/0x20 [ 395.378038][T20986] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 395.383561][T20986] mem_cgroup_try_charge+0x24d/0x5e0 [ 395.388841][T20986] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 395.394476][T20986] __handle_mm_fault+0x1e1f/0x3ec0 [ 395.399571][T20986] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 395.405092][T20986] ? find_held_lock+0x35/0x130 [ 395.409834][T20986] ? handle_mm_fault+0x322/0xb30 [ 395.414759][T20986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.420991][T20986] ? kasan_check_read+0x11/0x20 [ 395.425867][T20986] handle_mm_fault+0x43f/0xb30 [ 395.430620][T20986] __do_page_fault+0x5ef/0xda0 [ 395.435403][T20986] do_page_fault+0x71/0x581 [ 395.439888][T20986] ? page_fault+0x8/0x30 [ 395.444114][T20986] page_fault+0x1e/0x30 [ 395.448260][T20986] RIP: 0033:0x402e52 [ 395.452135][T20986] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 395.471736][T20986] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 395.477785][T20986] RAX: 0000000000000000 RBX: 00000000000604fe RCX: 0000000000411d50 [ 395.485750][T20986] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 395.493712][T20986] RBP: 0000000000000002 R08: 0000000000000001 R09: 00000000027cf940 [ 395.501688][T20986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 395.509654][T20986] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 395.525323][T20986] memory: usage 6216kB, limit 0kB, failcnt 214 00:02:44 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 395.531895][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 395.540181][T20986] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.547995][T20986] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 395.555359][T20986] Memory cgroup stats for /syz3: cache:0KB rss:20KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 395.582168][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 395.598206][T20986] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20986,uid=0 [ 395.605726][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.619109][T20986] Memory cgroup out of memory: Killed process 20986 (syz-executor.3) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 395.620672][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.673319][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.682478][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.691400][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.698500][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.708497][T21013] QAT: Invalid ioctl [ 395.717432][T21014] QAT: Invalid ioctl [ 395.721580][T21013] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 395.732083][T21013] CPU: 1 PID: 21013 Comm: syz-executor.2 Not tainted 5.1.0-rc1 #28 [ 395.739973][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.750032][T21013] Call Trace: [ 395.753377][T21013] dump_stack+0x172/0x1f0 [ 395.757697][T21013] dump_header+0x10f/0xb6c [ 395.762104][T21013] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 395.767914][T21013] ? ___ratelimit+0x60/0x595 [ 395.772508][T21013] ? do_raw_spin_unlock+0x57/0x270 [ 395.777616][T21013] oom_kill_process.cold+0x10/0x15 [ 395.782722][T21013] out_of_memory+0x79a/0x1280 [ 395.787386][T21013] ? __sched_text_start+0x8/0x8 [ 395.792216][T21013] ? oom_killer_disable+0x280/0x280 [ 395.797428][T21013] ? cgroup_file_notify+0x140/0x1b0 [ 395.802615][T21013] mem_cgroup_out_of_memory+0x1ca/0x230 [ 395.808148][T21013] ? memcg_event_wake+0x230/0x230 [ 395.813164][T21013] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 395.818950][T21013] ? cgroup_file_notify+0x140/0x1b0 [ 395.824137][T21013] memory_max_write+0x169/0x300 [ 395.828990][T21013] ? kernfs_fop_write+0x204/0x480 [ 395.833995][T21013] ? mem_cgroup_write+0x360/0x360 [ 395.838999][T21013] ? lock_acquire+0x16f/0x3f0 [ 395.843666][T21013] ? kernfs_fop_write+0x227/0x480 [ 395.848815][T21013] cgroup_file_write+0x245/0x7a0 [ 395.853750][T21013] ? mem_cgroup_write+0x360/0x360 [ 395.858771][T21013] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 395.864393][T21013] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 395.870027][T21013] kernfs_fop_write+0x2ba/0x480 [ 395.874874][T21013] __vfs_write+0x8d/0x110 [ 395.879205][T21013] ? kernfs_fop_open+0xd90/0xd90 [ 395.884137][T21013] __kernel_write+0x110/0x3b0 [ 395.888818][T21013] write_pipe_buf+0x15d/0x1f0 [ 395.893480][T21013] ? do_splice_direct+0x2a0/0x2a0 [ 395.898490][T21013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.904717][T21013] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 395.910771][T21013] __splice_from_pipe+0x395/0x7d0 [ 395.915776][T21013] ? do_splice_direct+0x2a0/0x2a0 [ 395.920796][T21013] ? do_splice_direct+0x2a0/0x2a0 [ 395.925816][T21013] splice_from_pipe+0x108/0x170 [ 395.930747][T21013] ? splice_shrink_spd+0xd0/0xd0 [ 395.935679][T21013] ? security_file_permission+0x94/0x380 [ 395.941296][T21013] default_file_splice_write+0x3c/0x90 [ 395.946735][T21013] ? generic_splice_sendpage+0x50/0x50 [ 395.952194][T21013] direct_splice_actor+0x126/0x1a0 [ 395.957292][T21013] splice_direct_to_actor+0x369/0x970 [ 395.962650][T21013] ? generic_pipe_buf_nosteal+0x10/0x10 [ 395.968180][T21013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 395.974402][T21013] ? do_splice_to+0x190/0x190 [ 395.979074][T21013] ? rw_verify_area+0x118/0x360 [ 395.983930][T21013] do_splice_direct+0x1da/0x2a0 [ 395.988770][T21013] ? splice_direct_to_actor+0x970/0x970 [ 395.994306][T21013] ? rcu_read_lock_sched_held+0x110/0x130 [ 396.000008][T21013] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 396.005452][T21013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.011693][T21013] ? __sb_start_write+0x1ac/0x360 [ 396.016727][T21013] do_sendfile+0x597/0xd00 [ 396.021136][T21013] ? do_compat_pwritev64+0x1c0/0x1c0 [ 396.026427][T21013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 396.032658][T21013] ? put_timespec64+0xda/0x140 [ 396.037409][T21013] __x64_sys_sendfile64+0x1dd/0x220 [ 396.042587][T21013] ? __ia32_sys_sendfile+0x230/0x230 [ 396.047880][T21013] ? do_syscall_64+0x26/0x610 [ 396.052544][T21013] ? lockdep_hardirqs_on+0x418/0x5d0 [ 396.057827][T21013] ? trace_hardirqs_on+0x67/0x230 [ 396.062865][T21013] do_syscall_64+0x103/0x610 [ 396.067459][T21013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.073343][T21013] RIP: 0033:0x458079 [ 396.077247][T21013] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.096843][T21013] RSP: 002b:00007fc398072c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 396.105247][T21013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 396.113284][T21013] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 396.121239][T21013] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 396.129210][T21013] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fc3980736d4 [ 396.137181][T21013] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 396.146642][T21013] memory: usage 8200kB, limit 0kB, failcnt 800 [ 396.152858][T21013] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.160433][T21013] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.167365][T21013] Memory cgroup stats for /syz2: cache:80KB rss:2288KB rss_huge:2048KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 396.188538][T21013] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21007,uid=0 [ 396.204065][T21013] Memory cgroup out of memory: Killed process 21007 (syz-executor.2) total-vm:72580kB, anon-rss:2148kB, file-rss:34816kB, shmem-rss:0kB [ 396.219919][ T1042] oom_reaper: reaped process 21007 (syz-executor.2), now anon-rss:0kB, file-rss:34736kB, shmem-rss:0kB [ 396.231140][T21014] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 396.241697][T21014] CPU: 1 PID: 21014 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 396.249596][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.249608][T21014] Call Trace: [ 396.249642][T21014] dump_stack+0x172/0x1f0 [ 396.249662][T21014] dump_header+0x10f/0xb6c [ 396.267487][T21014] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 396.277668][T21014] ? ___ratelimit+0x60/0x595 [ 396.277686][T21014] ? do_raw_spin_unlock+0x57/0x270 [ 396.277704][T21014] oom_kill_process.cold+0x10/0x15 [ 396.277720][T21014] out_of_memory+0x79a/0x1280 [ 396.277739][T21014] ? oom_killer_disable+0x280/0x280 [ 396.277757][T21014] ? cgroup_file_notify+0x140/0x1b0 [ 396.287441][T21014] mem_cgroup_out_of_memory+0x1ca/0x230 [ 396.287456][T21014] ? memcg_event_wake+0x230/0x230 [ 396.287477][T21014] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 396.287493][T21014] ? cgroup_file_notify+0x140/0x1b0 [ 396.287509][T21014] memory_max_write+0x169/0x300 [ 396.287525][T21014] ? kernfs_fop_write+0x204/0x480 [ 396.287540][T21014] ? mem_cgroup_write+0x360/0x360 [ 396.287564][T21014] ? lock_acquire+0x16f/0x3f0 [ 396.297316][T21014] ? kernfs_fop_write+0x227/0x480 [ 396.297338][T21014] cgroup_file_write+0x245/0x7a0 [ 396.297354][T21014] ? mem_cgroup_write+0x360/0x360 [ 396.297367][T21014] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 396.297389][T21014] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 396.297406][T21014] kernfs_fop_write+0x2ba/0x480 [ 396.307771][T21014] __vfs_write+0x8d/0x110 [ 396.307786][T21014] ? kernfs_fop_open+0xd90/0xd90 [ 396.307802][T21014] __kernel_write+0x110/0x3b0 [ 396.307825][T21014] write_pipe_buf+0x15d/0x1f0 [ 396.307841][T21014] ? do_splice_direct+0x2a0/0x2a0 [ 396.307861][T21014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.318584][T21014] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 396.318609][T21014] __splice_from_pipe+0x395/0x7d0 [ 396.318626][T21014] ? do_splice_direct+0x2a0/0x2a0 [ 396.329772][T21014] ? do_splice_direct+0x2a0/0x2a0 [ 396.329792][T21014] splice_from_pipe+0x108/0x170 [ 396.329807][T21014] ? splice_shrink_spd+0xd0/0xd0 [ 396.329833][T21014] ? security_file_permission+0x94/0x380 [ 396.339661][T21014] default_file_splice_write+0x3c/0x90 [ 396.339676][T21014] ? generic_splice_sendpage+0x50/0x50 [ 396.339692][T21014] direct_splice_actor+0x126/0x1a0 [ 396.339709][T21014] splice_direct_to_actor+0x369/0x970 [ 396.349383][T21014] ? generic_pipe_buf_nosteal+0x10/0x10 [ 396.349405][T21014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.349418][T21014] ? do_splice_to+0x190/0x190 [ 396.349437][T21014] ? rw_verify_area+0x118/0x360 [ 396.359364][T21014] do_splice_direct+0x1da/0x2a0 [ 396.359382][T21014] ? splice_direct_to_actor+0x970/0x970 [ 396.359403][T21014] ? rcu_read_lock_sched_held+0x110/0x130 [ 396.359419][T21014] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 396.370035][T21014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 396.370052][T21014] ? __sb_start_write+0x1ac/0x360 [ 396.370079][T21014] do_sendfile+0x597/0xd00 [ 396.370104][T21014] ? do_compat_pwritev64+0x1c0/0x1c0 [ 396.380550][T21014] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 396.380567][T21014] ? put_timespec64+0xda/0x140 [ 396.380604][T21014] __x64_sys_sendfile64+0x1dd/0x220 [ 396.389835][T21014] ? __ia32_sys_sendfile+0x230/0x230 [ 396.389852][T21014] ? do_syscall_64+0x26/0x610 [ 396.389867][T21014] ? lockdep_hardirqs_on+0x418/0x5d0 [ 396.389886][T21014] ? trace_hardirqs_on+0x67/0x230 [ 396.399207][T21014] do_syscall_64+0x103/0x610 [ 396.399229][T21014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.399239][T21014] RIP: 0033:0x458079 [ 396.399256][T21014] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.416660][T21014] RSP: 002b:00007fa4db0efc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 396.416676][T21014] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 396.416688][T21014] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 396.427771][T21014] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 396.427781][T21014] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fa4db0f06d4 [ 396.427789][T21014] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 396.459872][T21014] memory: usage 12196kB, limit 0kB, failcnt 264 [ 396.466414][T21014] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.483453][T21014] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 396.506879][T21014] Memory cgroup stats for /syz5: cache:120KB rss:2148KB rss_huge:2048KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 396.517873][T21014] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21008,uid=0 [ 396.529654][T21014] Memory cgroup out of memory: Killed process 21008 (syz-executor.5) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 396.547310][ T1042] oom_reaper: reaped process 21008 (syz-executor.5), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB [ 396.762981][T20994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.776579][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.788257][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.807281][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.826765][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.845897][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.864786][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.882575][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.903126][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 00:02:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:02:45 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:02:45 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) 00:02:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 397.197195][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 397.207876][T20981] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 397.240924][T20981] CPU: 1 PID: 20981 Comm: syz-executor.5 Not tainted 5.1.0-rc1 #28 [ 397.244912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.248860][T20981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.264739][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 397.266606][T20981] Call Trace: [ 397.277682][T20981] dump_stack+0x172/0x1f0 [ 397.282037][T20981] dump_header+0x10f/0xb6c [ 397.283510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.286456][T20981] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 