fff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) 05:13:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 05:13:19 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) 05:13:19 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) 05:13:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 05:13:19 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 05:13:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1, 0x3, 0xffffffffffffffff}, 0x14}}, 0x0) 05:13:26 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:13:26 executing program 5: r0 = socket$inet(0x10, 0x803, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x214, &(0x7f00000000c0)=[{&(0x7f0000000140)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000047c0), 0x40001cc, 0x0, 0x0) 05:13:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 05:13:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x95) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) clone(0x800003102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, 0x0, 0x0) 05:13:26 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) 05:13:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) 05:13:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) 05:13:26 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f0f76f354948cd22c57b8dec54f1931d9d3a22020fd1bb733b5fc06db5dcb97d5cc0561e5bb6e1750de124991e7d6d5ace1af702aa422baf6698af41d70461d46b5640804c6bb0e5329d3b68109970aee15e0a0e9a189fdd4"], 0x86, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:13:26 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) 05:13:26 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f0f76f354948cd22c57b8dec54f1931d9d3a22020fd1bb733b5fc06db5dcb97d5cc0561e5bb6e1750de124991e7d6d5ace1af702aa422baf6698af41d70461d46b5640804c6bb0e5329d3b68109970aee15e0a0e9a189fdd4"], 0x86, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:33 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:13:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x0, 0x6}) 05:13:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:13:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f0f76f354948cd22c57b8dec54f1931d9d3a22020fd1bb733b5fc06db5dcb97d5cc0561e5bb6e1750de124991e7d6d5ace1af702aa422baf6698af41d70461d46b5640804c6bb0e5329d3b68109970aee15e0a0e9a189fdd4"], 0x86, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:33 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) 05:13:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f0f76f354948cd22c57b8dec54f1931d9d3a22020fd1bb733b5fc06db5dcb97d5cc0561e5bb6e1750de124991e7d6d5ace1af702aa422baf6698af41d70461d46b5640804c6bb0e5329d3b68109970aee15e0a0e9a189fdd4"], 0x86, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:13:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x16, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) utime(0x0, 0x0) 05:13:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:13:33 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000001}]}) 05:13:40 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:13:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000018c0)=ANY=[@ANYBLOB="6b0426b1804c8cd8fdb97270d69e6f9a6129c4e9f3771a1df51acac1a866fa0dffe88db0ecb373f317dbf7bf1bdb0eae4527c35ac3"]) 05:13:40 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101001, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x1, 0x3}, 0x8) 05:13:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:40 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) 05:13:40 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:40 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 05:13:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) 05:13:40 executing program 5: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x88, 0xa, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0xcc7a, @remote}, 0x10, 0x0}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 05:13:40 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_cache\x00') read$alg(r0, &(0x7f0000000280)=""/219, 0xdb) 05:13:41 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101001, 0x0) write$rfkill(r0, &(0x7f0000000180)={0x0, 0x1, 0x3}, 0x8) 05:13:41 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:47 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:47 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 05:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:47 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 05:13:47 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f0f76f354948cd22c57b8dec54f1931d9d3a22020fd1bb733b5fc06db5dcb97d5cc0561e5bb6e1750de124991e7d6d5ace1af702aa422baf6698af41d70461d46b5640804c6bb0e5329d3b68109970aee15e0a0e9a189fdd4"], 0x86, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:47 executing program 0: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 05:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:54 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) dup2(0xffffffffffffffff, r1) 05:13:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:54 executing program 0: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 05:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) dup2(0xffffffffffffffff, r1) 05:13:54 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) dup2(0xffffffffffffffff, r1) 05:13:54 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) 05:13:54 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) 05:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:55 executing program 0: msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:55 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) 05:13:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) 05:13:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:55 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:55 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:55 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:56 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:56 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:56 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:56 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[], 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:56 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:56 executing program 4: 05:13:56 executing program 4: 05:13:56 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:57 executing program 4: 05:13:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:57 executing program 4: 05:13:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:57 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[], 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:57 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:57 executing program 4: 05:13:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 05:13:57 executing program 4: 05:13:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:58 executing program 4: 05:13:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:58 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[], 0x0, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:58 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:58 executing program 4: 05:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:58 executing program 4: 05:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:58 executing program 4: 05:13:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:59 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:13:59 executing program 4: 05:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:59 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:13:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b00") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:13:59 executing program 4: 05:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:13:59 executing program 4: 05:13:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:13:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)) r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:00 executing program 4: 05:14:00 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:00 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:00 executing program 4: 05:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:00 executing program 4: 05:14:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:00 executing program 4: 05:14:01 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:01 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:01 executing program 4: 05:14:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001f7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) 05:14:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:01 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:02 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000000000008edf95391d4797d92ba2c757177c6cb9b603e5ea14b5578bbec89457e7b00dd80f9b2283e4094efd39d07b526a3434be2107834465943c8b0b92d99d5d0c6b68c6274290edd50f0000cb9cb723bf8a4e6f"], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:02 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:02 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b00") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r3, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b00") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:02 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001f7e, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) move_pages(0x0, 0x20000047, &(0x7f0000000080), 0x0, &(0x7f0000000100), 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:14:03 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:03 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:03 executing program 2: r0 = memfd_create(0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b00") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:03 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x0, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:03 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:03 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x0, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x8000}) 05:14:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x0, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:05 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:05 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:06 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) 05:14:06 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 2408.365637][ T23] audit: type=1800 audit(1571894046.823:705): pid=9932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16834 res=0 05:14:06 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:07 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fstat(r1, &(0x7f0000000240)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x0, 0x6, {{0x6, 0x0, 0x3, 0x2, 0xcba, 0x0, {0x5, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x101, 0x4, 0x8, 0x100000, 0x0, 0x0, 0x4}}, {0x0, 0x1c}}}, 0xa0) creat(0x0, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) io_setup(0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = creat(0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x0, 0x3) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 05:14:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:07 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:07 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 05:14:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:07 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:07 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:08 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 05:14:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:08 executing program 4: write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x208200) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)) setuid(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fstat(r1, &(0x7f0000000240)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x0, 0x6, {{0x6, 0x0, 0x3, 0x2, 0xcba, 0x0, {0x5, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x101, 0x4, 0x8, 0x100000, 0x0, 0x0, 0x4}}, {0x0, 0x1c}}}, 0xa0) creat(0x0, 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) io_setup(0x8, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = creat(0x0, 0x0) lseek(r3, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) lseek(r3, 0x0, 0x3) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 05:14:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:08 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:08 executing program 0: msgsnd(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02"], 0x1, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 05:14:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) 05:14:08 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) 05:14:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) [ 2410.242320][T10445] sp0: Synchronizing with TNC 05:14:08 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r1) [ 2410.501535][T10445] sp0: Synchronizing with TNC 05:14:09 executing program 4: 05:14:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 05:14:09 executing program 0: madvise(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x12) clone(0x0, 0x0, 0x0, 0x0, 0x0) 05:14:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:09 executing program 0: 05:14:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 05:14:09 executing program 4: 05:14:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:10 executing program 0: 05:14:10 executing program 4: 05:14:10 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 05:14:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\xb4r\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x6}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) 05:14:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x2000000000000005) 05:14:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) 05:14:10 executing program 0: socket(0x10, 0x2, 0xfe) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000005c0)="3c6ac57f337075a028ae9ef612a93245dd2b7ead8f897521735a0f50069dee63117897945151ecbafdd03f28ea11d716", 0x30}], 0x1000000000000360, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x900000000000000) r1 = socket$packet(0x11, 0x3, 0x300) dup2(0xffffffffffffffff, r1) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) r3 = add_key$keyring(&(0x7f0000000580)='keyrinf\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f00000001c0)=""/217) keyctl$setperm(0x5, r3, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x99, 0x0) readlinkat(r6, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)=""/69, 0x45) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000280)=""/46) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7, 0x0, 0x0, 0x7, 0x0, 0x1f, 0x84100, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x7, 0x0, 0x1, 0x40, 0xfeff}, r7, 0xb, r4, 0x6) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) pipe(&(0x7f0000000700)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) open$dir(0x0, 0x0, 0x40) open(0x0, 0x0, 0x0) 05:14:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) [ 2412.494226][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.494916][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.500066][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.512711][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.520825][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.527369][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.574209][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2412.574243][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2412.580042][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:14:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2412.732366][T10538] sg_write: process 2792 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 05:14:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:11 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071") socket$inet6(0xa, 0x80003, 0xff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, 0xffffffffffffffff) 05:14:11 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xac, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb4}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 05:14:11 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirecs\x00', 0x0, 0x0, 0x0) 05:14:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:11 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:11 executing program 0: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r1, 0x0) ftruncate(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) 05:14:11 executing program 4: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mremap(&(0x7f0000b7b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000598000/0x2000)=nil) 05:14:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:12 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)}], 0x3}, 0x0) clone(0x800007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="13d50f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0cda366f0001aeac44b8055fadbfac2a7dfe5d4965c1dcbe2544be6077bf0925f49126b4bd2dcbf0c45ceecc872b5607000000000000", @ANYBLOB="8a7cfcb0bd543a07372504167b455ddfd0640764ef04ff46cf47e8137f38ee38898fd565996a1a1f4cd1b86a0e031dff"], 0x0, 0x66}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:14:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) [ 2413.891995][T10699] ptrace attach of "/root/syz-executor.4"[10696] was attempted by "/root/syz-executor.4"[10699] 05:14:12 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mlockall(0x3) pipe(&(0x7f0000000080)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) pipe(0x0) 05:14:12 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:12 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x40000000000025d, 0x0) 05:14:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:13 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00') 05:14:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 05:14:13 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:14 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) dup2(0xffffffffffffffff, r2) 05:14:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2283, &(0x7f0000000100)={0x7d, ""/125}) 05:14:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101001, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 05:14:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) dup2(0xffffffffffffffff, r2) 05:14:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101001, 0x0) write$rfkill(r1, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) 05:14:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) dup2(0xffffffffffffffff, r2) 05:14:14 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x1, [@broadcast]}) 