397.286471][T20981] ? ___ratelimit+0x60/0x595 [ 397.286485][T20981] ? do_raw_spin_unlock+0x57/0x270 [ 397.286500][T20981] oom_kill_process.cold+0x10/0x15 [ 397.286519][T20981] out_of_memory+0x79a/0x1280 [ 397.301898][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 397.304592][T20981] ? lock_downgrade+0x880/0x880 [ 397.304607][T20981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.304621][T20981] ? oom_killer_disable+0x280/0x280 [ 397.304637][T20981] ? find_held_lock+0x35/0x130 [ 397.311218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.314837][T20981] mem_cgroup_out_of_memory+0x1ca/0x230 [ 397.314850][T20981] ? memcg_event_wake+0x230/0x230 [ 397.314870][T20981] ? do_raw_spin_unlock+0x57/0x270 [ 397.314889][T20981] ? _raw_spin_unlock+0x2d/0x50 [ 397.321406][T20989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.326735][T20981] try_charge+0x102c/0x15c0 [ 397.326747][T20981] ? find_held_lock+0x35/0x130 00:02:46 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_LOCK(r0, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000300)) shmctl$SHM_LOCK(r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[]) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001440)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000001480)=0x5) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, 0x0, 0x308, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r6 = openat$cgroup_int(r4, &(0x7f00000000c0)='memory.max\x00', 0x2, 0x0) pipe(0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000200)=""/122) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f00000001c0)={0x2, 0x3f, 0x1, 0x5, 0x2, 0x1ac}) sendfile(r6, r6, 0x0, 0x4) [ 397.326770][T20981] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 397.337029][T20994] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.337829][T20981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.347773][T20981] ? kasan_check_read+0x11/0x20 [ 397.347790][T20981] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 397.347806][T20981] mem_cgroup_try_charge+0x24d/0x5e0 [ 397.347822][T20981] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 397.347842][T20981] __handle_mm_fault+0x1e1f/0x3ec0 [ 397.365588][T20981] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 397.375487][T20981] ? find_held_lock+0x35/0x130 [ 397.375505][T20981] ? handle_mm_fault+0x322/0xb30 [ 397.375527][T20981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.375548][T20981] ? kasan_check_read+0x11/0x20 [ 397.398708][T20989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.403990][T20981] handle_mm_fault+0x43f/0xb30 [ 397.425856][T20981] __do_page_fault+0x5ef/0xda0 [ 397.479254][T20981] do_page_fault+0x71/0x581 [ 397.483744][T20981] ? page_fault+0x8/0x30 [ 397.487967][T20981] page_fault+0x1e/0x30 [ 397.492108][T20981] RIP: 0033:0x402e52 [ 397.496010][T20981] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 397.515599][T20981] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 397.521656][T20981] RAX: 0000000000000000 RBX: 0000000000060cac RCX: 0000000000411d50 [ 397.529611][T20981] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 397.537566][T20981] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001946940 [ 397.545516][T20981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 397.553476][T20981] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 397.594122][T20981] memory: usage 8804kB, limit 0kB, failcnt 280 [ 397.610732][T20981] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 397.644509][T20981] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 397.651411][T20981] Memory cgroup stats for /syz5: cache:120KB rss:28KB rss_huge:0KB shmem:120KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 397.676125][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 397.685894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.692302][T20981] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20981,uid=0 [ 397.694733][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.716321][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.724796][T21018] QAT: Invalid ioctl [ 397.728799][T20981] Memory cgroup out of memory: Killed process 20981 (syz-executor.5) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 397.744210][ T1042] oom_reaper: reaped process 20981 (syz-executor.5), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 397.744570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 397.755399][T20980] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 397.763965][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.793116][T20980] CPU: 1 PID: 20980 Comm: syz-executor.2 Not tainted 5.1.0-rc1 #28 [ 397.796439][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.801054][T20980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.808229][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.818172][T20980] Call Trace: [ 397.818194][T20980] dump_stack+0x172/0x1f0 [ 397.818213][T20980] dump_header+0x10f/0xb6c [ 397.826257][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 397.828657][T20980] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 397.833726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 397.837384][T20980] ? ___ratelimit+0x60/0x595 [ 397.837399][T20980] ? do_raw_spin_unlock+0x57/0x270 [ 397.837415][T20980] oom_kill_process.cold+0x10/0x15 [ 397.837428][T20980] out_of_memory+0x79a/0x1280 [ 397.837448][T20980] ? oom_killer_disable+0x280/0x280 [ 397.847035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 397.851223][T20980] ? find_held_lock+0x35/0x130 [ 397.851246][T20980] mem_cgroup_out_of_memory+0x1ca/0x230 [ 397.901476][T20980] ? memcg_event_wake+0x230/0x230 [ 397.906523][T20980] ? do_raw_spin_unlock+0x57/0x270 [ 397.911624][T20980] ? _raw_spin_unlock+0x2d/0x50 [ 397.916464][T20980] try_charge+0x102c/0x15c0 [ 397.920962][T20980] ? find_held_lock+0x35/0x130 [ 397.925714][T20980] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 397.931235][T20980] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 397.936771][T20980] ? find_held_lock+0x35/0x130 [ 397.941512][T20980] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 397.947066][T20980] __memcg_kmem_charge_memcg+0x7c/0x130 [ 397.952601][T20980] ? memcg_kmem_put_cache+0xb0/0xb0 [ 397.957787][T20980] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 397.963330][T20980] __memcg_kmem_charge+0x136/0x300 [ 397.968430][T20980] __alloc_pages_nodemask+0x437/0x7e0 [ 397.973785][T20980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.980093][T20980] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 397.985792][T20980] ? copy_process.part.0+0x1d08/0x7980 [ 397.991228][T20980] ? lockdep_hardirqs_on+0x418/0x5d0 [ 397.996549][T20980] ? trace_hardirqs_on+0x67/0x230 [ 398.001554][T20980] ? kasan_check_read+0x11/0x20 [ 398.006421][T20980] copy_process.part.0+0x3e0/0x7980 [ 398.011615][T20980] ? __lock_acquire+0x548/0x3fb0 [ 398.016533][T20980] ? do_raw_spin_unlock+0x57/0x270 [ 398.021628][T20980] ? _raw_spin_unlock+0x2d/0x50 [ 398.026471][T20980] ? __might_fault+0x12b/0x1e0 [ 398.031218][T20980] ? __cleanup_sighand+0x60/0x60 [ 398.036132][T20980] ? lock_downgrade+0x880/0x880 [ 398.040964][T20980] _do_fork+0x257/0xfd0 [ 398.045100][T20980] ? fork_idle+0x1d0/0x1d0 [ 398.049496][T20980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 398.054948][T20980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 398.060383][T20980] ? do_syscall_64+0x26/0x610 [ 398.065054][T20980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.071114][T20980] ? do_syscall_64+0x26/0x610 [ 398.075774][T20980] __x64_sys_clone+0xbf/0x150 [ 398.080435][T20980] do_syscall_64+0x103/0x610 [ 398.085004][T20980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.090870][T20980] RIP: 0033:0x45664a [ 398.094744][T20980] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 398.114421][T20980] RSP: 002b:0000000000a4fd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 398.122817][T20980] RAX: ffffffffffffffda RBX: 0000000000a4fd30 RCX: 000000000045664a [ 398.130789][T20980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 398.138750][T20980] RBP: 0000000000a4fd70 R08: 0000000000000001 R09: 0000000001668940 [ 398.147171][T20980] R10: 0000000001668c10 R11: 0000000000000246 R12: 0000000000000001 [ 398.155209][T20980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 398.167566][T20980] memory: usage 5796kB, limit 0kB, failcnt 816 [ 398.173754][T20980] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.191733][T20980] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.199154][T20980] Memory cgroup stats for /syz2: cache:80KB rss:60KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:52KB inactive_file:0KB active_file:0KB unevictable:0KB [ 398.220221][T20980] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20980,uid=0 [ 398.237270][T20980] Memory cgroup out of memory: Killed process 20980 (syz-executor.2) total-vm:72316kB, anon-rss:100kB, file-rss:35712kB, shmem-rss:0kB [ 398.255542][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.266648][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.275847][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.285346][ T1042] oom_reaper: reaped process 20980 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB [ 398.286024][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.296921][T21018] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 398.315441][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.330318][T21018] CPU: 1 PID: 21018 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 398.338240][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.346353][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.348302][T21018] Call Trace: [ 398.359310][T21018] dump_stack+0x172/0x1f0 [ 398.363655][T21018] dump_header+0x10f/0xb6c [ 398.368081][T21018] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 398.373892][T21018] ? ___ratelimit+0x60/0x595 [ 398.378682][T21018] ? do_raw_spin_unlock+0x57/0x270 [ 398.383807][T21018] oom_kill_process.cold+0x10/0x15 [ 398.388937][T21018] out_of_memory+0x79a/0x1280 [ 398.393630][T21018] ? oom_killer_disable+0x280/0x280 [ 398.398845][T21018] ? cgroup_file_notify+0x140/0x1b0 [ 398.404068][T21018] mem_cgroup_out_of_memory+0x1ca/0x230 [ 398.408169][T21020] IPVS: ftp: loaded support on port[0] = 21 [ 398.409616][T21018] ? memcg_event_wake+0x230/0x230 [ 398.420497][T21018] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 398.426381][T21018] ? cgroup_file_notify+0x140/0x1b0 [ 398.431561][T21018] memory_max_write+0x169/0x300 [ 398.436385][T21018] ? __kmalloc+0x57b/0x740 [ 398.440777][T21018] ? kernfs_fop_write+0x204/0x480 [ 398.445781][T21018] ? mem_cgroup_write+0x360/0x360 [ 398.450785][T21018] ? lock_acquire+0x16f/0x3f0 [ 398.455439][T21018] ? kernfs_fop_write+0x227/0x480 [ 398.460444][T21018] cgroup_file_write+0x245/0x7a0 [ 398.465357][T21018] ? mem_cgroup_write+0x360/0x360 [ 398.470367][T21018] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 398.475980][T21018] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 398.481589][T21018] kernfs_fop_write+0x2ba/0x480 [ 398.488274][T21018] __vfs_write+0x8d/0x110 [ 398.492612][T21018] ? kernfs_fop_open+0xd90/0xd90 [ 398.497549][T21018] __kernel_write+0x110/0x3b0 [ 398.502205][T21018] write_pipe_buf+0x15d/0x1f0 [ 398.506865][T21018] ? do_splice_direct+0x2a0/0x2a0 [ 398.511885][T21018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.518129][T21018] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 398.524182][T21018] __splice_from_pipe+0x395/0x7d0 [ 398.529202][T21018] ? do_splice_direct+0x2a0/0x2a0 [ 398.534208][T21018] ? do_splice_direct+0x2a0/0x2a0 [ 398.539225][T21018] splice_from_pipe+0x108/0x170 [ 398.544062][T21018] ? splice_shrink_spd+0xd0/0xd0 [ 398.548994][T21018] ? security_file_permission+0x94/0x380 [ 398.554625][T21018] default_file_splice_write+0x3c/0x90 [ 398.560061][T21018] ? generic_splice_sendpage+0x50/0x50 [ 398.565501][T21018] direct_splice_actor+0x126/0x1a0 [ 398.570591][T21018] splice_direct_to_actor+0x369/0x970 [ 398.575945][T21018] ? generic_pipe_buf_nosteal+0x10/0x10 [ 398.581485][T21018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.587703][T21018] ? do_splice_to+0x190/0x190 [ 398.592379][T21018] ? rw_verify_area+0x118/0x360 [ 398.597238][T21018] do_splice_direct+0x1da/0x2a0 [ 398.602070][T21018] ? splice_direct_to_actor+0x970/0x970 [ 398.607609][T21018] ? rcu_read_lock_sched_held+0x110/0x130 [ 398.613324][T21018] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 398.618761][T21018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.625018][T21018] ? __sb_start_write+0x1ac/0x360 [ 398.630040][T21018] do_sendfile+0x597/0xd00 [ 398.634442][T21018] ? do_compat_pwritev64+0x1c0/0x1c0 [ 398.639715][T21018] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.646028][T21018] ? put_timespec64+0xda/0x140 [ 398.650868][T21018] __x64_sys_sendfile64+0x1dd/0x220 [ 398.656070][T21018] ? __ia32_sys_sendfile+0x230/0x230 [ 398.661350][T21018] ? do_syscall_64+0x26/0x610 [ 398.666014][T21018] ? lockdep_hardirqs_on+0x418/0x5d0 [ 398.671279][T21018] ? trace_hardirqs_on+0x67/0x230 [ 398.676284][T21018] do_syscall_64+0x103/0x610 [ 398.680863][T21018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.686751][T21018] RIP: 0033:0x458079 [ 398.690630][T21018] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.710225][T21018] RSP: 002b:00007f4209ecac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 398.718615][T21018] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 398.726650][T21018] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 398.734616][T21018] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 398.742569][T21018] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f4209ecb6d4 [ 398.750519][T21018] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 398.774720][T21018] memory: usage 9088kB, limit 0kB, failcnt 367 [ 398.782681][T21018] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.790323][T21018] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 398.797606][T21018] Memory cgroup stats for /syz1: cache:0KB rss:2160KB rss_huge:2048KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 398.818878][T21018] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21015,uid=0 [ 398.834709][T21018] Memory cgroup out of memory: Killed process 21015 (syz-executor.1) total-vm:72584kB, anon-rss:2136kB, file-rss:34816kB, shmem-rss:0kB [ 398.850747][ T1042] oom_reaper: reaped process 21015 (syz-executor.1), now anon-rss:0kB, file-rss:34876kB, shmem-rss:0kB [ 399.019001][T20994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.031688][T20994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.041395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 399.049925][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 399.067975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:02:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:02:48 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 00:02:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 00:02:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 399.315971][T20989] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 399.375097][T20989] CPU: 0 PID: 20989 Comm: syz-executor.1 Not tainted 5.1.0-rc1 #28 [ 399.383019][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.393058][T20989] Call Trace: [ 399.393080][T20989] dump_stack+0x172/0x1f0 [ 399.393098][T20989] dump_header+0x10f/0xb6c [ 399.393112][T20989] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 399.393127][T20989] ? ___ratelimit+0x60/0x595 [ 399.393141][T20989] ? do_raw_spin_unlock+0x57/0x270 [ 399.393156][T20989] oom_kill_process.cold+0x10/0x15 [ 399.393172][T20989] out_of_memory+0x79a/0x1280 [ 399.393187][T20989] ? lock_downgrade+0x880/0x880 [ 399.393200][T20989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.393214][T20989] ? oom_killer_disable+0x280/0x280 [ 399.393225][T20989] ? find_held_lock+0x35/0x130 [ 399.393248][T20989] mem_cgroup_out_of_memory+0x1ca/0x230 [ 399.393263][T20989] ? memcg_event_wake+0x230/0x230 [ 399.441933][T20989] ? do_raw_spin_unlock+0x57/0x270 [ 399.473745][T20989] ? _raw_spin_unlock+0x2d/0x50 [ 399.478593][T20989] try_charge+0x102c/0x15c0 [ 399.483098][T20989] ? find_held_lock+0x35/0x130 [ 399.488358][T20989] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 399.493916][T20989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.500147][T20989] ? kasan_check_read+0x11/0x20 [ 399.500163][T20989] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 399.500178][T20989] mem_cgroup_try_charge+0x24d/0x5e0 [ 399.500195][T20989] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 399.500212][T20989] __handle_mm_fault+0x1e1f/0x3ec0 [ 399.500229][T20989] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 399.500241][T20989] ? find_held_lock+0x35/0x130 [ 399.500255][T20989] ? handle_mm_fault+0x322/0xb30 [ 399.500276][T20989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.500290][T20989] ? kasan_check_read+0x11/0x20 [ 399.500307][T20989] handle_mm_fault+0x43f/0xb30 [ 399.500325][T20989] __do_page_fault+0x5ef/0xda0 [ 399.500345][T20989] do_page_fault+0x71/0x581 [ 399.500358][T20989] ? page_fault+0x8/0x30 [ 399.500369][T20989] page_fault+0x1e/0x30 [ 399.500380][T20989] RIP: 0033:0x402e52 [ 399.500392][T20989] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 399.500399][T20989] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 399.500414][T20989] RAX: 0000000000000000 RBX: 00000000000615bb RCX: 0000000000411d50 [ 399.510789][T20989] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 399.532322][T20989] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001aad940 [ 399.548504][T20989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 399.558072][T20989] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 399.600719][T20989] memory: usage 6708kB, limit 0kB, failcnt 375 [ 399.625805][T20989] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 399.645914][T20989] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 399.645921][T20989] Memory cgroup stats for /syz1: cache:0KB rss:52KB rss_huge:0KB shmem:0KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 399.645989][T20989] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20989,uid=0 [ 399.646071][T20989] Memory cgroup out of memory: Killed process 20989 (syz-executor.1) total-vm:72320kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 399.755428][T20994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.922722][T21022] QAT: Invalid ioctl [ 399.994854][T21022] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 400.015569][T21022] CPU: 1 PID: 21022 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 400.023489][T21022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.033533][T21022] Call Trace: [ 400.036816][T21022] dump_stack+0x172/0x1f0 [ 400.041148][T21022] dump_header+0x10f/0xb6c [ 400.045567][T21022] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 400.051354][T21022] ? ___ratelimit+0x60/0x595 [ 400.055926][T21022] ? do_raw_spin_unlock+0x57/0x270 [ 400.061019][T21022] oom_kill_process.cold+0x10/0x15 [ 400.066112][T21022] out_of_memory+0x79a/0x1280 [ 400.070784][T21022] ? __sched_text_start+0x8/0x8 [ 400.075705][T21022] ? oom_killer_disable+0x280/0x280 [ 400.080892][T21022] mem_cgroup_out_of_memory+0x1ca/0x230 [ 400.086502][T21022] ? memcg_event_wake+0x230/0x230 [ 400.091620][T21022] ? _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 400.097588][T21022] ? cgroup_file_notify+0x140/0x1b0 [ 400.102781][T21022] memory_max_write+0x169/0x300 [ 400.107625][T21022] ? mem_cgroup_write+0x360/0x360 [ 400.112636][T21022] cgroup_file_write+0x245/0x7a0 [ 400.117558][T21022] ? mem_cgroup_write+0x360/0x360 [ 400.122652][T21022] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 400.128445][T21022] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 400.134064][T21022] kernfs_fop_write+0x2ba/0x480 [ 400.138903][T21022] __vfs_write+0x8d/0x110 [ 400.143232][T21022] ? kernfs_fop_open+0xd90/0xd90 [ 400.148157][T21022] __kernel_write+0x110/0x3b0 [ 400.152817][T21022] write_pipe_buf+0x15d/0x1f0 [ 400.157496][T21022] ? do_splice_direct+0x2a0/0x2a0 [ 400.162507][T21022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.168724][T21022] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 400.174778][T21022] __splice_from_pipe+0x395/0x7d0 [ 400.179787][T21022] ? do_splice_direct+0x2a0/0x2a0 [ 400.184818][T21022] ? do_splice_direct+0x2a0/0x2a0 [ 400.189836][T21022] splice_from_pipe+0x108/0x170 [ 400.194670][T21022] ? splice_shrink_spd+0xd0/0xd0 [ 400.199596][T21022] ? security_file_permission+0x94/0x380 [ 400.205219][T21022] default_file_splice_write+0x3c/0x90 [ 400.210652][T21022] ? generic_splice_sendpage+0x50/0x50 [ 400.216088][T21022] direct_splice_actor+0x126/0x1a0 [ 400.221182][T21022] splice_direct_to_actor+0x369/0x970 [ 400.226536][T21022] ? generic_pipe_buf_nosteal+0x10/0x10 [ 400.232093][T21022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.238320][T21022] ? do_splice_to+0x190/0x190 [ 400.243000][T21022] ? rw_verify_area+0x118/0x360 [ 400.247835][T21022] do_splice_direct+0x1da/0x2a0 [ 400.252683][T21022] ? splice_direct_to_actor+0x970/0x970 [ 400.258210][T21022] ? rcu_read_lock_sched_held+0x110/0x130 [ 400.263919][T21022] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 400.269359][T21022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.275590][T21022] ? __sb_start_write+0x1ac/0x360 [ 400.280602][T21022] do_sendfile+0x597/0xd00 [ 400.285024][T21022] ? do_compat_pwritev64+0x1c0/0x1c0 [ 400.290309][T21022] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.296543][T21022] ? put_timespec64+0xda/0x140 [ 400.301304][T21022] __x64_sys_sendfile64+0x1dd/0x220 [ 400.306486][T21022] ? __ia32_sys_sendfile+0x230/0x230 [ 400.311771][T21022] ? do_syscall_64+0x26/0x610 [ 400.316432][T21022] ? lockdep_hardirqs_on+0x418/0x5d0 [ 400.321731][T21022] ? trace_hardirqs_on+0x67/0x230 [ 400.326761][T21022] do_syscall_64+0x103/0x610 [ 400.331349][T21022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.337230][T21022] RIP: 0033:0x458079 [ 400.341113][T21022] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.360701][T21022] RSP: 002b:00007fc4e69cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 400.369090][T21022] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458079 [ 400.377069][T21022] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 400.385058][T21022] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 400.393034][T21022] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fc4e69cc6d4 [ 400.401007][T21022] R13: 00000000004c4f95 R14: 00000000004d8d08 R15: 00000000ffffffff [ 400.437546][T21022] memory: usage 8052kB, limit 0kB, failcnt 266 [ 400.444556][T21022] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.452178][T21022] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.462209][T21022] Memory cgroup stats for /syz4: cache:72KB rss:2176KB rss_huge:2048KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2148KB inactive_file:0KB active_file:0KB unevictable:0KB [ 400.488813][T21022] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21021,uid=0 [ 400.505653][T21022] Memory cgroup out of memory: Killed process 21021 (syz-executor.4) total-vm:72584kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB [ 400.523249][ T1042] oom_reaper: reaped process 21021 (syz-executor.4), now anon-rss:0kB, file-rss:34736kB, shmem-rss:0kB 00:02:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 00:02:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 400.634771][T20994] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 400.638485][T21020] chnl_net:caif_netlink_parms(): no params data found [ 400.667547][T20994] CPU: 1 PID: 20994 Comm: syz-executor.4 Not tainted 5.1.0-rc1 #28 [ 400.675472][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.685553][T20994] Call Trace: [ 400.688874][T20994] dump_stack+0x172/0x1f0 [ 400.693208][T20994] dump_header+0x10f/0xb6c [ 400.693236][T20994] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 400.703455][T20994] ? ___ratelimit+0x60/0x595 [ 400.708135][T20994] ? do_raw_spin_unlock+0x57/0x270 [ 400.713255][T20994] oom_kill_process.cold+0x10/0x15 [ 400.718377][T20994] out_of_memory+0x79a/0x1280 [ 400.723056][T20994] ? lock_downgrade+0x880/0x880 [ 400.727896][T20994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.727911][T20994] ? oom_killer_disable+0x280/0x280 [ 400.727922][T20994] ? find_held_lock+0x35/0x130 [ 400.727942][T20994] mem_cgroup_out_of_memory+0x1ca/0x230 [ 400.727957][T20994] ? memcg_event_wake+0x230/0x230 [ 400.754669][T20994] ? do_raw_spin_unlock+0x57/0x270 [ 400.759803][T20994] ? _raw_spin_unlock+0x2d/0x50 [ 400.765034][T20994] try_charge+0x102c/0x15c0 [ 400.769543][T20994] ? find_held_lock+0x35/0x130 [ 400.774316][T20994] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 400.774333][T20994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.774349][T20994] ? kasan_check_read+0x11/0x20 [ 400.774364][T20994] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 400.774381][T20994] mem_cgroup_try_charge+0x24d/0x5e0 [ 400.786136][T20994] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 400.786156][T20994] __handle_mm_fault+0x1e1f/0x3ec0 [ 400.786175][T20994] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 400.796557][T20994] ? find_held_lock+0x35/0x130 [ 400.796575][T20994] ? handle_mm_fault+0x322/0xb30 [ 400.796600][T20994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 00:02:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) request_key(&(0x7f0000000480)='ceph\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)="00de67", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000680)="1dea06944d0be1b601d3c7558af546c01b2b30244947202ab938872c4a5d9b33d4b516f60523f7e7c503111d6ed0d01bc22da567ee5c1b2c119f3af700003fa2663feea3f065c001a269f531583c63b7d77616db343e641693522ea0106c455100f8025c2903375fcf2b87f0f78b76c519b25e1877202d095ffa57000000000000007886af425c5672581108bea81dfdd85f6aa6e52e3e13709f0042c02a0c97bd42bb6ed7a495cdcf6cdfa0fb76b42372ace845f69cf295e5251a73ce1c5dc025caad925960181e91eef78eb491601aef6c0cac1f5f1548398274b669f5b966bae2bf30bcb759cfbb632a0a38f2c5906fa1203edeb73d3596ebd7dfa001c97698ce52182b96d806c1dbee3b9b443f", 0x10f, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x1a6, 0x0) 00:02:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r1, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, &(0x7f0000000180)=""/67, 0x43) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {0x0}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {0x0}], 0x9, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x800}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0b21e2a62d0a300cf121867a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12edc4d1c98b5d2ff6921f2c1413a3ce08f4f69ac175826de7c722bfb43e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3434ce2e3e22a0c3ccb86284c9f851c861ac40cf3955edfe463de3508072d5d834b7646c5c0c0ab18ff9f94686ae8b77689a3921a48f5946a3d51cca1336c8f5cb0d2fd8b", @ANYRES32], 0x0) linkat(r2, &(0x7f0000000640)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x1000) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r4, 0x83}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 400.807845][T20994] ? kasan_check_read+0x11/0x20 [ 400.807862][T20994] handle_mm_fault+0x43f/0xb30 [ 400.807881][T20994] __do_page_fault+0x5ef/0xda0 [ 400.807903][T20994] do_page_fault+0x71/0x581 [ 400.818503][T20994] ? page_fault+0x8/0x30 [ 400.818516][T20994] page_fault+0x1e/0x30 [ 400.818532][T20994] RIP: 0033:0x402e52 [ 400.828315][T20994] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 69 7c 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 19 32 05 00 48 [ 400.828322][T20994] RSP: 002b:0000000000a4ec90 EFLAGS: 00010246 [ 400.828332][T20994] RAX: 0000000000000000 RBX: 0000000000061a48 RCX: 0000000000411d50 [ 400.828347][T20994] RDX: 000000000000000c RSI: 0000000000000002 RDI: 