05:14:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:15 executing program 4: semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x80, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 05:14:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:14:15 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb117b43e3e9763221cb2c8d76f8", 0x57, 0x401c005, 0x0, 0x0) 05:14:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2417.072218][T10812] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:14:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:14:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:15 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:15 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 05:14:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:14:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}, {}], 0x2) semop(0x0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) 05:14:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x0, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1100000042000501f800003610779e337d552789087d28ee190705623fff526676c7517f97b2d2add33be3693e6acc651514fd9a9c7c4b9d5f8e1656e0ec778f583a1d07a1b5a54e31a2d7ccd057a88c3244fe12f03929ed5379672fd3930e550ac19569942660f24a0100522f2fcd01fb1406948e6726091927d526e390790601318fdf157656319d9c20c885828e90dec4cdbf0b6ee89e22af6edd19a0de01de2285e40eb1b1d86d05143f8b9415f4bbd3fbeea449e9ed4dc937ab826e72ed0abc9a19df0000000000a1643319e2887ef9939000000000000000157ebb040902fca630d8a64be1e7f7fa833d2f26094db81203dfad0000e5e1a171ca010000000000000078f0ef074e69e5b7d77cc18b688afc7c12121f40f91f8030221adaa9fbfa082c3c261489282b59e26b1ed8e88ffc29a7ddb27312df92585ffa80"], 0x14}}, 0x0) 05:14:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:14:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:16 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xebb4fd3d) chmod(&(0x7f0000000100)='./bus\x00', 0x0) 05:14:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:14:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) write(r0, 0x0, 0x0) 05:14:16 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:14:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) write(r0, 0x0, 0x0) 05:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:17 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:17 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, r0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 05:14:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) write(r0, 0x0, 0x0) 05:14:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:18 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11) write(r0, 0x0, 0x0) 05:14:18 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:18 executing program 4: 05:14:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:18 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:18 executing program 0: 05:14:18 executing program 5: socket$kcm(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:19 executing program 4: 05:14:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:19 executing program 0: 05:14:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:19 executing program 4: 05:14:19 executing program 5: socket$kcm(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:19 executing program 0: 05:14:19 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:19 executing program 4: 05:14:19 executing program 0: 05:14:19 executing program 5: socket$kcm(0x2b, 0x1, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:14:20 executing program 4: 05:14:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:14:20 executing program 0: 05:14:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:20 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:20 executing program 4: 05:14:20 executing program 0: 05:14:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, 0x0, 0x0) 05:14:20 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x2d, 0x1}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8914, &(0x7f0000000140)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @empty}}) 05:14:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:14:20 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 05:14:21 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, 0x0, 0x0) 05:14:21 executing program 4: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={[{@data_writeback='data=writeback'}, {@quota_on='quota=on'}]}) 05:14:21 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:14:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, 0x0, 0x0) 05:14:21 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$uinput_user_dev(r0, &(0x7f0000000140)={'\ayz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\f\x00\x00\xfe\xff\xff\xff\x05\xff\xff\xff\x92\xc0\x00\x00\x05\x00'}, 0x45c) [ 2423.321201][T11198] gfs2: not a GFS2 filesystem 05:14:21 executing program 5: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffff0000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2000c185) 05:14:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r4, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfff2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:14:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) 05:14:22 executing program 0: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xae1d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)) 05:14:30 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:30 executing program 5: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:30 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280), 0x0, 0x0, 0x0) 05:14:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c0d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 05:14:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00\x03\xc3 \b\x00@\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454ff, &(0x7f00000000c0)) 05:14:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) 05:14:30 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x28, 0x2f, 0x0, @remote, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[], @udp={0x0, 0x0, 0x28, 0x0, [@guehdr={0x2, 0x0, 0x3, 0x20, 0x100, [0x180]}, @guehdr={0x2, 0x0, 0x0, 0x6, 0x0, [0x80]}, @guehdr={0x1, 0x1, 0x0, 0x7}, @guehdr={0x1, 0x1, 0x0, 0x0, 0x80}, @guehdr={0x2, 0x0, 0x0, 0xff, 0x280, [0x80]}]}}}}}}, 0x0) 05:14:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) 05:14:30 executing program 5: r0 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x2285, &(0x7f0000000100)={0x7d, ""/125}) 05:14:30 executing program 5: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:30 executing program 3: mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='asymmetric\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x28, 0x2f, 0x0, @remote, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[], @udp={0x0, 0x0, 0x28, 0x0, [@guehdr={0x2, 0x0, 0x3, 0x20, 0x100, [0x180]}, @guehdr={0x2, 0x0, 0x0, 0x6, 0x0, [0x80]}, @guehdr={0x1, 0x1, 0x0, 0x7}, @guehdr={0x1, 0x1, 0x0, 0x0, 0x80}, @guehdr={0x2, 0x0, 0x0, 0xff, 0x280, [0x80]}]}}}}}}, 0x0) 05:14:37 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue0\x00'}) 05:14:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {0x0}], 0x2) 05:14:37 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e) 05:14:37 executing program 5: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x49, 0x0, &(0x7f00000002c0)) 05:14:37 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 05:14:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r4, 0x4, 0x40400) write$FUSE_WRITE(r4, &(0x7f0000000080)={0xfffffffffffffd7f}, 0x18) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 05:14:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setrlimit(0x0, &(0x7f0000000400)) 05:14:37 executing program 5: socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {0x0}], 0x2) 05:14:37 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x52, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) write$FUSE_INTERRUPT(r1, &(0x7f0000000140)={0xffffffffffffffb6}, 0xffffff7b) close(r1) 05:14:37 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x38) ptrace$cont(0x18, r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x13d}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r3, 0x0, 0x0) 05:14:43 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, 0x0) 05:14:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000500)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:14:43 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {0x0}], 0x2) 05:14:43 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r1) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61) recvmsg(r1, &(0x7f0000000140)={0x0, 0x100000039, &(0x7f0000000000)=[{&(0x7f0000000380)=""/110, 0x2000012e}], 0x1}, 0x3f04) close(r2) 05:14:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f00000c6000/0x3000)=nil, 0x3000) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da52726235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc8e3913990064f43c19b1d6a51df8204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffff45, 0x40, 0x0, 0x0) 05:14:44 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:44 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9}, {0x0, 0x0, 0x7, [], 0x3}, {0x0, 0x5}, {0x5, 0x4, 0x9}, {0x5, 0x0, 0x3}, {0x3, 0x0, 0x1}, {0x80000001, 0x0, 0x7, [], 0x42a}, {0x0, 0x0, 0x3, [], 0x81}, {}, {0x0, 0x0, 0x6, [], 0x3657e047}, {0x2, 0x0, 0x3}, {0x0, 0x0, 0xffff, [], 0x8}, {0x1}, {0x0, 0x6}, {0x7, 0x0, 0x1ff}]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)}], 0x2) 05:14:44 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)}], 0x2) 05:14:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000280)="0f01cfc4e20d3b17b805000000b9000000000f01c1c4c1a85daee60000008fea30124d1f0d5c0000f3dad90f01c20f73d545c4c3616bed0666b80c018ed0", 0x3e}], 0x1, 0x8, 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:50 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, 0x0) 05:14:50 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 05:14:50 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)}], 0x2) 05:14:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe3394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:50 executing program 4: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000140), 0x0) 05:14:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:14:51 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:14:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) 05:14:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f0", 0x12}], 0x2) 05:14:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:51 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x0, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) [ 2452.795923][T11423] picdev_read: 29 callbacks suppressed [ 2452.795929][T11423] kvm: pic: non byte read [ 2452.853661][T11423] picdev_write: 29 callbacks suppressed [ 2452.853666][T11423] kvm: pic: non byte write 05:14:58 executing program 2: r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, 0x0) 05:14:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r3, 0x0) 05:14:58 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f0", 0x12}], 0x2) 05:14:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:58 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f0", 0x12}], 0x2) 05:14:58 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:58 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:14:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:14:58 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup2(r0, r1) 05:15:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:05 executing program 4: 05:15:05 executing program 0: 05:15:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4", 0x1b}], 0x2) 05:15:05 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:15:05 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/11, 0x8) ioctl$TIOCSETD(r2, 0x5437, 0x0) 05:15:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:05 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:15:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4", 0x1b}], 0x2) 05:15:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) r4 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) dup2(r7, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)='/dev/ptmx\x00', r8}, 0x30) creat(0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f00000001c0)=""/20, 0x14}], 0x3) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) preadv(r1, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 05:15:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe3394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:05 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80841, 0x0) fcntl$setlease(r0, 0x400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 05:15:05 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) 05:15:05 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) syz_genetlink_get_family_id$tipc(0x0) 05:15:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4", 0x1b}], 0x2) 05:15:05 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:05 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) r4 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) dup2(r7, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)='/dev/ptmx\x00', r8}, 0x30) creat(0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f00000001c0)=""/20, 0x14}], 0x3) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) preadv(r1, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 05:15:05 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:15:05 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 05:15:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 05:15:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000", 0x20}], 0x2) 05:15:06 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:15:06 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r3) r4 = dup(0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r5) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) dup2(r7, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)='/dev/ptmx\x00', r8}, 0x30) creat(0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f00000001c0)=""/20, 0x14}], 0x3) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) preadv(r1, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000180)) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r9) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 2467.773593][ T23] audit: type=1800 audit(1571894106.223:706): pid=11569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16869 res=0 05:15:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:06 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) 05:15:06 executing program 4: 05:15:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000", 0x20}], 0x2) 05:15:06 executing program 2: [ 2468.075618][ T23] audit: type=1800 audit(1571894106.533:707): pid=11588 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16869 res=0 05:15:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 05:15:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 05:15:06 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:06 executing program 4: perf_event_open(&(0x7f0000000440)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:15:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000", 0x20}], 0x2) 05:15:06 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00'], 0x1) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x7fffffff) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) syz_open_procfs(0x0, 0x0) 05:15:06 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) [ 2468.409112][ T23] audit: type=1800 audit(1571894106.863:708): pid=11607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16853 res=0 05:15:06 executing program 4: ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x7) creat(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x200000008, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xfffffffffffffd88, 0xfffffea5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x3c) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) 05:15:07 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:07 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = memfd_create(&(0x7f0000000000)='&(trusted-(vboxnet1(\x00', 0x1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x2000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000035c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x0) dup2(r1, r0) r2 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f0000000080)='\x00', 0x5) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000000)=0xffffffff, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2880000aaaa0000aa0086dd60b4090000303a00fe8000000000000000000000000000bbff0200000000000000000000000000018000907800090400600000000000000000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0xfffffeea}], 0x1, 0x81000) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r5) 05:15:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe3394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000200)) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 05:15:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a400000000000000", 0x22}], 0x2) 05:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 05:15:07 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) [ 2468.908646][ T23] audit: type=1800 audit(1571894107.363:709): pid=11622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16881 res=0 05:15:07 executing program 4: exit(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./bus/file0\x00', r0}, 0x10) [ 2469.073380][ T23] audit: type=1800 audit(1571894107.523:710): pid=11644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16862 res=0 05:15:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:07 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) read(r2, &(0x7f00000001c0)=""/102, 0x66) write(r1, &(0x7f0000000340), 0x41395527) 05:15:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a400000000000000", 0x22}], 0x2) 05:15:07 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, &(0x7f0000000a00)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8004002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) 05:15:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a400000000000000", 0x22}], 0x2) 05:15:08 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, &(0x7f0000000a00)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe3394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@empty}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) [ 2469.612544][ T23] audit: type=1800 audit(1571894108.063:711): pid=11676 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16895 res=0 05:15:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000000000", 