0000000000a4fdc0 [ 400.839389][T20994] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000f41940 [ 400.839400][T20994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a4fdc0 [ 400.848883][T20994] R13: 0000000000a4fdb0 R14: 0000000000000000 R15: 0000000000a4fdc0 [ 400.932648][T20994] memory: usage 5688kB, limit 0kB, failcnt 282 [ 400.944652][T20994] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.952183][T20994] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 400.964502][T21027] IPVS: ftp: loaded support on port[0] = 21 [ 400.973817][T20994] Memory cgroup stats for /syz4: cache:72KB rss:68KB rss_huge:0KB shmem:72KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 400.994628][T20994] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20994,uid=0 [ 401.010215][T20994] Memory cgroup out of memory: Killed process 20994 (syz-executor.4) total-vm:72320kB, anon-rss:76kB, file-rss:34816kB, shmem-rss:0kB [ 401.025089][ T1042] oom_reaper: reaped process 20994 (syz-executor.4), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB [ 401.397616][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.405560][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.413224][T21020] device bridge_slave_0 entered promiscuous mode [ 401.492997][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.502057][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.510554][T21020] device bridge_slave_1 entered promiscuous mode [ 401.529625][T21020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 401.547366][T21020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 401.615867][T21020] team0: Port device team_slave_0 added [ 401.631540][T21020] team0: Port device team_slave_1 added [ 401.757179][T21020] device hsr_slave_0 entered promiscuous mode [ 401.815142][T21020] device hsr_slave_1 entered promiscuous mode [ 401.842153][T21032] IPVS: ftp: loaded support on port[0] = 21 [ 401.938533][T21034] IPVS: ftp: loaded support on port[0] = 21 [ 401.941990][T21027] chnl_net:caif_netlink_parms(): no params data found [ 402.021474][T21033] IPVS: ftp: loaded support on port[0] = 21 [ 402.127152][T21027] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.135821][T21027] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.143871][T21027] device bridge_slave_0 entered promiscuous mode [ 402.205510][T21027] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.212598][T21027] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.221446][T21027] device bridge_slave_1 entered promiscuous mode [ 402.322406][T21027] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 402.337788][T21020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.357724][T21027] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 402.380812][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 402.388957][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 402.398690][T21020] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.459774][T21032] chnl_net:caif_netlink_parms(): no params data found [ 402.473896][T21034] chnl_net:caif_netlink_parms(): no params data found [ 402.506652][T21027] team0: Port device team_slave_0 added [ 402.518395][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 402.527306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 402.538720][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.545867][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.554349][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 402.563140][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 402.571761][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.578854][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.586682][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 402.678536][T21027] team0: Port device team_slave_1 added [ 402.685774][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 402.693740][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 402.703144][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 402.713590][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 402.808608][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.816974][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 402.825958][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.886829][T21027] device hsr_slave_0 entered promiscuous mode [ 402.934587][T21027] device hsr_slave_1 entered promiscuous mode [ 402.999924][T21033] chnl_net:caif_netlink_parms(): no params data found [ 403.009068][T21034] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.021823][T21034] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.031323][T21034] device bridge_slave_0 entered promiscuous mode [ 403.040940][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 403.051440][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 403.060367][T21032] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.067961][T21032] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.076179][T21032] device bridge_slave_0 entered promiscuous mode [ 403.083971][T21032] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.091154][T21032] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.099946][T21032] device bridge_slave_1 entered promiscuous mode [ 403.158003][T21034] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.168713][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.178689][T21034] device bridge_slave_1 entered promiscuous mode [ 403.199601][T21034] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 403.281813][T21034] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 403.292408][T21032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 403.312787][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 403.321416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.331139][T21020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 403.350829][T21033] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.359900][T21033] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.368302][T21033] device bridge_slave_0 entered promiscuous mode [ 403.377110][T21033] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.385611][T21033] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.403514][T21033] device bridge_slave_1 entered promiscuous mode [ 403.413053][T21032] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 403.487567][T21034] team0: Port device team_slave_0 added [ 403.510908][T21032] team0: Port device team_slave_0 added [ 403.520021][T21034] team0: Port device team_slave_1 added [ 403.579710][T21032] team0: Port device team_slave_1 added [ 403.596688][T21033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 403.607292][T21033] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 403.622519][T21020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.697200][T21032] device hsr_slave_0 entered promiscuous mode [ 403.734599][T21032] device hsr_slave_1 entered promiscuous mode [ 403.887830][T21034] device hsr_slave_0 entered promiscuous mode [ 403.934636][T21034] device hsr_slave_1 entered promiscuous mode [ 403.975515][T21033] team0: Port device team_slave_0 added [ 404.022913][T21027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.048760][T21033] team0: Port device team_slave_1 added 00:02:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x8, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 00:02:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) [ 404.152051][T21027] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.178481][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.187091][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:02:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) [ 404.307337][T21033] device hsr_slave_0 entered promiscuous mode 00:02:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) [ 404.355657][T21033] device hsr_slave_1 entered promiscuous mode [ 404.433944][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.443871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.464959][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.472049][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.483462][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.494259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.502669][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.509780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.593882][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.610075][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.619378][ T7654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.701975][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.710790][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.719536][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.729187][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.805148][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.816355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.825210][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.850195][T21027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.862731][T21027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 404.886862][T21033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.943672][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.960172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.972973][T21032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.003027][T21033] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.017196][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.035215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.045805][T21027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.101752][T21034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.144937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.161944][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.173398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.183213][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.192153][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.199267][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.208285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.218351][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.228266][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.235393][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.243510][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 405.256948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.285141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.293892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.315297][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.334874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.346975][T21032] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.363256][T21033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.375309][T21033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.423481][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.436864][T21055] IPVS: ftp: loaded support on port[0] = 21 [ 405.445252][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.453277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.462967][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 00:02:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:02:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) [ 405.475235][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.483869][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.493016][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 405.502188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 405.512637][T21034] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.587027][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.595909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.605338][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.614812][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.621903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.630482][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.639952][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.650781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.659367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.668432][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 00:02:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:02:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) [ 405.768835][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.778433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 405.806087][T21033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.861967][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 405.875566][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 405.894841][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.902085][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.909992][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.918900][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.927804][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.934944][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.942718][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 405.952264][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 405.960832][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.969648][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.979235][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.987872][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.997353][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.005729][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 406.073398][T21032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.087575][T21032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 406.116008][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 406.155540][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 406.178592][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 406.187455][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.262394][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 