0x23}], 0x2) 05:15:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:08 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r0, &(0x7f0000000100)="a5", 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) 05:15:08 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x0, &(0x7f0000000a00)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000733000), 0x2c) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161", 0x17d) sendfile(r1, r2, 0x0, 0x7fffffa7) io_submit(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000000)) 05:15:08 executing program 0: io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x1c8}]) 05:15:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000000000", 0x23}], 0x2) 05:15:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) write(0xffffffffffffffff, &(0x7f0000000240), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:08 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[0x0]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:08 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r0, &(0x7f0000000100)="a5", 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000001c0)) [ 2470.338258][ T23] audit: type=1800 audit(1571894108.793:712): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16872 res=0 05:15:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="fc0000001c00071bab092500090007000aab06000300000000004c93210001c0000000000000000c0000740000039815fa2c1ec28656aaa79bb96b46fe3394b3000000bc00020000036c6c256f1a272fdfff7f918a55f5e3ffcde88e3e34d07302ade01720efc516373a9564ca6c40bf5be36f09d3d5bbe633439bc7735f7d981c4f260c71423e2e80772c05de18425ef92e475eb8b29d3ef3d92c83170e5bba42463ae4f5566f91cf190fbe6a7d38740201dee515ff0dcdd3f295ed94e0ad91bdd5e354e0a644caee08a50734babc7c3f2eeb57d43dd16b17e583df150c0258a503f9c780ac811fe4af3d0041f0d4d75cd3f4ff2d4d375040b1a944", 0xfc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000001c0)={@mcast1}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0xc) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xffffffff7fffffff) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:15:08 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[0x0]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a40000000000000000", 0x23}], 0x2) [ 2470.483655][ T23] audit: type=1804 audit(1571894108.793:713): pid=11713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir039263855/syzkaller.fU4Pul/2766/file0" dev="sda1" ino=16872 res=1 05:15:09 executing program 2: clock_gettime(0x0, &(0x7f0000000100)) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000), 0x2c) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x1000014, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xca00, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() inotify_init() write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffa7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000000)) io_submit(0x0, 0x0, &(0x7f0000000540)) syz_open_pts(0xffffffffffffffff, 0x34b101) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) 05:15:09 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local, @random="00005d6e68f2", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 05:15:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) write(0xffffffffffffffff, &(0x7f0000000240)="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", 0xfc) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:09 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[0x0]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) [ 2470.738473][ T23] audit: type=1800 audit(1571894109.193:714): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16487 res=0 05:15:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x1) [ 2470.892216][ T23] audit: type=1804 audit(1571894109.203:715): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir039263855/syzkaller.fU4Pul/2767/file0" dev="sda1" ino=16487 res=1 05:15:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x6f0a77bd) 05:15:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x42c, 0x54, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000300), 0x1a}, 0x10169, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0x5, 0xffffffffffffffff, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:09 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:15:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x1) 05:15:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:10 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db", 0x67}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 05:15:10 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:15:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x1) 05:15:10 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000300)={0xfffffffffffff800, 0x6}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x6f0a77bd) 05:15:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:10 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) 05:15:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:10 executing program 0: creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file1/file0\x00') unlink(0x0) rmdir(&(0x7f0000000100)='./file1\x00') 05:15:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:13 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000300)={0xfffffffffffff800, 0x6}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0xa}) r2 = syz_open_pts(r1, 0x4000000000000002) sendfile(r2, r0, 0x0, 0x6f0a77bd) 05:15:13 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) socket(0x40000000000010, 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x1c9c380}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) pwrite64(r0, &(0x7f0000000100)="a5", 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) 05:15:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:13 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x1c9c380}, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) pwrite64(r0, &(0x7f0000000100)="a5", 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600) 05:15:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x2480) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x0, 0x9}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$kcm(0x2, 0x20000000002, 0x73) sendto(r3, &(0x7f00000000c0)="11154b7b033c454bcf21ed0b1149c2350b6f2d3ea783a38d9a05c889ca3abf673b54537cb5fb7e41ced30951da00d28a86a03752a0151ef7721c9315e9c1f2157a0aa149f0682975cd7ac37295ffadeee1f4ef49aa4b2ee2f3f13873112ee5737021859c94d6c07088", 0x69, 0x4000810, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x12b, 0x0, &(0x7f00000008c0)={0x2, 0x0, @dev}, 0xff06) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x0, 0x9}) dup(r4) 05:15:13 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:15:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 05:15:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 05:15:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(0x0) dup2(0xffffffffffffffff, r2) 05:15:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000140)="b63db85e1e8d020000000000003ef0011dcc606a010000807018cebc9b97ae21b14d872c678ce22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f000085dff0)=[{&(0x7f0000e94000)=""/62, 0xffbd}], 0x1) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x2480) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x0, 0x9}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$kcm(0x2, 0x20000000002, 0x73) sendto(r3, &(0x7f00000000c0)="11154b7b033c454bcf21ed0b1149c2350b6f2d3ea783a38d9a05c889ca3abf673b54537cb5fb7e41ced30951da00d28a86a03752a0151ef7721c9315e9c1f2157a0aa149f0682975cd7ac37295ffadeee1f4ef49aa4b2ee2f3f13873112ee5737021859c94d6c07088", 0x69, 0x4000810, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x12b, 0x0, &(0x7f00000008c0)={0x2, 0x0, @dev}, 0xff06) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x0, 0x9}) dup(r4) 05:15:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 05:15:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(0x0) dup2(0xffffffffffffffff, r2) 05:15:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x200c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x1, 0x0, @pic={0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:15:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:14 executing program 2: unshare(0x20600) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r0, r1, 0x0, 0x1000003) 05:15:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:14 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(0x0) dup2(0xffffffffffffffff, r2) [ 2476.295974][T11920] kvm: pic: non byte read [ 2476.325118][T11920] kvm: pic: non byte write 05:15:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) [ 2476.372718][T11920] kvm: pic: single mode not supported [ 2476.372836][T11920] kvm: pic: non byte read [ 2476.401394][T11920] kvm: pic: non byte write 05:15:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) [ 2476.422393][T11920] kvm: pic: non byte read 05:15:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) [ 2476.446940][T11920] kvm: pic: non byte write [ 2476.484958][T11920] kvm: pic: non byte read [ 2476.489474][T11920] kvm: pic: non byte write [ 2476.525871][T11920] kvm: pic: non byte read [ 2476.604759][T11920] kvm: pic: non byte write [ 2476.628715][T11920] kvm: pic: non byte read [ 2476.656737][T11920] kvm: pic: non byte write [ 2476.674595][T11920] kvm: pic: non byte read [ 2476.679739][T11920] kvm: pic: non byte write [ 2476.689390][T11920] kvm: pic: non byte read [ 2476.693984][T11920] kvm: pic: non byte write [ 2476.699641][T11920] kvm: pic: non byte read [ 2476.716260][T11920] kvm: pic: non byte write [ 2476.721316][T11920] kvm: pic: non byte read [ 2476.726567][T11920] kvm: pic: non byte write 05:15:15 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a000200400ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)) dup2(0xffffffffffffffff, r2) 05:15:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee0796", 0x17}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)) dup2(0xffffffffffffffff, r2) 05:15:15 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee0796", 0x17}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) pipe(&(0x7f0000000000)) dup2(0xffffffffffffffff, r2) 05:15:15 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:15 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) 05:15:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee0796", 0x17}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:16 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:16 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) 05:15:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b", 0x23}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:16 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, 0x0, 0x0) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b", 0x23}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:16 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:16 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x8, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000000a00)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) 05:15:17 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:17 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41b", 0x23}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:17 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:15:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:17 executing program 2: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:17 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x9, 0x17808}) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000480)={0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x20000) dup2(r0, r1) 05:15:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:17 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) 05:15:18 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:18 executing program 2: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:18 executing program 2: socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) 05:15:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 05:15:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff000) 05:15:18 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ftruncate(r0, 0x0) 05:15:18 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e4", 0x2c}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 05:15:18 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 05:15:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 05:15:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 05:15:19 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e4", 0x2c}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 05:15:19 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ftruncate(r0, 0x0) 05:15:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffff000) 05:15:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 05:15:19 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e4", 0x2c}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 05:15:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:15:19 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e462", 0x2d}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 05:15:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:15:20 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ftruncate(r0, 0x0) 05:15:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:15:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:15:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 05:15:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e462", 0x2d}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:15:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_vs\x00\x9d\x82\x16\xb1B\x1b\x16\xf2\xb1,\xd7X\xe5\xd9\xba\xd70+2\xf9\x9c_\xad\xb4\xeady\xab\xff\"II\x92\xc4\xadEQ\x810\x1bu?\x86\xecmHEEQ\x16\'\x01\xb9\x16\xfbBc\x92\x8b\x13\xf3;myd\xbf\x8a\x17\xf2\xb1\xbc\xf7@\x89\xd1\xef\b\xae\xb7\xdao^\xfc\xfb\xff5r\xba\x00\xf7\xa3\x83\x9bB\x840n\xbf\xcdQ\xc6\x19;\x98\xdf\a\x81\x00\x17x') bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x0) 05:15:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 05:15:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e462", 0x2d}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0x24}], 0x2) 05:15:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 05:15:21 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:21 executing program 3: prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}, 0x8}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffff, 0xffff0}, 0xc) getdents(r2, &(0x7f0000000480)=""/135, 0xfffffffffffffca6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 05:15:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 05:15:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) dup2(r0, r1) 05:15:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 05:15:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:21 executing program 1: semop(0x0, 0x0, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) semget$private(0x0, 0x2, 0x1) semop(0x0, &(0x7f0000000140)=[{0x3, 0x6b92, 0x1800}], 0x19e) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) read(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) r3 = syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @local, @multicast2}, &(0x7f0000000880)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000080)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f0000000cc0)={0x270, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x88, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001140)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000016c0)={'team0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0x100000089) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) accept4$packet(r8, &(0x7f0000000180), &(0x7f0000001200)=0x14, 0x80000) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000180)={@loopback, @multicast1}, 0x0) socket(0x40000000002, 0x3, 0x2) socket(0x40000000002, 0x3, 0x2) socket(0x40000000002, 0x3, 0x2) socket(0x40000000002, 0x3, 0x2) socket(0x40000000002, 0x3, 0x2) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='veth1_to_hsr\x00', 0x10) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x0) 05:15:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 05:15:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:22 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 05:15:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) 05:15:22 executing program 3: prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}, 0x8}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffff, 0xffff0}, 0xc) getdents(r2, &(0x7f0000000480)=""/135, 0xfffffffffffffca6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 05:15:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 05:15:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) 05:15:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) 05:15:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) 05:15:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r1, 0x0, 0x1) 05:15:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c0000", 0x17}], 0x1}, 0x0) 05:15:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:23 executing program 3: prctl$PR_MCE_KILL_GET(0x22) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x274}, 0x8}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0xffff, 0xffff0}, 0xc) getdents(r2, &(0x7f0000000480)=""/135, 0xfffffffffffffca6) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000001c0)) preadv(r3, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) 05:15:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:25 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada", 0x23}], 0x1}, 0x0) 05:15:25 executing program 3: shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 05:15:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada", 0x23}], 0x1}, 0x0) 05:15:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) listen(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) 05:15:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada", 0x23}], 0x1}, 0x0) 05:15:25 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d8050005", 0x29}], 0x1}, 0x0) 05:15:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d8050005", 0x29}], 0x1}, 0x0) 05:15:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0xa8}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80ffff]}, 0x48) 05:15:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:15:28 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d8050005", 0x29}], 0x1}, 0x0) 05:15:28 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:15:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) 05:15:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) 