406.274784][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 406.292289][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 406.311088][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 406.329819][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 406.350195][ T7674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.366375][T11769] device bridge_slave_1 left promiscuous mode [ 406.372574][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.425761][T11769] device bridge_slave_0 left promiscuous mode [ 406.432001][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.465972][T11769] device bridge_slave_1 left promiscuous mode [ 406.472285][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.525346][T11769] device bridge_slave_0 left promiscuous mode [ 406.531675][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.586064][T11769] device bridge_slave_1 left promiscuous mode [ 406.592281][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.644897][T11769] device bridge_slave_0 left promiscuous mode [ 406.651148][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.706122][T11769] device bridge_slave_1 left promiscuous mode [ 406.712361][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.765540][T11769] device bridge_slave_0 left promiscuous mode [ 406.771837][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.826349][T11769] device bridge_slave_1 left promiscuous mode [ 406.832666][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.885299][T11769] device bridge_slave_0 left promiscuous mode [ 406.891621][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.946254][T11769] device bridge_slave_1 left promiscuous mode [ 406.952530][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.985475][T11769] device bridge_slave_0 left promiscuous mode [ 406.991797][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.367573][T11769] device hsr_slave_1 left promiscuous mode [ 422.420385][T11769] device hsr_slave_0 left promiscuous mode [ 422.480515][T11769] team0 (unregistering): Port device team_slave_1 removed [ 422.498987][T11769] team0 (unregistering): Port device team_slave_0 removed [ 422.516131][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 422.561391][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 422.679722][T11769] bond0 (unregistering): Released all slaves [ 422.828392][T11769] device hsr_slave_1 left promiscuous mode [ 422.901090][T11769] device hsr_slave_0 left promiscuous mode [ 422.960837][T11769] team0 (unregistering): Port device team_slave_1 removed [ 422.977931][T11769] team0 (unregistering): Port device team_slave_0 removed [ 422.992830][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 423.042095][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 423.152067][T11769] bond0 (unregistering): Released all slaves [ 423.279132][T11769] device hsr_slave_1 left promiscuous mode [ 423.340763][T11769] device hsr_slave_0 left promiscuous mode [ 423.400555][T11769] team0 (unregistering): Port device team_slave_1 removed [ 423.419386][T11769] team0 (unregistering): Port device team_slave_0 removed [ 423.438060][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 423.501647][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 423.624004][T11769] bond0 (unregistering): Released all slaves [ 423.778365][T11769] device hsr_slave_1 left promiscuous mode [ 423.850853][T11769] device hsr_slave_0 left promiscuous mode [ 423.890851][T11769] team0 (unregistering): Port device team_slave_1 removed [ 423.908861][T11769] team0 (unregistering): Port device team_slave_0 removed [ 423.927077][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 423.991712][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 424.103668][T11769] bond0 (unregistering): Released all slaves [ 424.258447][T11769] device hsr_slave_1 left promiscuous mode [ 424.320390][T11769] device hsr_slave_0 left promiscuous mode [ 424.379932][T11769] team0 (unregistering): Port device team_slave_1 removed [ 424.408059][T11769] team0 (unregistering): Port device team_slave_0 removed [ 424.423423][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 424.481339][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 424.596361][T11769] bond0 (unregistering): Released all slaves [ 424.707945][T11769] device hsr_slave_1 left promiscuous mode [ 424.750623][T11769] device hsr_slave_0 left promiscuous mode [ 424.808611][T11769] team0 (unregistering): Port device team_slave_1 removed [ 424.823579][T11769] team0 (unregistering): Port device team_slave_0 removed [ 424.838324][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 424.902989][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 425.015040][T11769] bond0 (unregistering): Released all slaves [ 425.144395][T21034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.156390][T21034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.175877][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.194277][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.202942][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.246837][T21034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.261166][T21032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.331809][T21055] chnl_net:caif_netlink_parms(): no params data found 00:03:14 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 00:03:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:14 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) [ 425.448513][T21055] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.461973][T21055] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.502367][T21055] device bridge_slave_0 entered promiscuous mode [ 425.544566][T21055] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.557916][T21055] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.568592][T21055] device bridge_slave_1 entered promiscuous mode [ 425.627067][T21055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 425.648677][T21055] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 425.701394][T21055] team0: Port device team_slave_0 added [ 425.714873][T21055] team0: Port device team_slave_1 added [ 425.776357][T21055] device hsr_slave_0 entered promiscuous mode [ 425.824948][T21055] device hsr_slave_1 entered promiscuous mode [ 425.901412][T21055] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.908590][T21055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.916008][T21055] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.923058][T21055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.978077][T21055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.993727][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.003203][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.011518][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.028186][T21055] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.041240][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 426.050949][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.058090][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.078704][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.091286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.098390][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.121731][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.130663][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.140497][ T2987] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 426.159138][T21055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 426.169625][T21055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.183232][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.192210][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 426.201002][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 426.223704][T21055] 8021q: adding VLAN 0 to HW filter on device batadv0 00:03:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 00:03:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 1: r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 00:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) 00:03:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) [ 426.709429][T11769] Left network mode 00:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 00:03:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) 00:03:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) 00:03:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) [ 426.928291][T21138] binder: 21137:21138 ioctl c0306201 20000440 returned -14 00:03:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x1000, 0xa1, 0xa7c, 0x5]}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r3 = socket(0x10, 0x20000000802, 0x0) write(r3, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x26, 0x0, 0x2}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r4 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xffffffffffffff58, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000015e2504068ed000000002cdd00f3ffffff0004000000a7e327a86df821af5074e73171fb0dd7d44644784eb88a3fc7c83500000000bd3a098843d5cfcdf7e9628c2326027b481965705b205535b1879a62cb4c90a9"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() r6 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000cc0)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="080001001587beff77ae040bf8a91609879e0950c8e5b9b979c2ad6df0b51200dcfb7c9fbe506d733b091fc4f8d7cc2ab98068d4762dd3b9bce9d24760879930bfb8f0d52fb422d31d80ab79a554484202c4a19de622ff1c62c763eb956b18f41559649aaa993451ce9a0e62f4e7d49e421a95140869628cdf881d659d3ce384ce53f7cc54be4d085bb2d99586c3012eba301c6beae420fcba245f2f1747c2f94cb536222b000077", @ANYRES32=r6, @ANYRESDEC=r5], 0x3, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000580)=0x80, 0x800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x1c00, 0x0) [ 426.982082][T21144] binder_alloc: binder_alloc_mmap_handler: 21137 20001000-20004000 already mapped failed -16 [ 427.039948][T21138] binder: BINDER_SET_CONTEXT_MGR already set [ 427.072508][T21138] binder: 21137:21138 ioctl 40046207 0 returned -16 [ 427.072835][T21150] binder_alloc: 21137: binder_alloc_buf, no vma 00:03:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:03:15 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 427.119067][ T5] binder: release 21137:21138 transaction 2 out, still active [ 427.146286][ T5] binder: undelivered TRANSACTION_COMPLETE 00:03:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) 00:03:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) [ 427.197514][T21152] binder: BINDER_SET_CONTEXT_MGR already set [ 427.206985][T21152] binder: 21151:21152 ioctl 40046207 0 returned -16 [ 427.208370][ T5] binder: send failed reply for transaction 2, target dead [ 427.239174][T21150] binder: 21137:21150 transaction failed 29189/-3, size 24-8 line 3147 [ 427.255828][T21152] binder: 21151:21152 Acquire 1 refcount change on invalid ref 0 ret -22 00:03:16 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) [ 427.289878][T21152] binder: 21151:21152 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 427.315260][T21150] binder: 21137:21150 ioctl c0306201 20000440 returned -14 [ 427.353638][T21159] binder: 21159 RLIMIT_NICE not set [ 427.396652][T21159] binder: 21151:21159 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 00:03:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) 00:03:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 00:03:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 427.439201][T21152] binder: 21151:21152 BC_DEAD_BINDER_DONE 0000000000000000 not found 00:03:16 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) [ 427.548856][T21174] binder: 21173:21174 ioctl c0306201 20000440 returned -14 [ 427.568409][ T5] binder: release 21173:21174 transaction 7 out, still active [ 427.584512][ T5] binder: undelivered TRANSACTION_COMPLETE 00:03:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) [ 427.656851][ T5] binder: send failed reply for transaction 7, target dead 00:03:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:03:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r0, r1) [ 427.719445][T21181] binder: 21180:21181 ioctl c0306201 20000440 returned -14 [ 427.781803][ T5] binder: release 21180:21181 transaction 11 out, still active [ 427.805943][ T5] binder: undelivered TRANSACTION_COMPLETE [ 427.906168][ T5] binder: send failed reply for transaction 11, target dead [ 428.003756][T21159] binder: 21151:21159 unknown command 536872576 [ 428.016117][T21187] binder: 21187 RLIMIT_NICE not set [ 428.028367][T21159] binder: 21151:21159 ioctl c0306201 20008fd0 returned -22 [ 428.058906][T21189] binder: 21151:21189 BC_CLEAR_DEATH_NOTIFICATION death notification not active 00:03:16 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:16 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) [ 428.213603][T21193] binder: 21193 RLIMIT_NICE not set [ 428.256163][T21193] binder: 21192:21193 ioctl c0306201 200003c0 returned -14 00:03:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 00:03:17 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:03:17 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:17 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 428.456958][T21206] binder: 21195:21206 ioctl c0306201 20000440 returned -14 [ 428.460590][T21202] binder: 21202 RLIMIT_NICE not set [ 428.505604][T21202] binder: 21200:21202 ioctl c0306201 200003c0 returned -14 [ 428.518275][ T5] binder: release 21195:21206 transaction 21 out, still active [ 428.534967][ T5] binder: undelivered TRANSACTION_COMPLETE 00:03:17 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:17 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) [ 428.593193][ T5] binder: send failed reply for transaction 21, target dead 00:03:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:17 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) [ 428.737152][T21214] binder: 21214 RLIMIT_NICE not set [ 428.768377][T21214] binder: 21213:21214 ioctl c0306201 200003c0 returned -14 00:03:17 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 429.218460][T21223] binder: 21223 RLIMIT_NICE not set [ 429.257961][T21223] binder: 21222:21223 ioctl c0306201 200003c0 returned -14 00:03:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:18 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:18 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:18 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 429.422205][T21225] binder: 21225 RLIMIT_NICE not set [ 429.474958][T21228] binder: 21228 RLIMIT_NICE not set [ 429.475058][T21225] binder: 21224:21225 ioctl c0306201 200003c0 returned -14 [ 429.549182][T21232] binder: 21232 RLIMIT_NICE not set [ 429.590394][T21232] binder: 21231:21232 ioctl c0306201 200003c0 returned -14 [ 429.599756][T21228] binder: 21226:21228 ioctl c0306201 200003c0 returned -14 00:03:18 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:18 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:18 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 429.778813][T21235] binder: 21235 RLIMIT_NICE not set [ 429.857031][T21235] binder: 21234:21235 ioctl c0306201 200003c0 returned -14 [ 429.891490][T21241] binder: 21236:21241 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 429.901328][T21239] binder: 21238:21239 ioctl c0306201 200003c0 returned -14 00:03:18 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 429.953233][T21242] binder: 21236:21242 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 430.082397][T21244] binder: 21243:21244 ioctl c0306201 200003c0 returned -14 00:03:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:19 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 430.489995][T21252] binder: BINDER_SET_CONTEXT_MGR already set [ 430.510244][T21250] binder: BINDER_SET_CONTEXT_MGR already set [ 430.517374][T21252] binder: 21246:21252 ioctl 40046207 0 returned -16 [ 430.531474][T21247] binder: 21245:21247 ioctl c0306201 200003c0 returned -14 [ 430.555077][T21250] binder: 21248:21250 ioctl 40046207 0 returned -16 00:03:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:19 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 430.713228][T21262] binder: BINDER_SET_CONTEXT_MGR already set [ 430.754916][T21262] binder: 21261:21262 ioctl 40046207 0 returned -16 [ 430.762162][T21260] binder: 21259:21260 ioctl c0306201 200003c0 returned -14 [ 430.790988][T21265] binder: 21263:21265 ioctl c0306201 200003c0 returned -14 00:03:19 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:19 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) [ 431.056862][T21271] binder: 21270:21271 ioctl c0306201 200003c0 returned -14 [ 431.079548][T21275] binder: 21274:21275 ioctl c0306201 200003c0 returned -14 00:03:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:20 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) 00:03:20 executing program 1: accept(0xffffffffffffffff, &(0x7f0000000700)=@sco, &(0x7f00000000c0)=0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000480)=[@dead_binder_done], 0x1, 0xfdfdffff, &(0x7f0000000600)=';'}) [ 431.647609][T21282] binder: 21281:21282 ioctl c0306201 200003c0 returned -14 [ 431.691669][T21280] binder: 21277:21280 ioctl c0306201 200003c0 returned -14 00:03:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xfffffc, 0x811, r1, 0x0) 00:03:20 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:20 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) [ 432.561978][T21312] binder: 21311:21312 ioctl c0306201 20000440 returned -14 [ 432.676596][ T2987] binder: release 21311:21312 transaction 57 out, still active [ 432.702168][ T2987] binder: undelivered TRANSACTION_COMPLETE [ 432.745558][ T2987] binder: send failed reply for transaction 57, target dead 00:03:21 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) r1 = open(&(0x7f0000001580)='./file0\x00', 0x240000, 0x82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0xe0000000, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x82) write$evdev(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) 00:03:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x401}) 00:03:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:03:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 00:03:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x401}) [ 433.083643][T21322] binder: 21321:21322 ioctl c0306201 20000440 returned -14 [ 433.144472][ T2987] binder: release 21321:21322 transaction 61 out, still active [ 433.162033][ T2987] binder: undelivered TRANSACTION_COMPLETE 00:03:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 00:03:21 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', 'md5sum}%^\x00']}, 0x13) 00:03:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x401}) 00:03:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 433.191230][ T2987] binder: send failed reply for transaction 61, target dead 00:03:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 433.260433][T21332] binder: 21331:21332 ioctl c0306201 20000440 returned -14 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 433.306008][T21338] AppArmor: change_hat: Invalid input '0x0000000' [ 433.329536][ T2987] binder: release 21331:21332 transaction 65 out, still active [ 433.345606][T21340] binder: BINDER_SET_CONTEXT_MGR already set [ 433.350149][ T2987] binder: undelivered TRANSACTION_COMPLETE 00:03:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x401}) 00:03:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', 'md5sum}%^\x00']}, 0x13) [ 433.380996][T21340] binder: 21339:21340 ioctl 40046207 0 returned -16 [ 433.411984][ T2987] binder: send failed reply for transaction 65, target dead 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:03:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:03:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:03:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 00:03:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', 'md5sum}%^\x00']}, 0x13) 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 433.512561][T21353] AppArmor: change_hat: Invalid input '0x0000000' [ 433.598362][T21362] binder: 21360:21362 ioctl 8936 20000100 returned -22 00:03:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:03:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 433.644625][T21365] AppArmor: change_hat: Invalid input '0x0000000' [ 433.650150][T21366] binder: 21360:21366 got reply transaction with no transaction stack 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:03:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:22 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=@hat={'changehat ', 0x0, 0x5e, ['/proc/thread-self/attr/current\x00', 'md5sum}%^\x00']}, 0x13) 00:03:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:03:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 433.768765][T21366] binder: 21360:21366 transaction failed 29201/-71, size 0-0 line 2899 [ 433.777653][T21379] AppArmor: change_hat: Invalid input '0x0000000' [ 433.800178][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:03:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 00:03:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 433.916820][T21385] binder: 21384:21385 ioctl 8936 20000100 returned -22 [ 433.940987][T21385] binder: 21384:21385 got reply transaction with no transaction stack [ 433.954538][T21388] binder: 21387:21388 ioctl 8936 20000100 returned -22 00:03:22 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) [ 433.959160][T21385] binder: 21384:21385 transaction failed 29201/-71, size 0-0 line 2899 00:03:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 00:03:22 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 434.015018][T21388] binder: 21387:21388 got reply transaction with no transaction stack [ 434.024387][ T2987] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.054846][T21388] binder: 21387:21388 transaction failed 29201/-71, size 0-0 line 2899 00:03:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 434.104018][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:03:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) [ 434.163388][T21402] binder: 21401:21402 ioctl 8936 20000100 returned -22 00:03:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 00:03:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) [ 434.247163][T21402] binder: 21401:21402 got reply transaction with no transaction stack [ 434.267164][T21402] binder: 21401:21402 transaction failed 29201/-71, size 0-0 line 2899 [ 434.271315][T21405] binder: 21404:21405 ioctl 8936 20000100 returned -22 00:03:23 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@local, 0x42}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000140)=""/245, &(0x7f0000000280)=0xf5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000900)=[@transaction_sg={0x40046307, {{0x0, 0x40486312, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 434.317168][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.351055][T21405] binder: 21404:21405 got reply transaction with no transaction stack [ 434.407003][T21405] binder: 21404:21405 transaction failed 29201/-71, size 0-0 line 2899 [ 434.439209][T21420] binder: 21419:21420 ioctl 8936 20000100 returned -22 00:03:23 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 434.476273][ T5] binder: undelivered TRANSACTION_ERROR: 29201 [ 434.518718][T21420] binder: 21419:21420 got reply transaction with no transaction stack 00:03:23 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:23 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 434.638632][T21420] binder: 21419:21420 transaction failed 29201/-71, size 0-0 line 2899 00:03:23 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) [ 434.771642][ T5] binder: undelivered TRANSACTION_ERROR: 29201 00:03:23 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:23 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:23 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:23 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:24 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:24 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:24 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:24 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:25 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000269, 0xf0ff7f00000000) 00:03:25 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2000000000000}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x0, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x0, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x200000, 0x0, 0x1000, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2cb3, 0x7, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x82, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)="5c195772864583bec847f2c6fb876dac7e566b1240169fe75e19f3fc3ecae3f4d24c5cf12e9b8c187a8d95bb0a3f9b6a854e49962e2c31a155edbca2a6cc8de47272781bafbaa0a4dd1a584e8ab21484ffafdd2477a0a24f278460cb71730afbfc2c61b14daf98d5dffbd0472992adff47437cd3d82b1e2eec3247b103432f7c955b4081b7e1c3b2a0871a413f9184fa", 0x90, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000006c0)=""/23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(0x0, 0x8000000000000020) syz_open_dev$dmmidi(&(0x7f0000000a80)='/dev/dmmidi#\x00', 0x9, 0x440100) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000280)={0x7d, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='em0mime_typecpuset\x00'}, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) io_setup(0x5, &(0x7f0000000580)) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'ifb0\x00', 0x1ff}) get_mempolicy(&(0x7f0000000a00), &(0x7f0000000a40), 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) 00:03:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:25 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRES32], 0xffffffee) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x2003e8, 0x0) 00:03:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:27 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:27 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, &(0x7f00000002c0)) 00:03:27 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:27 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:31 executing program 2: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:31 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:31 executing program 5: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000280)=@vsock, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]}, 0xc000) accept(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 00:03:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'vet\x00\x00\x00\x00\x01\x80\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) dup2(r2, r1) bpf$MAP_CREATE(0x0, 0x0, 0x7c0ec13036f98a6f) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:03:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:03:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:03:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) [ 455.288595][T11769] device bridge_slave_1 left promiscuous mode [ 455.295487][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.335430][T11769] device bridge_slave_0 left promiscuous mode [ 455.341635][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.386399][T11769] device bridge_slave_1 left promiscuous mode [ 455.392727][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.435560][T11769] device bridge_slave_0 left promiscuous mode [ 455.441860][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.486934][T11769] device bridge_slave_1 left promiscuous mode [ 455.493241][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.545298][T11769] device bridge_slave_0 left promiscuous mode [ 455.551496][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.586364][T11769] device bridge_slave_1 left promiscuous mode [ 455.592582][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.635109][T11769] device bridge_slave_0 left promiscuous mode [ 455.641271][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.696010][T11769] device bridge_slave_1 left promiscuous mode [ 455.702183][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.735513][T11769] device bridge_slave_0 left promiscuous mode [ 455.741747][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.805490][T11769] device bridge_slave_1 left promiscuous mode [ 455.811651][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.885994][T11769] device bridge_slave_0 left promiscuous mode [ 455.892227][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.946205][T11769] device bridge_slave_1 left promiscuous mode [ 455.952432][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.015161][T11769] device bridge_slave_0 left promiscuous mode [ 456.021348][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.056352][T11769] device bridge_slave_1 left promiscuous mode [ 456.062566][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.115893][T11769] device bridge_slave_0 left promiscuous mode [ 456.122127][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.166875][T11769] device bridge_slave_1 left promiscuous mode [ 456.173095][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.234953][T11769] device bridge_slave_0 left promiscuous mode [ 456.241117][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.316062][T11769] device bridge_slave_1 left promiscuous mode [ 456.322281][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.395622][T11769] device bridge_slave_0 left promiscuous mode [ 456.401841][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.456201][T11769] device bridge_slave_1 left promiscuous mode [ 456.462407][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.504929][T11769] device bridge_slave_0 left promiscuous mode [ 456.511139][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.576194][T11769] device bridge_slave_1 left promiscuous mode [ 456.582410][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.635274][T11769] device bridge_slave_0 left promiscuous mode [ 456.641579][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.696325][T11769] device bridge_slave_1 left promiscuous mode [ 456.702543][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.755273][T11769] device bridge_slave_0 left promiscuous mode [ 456.761481][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.257166][T11769] device hsr_slave_1 left promiscuous mode [ 486.299543][T11769] device hsr_slave_0 left promiscuous mode [ 486.339541][T11769] team0 (unregistering): Port device team_slave_1 removed [ 486.352949][T11769] team0 (unregistering): Port device team_slave_0 removed [ 486.366015][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 486.426585][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 486.522897][T11769] bond0 (unregistering): Released all slaves [ 486.687456][T11769] device hsr_slave_1 left promiscuous mode [ 486.729678][T11769] device hsr_slave_0 left promiscuous mode [ 486.789135][T11769] team0 (unregistering): Port device team_slave_1 removed [ 486.802650][T11769] team0 (unregistering): Port device team_slave_0 removed [ 486.818317][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 486.870559][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 486.962034][T11769] bond0 (unregistering): Released all slaves [ 487.137588][T11769] device hsr_slave_1 left promiscuous mode [ 487.179760][T11769] device hsr_slave_0 left promiscuous mode [ 487.249317][T11769] team0 (unregistering): Port device team_slave_1 removed [ 487.263100][T11769] team0 (unregistering): Port device team_slave_0 removed [ 487.278050][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 487.350571][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 487.449176][T11769] bond0 (unregistering): Released all slaves [ 487.647507][T11769] device hsr_slave_1 left promiscuous mode [ 487.689733][T11769] device hsr_slave_0 left promiscuous mode [ 487.749286][T11769] team0 (unregistering): Port device team_slave_1 removed [ 487.763336][T11769] team0 (unregistering): Port device team_slave_0 removed [ 487.775453][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 487.838306][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 487.928397][T11769] bond0 (unregistering): Released all slaves [ 488.087078][T11769] device hsr_slave_1 left promiscuous mode [ 488.139814][T11769] device hsr_slave_0 left promiscuous mode [ 488.198514][T11769] team0 (unregistering): Port device team_slave_1 removed [ 488.215862][T11769] team0 (unregistering): Port device team_slave_0 removed [ 488.228741][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 488.298981][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 488.375591][T11769] bond0 (unregistering): Released all slaves [ 488.516389][T11769] device hsr_slave_1 left promiscuous mode [ 488.590020][T11769] device hsr_slave_0 left promiscuous mode [ 488.649102][T11769] team0 (unregistering): Port device team_slave_1 removed [ 488.662620][T11769] team0 (unregistering): Port device team_slave_0 removed [ 488.677661][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 488.740316][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 488.842439][T11769] bond0 (unregistering): Released all slaves [ 489.007418][T11769] device hsr_slave_1 left promiscuous mode [ 489.049134][T11769] device hsr_slave_0 left promiscuous mode [ 489.109289][T11769] team0 (unregistering): Port device team_slave_1 removed [ 489.126148][T11769] team0 (unregistering): Port device team_slave_0 removed [ 489.138590][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 489.179809][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 489.283136][T11769] bond0 (unregistering): Released all slaves [ 489.446513][T11769] device hsr_slave_1 left promiscuous mode [ 489.508290][T11769] device hsr_slave_0 left promiscuous mode [ 489.568340][T11769] team0 (unregistering): Port device team_slave_1 removed [ 489.585956][T11769] team0 (unregistering): Port device team_slave_0 removed [ 489.610370][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 489.661502][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 489.764313][T11769] bond0 (unregistering): Released all slaves [ 489.918486][T11769] device hsr_slave_1 left promiscuous mode [ 489.979412][T11769] device hsr_slave_0 left promiscuous mode [ 490.039204][T11769] team0 (unregistering): Port device team_slave_1 removed [ 490.054007][T11769] team0 (unregistering): Port device team_slave_0 removed [ 490.068830][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 490.120842][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 490.224036][T11769] bond0 (unregistering): Released all slaves [ 490.388582][T11769] device hsr_slave_1 left promiscuous mode [ 490.450097][T11769] device hsr_slave_0 left promiscuous mode [ 490.489526][T11769] team0 (unregistering): Port device team_slave_1 removed [ 490.503005][T11769] team0 (unregistering): Port device team_slave_0 removed [ 490.515812][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 490.539937][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 490.637766][T11769] bond0 (unregistering): Released all slaves [ 490.819078][T11769] device hsr_slave_1 left promiscuous mode [ 490.879451][T11769] device hsr_slave_0 left promiscuous mode [ 490.949285][T11769] team0 (unregistering): Port device team_slave_1 removed [ 490.960862][T11769] team0 (unregistering): Port device team_slave_0 removed [ 490.975739][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.041829][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.164577][T11769] bond0 (unregistering): Released all slaves [ 491.317419][T11769] device hsr_slave_1 left promiscuous mode [ 491.379620][T11769] device hsr_slave_0 left promiscuous mode [ 491.439287][T11769] team0 (unregistering): Port device team_slave_1 removed [ 491.452871][T11769] team0 (unregistering): Port device team_slave_0 removed [ 491.467744][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.520307][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 491.602139][T11769] bond0 (unregistering): Released all slaves [ 491.748689][T11769] device hsr_slave_1 left promiscuous mode [ 491.819324][T11769] device hsr_slave_0 left promiscuous mode [ 491.879114][T11769] team0 (unregistering): Port device team_slave_1 removed [ 491.897329][T11769] team0 (unregistering): Port device team_slave_0 removed [ 491.911252][T11769] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 491.960638][T11769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 492.060130][T11769] bond0 (unregistering): Released all slaves 00:04:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x287, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xffffffaa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3502}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x30}}, 0x0) 00:04:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3502}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x30}}, 0x0) 00:04:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000740)=""/75) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x30008001}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xc4, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) dup2(r2, r0) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) io_cancel(0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) getpgid(0xffffffffffffffff) 00:04:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3502}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x30}}, 0x0) 00:04:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:24 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) [ 495.265565][T21875] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:24 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:24 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3502}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x30}}, 0x0) [ 495.500901][T21895] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:24 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) [ 496.017031][T21915] tls_set_device_offload_rx: netdev lo with no TLS offload [ 496.027728][T21912] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) [ 496.322302][T21925] tls_set_device_offload_rx: netdev lo with no TLS offload [ 496.362762][T21927] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) [ 496.673031][T21936] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) [ 496.931849][T21946] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) [ 497.347626][T21955] tls_set_device_offload_rx: netdev lo with no TLS offload [ 497.388876][T21958] tls_set_device_offload_rx: netdev lo with no TLS offload 00:04:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:26 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000780)=[&(0x7f0000000680)='em1cgroup!{#em0:ppp0$\x00'], 0x1000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x82}}, 0xfffffffffffffdac) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) r4 = socket(0x1e, 0x80001, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r5, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10000000000001, 0x0, r4, &(0x7f0000000080), 0x121}]) lstat(0x0, &(0x7f0000007c80)) getresuid(&(0x7f0000007d00), &(0x7f0000007d40), &(0x7f0000007d80)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000007f80)) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001a40)={0x0, 0x3, "1c95a1"}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202074727573746d642620140fa4549fde2958818ab9bb"], 0x21) getpeername$packet(r3, 0x0, 0x0) 00:04:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl(r0, 0x10000b701, 0x0) 00:04:26 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:26 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl(r0, 0x10000b701, 0x0) 00:04:26 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:26 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 00:04:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") modify_ldt$write(0x1, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) 00:04:27 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl(r0, 0x10000b701, 0x0) 00:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") modify_ldt$write(0x1, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) 00:04:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:27 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00') ioctl(r0, 0x10000b701, 0x0) 00:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") modify_ldt$write(0x1, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) 00:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") modify_ldt$write(0x1, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) 00:04:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100), 0x28) r1 = open(0x0, 0x0, 0x0) getsockname$netlink(r1, &(0x7f0000000140), 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000280)=""/124, 0xfeab}, {&(0x7f0000000780)=""/217}, {&(0x7f0000000980)=""/241}, {&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/4096}, {&(0x7f0000000880)=""/70}, {&(0x7f0000000300)=""/54}], 0x0, &(0x7f0000000340)=""/160, 0xa0}}], 0x569, 0x0, &(0x7f00000001c0)={0x77359400}) shutdown(r0, 0x0) 00:04:27 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:27 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0xc0245720, &(0x7f0000000100)) 00:04:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 00:04:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x0) 00:04:27 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 00:04:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) [ 498.985980][T22038] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 00:04:27 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 499.067793][T22038] bond0: lo is up - this may be due to an out of date ifenslave [ 499.082821][T22038] net_ratelimit: 6 callbacks suppressed [ 499.082830][T22038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:04:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 00:04:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x0) [ 499.329406][T22054] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 499.349199][T22054] bond0: lo is up - this may be due to an out of date ifenslave [ 499.358759][T22054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:04:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x0) 00:04:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:28 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 00:04:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 00:04:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 499.547243][T22065] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 00:04:28 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 499.636486][T22065] bond0: lo is up - this may be due to an out of date ifenslave [ 499.665871][T22065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:04:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x30}}, 0x0) 00:04:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 00:04:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) [ 499.927117][T22083] bond0: enslaved VLAN challenged slave lo. Adding VLANs will be blocked as long as lo is part of bond bond0 [ 499.983378][T22083] bond0: lo is up - this may be due to an out of date ifenslave [ 500.018138][T22083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 00:04:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'hsr0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 00:04:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 00:04:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'hsr0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 00:04:30 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001540)='cgroup2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000280)=""/4096, 0x82f) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) 00:04:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'hsr0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 00:04:30 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001540)='cgroup2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000280)=""/4096, 0x82f) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) 00:04:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:04:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'hsr0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{}]}}) 00:04:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:04:30 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001540)='cgroup2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000280)=""/4096, 0x82f) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) 00:04:30 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001540)='cgroup2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000280)=""/4096, 0x82f) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) 00:04:31 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001580)='./file0\x00', &(0x7f0000001540)='cgroup2\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents(r0, &(0x7f0000000280)=""/4096, 0x82f) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x80000009) getdents(r0, 0x0, 0x0) [ 687.334298][ T1041] INFO: task khugepaged:1048 blocked for more than 143 seconds. [ 687.341987][ T1041] Not tainted 5.1.0-rc1 #28 [ 687.348404][ T1041] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 687.357443][ T1041] khugepaged D26472 1048 2 0x80000000 [ 687.363788][ T1041] Call Trace: [ 687.371969][ T1041] __schedule+0x817/0x1cc0 [ 687.376811][ T1041] ? __sched_text_start+0x8/0x8 [ 687.381673][ T1041] ? rwsem_down_write_failed+0x764/0xc30 [ 687.387673][ T1041] ? _raw_spin_unlock_irq+0x28/0x90 [ 687.392885][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 687.398533][ T1041] schedule+0x92/0x180 [ 687.402608][ T1041] rwsem_down_write_failed+0x774/0xc30 [ 687.408421][ T1041] ? rwsem_down_read_failed+0x420/0x420 [ 687.413973][ T1041] ? mark_held_locks+0xf0/0xf0 [ 687.419106][ T1041] call_rwsem_down_write_failed+0x17/0x30 [ 687.425128][ T1041] ? call_rwsem_down_write_failed+0x17/0x30 [ 687.431050][ T1041] down_write+0x53/0x90 [ 687.435556][ T1041] ? collapse_huge_page+0x22b/0x3f60 [ 687.440849][ T1041] collapse_huge_page+0x22b/0x3f60 [ 687.446312][ T1041] ? khugepaged+0x289f/0x3f40 [ 687.451007][ T1041] ? __collapse_huge_page_swapin+0xe70/0xe70 [ 687.457351][ T1041] ? lock_downgrade+0x880/0x880 [ 687.462228][ T1041] ? __pte_alloc_kernel+0x220/0x220 [ 687.468285][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 687.475587][ T1041] ? khugepaged_find_target_node+0x142/0x180 [ 687.481578][ T1041] khugepaged+0x28c3/0x3f40 [ 687.486568][ T1041] ? collapse_huge_page+0x3f60/0x3f60 [ 687.492011][ T1041] ? finish_wait+0x260/0x260 [ 687.497822][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 687.503385][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 687.508938][ T1041] ? kasan_check_read+0x11/0x20 [ 687.513883][ T1041] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 687.520251][ T1041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 687.527038][ T1041] ? __kthread_parkme+0xfb/0x1b0 [ 687.532061][ T1041] kthread+0x357/0x430 [ 687.536571][ T1041] ? collapse_huge_page+0x3f60/0x3f60 [ 687.542008][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 687.548681][ T1041] ret_from_fork+0x3a/0x50 [ 687.553376][ T1041] [ 687.553376][ T1041] Showing all locks held in the system: [ 687.561569][ T1041] 1 lock held by khungtaskd/1041: [ 687.566962][ T1041] #0: 0000000013bc3edf (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 687.576773][ T1041] 1 lock held by khugepaged/1048: [ 687.581846][ T1041] #0: 000000006fb25112 (&mm->mmap_sem){++++}, at: collapse_huge_page+0x22b/0x3f60 [ 687.591636][ T1041] 1 lock held by rsyslogd/7495: [ 687.596997][ T1041] #0: 000000003457f744 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 687.606752][ T1041] 2 locks held by getty/7608: [ 687.611493][ T1041] #0: 00000000562411d8 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.620892][ T1041] #1: 00000000d6e162af (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.632673][ T1041] 2 locks held by getty/7609: [ 687.637762][ T1041] #0: 00000000f9607a51 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.647112][ T1041] #1: 0000000090675ef5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.657272][ T1041] 2 locks held by getty/7610: [ 687.661998][ T1041] #0: 00000000055c083e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.671399][ T1041] #1: 000000004f9ff89a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.681509][ T1041] 2 locks held by getty/7611: [ 687.694088][ T1041] #0: 000000002ecd3884 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.703105][ T1041] #1: 000000003500ff64 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.721025][ T1041] 2 locks held by getty/7612: [ 687.726140][ T1041] #0: 00000000b177d00a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.740782][ T1041] #1: 0000000069bd04bd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.750803][ T1041] 2 locks held by getty/7613: [ 687.760967][ T1041] #0: 0000000056045b8f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.770338][ T1041] #1: 000000009415a5e7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.785839][ T1041] 2 locks held by getty/7614: [ 687.790577][ T1041] #0: 0000000072f13a65 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 687.803340][ T1041] #1: 000000002d767cde (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 687.816478][ T1041] 1 lock held by syz-fuzzer/7641: [ 687.821695][ T1041] [ 687.829512][ T1041] ============================================= [ 687.829512][ T1041] [ 687.840860][ T1041] NMI backtrace for cpu 1 [ 687.845303][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc1 #28 [ 687.852761][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.862806][ T1041] Call Trace: [ 687.866099][ T1041] dump_stack+0x172/0x1f0 [ 687.870433][ T1041] nmi_cpu_backtrace.cold+0x63/0xa4 [ 687.875728][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 687.881361][ T1041] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 687.887345][ T1041] arch_trigger_cpumask_backtrace+0x14/0x20 [ 687.893270][ T1041] watchdog+0x9b7/0xec0 [ 687.897519][ T1041] kthread+0x357/0x430 [ 687.901583][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 687.907222][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 687.913463][ T1041] ret_from_fork+0x3a/0x50 [ 687.918007][ T1041] Sending NMI from CPU 1 to CPUs 0: [ 687.924096][ C0] NMI backtrace for cpu 0 [ 687.924101][ C0] CPU: 0 PID: 7641 Comm: syz-fuzzer Not tainted 5.1.0-rc1 #28 [ 687.924106][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.924119][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4b/0x50 [ 687.924133][ C0] Code: 90 e0 12 00 00 83 fa 02 75 20 48 8b 88 e8 12 00 00 8b 80 e4 12 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 <5d> c3 0f 1f 00 65 4c 8b 04 25 00 ee 01 00 65 8b 05 a0 7d 91 7e a9 [ 687.924137][ C0] RSP: 0018:ffff88808cf7f1d8 EFLAGS: 00000293 [ 687.924144][ C0] RAX: ffff88808d73a200 RBX: 0000000000000000 RCX: ffffffff81987b59 [ 687.924149][ C0] RDX: 0000000000000000 RSI: ffffffff81987acd RDI: 7ffffdd53fdd7a00 [ 687.924153][ C0] RBP: ffff88808cf7f1d8 R08: ffff88808d73a200 R09: ffffed1025fff5c0 [ 687.924157][ C0] R10: ffffed1025fff5bf R11: ffff88812fffadff R12: 0000000000000000 [ 687.924162][ C0] R13: 7ffffdd53fdd7c00 R14: ffff88808cf7f630 R15: 7ffffdd53fdd7a00 [ 687.924167][ C0] FS: 000000c420026e68(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 687.924171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 687.924176][ C0] CR2: ffffffffff600400 CR3: 0000000099435000 CR4: 00000000001406f0 [ 687.924180][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 687.924185][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 687.924187][ C0] Call Trace: [ 687.924191][ C0] compaction_alloc+0x112d/0x2290 [ 687.924194][ C0] ? isolate_freepages_block+0xd40/0xd40 [ 687.924197][ C0] migrate_pages+0x484/0x2cd0 [ 687.924200][ C0] ? __ClearPageMovable+0x250/0x250 [ 687.924204][ C0] ? isolate_freepages_block+0xd40/0xd40 [ 687.924207][ C0] compact_zone+0x1b56/0x38d0 [ 687.924210][ C0] ? compaction_suitable+0x3b0/0x3b0 [ 687.924213][ C0] ? mark_held_locks+0xa4/0xf0 [ 687.924216][ C0] compact_zone_order+0x1af/0x2a0 [ 687.924219][ C0] ? compact_zone+0x38d0/0x38d0 [ 687.924222][ C0] ? sched_clock+0x2e/0x50 [ 687.924226][ C0] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 687.924229][ C0] try_to_compact_pages+0x268/0xaf0 [ 687.924232][ C0] __alloc_pages_direct_compact+0x154/0x4d0 [ 687.924236][ C0] ? get_page_from_freelist+0x4170/0x4170 [ 687.924239][ C0] ? __isolate_free_page+0x4c0/0x4c0 [ 687.924242][ C0] ? mutex_unlock+0xd/0x10 [ 687.924245][ C0] ? drain_all_pages+0x408/0x590 [ 687.924249][ C0] __alloc_pages_slowpath+0xb14/0x28b0 [ 687.924252][ C0] ? warn_alloc+0x110/0x110 [ 687.924255][ C0] ? find_held_lock+0x35/0x130 [ 687.924258][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 687.924261][ C0] ? should_fail+0x1de/0x852 [ 687.924264][ C0] ? __isolate_free_page+0x4c0/0x4c0 [ 687.924268][ C0] ? ___might_sleep+0x163/0x280 [ 687.924271][ C0] __alloc_pages_nodemask+0x57e/0x7e0 [ 687.924274][ C0] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 687.924278][ C0] ? __lock_acquire+0x548/0x3fb0 [ 687.924281][ C0] ? mem_cgroup_throttle_swaprate+0x196/0x66e [ 687.924285][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 687.924289][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 687.924292][ C0] alloc_pages_vma+0x39a/0x540 [ 687.924295][ C0] do_huge_pmd_anonymous_page+0x509/0x1730 [ 687.924298][ C0] ? __thp_get_unmapped_area+0x190/0x190 [ 687.924301][ C0] ? pmd_val+0x100/0x100 [ 687.924304][ C0] ? __lock_acquire+0x548/0x3fb0 [ 687.924307][ C0] __handle_mm_fault+0x2d5e/0x3ec0 [ 687.924310][ C0] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 687.924313][ C0] ? find_held_lock+0x35/0x130 [ 687.924315][ C0] ? handle_mm_fault+0x322/0xb30 [ 687.924319][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 687.924321][ C0] ? sync_mm_rss+0xa4/0x1c0 [ 687.924324][ C0] handle_mm_fault+0x43f/0xb30 [ 687.924327][ C0] __do_page_fault+0x5ef/0xda0 [ 687.924329][ C0] do_page_fault+0x71/0x581 [ 687.924332][ C0] ? page_fault+0x8/0x30 [ 687.924334][ C0] page_fault+0x1e/0x30 [ 687.924337][ C0] RIP: 0033:0x45cfa3 [ 687.924346][ C0] Code: 00 48 81 eb 00 01 00 00 48 81 c7 00 01 00 00 48 81 fb 00 01 00 00 73 82 e9 07 ff ff ff c5 fd ef c0 48 81 fb 00 00 00 02 73 46 fe 7f 07 c5 fe 7f 47 20 c5 fe 7f 47 40 c5 fe 7f 47 60 48 81 eb [ 687.924349][ C0] RSP: 002b:000000c42016be78 EFLAGS: 00010287 [ 687.924355][ C0] RAX: 0000000000000000 RBX: 0000000000002000 RCX: 0000000000002000 [ 687.924359][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 000000c424200000 [ 687.924363][ C0] RBP: 000000c42016bec0 R08: 000000c000000000 R09: 0000000000002100 [ 687.924367][ C0] R10: 0000000000bceb20 R11: 0000000000000004 R12: 0000000000000000 [ 687.924371][ C0] R13: 0000000000000020 R14: 0000000000000013 R15: 0000000000000008 [ 687.924883][ T1041] Kernel panic - not syncing: hung_task: blocked tasks [ 688.377900][ T1041] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.1.0-rc1 #28 [ 688.385348][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.395397][ T1041] Call Trace: [ 688.398691][ T1041] dump_stack+0x172/0x1f0 [ 688.403020][ T1041] panic+0x2cb/0x65c [ 688.406909][ T1041] ? __warn_printk+0xf3/0xf3 [ 688.411501][ T1041] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 688.417162][ T1041] ? ___preempt_schedule+0x16/0x18 [ 688.422282][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 688.428448][ T1041] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 688.434603][ T1041] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 688.440839][ T1041] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 688.446994][ T1041] watchdog+0x9c8/0xec0 [ 688.451156][ T1041] kthread+0x357/0x430 [ 688.455224][ T1041] ? reset_hung_task_detector+0x30/0x30 [ 688.460763][ T1041] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 688.468949][ T1041] ret_from_fork+0x3a/0x50 [ 688.474746][ T1041] Kernel Offset: disabled [ 688.479196][ T1041] Rebooting in 86400 seconds..