05:15:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) [ 2490.358889][T12797] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2490.394177][T12797] CPU: 1 PID: 12797 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2490.403258][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.413313][T12797] Call Trace: [ 2490.416618][T12797] dump_stack+0x172/0x1f0 [ 2490.420955][T12797] dump_header+0x177/0x1152 [ 2490.425541][T12797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.431358][T12797] ? ___ratelimit+0x2c8/0x595 [ 2490.436031][T12797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.441836][T12797] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2490.447119][T12797] ? trace_hardirqs_on+0x67/0x240 [ 2490.452163][T12797] ? pagefault_out_of_memory+0x11c/0x11c [ 2490.457806][T12797] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2490.463622][T12797] ? ___ratelimit+0x60/0x595 [ 2490.468219][T12797] ? do_raw_spin_unlock+0x57/0x270 [ 2490.473356][T12797] oom_kill_process.cold+0x10/0x15 [ 2490.478482][T12797] out_of_memory+0x334/0x1340 [ 2490.483167][T12797] ? cgroup_file_notify+0x140/0x1b0 [ 2490.488379][T12797] ? oom_killer_disable+0x280/0x280 [ 2490.493600][T12797] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2490.499156][T12797] ? memcg_stat_show+0xc30/0xc30 [ 2490.504109][T12797] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2490.509923][T12797] ? cgroup_file_notify+0x140/0x1b0 [ 2490.515141][T12797] memory_max_write+0x262/0x3a0 [ 2490.520004][T12797] ? mem_cgroup_write+0x370/0x370 [ 2490.525059][T12797] ? lock_acquire+0x190/0x410 [ 2490.529766][T12797] ? kernfs_fop_write+0x1df/0x4a0 [ 2490.534920][T12797] cgroup_file_write+0x241/0x790 [ 2490.539875][T12797] ? mem_cgroup_write+0x370/0x370 [ 2490.544916][T12797] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2490.550666][T12797] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2490.556316][T12797] kernfs_fop_write+0x270/0x4a0 [ 2490.561199][T12797] __vfs_write+0x8a/0x110 [ 2490.565535][T12797] ? kernfs_fop_open+0xd80/0xd80 [ 2490.570481][T12797] vfs_write+0x268/0x5d0 [ 2490.574738][T12797] ksys_write+0x14f/0x290 [ 2490.579070][T12797] ? __ia32_sys_read+0xb0/0xb0 [ 2490.583842][T12797] ? do_syscall_64+0x26/0x760 [ 2490.588526][T12797] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2490.594601][T12797] ? do_syscall_64+0x26/0x760 [ 2490.599290][T12797] __x64_sys_write+0x73/0xb0 [ 2490.603893][T12797] do_syscall_64+0xfa/0x760 [ 2490.608403][T12797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2490.614295][T12797] RIP: 0033:0x459ef9 [ 2490.618189][T12797] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2490.638753][T12797] RSP: 002b:00007f027cdbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2490.638767][T12797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2490.638775][T12797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2490.638782][T12797] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2490.638789][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f027cdbd6d4 [ 2490.638797][T12797] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2490.699621][T12797] memory: usage 132812kB, limit 0kB, failcnt 15 [ 2490.706408][T12797] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2490.713267][T12797] Memory cgroup stats for /syz3: [ 2490.713385][T12797] anon 114659328 [ 2490.713385][T12797] file 2179072 [ 2490.713385][T12797] kernel_stack 2293760 [ 2490.713385][T12797] slab 7958528 [ 2490.713385][T12797] sock 0 [ 2490.713385][T12797] shmem 2211840 [ 2490.713385][T12797] file_mapped 135168 [ 2490.713385][T12797] file_dirty 135168 [ 2490.713385][T12797] file_writeback 0 [ 2490.713385][T12797] anon_thp 106954752 [ 2490.713385][T12797] inactive_anon 2162688 [ 2490.713385][T12797] active_anon 114683904 [ 2490.713385][T12797] inactive_file 12288 [ 2490.713385][T12797] active_file 192512 [ 2490.713385][T12797] unevictable 0 [ 2490.713385][T12797] slab_reclaimable 3108864 [ 2490.713385][T12797] slab_unreclaimable 4849664 [ 2490.713385][T12797] pgfault 186450 [ 2490.713385][T12797] pgmajfault 0 [ 2490.713385][T12797] workingset_refault 0 [ 2490.713385][T12797] workingset_activate 0 [ 2490.713385][T12797] workingset_nodereclaim 0 [ 2490.713385][T12797] pgrefill 151 [ 2490.713385][T12797] pgscan 463 [ 2490.713385][T12797] pgsteal 402 [ 2490.809465][T12797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29807,uid=0 [ 2490.825553][T12797] Memory cgroup out of memory: Killed process 29807 (syz-executor.3) total-vm:72584kB, anon-rss:4264kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 2490.861949][T12795] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 2490.874899][T12795] CPU: 0 PID: 12795 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2490.883907][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2490.894126][T12795] Call Trace: [ 2490.897428][T12795] dump_stack+0x172/0x1f0 [ 2490.901757][T12795] dump_header+0x177/0x1152 [ 2490.906242][T12795] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.912029][T12795] ? ___ratelimit+0x2c8/0x595 [ 2490.916697][T12795] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2490.922483][T12795] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2490.927759][T12795] ? trace_hardirqs_on+0x67/0x240 [ 2490.932764][T12795] ? pagefault_out_of_memory+0x11c/0x11c [ 2490.938374][T12795] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2490.944170][T12795] ? ___ratelimit+0x60/0x595 [ 2490.948756][T12795] ? do_raw_spin_unlock+0x57/0x270 [ 2490.953865][T12795] oom_kill_process.cold+0x10/0x15 [ 2490.958968][T12795] out_of_memory+0x334/0x1340 [ 2490.963637][T12795] ? lock_downgrade+0x920/0x920 [ 2490.968483][T12795] ? oom_killer_disable+0x280/0x280 [ 2490.973671][T12795] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2490.979893][T12795] ? memcg_stat_show+0xc30/0xc30 [ 2490.984900][T12795] ? do_raw_spin_unlock+0x57/0x270 [ 2490.989996][T12795] ? _raw_spin_unlock+0x28/0x40 [ 2490.994860][T12795] try_charge+0xf4b/0x1440 [ 2490.999290][T12795] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2491.004821][T12795] ? percpu_ref_tryget_live+0x10c/0x290 [ 2491.010361][T12795] ? rcu_read_lock_held+0x9c/0xb0 [ 2491.015366][T12795] ? __kasan_check_read+0x11/0x20 [ 2491.020389][T12795] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2491.025928][T12795] mem_cgroup_try_charge+0x136/0x590 [ 2491.031211][T12795] __add_to_page_cache_locked+0x43f/0xec0 [ 2491.036918][T12795] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2491.042874][T12795] ? __kasan_check_read+0x11/0x20 [ 2491.047878][T12795] ? __filemap_set_wb_err+0x2b0/0x2b0 [ 2491.053227][T12795] ? __alloc_pages_nodemask+0x661/0x910 [ 2491.058850][T12795] ? xas_descend+0x144/0x370 [ 2491.063423][T12795] ? shadow_lru_isolate+0x430/0x430 [ 2491.068617][T12795] add_to_page_cache_lru+0x1d8/0x790 [ 2491.073890][T12795] ? add_to_page_cache_locked+0x40/0x40 [ 2491.079416][T12795] ? __page_cache_alloc+0x116/0x490 [ 2491.084595][T12795] pagecache_get_page+0x3c6/0xa00 [ 2491.089614][T12795] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2491.095140][T12795] grab_cache_page_write_begin+0x75/0xb0 [ 2491.100765][T12795] ext4_da_write_begin+0x33b/0xc00 [ 2491.105870][T12795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2491.112114][T12795] ? ext4_write_begin+0xd80/0xd80 [ 2491.117119][T12795] ? copyin+0x150/0x150 [ 2491.121275][T12795] generic_perform_write+0x23b/0x540 [ 2491.126599][T12795] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 2491.134656][T12795] ? current_time+0x110/0x110 [ 2491.139325][T12795] ? generic_write_check_limits.isra.0+0x270/0x270 [ 2491.145809][T12795] ? aa_file_perm+0x40b/0xdd0 [ 2491.150480][T12795] __generic_file_write_iter+0x25e/0x630 [ 2491.156097][T12795] ext4_file_write_iter+0x317/0x13c0 [ 2491.161471][T12795] ? __kasan_check_read+0x11/0x20 [ 2491.166482][T12795] ? ext4_release_file+0x380/0x380 [ 2491.171657][T12795] ? mark_lock+0xc2/0x1220 [ 2491.176055][T12795] ? __kasan_check_read+0x11/0x20 [ 2491.181072][T12795] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2491.187303][T12795] ? iov_iter_init+0xee/0x220 [ 2491.191974][T12795] new_sync_write+0x4d3/0x770 [ 2491.196631][T12795] ? new_sync_read+0x800/0x800 [ 2491.201395][T12795] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2491.207533][T12795] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 2491.212804][T12795] __vfs_write+0xe1/0x110 [ 2491.217113][T12795] vfs_write+0x268/0x5d0 [ 2491.221354][T12795] ksys_write+0x14f/0x290 [ 2491.225677][T12795] ? __ia32_sys_read+0xb0/0xb0 [ 2491.230425][T12795] ? do_syscall_64+0x26/0x760 [ 2491.235085][T12795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.241130][T12795] ? do_syscall_64+0x26/0x760 [ 2491.245805][T12795] __x64_sys_write+0x73/0xb0 [ 2491.250385][T12795] do_syscall_64+0xfa/0x760 [ 2491.254883][T12795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.260753][T12795] RIP: 0033:0x459ef9 [ 2491.264637][T12795] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2491.284235][T12795] RSP: 002b:00007f027cdddc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2491.292643][T12795] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2491.300595][T12795] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 2491.308546][T12795] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2491.316496][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f027cdde6d4 [ 2491.324461][T12795] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2491.335380][T12795] memory: usage 128424kB, limit 0kB, failcnt 15 [ 2491.341646][T12795] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.352320][T12795] Memory cgroup stats for /syz3: [ 2491.352567][T12795] anon 110362624 [ 2491.352567][T12795] file 2179072 [ 2491.352567][T12795] kernel_stack 2228224 [ 2491.352567][T12795] slab 7958528 [ 2491.352567][T12795] sock 0 [ 2491.352567][T12795] shmem 2211840 [ 2491.352567][T12795] file_mapped 135168 [ 2491.352567][T12795] file_dirty 135168 [ 2491.352567][T12795] file_writeback 0 [ 2491.352567][T12795] anon_thp 102760448 [ 2491.352567][T12795] inactive_anon 2162688 [ 2491.352567][T12795] active_anon 110387200 [ 2491.352567][T12795] inactive_file 12288 [ 2491.352567][T12795] active_file 192512 [ 2491.352567][T12795] unevictable 0 [ 2491.352567][T12795] slab_reclaimable 3108864 [ 2491.352567][T12795] slab_unreclaimable 4849664 [ 2491.352567][T12795] pgfault 186450 [ 2491.352567][T12795] pgmajfault 0 [ 2491.352567][T12795] workingset_refault 0 [ 2491.352567][T12795] workingset_activate 0 [ 2491.352567][T12795] workingset_nodereclaim 0 [ 2491.352567][T12795] pgrefill 151 [ 2491.352567][T12795] pgscan 463 [ 2491.352567][T12795] pgsteal 402 [ 2491.448891][T12795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9967,uid=0 [ 2491.466481][T12795] Memory cgroup out of memory: Killed process 9967 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:35808kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2491.487023][ T1078] oom_reaper: reaped process 9967 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 2491.499343][T12797] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2491.516045][T12797] CPU: 1 PID: 12797 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2491.525112][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2491.535169][T12797] Call Trace: [ 2491.538465][T12797] dump_stack+0x172/0x1f0 [ 2491.542805][T12797] dump_header+0x177/0x1152 [ 2491.547312][T12797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2491.553232][T12797] ? ___ratelimit+0x2c8/0x595 [ 2491.557914][T12797] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2491.563739][T12797] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2491.569039][T12797] ? trace_hardirqs_on+0x67/0x240 [ 2491.574068][T12797] ? pagefault_out_of_memory+0x11c/0x11c [ 2491.579712][T12797] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2491.585626][T12797] ? ___ratelimit+0x60/0x595 [ 2491.590248][T12797] ? do_raw_spin_unlock+0x57/0x270 [ 2491.595346][T12797] oom_kill_process.cold+0x10/0x15 [ 2491.600541][T12797] out_of_memory+0x334/0x1340 [ 2491.605202][T12797] ? oom_killer_disable+0x280/0x280 [ 2491.610390][T12797] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2491.615914][T12797] ? memcg_stat_show+0xc30/0xc30 [ 2491.620838][T12797] ? _raw_spin_unlock_irqrestore+0xb8/0xe0 [ 2491.626624][T12797] ? cgroup_file_notify+0x140/0x1b0 [ 2491.631804][T12797] memory_max_write+0x262/0x3a0 [ 2491.636639][T12797] ? mem_cgroup_write+0x370/0x370 [ 2491.641663][T12797] ? lock_acquire+0x190/0x410 [ 2491.646330][T12797] ? kernfs_fop_write+0x1df/0x4a0 [ 2491.651337][T12797] cgroup_file_write+0x241/0x790 [ 2491.656324][T12797] ? mem_cgroup_write+0x370/0x370 [ 2491.661328][T12797] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2491.666947][T12797] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2491.672560][T12797] kernfs_fop_write+0x270/0x4a0 [ 2491.677394][T12797] __vfs_write+0x8a/0x110 [ 2491.681703][T12797] ? kernfs_fop_open+0xd80/0xd80 [ 2491.686623][T12797] vfs_write+0x268/0x5d0 [ 2491.690846][T12797] ksys_write+0x14f/0x290 [ 2491.695241][T12797] ? __ia32_sys_read+0xb0/0xb0 [ 2491.699985][T12797] ? do_syscall_64+0x26/0x760 [ 2491.704735][T12797] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.710802][T12797] ? do_syscall_64+0x26/0x760 [ 2491.715468][T12797] __x64_sys_write+0x73/0xb0 [ 2491.720142][T12797] do_syscall_64+0xfa/0x760 [ 2491.724654][T12797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2491.730536][T12797] RIP: 0033:0x459ef9 [ 2491.734418][T12797] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2491.754483][T12797] RSP: 002b:00007f027cdbcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2491.762879][T12797] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2491.770930][T12797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2491.778900][T12797] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2491.786855][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f027cdbd6d4 [ 2491.794808][T12797] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2491.807699][T12797] memory: usage 126060kB, limit 0kB, failcnt 30 [ 2491.813970][T12797] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2491.820866][T12797] Memory cgroup stats for /syz3: [ 2491.820988][T12797] anon 108228608 [ 2491.820988][T12797] file 2179072 [ 2491.820988][T12797] kernel_stack 2228224 [ 2491.820988][T12797] slab 7958528 [ 2491.820988][T12797] sock 0 [ 2491.820988][T12797] shmem 2211840 [ 2491.820988][T12797] file_mapped 135168 [ 2491.820988][T12797] file_dirty 135168 [ 2491.820988][T12797] file_writeback 0 [ 2491.820988][T12797] anon_thp 100663296 [ 2491.820988][T12797] inactive_anon 2162688 [ 2491.820988][T12797] active_anon 108253184 [ 2491.820988][T12797] inactive_file 12288 [ 2491.820988][T12797] active_file 192512 [ 2491.820988][T12797] unevictable 0 [ 2491.820988][T12797] slab_reclaimable 3108864 [ 2491.820988][T12797] slab_unreclaimable 4849664 [ 2491.820988][T12797] pgfault 186450 [ 2491.820988][T12797] pgmajfault 0 [ 2491.820988][T12797] workingset_refault 0 [ 2491.820988][T12797] workingset_activate 0 [ 2491.820988][T12797] workingset_nodereclaim 0 [ 2491.820988][T12797] pgrefill 151 [ 2491.820988][T12797] pgscan 463 [ 2491.820988][T12797] pgsteal 402 [ 2491.917474][T12797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=12793,uid=0 [ 2491.933065][T12797] Memory cgroup out of memory: Killed process 12793 (syz-executor.3) total-vm:72848kB, anon-rss:2224kB, file-rss:35800kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2491.952234][ T1078] oom_reaper: reaped process 12793 (syz-executor.3), now anon-rss:0kB, file-rss:34864kB, shmem-rss:0kB 05:15:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) 05:15:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c500", 0x2c}], 0x1}, 0x0) 05:15:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) [ 2492.816223][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2492.904210][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2492.913196][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2492.923264][ T8831] Call Trace: [ 2492.926572][ T8831] dump_stack+0x172/0x1f0 [ 2492.930928][ T8831] dump_header+0x177/0x1152 [ 2492.935452][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2492.941296][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2492.945975][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 05:15:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) 05:15:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) [ 2492.951790][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2492.957087][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2492.962131][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2492.967780][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2492.973622][ T8831] ? ___ratelimit+0x60/0x595 [ 2492.978387][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2492.983528][ T8831] oom_kill_process.cold+0x10/0x15 [ 2492.988739][ T8831] out_of_memory+0x334/0x1340 [ 2492.993427][ T8831] ? lock_downgrade+0x920/0x920 [ 2492.998289][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 05:15:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2493.004109][ T8831] ? oom_killer_disable+0x280/0x280 [ 2493.009321][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2493.014876][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2493.019824][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2493.025026][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2493.029892][ T8831] try_charge+0xf4b/0x1440 [ 2493.034336][ T8831] ? find_held_lock+0x35/0x130 [ 2493.039124][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2493.044671][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2493.050224][ T8831] ? find_held_lock+0x35/0x130 [ 2493.054997][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2493.060579][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2493.066119][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2493.066137][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2493.066153][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2493.066169][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2493.066184][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2493.066199][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2493.066212][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2493.066229][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2493.066243][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2493.066260][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.076992][ T8831] copy_process+0x3f8/0x6880 [ 2493.077010][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.077025][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2493.077038][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.077051][ T8831] ? mark_lock+0xc2/0x1220 [ 2493.077072][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2493.077085][ T8831] ? find_held_lock+0x35/0x130 [ 2493.077114][ T8831] _do_fork+0x146/0xf90 [ 2493.077133][ T8831] ? copy_init_mm+0x20/0x20 [ 2493.162624][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.167842][ T8831] ? _copy_to_user+0x118/0x160 [ 2493.172797][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2493.179067][ T8831] ? put_timespec64+0xda/0x140 [ 2493.183854][ T8831] __x64_sys_clone+0x18d/0x250 [ 2493.188656][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2493.193609][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2493.198909][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2493.203951][ T8831] do_syscall_64+0xfa/0x760 [ 2493.208469][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2493.214362][ T8831] RIP: 0033:0x4584ca [ 2493.218258][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2493.237869][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2493.246385][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca 05:15:31 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000d00386000a0002000c0ada1b40d805000500c50083", 0x2d}], 0x1}, 0x0) 05:15:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2493.254387][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2493.262371][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2493.270509][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2493.270517][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 05:15:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) [ 2493.308209][ T8831] memory: usage 123668kB, limit 0kB, failcnt 40 [ 2493.315012][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2493.321941][ T8831] Memory cgroup stats for /syz3: [ 2493.322057][ T8831] anon 106029056 [ 2493.322057][ T8831] file 2179072 [ 2493.322057][ T8831] kernel_stack 2097152 [ 2493.322057][ T8831] slab 7958528 [ 2493.322057][ T8831] sock 0 [ 2493.322057][ T8831] shmem 2211840 [ 2493.322057][ T8831] file_mapped 135168 [ 2493.322057][ T8831] file_dirty 135168 [ 2493.322057][ T8831] file_writeback 0 [ 2493.322057][ T8831] anon_thp 98566144 [ 2493.322057][ T8831] inactive_anon 2162688 [ 2493.322057][ T8831] active_anon 106053632 [ 2493.322057][ T8831] inactive_file 12288 [ 2493.322057][ T8831] active_file 192512 [ 2493.322057][ T8831] unevictable 0 [ 2493.322057][ T8831] slab_reclaimable 3108864 [ 2493.322057][ T8831] slab_unreclaimable 4849664 [ 2493.322057][ T8831] pgfault 186483 [ 2493.322057][ T8831] pgmajfault 0 [ 2493.322057][ T8831] workingset_refault 0 [ 2493.322057][ T8831] workingset_activate 0 [ 2493.322057][ T8831] workingset_nodereclaim 0 [ 2493.322057][ T8831] pgrefill 151 [ 2493.322057][ T8831] pgscan 463 [ 2493.322057][ T8831] pgsteal 402 [ 2493.537895][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=29708,uid=0 [ 2493.554463][ T8831] Memory cgroup out of memory: Killed process 29708 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2493.574638][ T1078] oom_reaper: reaped process 29708 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2493.638592][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2493.653141][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2493.662214][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2493.676095][ T8831] Call Trace: [ 2493.679407][ T8831] dump_stack+0x172/0x1f0 [ 2493.683835][ T8831] dump_header+0x177/0x1152 [ 2493.688374][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2493.694268][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2493.698945][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2493.704758][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2493.710046][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2493.715078][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2493.720802][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2493.726632][ T8831] ? ___ratelimit+0x60/0x595 [ 2493.731393][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2493.736494][ T8831] oom_kill_process.cold+0x10/0x15 [ 2493.741601][ T8831] out_of_memory+0x334/0x1340 [ 2493.746270][ T8831] ? lock_downgrade+0x920/0x920 [ 2493.751109][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2493.756907][ T8831] ? oom_killer_disable+0x280/0x280 [ 2493.762093][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2493.767621][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2493.772565][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2493.777660][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2493.782670][ T8831] try_charge+0xf4b/0x1440 [ 2493.787722][ T8831] ? find_held_lock+0x35/0x130 [ 2493.792475][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2493.798011][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2493.803568][ T8831] ? find_held_lock+0x35/0x130 [ 2493.808404][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2493.814402][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2493.820121][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2493.825392][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2493.830935][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2493.836044][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2493.841401][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2493.851707][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2493.857409][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2493.862605][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2493.868182][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2493.873186][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.878199][ T8831] copy_process+0x3f8/0x6880 [ 2493.882787][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.887807][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2493.892822][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.897853][ T8831] ? mark_lock+0xc2/0x1220 [ 2493.902282][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2493.907569][ T8831] ? find_held_lock+0x35/0x130 [ 2493.912412][ T8831] _do_fork+0x146/0xf90 [ 2493.916561][ T8831] ? copy_init_mm+0x20/0x20 [ 2493.921060][ T8831] ? __kasan_check_read+0x11/0x20 [ 2493.926064][ T8831] ? _copy_to_user+0x118/0x160 [ 2493.930811][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2493.937033][ T8831] ? put_timespec64+0xda/0x140 [ 2493.941781][ T8831] __x64_sys_clone+0x18d/0x250 [ 2493.946535][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2493.951555][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2493.956831][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2493.961835][ T8831] do_syscall_64+0xfa/0x760 [ 2493.966320][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2493.972195][ T8831] RIP: 0033:0x4584ca [ 2493.976076][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2493.995675][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2494.004157][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2494.012109][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2494.020078][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2494.028029][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2494.035979][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2494.046834][ T8831] memory: usage 121220kB, limit 0kB, failcnt 130 [ 2494.053182][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2494.061164][ T8831] Memory cgroup stats for /syz3: [ 2494.061281][ T8831] anon 103821312 [ 2494.061281][ T8831] file 2179072 [ 2494.061281][ T8831] kernel_stack 2097152 [ 2494.061281][ T8831] slab 7823360 [ 2494.061281][ T8831] sock 0 [ 2494.061281][ T8831] shmem 2211840 [ 2494.061281][ T8831] file_mapped 135168 [ 2494.061281][ T8831] file_dirty 135168 [ 2494.061281][ T8831] file_writeback 0 [ 2494.061281][ T8831] anon_thp 96468992 [ 2494.061281][ T8831] inactive_anon 2162688 [ 2494.061281][ T8831] active_anon 103845888 [ 2494.061281][ T8831] inactive_file 12288 [ 2494.061281][ T8831] active_file 192512 [ 2494.061281][ T8831] unevictable 0 [ 2494.061281][ T8831] slab_reclaimable 2973696 [ 2494.061281][ T8831] slab_unreclaimable 4849664 [ 2494.061281][ T8831] pgfault 186483 [ 2494.061281][ T8831] pgmajfault 0 [ 2494.061281][ T8831] workingset_refault 0 [ 2494.061281][ T8831] workingset_activate 0 [ 2494.061281][ T8831] workingset_nodereclaim 0 [ 2494.061281][ T8831] pgrefill 151 [ 2494.061281][ T8831] pgscan 463 [ 2494.061281][ T8831] pgsteal 402 [ 2494.162407][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=9497,uid=0 [ 2494.189898][ T8831] Memory cgroup out of memory: Killed process 9497 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35796kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2494.216384][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2494.228477][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2494.237430][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2494.247474][ T8831] Call Trace: [ 2494.250753][ T8831] dump_stack+0x172/0x1f0 [ 2494.255068][ T8831] dump_header+0x177/0x1152 [ 2494.259555][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2494.265438][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2494.270140][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2494.275937][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2494.281301][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2494.286307][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2494.291920][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2494.297721][ T8831] ? ___ratelimit+0x60/0x595 [ 2494.302287][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2494.307385][ T8831] oom_kill_process.cold+0x10/0x15 [ 2494.312477][ T8831] out_of_memory+0x334/0x1340 [ 2494.317173][ T8831] ? lock_downgrade+0x920/0x920 [ 2494.322040][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2494.327841][ T8831] ? oom_killer_disable+0x280/0x280 [ 2494.333055][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2494.338580][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2494.343501][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2494.348607][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2494.353447][ T8831] try_charge+0xf4b/0x1440 [ 2494.357842][ T8831] ? find_held_lock+0x35/0x130 [ 2494.362604][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2494.368185][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2494.373724][ T8831] ? find_held_lock+0x35/0x130 [ 2494.378894][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2494.384487][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2494.390074][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2494.395302][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2494.400835][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2494.405931][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2494.411313][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2494.416860][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2494.422563][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2494.427760][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2494.433027][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2494.438029][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.443046][ T8831] copy_process+0x3f8/0x6880 [ 2494.447619][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.452624][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2494.457631][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.462642][ T8831] ? mark_lock+0xc2/0x1220 [ 2494.467042][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2494.471976][ T8831] ? find_held_lock+0x35/0x130 [ 2494.476732][ T8831] _do_fork+0x146/0xf90 [ 2494.480877][ T8831] ? copy_init_mm+0x20/0x20 [ 2494.485365][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.490378][ T8831] ? _copy_to_user+0x118/0x160 [ 2494.495128][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2494.501362][ T8831] ? put_timespec64+0xda/0x140 [ 2494.506119][ T8831] __x64_sys_clone+0x18d/0x250 [ 2494.510866][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2494.515715][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2494.520983][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2494.526008][ T8831] do_syscall_64+0xfa/0x760 [ 2494.530497][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2494.536365][ T8831] RIP: 0033:0x4584ca [ 2494.540247][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2494.559893][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2494.568288][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2494.576240][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2494.584191][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2494.592143][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2494.600100][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2494.608359][ T8831] memory: usage 118876kB, limit 0kB, failcnt 136 [ 2494.614756][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2494.621602][ T8831] Memory cgroup stats for /syz3: [ 2494.621720][ T8831] anon 101580800 [ 2494.621720][ T8831] file 2179072 [ 2494.621720][ T8831] kernel_stack 2031616 [ 2494.621720][ T8831] slab 7823360 [ 2494.621720][ T8831] sock 0 [ 2494.621720][ T8831] shmem 2211840 [ 2494.621720][ T8831] file_mapped 135168 [ 2494.621720][ T8831] file_dirty 135168 [ 2494.621720][ T8831] file_writeback 0 [ 2494.621720][ T8831] anon_thp 94371840 [ 2494.621720][ T8831] inactive_anon 2162688 [ 2494.621720][ T8831] active_anon 101605376 [ 2494.621720][ T8831] inactive_file 12288 [ 2494.621720][ T8831] active_file 192512 [ 2494.621720][ T8831] unevictable 0 [ 2494.621720][ T8831] slab_reclaimable 2973696 [ 2494.621720][ T8831] slab_unreclaimable 4849664 [ 2494.621720][ T8831] pgfault 186483 [ 2494.621720][ T8831] pgmajfault 0 [ 2494.621720][ T8831] workingset_refault 0 [ 2494.621720][ T8831] workingset_activate 0 [ 2494.621720][ T8831] workingset_nodereclaim 0 [ 2494.621720][ T8831] pgrefill 151 [ 2494.621720][ T8831] pgscan 463 [ 2494.621720][ T8831] pgsteal 402 [ 2494.717993][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27856,uid=0 [ 2494.733541][ T8831] Memory cgroup out of memory: Killed process 27856 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2494.753019][ T1078] oom_reaper: reaped process 27856 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2494.754431][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2494.776021][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2494.784954][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2494.795116][ T8831] Call Trace: [ 2494.798422][ T8831] dump_stack+0x172/0x1f0 [ 2494.802741][ T8831] dump_header+0x177/0x1152 [ 2494.807238][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2494.813040][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2494.817699][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2494.823486][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2494.828770][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2494.833779][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2494.839396][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2494.845183][ T8831] ? ___ratelimit+0x60/0x595 [ 2494.849749][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2494.854840][ T8831] oom_kill_process.cold+0x10/0x15 [ 2494.859929][ T8831] out_of_memory+0x334/0x1340 [ 2494.864703][ T8831] ? lock_downgrade+0x920/0x920 [ 2494.869538][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2494.875334][ T8831] ? oom_killer_disable+0x280/0x280 [ 2494.880523][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2494.886057][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2494.891023][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2494.896127][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2494.900969][ T8831] try_charge+0xf4b/0x1440 [ 2494.905429][ T8831] ? find_held_lock+0x35/0x130 [ 2494.910193][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2494.915718][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2494.921297][ T8831] ? find_held_lock+0x35/0x130 [ 2494.926044][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2494.931577][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2494.937104][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2494.942315][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2494.947847][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2494.952940][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2494.958554][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2494.964081][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2494.969781][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2494.974959][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2494.980263][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2494.985277][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.990306][ T8831] copy_process+0x3f8/0x6880 [ 2494.994888][ T8831] ? __kasan_check_read+0x11/0x20 [ 2494.999890][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2495.004890][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.009903][ T8831] ? mark_lock+0xc2/0x1220 [ 2495.014305][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2495.019222][ T8831] ? find_held_lock+0x35/0x130 [ 2495.023975][ T8831] _do_fork+0x146/0xf90 [ 2495.028132][ T8831] ? copy_init_mm+0x20/0x20 [ 2495.032619][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.037622][ T8831] ? _copy_to_user+0x118/0x160 [ 2495.042628][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2495.048852][ T8831] ? put_timespec64+0xda/0x140 [ 2495.053694][ T8831] __x64_sys_clone+0x18d/0x250 [ 2495.058471][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2495.063348][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2495.068612][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2495.073635][ T8831] do_syscall_64+0xfa/0x760 [ 2495.078121][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2495.083991][ T8831] RIP: 0033:0x4584ca [ 2495.087871][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2495.107463][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2495.115850][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2495.123800][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2495.131833][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2495.139790][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2495.147749][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2495.156031][ T8831] memory: usage 116556kB, limit 0kB, failcnt 142 [ 2495.162371][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2495.169324][ T8831] Memory cgroup stats for /syz3: [ 2495.169420][ T8831] anon 99368960 [ 2495.169420][ T8831] file 2179072 [ 2495.169420][ T8831] kernel_stack 2031616 [ 2495.169420][ T8831] slab 7823360 [ 2495.169420][ T8831] sock 0 [ 2495.169420][ T8831] shmem 2211840 [ 2495.169420][ T8831] file_mapped 135168 [ 2495.169420][ T8831] file_dirty 135168 [ 2495.169420][ T8831] file_writeback 0 [ 2495.169420][ T8831] anon_thp 92274688 [ 2495.169420][ T8831] inactive_anon 2162688 [ 2495.169420][ T8831] active_anon 99393536 [ 2495.169420][ T8831] inactive_file 12288 [ 2495.169420][ T8831] active_file 192512 [ 2495.169420][ T8831] unevictable 0 [ 2495.169420][ T8831] slab_reclaimable 2973696 [ 2495.169420][ T8831] slab_unreclaimable 4849664 [ 2495.169420][ T8831] pgfault 186483 [ 2495.169420][ T8831] pgmajfault 0 [ 2495.169420][ T8831] workingset_refault 0 [ 2495.169420][ T8831] workingset_activate 0 [ 2495.169420][ T8831] workingset_nodereclaim 0 [ 2495.169420][ T8831] pgrefill 151 [ 2495.169420][ T8831] pgscan 463 [ 2495.169420][ T8831] pgsteal 402 [ 2495.264450][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=26969,uid=0 [ 2495.280004][ T8831] Memory cgroup out of memory: Killed process 26969 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2495.299641][ T1078] oom_reaper: reaped process 26969 (syz-executor.3), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 2495.300769][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2495.322706][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2495.331639][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2495.341689][ T8831] Call Trace: [ 2495.344974][ T8831] dump_stack+0x172/0x1f0 [ 2495.349302][ T8831] dump_header+0x177/0x1152 [ 2495.353800][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2495.359616][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2495.364272][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2495.370125][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2495.375403][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2495.380420][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2495.386119][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2495.391930][ T8831] ? ___ratelimit+0x60/0x595 [ 2495.396505][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2495.401600][ T8831] oom_kill_process.cold+0x10/0x15 [ 2495.406731][ T8831] out_of_memory+0x334/0x1340 [ 2495.411392][ T8831] ? lock_downgrade+0x920/0x920 [ 2495.416238][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2495.422034][ T8831] ? oom_killer_disable+0x280/0x280 [ 2495.427229][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2495.432772][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2495.437693][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2495.442786][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2495.447631][ T8831] try_charge+0xf4b/0x1440 [ 2495.452029][ T8831] ? find_held_lock+0x35/0x130 [ 2495.456777][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2495.462301][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2495.467839][ T8831] ? find_held_lock+0x35/0x130 [ 2495.472586][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2495.478123][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2495.483663][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2495.488849][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2495.494384][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2495.499525][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2495.504885][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2495.510435][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2495.516135][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2495.521346][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2495.526618][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2495.531643][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.536650][ T8831] copy_process+0x3f8/0x6880 [ 2495.541223][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.546238][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2495.551244][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.556259][ T8831] ? mark_lock+0xc2/0x1220 [ 2495.560665][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2495.565585][ T8831] ? find_held_lock+0x35/0x130 [ 2495.570367][ T8831] _do_fork+0x146/0xf90 [ 2495.574511][ T8831] ? copy_init_mm+0x20/0x20 [ 2495.578996][ T8831] ? __kasan_check_read+0x11/0x20 [ 2495.584002][ T8831] ? _copy_to_user+0x118/0x160 [ 2495.588755][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2495.594978][ T8831] ? put_timespec64+0xda/0x140 [ 2495.599723][ T8831] __x64_sys_clone+0x18d/0x250 [ 2495.604471][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2495.609306][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2495.614568][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2495.619575][ T8831] do_syscall_64+0xfa/0x760 [ 2495.624065][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2495.629935][ T8831] RIP: 0033:0x4584ca [ 2495.633811][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2495.653396][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2495.661790][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2495.669751][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2495.677707][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2495.685659][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2495.693620][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2495.701877][ T8831] memory: usage 114236kB, limit 0kB, failcnt 148 [ 2495.708300][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2495.715187][ T8831] Memory cgroup stats for /syz3: [ 2495.715299][ T8831] anon 97161216 [ 2495.715299][ T8831] file 2179072 [ 2495.715299][ T8831] kernel_stack 1966080 [ 2495.715299][ T8831] slab 7823360 [ 2495.715299][ T8831] sock 0 [ 2495.715299][ T8831] shmem 2211840 [ 2495.715299][ T8831] file_mapped 135168 [ 2495.715299][ T8831] file_dirty 135168 [ 2495.715299][ T8831] file_writeback 0 [ 2495.715299][ T8831] anon_thp 90177536 [ 2495.715299][ T8831] inactive_anon 2162688 [ 2495.715299][ T8831] active_anon 97185792 [ 2495.715299][ T8831] inactive_file 12288 [ 2495.715299][ T8831] active_file 192512 [ 2495.715299][ T8831] unevictable 0 [ 2495.715299][ T8831] slab_reclaimable 2973696 [ 2495.715299][ T8831] slab_unreclaimable 4849664 [ 2495.715299][ T8831] pgfault 186483 [ 2495.715299][ T8831] pgmajfault 0 [ 2495.715299][ T8831] workingset_refault 0 [ 2495.715299][ T8831] workingset_activate 0 [ 2495.715299][ T8831] workingset_nodereclaim 0 [ 2495.715299][ T8831] pgrefill 151 [ 2495.715299][ T8831] pgscan 463 [ 2495.715299][ T8831] pgsteal 402 [ 2495.810181][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1140,uid=0 [ 2495.825695][ T8831] Memory cgroup out of memory: Killed process 1140 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2495.845187][ T1078] oom_reaper: reaped process 1140 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2495.846427][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2495.868169][ T8831] CPU: 1 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2495.877104][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2495.887190][ T8831] Call Trace: [ 2495.890491][ T8831] dump_stack+0x172/0x1f0 [ 2495.894837][ T8831] dump_header+0x177/0x1152 [ 2495.899347][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2495.905160][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2495.909856][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2495.915677][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2495.920971][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2495.926000][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2495.931626][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2495.937423][ T8831] ? ___ratelimit+0x60/0x595 [ 2495.942000][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2495.947123][ T8831] oom_kill_process.cold+0x10/0x15 [ 2495.952221][ T8831] out_of_memory+0x334/0x1340 [ 2495.956880][ T8831] ? lock_downgrade+0x920/0x920 [ 2495.961719][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2495.967507][ T8831] ? oom_killer_disable+0x280/0x280 [ 2495.972695][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2495.978224][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2495.983144][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2495.988238][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2495.993073][ T8831] try_charge+0xf4b/0x1440 [ 2495.997468][ T8831] ? find_held_lock+0x35/0x130 [ 2496.002218][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2496.007743][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2496.013268][ T8831] ? find_held_lock+0x35/0x130 [ 2496.018041][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2496.023774][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2496.029319][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2496.034512][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2496.040063][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2496.045169][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2496.050534][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2496.056071][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2496.061779][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2496.066961][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2496.072265][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2496.077271][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.082279][ T8831] copy_process+0x3f8/0x6880 [ 2496.086852][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.091868][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2496.096887][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.101891][ T8831] ? mark_lock+0xc2/0x1220 [ 2496.106295][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2496.111211][ T8831] ? find_held_lock+0x35/0x130 [ 2496.115983][ T8831] _do_fork+0x146/0xf90 [ 2496.120138][ T8831] ? copy_init_mm+0x20/0x20 [ 2496.124625][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.129635][ T8831] ? _copy_to_user+0x118/0x160 [ 2496.134384][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2496.140605][ T8831] ? put_timespec64+0xda/0x140 [ 2496.145353][ T8831] __x64_sys_clone+0x18d/0x250 [ 2496.150103][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2496.154941][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2496.160207][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2496.165216][ T8831] do_syscall_64+0xfa/0x760 [ 2496.169706][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2496.175837][ T8831] RIP: 0033:0x4584ca [ 2496.179713][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 05:15:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x8, "681f1eb520a2037719041d28e6a4232b78f2f6195b6ddc8cae8fa73e8eab812a1db006480dfc9927b2d1eb1c8be8ee29604c0c29061bb8c2c040d2aeb452f766", "7c5f21a9e95224a0926f61ce9f87840455f45455036ebccc40f3b2770987795144dfa2e5fc41c2589815c6bd7762703aea790fc68e73382a6df6956dde259cb6", "bed9717cd53848e7147d36357ba1371e3f56ec7078d58cc0524ef3e0d5a6dcee", [0x4, 0xfffffffffffffffa]}) 05:15:34 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:34 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2496.199300][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2496.207692][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2496.215652][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2496.223604][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2496.231554][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2496.239505][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2496.329225][ T8831] memory: usage 111908kB, limit 0kB, failcnt 154 [ 2496.345830][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2496.356843][ T8831] Memory cgroup stats for /syz3: [ 2496.356986][ T8831] anon 94953472 [ 2496.356986][ T8831] file 2179072 [ 2496.356986][ T8831] kernel_stack 1966080 [ 2496.356986][ T8831] slab 7823360 [ 2496.356986][ T8831] sock 0 [ 2496.356986][ T8831] shmem 2211840 [ 2496.356986][ T8831] file_mapped 135168 [ 2496.356986][ T8831] file_dirty 135168 [ 2496.356986][ T8831] file_writeback 0 [ 2496.356986][ T8831] anon_thp 88080384 [ 2496.356986][ T8831] inactive_anon 2162688 [ 2496.356986][ T8831] active_anon 94978048 [ 2496.356986][ T8831] inactive_file 12288 [ 2496.356986][ T8831] active_file 192512 [ 2496.356986][ T8831] unevictable 0 [ 2496.356986][ T8831] slab_reclaimable 2973696 [ 2496.356986][ T8831] slab_unreclaimable 4849664 [ 2496.356986][ T8831] pgfault 186483 [ 2496.356986][ T8831] pgmajfault 0 [ 2496.356986][ T8831] workingset_refault 0 [ 2496.356986][ T8831] workingset_activate 0 [ 2496.356986][ T8831] workingset_nodereclaim 0 [ 2496.356986][ T8831] pgrefill 151 [ 2496.356986][ T8831] pgscan 463 [ 2496.356986][ T8831] pgsteal 402 [ 2496.456299][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1133,uid=0 [ 2496.488241][ T8831] Memory cgroup out of memory: Killed process 1133 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2496.541068][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2496.559439][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2496.568413][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2496.578474][ T8831] Call Trace: [ 2496.581775][ T8831] dump_stack+0x172/0x1f0 [ 2496.586121][ T8831] dump_header+0x177/0x1152 [ 2496.590637][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2496.596447][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2496.601131][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2496.606940][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2496.612230][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2496.617263][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2496.622925][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2496.628719][ T8831] ? ___ratelimit+0x60/0x595 [ 2496.633288][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2496.638385][ T8831] oom_kill_process.cold+0x10/0x15 [ 2496.643480][ T8831] out_of_memory+0x334/0x1340 [ 2496.648154][ T8831] ? lock_downgrade+0x920/0x920 [ 2496.652992][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2496.658784][ T8831] ? oom_killer_disable+0x280/0x280 [ 2496.663973][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2496.669497][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2496.674419][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2496.679510][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2496.684356][ T8831] try_charge+0xf4b/0x1440 [ 2496.688755][ T8831] ? find_held_lock+0x35/0x130 [ 2496.693507][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2496.699034][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2496.704559][ T8831] ? find_held_lock+0x35/0x130 [ 2496.709305][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2496.714843][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2496.720370][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2496.725553][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2496.731084][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2496.736180][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2496.741535][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2496.747064][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2496.752763][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2496.757944][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2496.763210][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2496.768214][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.773222][ T8831] copy_process+0x3f8/0x6880 [ 2496.777795][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.782809][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2496.787813][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.792993][ T8831] ? mark_lock+0xc2/0x1220 [ 2496.797395][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2496.802313][ T8831] ? find_held_lock+0x35/0x130 [ 2496.807070][ T8831] _do_fork+0x146/0xf90 [ 2496.811228][ T8831] ? copy_init_mm+0x20/0x20 [ 2496.815721][ T8831] ? __kasan_check_read+0x11/0x20 [ 2496.820726][ T8831] ? _copy_to_user+0x118/0x160 [ 2496.825568][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2496.831790][ T8831] ? put_timespec64+0xda/0x140 [ 2496.836540][ T8831] __x64_sys_clone+0x18d/0x250 [ 2496.841288][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2496.846125][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2496.851393][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2496.856403][ T8831] do_syscall_64+0xfa/0x760 [ 2496.860893][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2496.866775][ T8831] RIP: 0033:0x4584ca [ 2496.870655][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2496.890240][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2496.898631][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2496.906582][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2496.914542][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2496.922519][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2496.931098][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2496.989395][ T8831] memory: usage 109588kB, limit 0kB, failcnt 160 [ 2496.996898][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2497.003765][ T8831] Memory cgroup stats for /syz3: [ 2497.003890][ T8831] anon 92745728 [ 2497.003890][ T8831] file 2179072 [ 2497.003890][ T8831] kernel_stack 1900544 [ 2497.003890][ T8831] slab 7823360 [ 2497.003890][ T8831] sock 0 [ 2497.003890][ T8831] shmem 2211840 [ 2497.003890][ T8831] file_mapped 135168 [ 2497.003890][ T8831] file_dirty 135168 [ 2497.003890][ T8831] file_writeback 0 [ 2497.003890][ T8831] anon_thp 85983232 [ 2497.003890][ T8831] inactive_anon 2162688 [ 2497.003890][ T8831] active_anon 92770304 [ 2497.003890][ T8831] inactive_file 12288 [ 2497.003890][ T8831] active_file 192512 [ 2497.003890][ T8831] unevictable 0 [ 2497.003890][ T8831] slab_reclaimable 2973696 [ 2497.003890][ T8831] slab_unreclaimable 4849664 [ 2497.003890][ T8831] pgfault 186483 [ 2497.003890][ T8831] pgmajfault 0 [ 2497.003890][ T8831] workingset_refault 0 [ 2497.003890][ T8831] workingset_activate 0 [ 2497.003890][ T8831] workingset_nodereclaim 0 [ 2497.003890][ T8831] pgrefill 151 [ 2497.003890][ T8831] pgscan 463 [ 2497.003890][ T8831] pgsteal 402 [ 2497.122280][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1123,uid=0 [ 2497.144466][ T8831] Memory cgroup out of memory: Killed process 1123 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2497.177951][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2497.189961][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2497.199672][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2497.209717][ T8831] Call Trace: [ 2497.213010][ T8831] dump_stack+0x172/0x1f0 [ 2497.217390][ T8831] dump_header+0x177/0x1152 [ 2497.221877][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2497.227675][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2497.232388][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2497.238180][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2497.243442][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2497.248446][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2497.254065][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2497.259867][ T8831] ? ___ratelimit+0x60/0x595 [ 2497.264448][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2497.269575][ T8831] oom_kill_process.cold+0x10/0x15 [ 2497.274680][ T8831] out_of_memory+0x334/0x1340 [ 2497.279347][ T8831] ? lock_downgrade+0x920/0x920 [ 2497.284191][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2497.289993][ T8831] ? oom_killer_disable+0x280/0x280 [ 2497.295188][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2497.300730][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2497.305662][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2497.310764][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2497.315618][ T8831] try_charge+0xf4b/0x1440 [ 2497.320016][ T8831] ? find_held_lock+0x35/0x130 [ 2497.324780][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2497.330413][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2497.335950][ T8831] ? find_held_lock+0x35/0x130 [ 2497.340703][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2497.346263][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2497.351806][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2497.357003][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2497.362535][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2497.367642][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2497.373013][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2497.378549][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2497.384295][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2497.389488][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2497.394758][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2497.399782][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.404890][ T8831] copy_process+0x3f8/0x6880 [ 2497.409486][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.414502][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2497.419516][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.424528][ T8831] ? mark_lock+0xc2/0x1220 [ 2497.428941][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2497.433859][ T8831] ? find_held_lock+0x35/0x130 [ 2497.438623][ T8831] _do_fork+0x146/0xf90 [ 2497.442761][ T8831] ? copy_init_mm+0x20/0x20 [ 2497.447264][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.452280][ T8831] ? _copy_to_user+0x118/0x160 [ 2497.457028][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2497.463260][ T8831] ? put_timespec64+0xda/0x140 [ 2497.468024][ T8831] __x64_sys_clone+0x18d/0x250 [ 2497.472883][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2497.477721][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2497.483001][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2497.488044][ T8831] do_syscall_64+0xfa/0x760 [ 2497.492568][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2497.498545][ T8831] RIP: 0033:0x4584ca [ 2497.502450][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2497.522163][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2497.530574][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2497.538546][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2497.546516][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2497.554490][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2497.562451][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2497.571603][ T8831] memory: usage 107268kB, limit 0kB, failcnt 166 [ 2497.578241][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2497.585174][ T8831] Memory cgroup stats for /syz3: [ 2497.585295][ T8831] anon 90501120 [ 2497.585295][ T8831] file 2179072 [ 2497.585295][ T8831] kernel_stack 1900544 [ 2497.585295][ T8831] slab 7823360 [ 2497.585295][ T8831] sock 0 [ 2497.585295][ T8831] shmem 2211840 [ 2497.585295][ T8831] file_mapped 135168 [ 2497.585295][ T8831] file_dirty 135168 [ 2497.585295][ T8831] file_writeback 0 [ 2497.585295][ T8831] anon_thp 83886080 [ 2497.585295][ T8831] inactive_anon 2162688 [ 2497.585295][ T8831] active_anon 90525696 [ 2497.585295][ T8831] inactive_file 12288 [ 2497.585295][ T8831] active_file 192512 [ 2497.585295][ T8831] unevictable 0 [ 2497.585295][ T8831] slab_reclaimable 2973696 [ 2497.585295][ T8831] slab_unreclaimable 4849664 [ 2497.585295][ T8831] pgfault 186483 [ 2497.585295][ T8831] pgmajfault 0 [ 2497.585295][ T8831] workingset_refault 0 [ 2497.585295][ T8831] workingset_activate 0 [ 2497.585295][ T8831] workingset_nodereclaim 0 [ 2497.585295][ T8831] pgrefill 151 [ 2497.585295][ T8831] pgscan 463 [ 2497.585295][ T8831] pgsteal 402 [ 2497.681780][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=1006,uid=0 [ 2497.697993][ T8831] Memory cgroup out of memory: Killed process 1006 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2497.717389][ T1078] oom_reaper: reaped process 1006 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2497.731046][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2497.742960][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2497.751916][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2497.761968][ T8831] Call Trace: [ 2497.765256][ T8831] dump_stack+0x172/0x1f0 [ 2497.769569][ T8831] dump_header+0x177/0x1152 [ 2497.774055][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2497.779856][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2497.784528][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2497.790334][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2497.795633][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2497.800651][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2497.806267][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2497.812054][ T8831] ? ___ratelimit+0x60/0x595 [ 2497.816645][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2497.821752][ T8831] oom_kill_process.cold+0x10/0x15 [ 2497.826846][ T8831] out_of_memory+0x334/0x1340 [ 2497.831502][ T8831] ? lock_downgrade+0x920/0x920 [ 2497.836347][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2497.842230][ T8831] ? oom_killer_disable+0x280/0x280 [ 2497.847502][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2497.853025][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2497.857958][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2497.863067][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2497.867919][ T8831] try_charge+0xf4b/0x1440 [ 2497.872315][ T8831] ? find_held_lock+0x35/0x130 [ 2497.877081][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2497.882617][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2497.888152][ T8831] ? find_held_lock+0x35/0x130 [ 2497.892894][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2497.898454][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2497.904313][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2497.909506][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2497.915064][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2497.920959][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2497.926318][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2497.931844][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2497.937564][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2497.942757][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2497.948023][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2497.953025][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.958046][ T8831] copy_process+0x3f8/0x6880 [ 2497.962630][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.967667][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2497.972683][ T8831] ? __kasan_check_read+0x11/0x20 [ 2497.977708][ T8831] ? mark_lock+0xc2/0x1220 [ 2497.982125][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2497.987043][ T8831] ? find_held_lock+0x35/0x130 [ 2497.991795][ T8831] _do_fork+0x146/0xf90 [ 2497.995950][ T8831] ? copy_init_mm+0x20/0x20 [ 2498.000447][ T8831] ? __kasan_check_read+0x11/0x20 [ 2498.005454][ T8831] ? _copy_to_user+0x118/0x160 [ 2498.010200][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2498.016433][ T8831] ? put_timespec64+0xda/0x140 [ 2498.021194][ T8831] __x64_sys_clone+0x18d/0x250 [ 2498.025940][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2498.030782][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2498.036055][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2498.041073][ T8831] do_syscall_64+0xfa/0x760 [ 2498.045562][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.051431][ T8831] RIP: 0033:0x4584ca [ 2498.055322][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2498.074927][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2498.083332][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2498.091286][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2498.099250][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2498.107214][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2498.115174][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2498.124735][ T8831] memory: usage 104948kB, limit 0kB, failcnt 172 [ 2498.131105][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2498.138895][ T8831] Memory cgroup stats for /syz3: [ 2498.139005][ T8831] anon 88293376 [ 2498.139005][ T8831] file 2179072 [ 2498.139005][ T8831] kernel_stack 1835008 [ 2498.139005][ T8831] slab 7823360 [ 2498.139005][ T8831] sock 0 [ 2498.139005][ T8831] shmem 2211840 [ 2498.139005][ T8831] file_mapped 135168 [ 2498.139005][ T8831] file_dirty 135168 [ 2498.139005][ T8831] file_writeback 0 [ 2498.139005][ T8831] anon_thp 81788928 [ 2498.139005][ T8831] inactive_anon 2162688 [ 2498.139005][ T8831] active_anon 88317952 [ 2498.139005][ T8831] inactive_file 12288 [ 2498.139005][ T8831] active_file 192512 [ 2498.139005][ T8831] unevictable 0 [ 2498.139005][ T8831] slab_reclaimable 2973696 [ 2498.139005][ T8831] slab_unreclaimable 4849664 [ 2498.139005][ T8831] pgfault 186483 [ 2498.139005][ T8831] pgmajfault 0 [ 2498.139005][ T8831] workingset_refault 0 [ 2498.139005][ T8831] workingset_activate 0 [ 2498.139005][ T8831] workingset_nodereclaim 0 [ 2498.139005][ T8831] pgrefill 151 [ 2498.139005][ T8831] pgscan 463 [ 2498.139005][ T8831] pgsteal 402 [ 2498.233922][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=998,uid=0 [ 2498.249268][ T8831] Memory cgroup out of memory: Killed process 998 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2498.269465][ T1078] oom_reaper: reaped process 998 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2498.270710][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2498.292327][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2498.301258][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.311312][ T8831] Call Trace: [ 2498.314604][ T8831] dump_stack+0x172/0x1f0 [ 2498.318931][ T8831] dump_header+0x177/0x1152 [ 2498.323552][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2498.329359][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2498.334029][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2498.339838][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2498.345130][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2498.350153][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2498.355780][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2498.361665][ T8831] ? ___ratelimit+0x60/0x595 [ 2498.366236][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2498.371328][ T8831] oom_kill_process.cold+0x10/0x15 [ 2498.376435][ T8831] out_of_memory+0x334/0x1340 [ 2498.381116][ T8831] ? lock_downgrade+0x920/0x920 [ 2498.386074][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2498.391953][ T8831] ? oom_killer_disable+0x280/0x280 [ 2498.397164][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2498.402701][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2498.407624][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2498.412721][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2498.417579][ T8831] try_charge+0xf4b/0x1440 [ 2498.421986][ T8831] ? find_held_lock+0x35/0x130 [ 2498.426827][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2498.432355][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2498.437893][ T8831] ? find_held_lock+0x35/0x130 [ 2498.442652][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2498.448206][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2498.453747][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2498.458938][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2498.464487][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2498.469701][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2498.475088][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2498.480629][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2498.486331][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2498.491516][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2498.496795][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2498.501810][ T8831] ? __kasan_check_read+0x11/0x20 [ 2498.506835][ T8831] copy_process+0x3f8/0x6880 [ 2498.511423][ T8831] ? __kasan_check_read+0x11/0x20 [ 2498.516443][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2498.521468][ T8831] ? __kasan_check_read+0x11/0x20 [ 2498.526938][ T8831] ? mark_lock+0xc2/0x1220 [ 2498.531375][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2498.536311][ T8831] ? find_held_lock+0x35/0x130 [ 2498.541071][ T8831] _do_fork+0x146/0xf90 [ 2498.545223][ T8831] ? copy_init_mm+0x20/0x20 [ 2498.549731][ T8831] ? __kasan_check_read+0x11/0x20 [ 2498.554753][ T8831] ? _copy_to_user+0x118/0x160 [ 2498.559637][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2498.565873][ T8831] ? put_timespec64+0xda/0x140 [ 2498.570638][ T8831] __x64_sys_clone+0x18d/0x250 [ 2498.575396][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2498.580242][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2498.585516][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2498.590570][ T8831] do_syscall_64+0xfa/0x760 [ 2498.595073][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2498.601001][ T8831] RIP: 0033:0x4584ca [ 2498.604886][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2498.624488][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2498.632905][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2498.640860][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2498.648813][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2498.656770][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2498.664740][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2498.674059][ T8831] memory: usage 102628kB, limit 0kB, failcnt 178 [ 2498.680470][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2498.687381][ T8831] Memory cgroup stats for /syz3: [ 2498.687493][ T8831] anon 86085632 [ 2498.687493][ T8831] file 2179072 [ 2498.687493][ T8831] kernel_stack 1835008 [ 2498.687493][ T8831] slab 7823360 [ 2498.687493][ T8831] sock 0 [ 2498.687493][ T8831] shmem 2211840 [ 2498.687493][ T8831] file_mapped 135168 [ 2498.687493][ T8831] file_dirty 135168 [ 2498.687493][ T8831] file_writeback 0 [ 2498.687493][ T8831] anon_thp 79691776 [ 2498.687493][ T8831] inactive_anon 2162688 [ 2498.687493][ T8831] active_anon 86110208 [ 2498.687493][ T8831] inactive_file 12288 [ 2498.687493][ T8831] active_file 192512 [ 2498.687493][ T8831] unevictable 0 [ 2498.687493][ T8831] slab_reclaimable 2973696 [ 2498.687493][ T8831] slab_unreclaimable 4849664 [ 2498.687493][ T8831] pgfault 186483 [ 2498.687493][ T8831] pgmajfault 0 [ 2498.687493][ T8831] workingset_refault 0 [ 2498.687493][ T8831] workingset_activate 0 [ 2498.687493][ T8831] workingset_nodereclaim 0 [ 2498.687493][ T8831] pgrefill 151 [ 2498.687493][ T8831] pgscan 463 [ 2498.687493][ T8831] pgsteal 402 [ 2498.782418][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=933,uid=0 [ 2498.798766][ T8831] Memory cgroup out of memory: Killed process 933 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2498.818296][ T1078] oom_reaper: reaped process 933 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2498.819454][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2498.841170][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2498.850128][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2498.860184][ T8831] Call Trace: [ 2498.863465][ T8831] dump_stack+0x172/0x1f0 [ 2498.867796][ T8831] dump_header+0x177/0x1152 [ 2498.872308][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2498.878091][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2498.882744][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2498.888557][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2498.894193][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2498.899215][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2498.904842][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2498.910651][ T8831] ? ___ratelimit+0x60/0x595 [ 2498.915317][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2498.920411][ T8831] oom_kill_process.cold+0x10/0x15 [ 2498.925520][ T8831] out_of_memory+0x334/0x1340 [ 2498.930200][ T8831] ? lock_downgrade+0x920/0x920 [ 2498.935046][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2498.940844][ T8831] ? oom_killer_disable+0x280/0x280 [ 2498.946047][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2498.951595][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2498.956521][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2498.961611][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2498.966454][ T8831] try_charge+0xf4b/0x1440 [ 2498.970861][ T8831] ? find_held_lock+0x35/0x130 [ 2498.975627][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2498.981171][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2498.986712][ T8831] ? find_held_lock+0x35/0x130 [ 2498.991478][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2498.997017][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2499.002546][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2499.007737][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2499.013281][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2499.018384][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2499.023737][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2499.029272][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2499.034979][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2499.040170][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.045454][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2499.050465][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.055476][ T8831] copy_process+0x3f8/0x6880 [ 2499.060049][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.065060][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2499.070073][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.075090][ T8831] ? mark_lock+0xc2/0x1220 [ 2499.079501][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2499.084424][ T8831] ? find_held_lock+0x35/0x130 [ 2499.089185][ T8831] _do_fork+0x146/0xf90 [ 2499.093320][ T8831] ? copy_init_mm+0x20/0x20 [ 2499.097817][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.102821][ T8831] ? _copy_to_user+0x118/0x160 [ 2499.107577][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2499.113810][ T8831] ? put_timespec64+0xda/0x140 [ 2499.118558][ T8831] __x64_sys_clone+0x18d/0x250 [ 2499.123305][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2499.128155][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.133449][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2499.138458][ T8831] do_syscall_64+0xfa/0x760 [ 2499.142943][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2499.148818][ T8831] RIP: 0033:0x4584ca [ 2499.152700][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2499.172385][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2499.180787][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2499.188767][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2499.196730][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2499.204694][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2499.212772][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2499.223358][ T8831] memory: usage 100136kB, limit 0kB, failcnt 184 [ 2499.229873][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2499.236925][ T8831] Memory cgroup stats for /syz3: [ 2499.237046][ T8831] anon 83865600 [ 2499.237046][ T8831] file 2179072 [ 2499.237046][ T8831] kernel_stack 1769472 [ 2499.237046][ T8831] slab 7684096 [ 2499.237046][ T8831] sock 0 [ 2499.237046][ T8831] shmem 2211840 [ 2499.237046][ T8831] file_mapped 135168 [ 2499.237046][ T8831] file_dirty 135168 [ 2499.237046][ T8831] file_writeback 0 [ 2499.237046][ T8831] anon_thp 77594624 [ 2499.237046][ T8831] inactive_anon 2162688 [ 2499.237046][ T8831] active_anon 83890176 [ 2499.237046][ T8831] inactive_file 12288 [ 2499.237046][ T8831] active_file 192512 [ 2499.237046][ T8831] unevictable 0 [ 2499.237046][ T8831] slab_reclaimable 2973696 [ 2499.237046][ T8831] slab_unreclaimable 4710400 [ 2499.237046][ T8831] pgfault 186483 [ 2499.237046][ T8831] pgmajfault 0 [ 2499.237046][ T8831] workingset_refault 0 [ 2499.237046][ T8831] workingset_activate 0 [ 2499.237046][ T8831] workingset_nodereclaim 0 [ 2499.237046][ T8831] pgrefill 151 [ 2499.237046][ T8831] pgscan 463 [ 2499.237046][ T8831] pgsteal 402 [ 2499.332061][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27580,uid=0 [ 2499.348464][ T8831] Memory cgroup out of memory: Killed process 27580 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2499.368045][ T1078] oom_reaper: reaped process 27580 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2499.369339][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2499.391156][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2499.400099][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.410170][ T8831] Call Trace: [ 2499.413466][ T8831] dump_stack+0x172/0x1f0 [ 2499.417802][ T8831] dump_header+0x177/0x1152 [ 2499.422372][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.428212][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2499.432876][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.438680][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.444240][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2499.449271][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2499.455163][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2499.461102][ T8831] ? ___ratelimit+0x60/0x595 [ 2499.465689][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2499.470791][ T8831] oom_kill_process.cold+0x10/0x15 [ 2499.475902][ T8831] out_of_memory+0x334/0x1340 [ 2499.480570][ T8831] ? lock_downgrade+0x920/0x920 [ 2499.485408][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2499.491202][ T8831] ? oom_killer_disable+0x280/0x280 [ 2499.496408][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2499.501962][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2499.506894][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2499.512007][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2499.516860][ T8831] try_charge+0xf4b/0x1440 [ 2499.521269][ T8831] ? find_held_lock+0x35/0x130 [ 2499.526046][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2499.531709][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2499.537272][ T8831] ? find_held_lock+0x35/0x130 [ 2499.542079][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2499.547639][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2499.553175][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2499.558373][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2499.563911][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2499.569005][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2499.574378][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2499.579996][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2499.585787][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2499.590970][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.596249][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2499.601263][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.606338][ T8831] copy_process+0x3f8/0x6880 [ 2499.611121][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.616159][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2499.621186][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.626202][ T8831] ? mark_lock+0xc2/0x1220 [ 2499.630632][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2499.635706][ T8831] ? find_held_lock+0x35/0x130 [ 2499.640499][ T8831] _do_fork+0x146/0xf90 [ 2499.644767][ T8831] ? copy_init_mm+0x20/0x20 [ 2499.649281][ T8831] ? __kasan_check_read+0x11/0x20 [ 2499.654300][ T8831] ? _copy_to_user+0x118/0x160 [ 2499.659062][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2499.665286][ T8831] ? put_timespec64+0xda/0x140 [ 2499.670034][ T8831] __x64_sys_clone+0x18d/0x250 [ 2499.674911][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2499.679788][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.685534][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2499.690671][ T8831] do_syscall_64+0xfa/0x760 [ 2499.695177][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2499.701068][ T8831] RIP: 0033:0x4584ca [ 2499.704964][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2499.724585][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2499.734118][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2499.742111][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2499.750240][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2499.758217][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2499.766239][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2499.775282][ T8831] memory: usage 97768kB, limit 0kB, failcnt 190 [ 2499.781534][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2499.788457][ T8831] Memory cgroup stats for /syz3: [ 2499.788585][ T8831] anon 81657856 [ 2499.788585][ T8831] file 2179072 [ 2499.788585][ T8831] kernel_stack 1769472 [ 2499.788585][ T8831] slab 7548928 [ 2499.788585][ T8831] sock 0 [ 2499.788585][ T8831] shmem 2211840 [ 2499.788585][ T8831] file_mapped 135168 [ 2499.788585][ T8831] file_dirty 135168 [ 2499.788585][ T8831] file_writeback 0 [ 2499.788585][ T8831] anon_thp 75497472 [ 2499.788585][ T8831] inactive_anon 2162688 [ 2499.788585][ T8831] active_anon 81682432 [ 2499.788585][ T8831] inactive_file 12288 [ 2499.788585][ T8831] active_file 192512 [ 2499.788585][ T8831] unevictable 0 [ 2499.788585][ T8831] slab_reclaimable 2973696 [ 2499.788585][ T8831] slab_unreclaimable 4575232 [ 2499.788585][ T8831] pgfault 186483 [ 2499.788585][ T8831] pgmajfault 0 [ 2499.788585][ T8831] workingset_refault 0 [ 2499.788585][ T8831] workingset_activate 0 [ 2499.788585][ T8831] workingset_nodereclaim 0 [ 2499.788585][ T8831] pgrefill 151 [ 2499.788585][ T8831] pgscan 463 [ 2499.788585][ T8831] pgsteal 402 [ 2499.883739][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27530,uid=0 [ 2499.899333][ T8831] Memory cgroup out of memory: Killed process 27530 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2499.919852][ T1078] oom_reaper: reaped process 27530 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2499.921062][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2499.943068][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2499.952002][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2499.962045][ T8831] Call Trace: [ 2499.965338][ T8831] dump_stack+0x172/0x1f0 [ 2499.969661][ T8831] dump_header+0x177/0x1152 [ 2499.974173][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.979985][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2499.984649][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2499.990450][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2499.995726][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.000744][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2500.006366][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2500.012163][ T8831] ? ___ratelimit+0x60/0x595 [ 2500.016741][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2500.021845][ T8831] oom_kill_process.cold+0x10/0x15 [ 2500.026939][ T8831] out_of_memory+0x334/0x1340 [ 2500.031595][ T8831] ? lock_downgrade+0x920/0x920 [ 2500.036438][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2500.042250][ T8831] ? oom_killer_disable+0x280/0x280 [ 2500.047435][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2500.052986][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2500.057982][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2500.063086][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2500.067933][ T8831] try_charge+0xf4b/0x1440 [ 2500.072344][ T8831] ? find_held_lock+0x35/0x130 [ 2500.077128][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2500.082706][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2500.088250][ T8831] ? find_held_lock+0x35/0x130 [ 2500.093009][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2500.098557][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2500.104104][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2500.109292][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2500.114851][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2500.119973][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2500.125345][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2500.130896][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2500.136615][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2500.141841][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2500.147143][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.152167][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.157252][ T8831] copy_process+0x3f8/0x6880 [ 2500.161874][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.166895][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2500.171910][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.176931][ T8831] ? mark_lock+0xc2/0x1220 [ 2500.181369][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2500.187220][ T8831] ? find_held_lock+0x35/0x130 [ 2500.192022][ T8831] _do_fork+0x146/0xf90 [ 2500.196179][ T8831] ? copy_init_mm+0x20/0x20 [ 2500.200767][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.205786][ T8831] ? _copy_to_user+0x118/0x160 [ 2500.210545][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2500.216781][ T8831] ? put_timespec64+0xda/0x140 [ 2500.221542][ T8831] __x64_sys_clone+0x18d/0x250 [ 2500.226307][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2500.231168][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2500.236446][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.241472][ T8831] do_syscall_64+0xfa/0x760 [ 2500.245973][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2500.251855][ T8831] RIP: 0033:0x4584ca [ 2500.255740][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2500.275351][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2500.284205][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2500.292181][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2500.300148][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2500.308119][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2500.316079][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2500.325417][ T8831] memory: usage 95448kB, limit 0kB, failcnt 196 [ 2500.331688][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2500.338685][ T8831] Memory cgroup stats for /syz3: [ 2500.338820][ T8831] anon 79450112 [ 2500.338820][ T8831] file 2179072 [ 2500.338820][ T8831] kernel_stack 1703936 [ 2500.338820][ T8831] slab 7548928 [ 2500.338820][ T8831] sock 0 [ 2500.338820][ T8831] shmem 2211840 [ 2500.338820][ T8831] file_mapped 135168 [ 2500.338820][ T8831] file_dirty 135168 [ 2500.338820][ T8831] file_writeback 0 [ 2500.338820][ T8831] anon_thp 73400320 [ 2500.338820][ T8831] inactive_anon 2162688 [ 2500.338820][ T8831] active_anon 79474688 [ 2500.338820][ T8831] inactive_file 12288 [ 2500.338820][ T8831] active_file 192512 [ 2500.338820][ T8831] unevictable 0 [ 2500.338820][ T8831] slab_reclaimable 2973696 [ 2500.338820][ T8831] slab_unreclaimable 4575232 [ 2500.338820][ T8831] pgfault 186483 [ 2500.338820][ T8831] pgmajfault 0 [ 2500.338820][ T8831] workingset_refault 0 [ 2500.338820][ T8831] workingset_activate 0 [ 2500.338820][ T8831] workingset_nodereclaim 0 [ 2500.338820][ T8831] pgrefill 151 [ 2500.338820][ T8831] pgscan 463 [ 2500.338820][ T8831] pgsteal 402 [ 2500.433796][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27164,uid=0 [ 2500.449346][ T8831] Memory cgroup out of memory: Killed process 27164 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2500.469967][ T1078] oom_reaper: reaped process 27164 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2500.471131][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2500.493829][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2500.502766][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2500.512813][ T8831] Call Trace: [ 2500.516101][ T8831] dump_stack+0x172/0x1f0 [ 2500.520418][ T8831] dump_header+0x177/0x1152 [ 2500.527285][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2500.534503][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2500.539182][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2500.544995][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2500.550284][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.555309][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2500.560943][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2500.566767][ T8831] ? ___ratelimit+0x60/0x595 [ 2500.571347][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2500.576456][ T8831] oom_kill_process.cold+0x10/0x15 [ 2500.581637][ T8831] out_of_memory+0x334/0x1340 [ 2500.586327][ T8831] ? lock_downgrade+0x920/0x920 [ 2500.591192][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2500.597114][ T8831] ? oom_killer_disable+0x280/0x280 [ 2500.602310][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2500.607844][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2500.612769][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2500.617882][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2500.622776][ T8831] try_charge+0xf4b/0x1440 [ 2500.627203][ T8831] ? find_held_lock+0x35/0x130 [ 2500.631978][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2500.637524][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2500.643072][ T8831] ? find_held_lock+0x35/0x130 [ 2500.647845][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2500.653450][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2500.658990][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2500.664186][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2500.669725][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2500.674847][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2500.680225][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2500.685763][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2500.691482][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2500.696685][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2500.701952][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.706963][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.711981][ T8831] copy_process+0x3f8/0x6880 [ 2500.716576][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.721718][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2500.726733][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.731748][ T8831] ? mark_lock+0xc2/0x1220 [ 2500.736166][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2500.741095][ T8831] ? find_held_lock+0x35/0x130 [ 2500.745866][ T8831] _do_fork+0x146/0xf90 [ 2500.750040][ T8831] ? copy_init_mm+0x20/0x20 [ 2500.754555][ T8831] ? __kasan_check_read+0x11/0x20 [ 2500.759597][ T8831] ? _copy_to_user+0x118/0x160 [ 2500.764364][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2500.770708][ T8831] ? put_timespec64+0xda/0x140 [ 2500.775483][ T8831] __x64_sys_clone+0x18d/0x250 [ 2500.780273][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2500.785131][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2500.790421][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2500.795450][ T8831] do_syscall_64+0xfa/0x760 [ 2500.799954][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2500.805842][ T8831] RIP: 0033:0x4584ca [ 2500.809739][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2500.829417][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2500.837814][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2500.845778][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2500.853769][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2500.861746][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2500.869714][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2500.879125][ T8831] memory: usage 93128kB, limit 0kB, failcnt 202 [ 2500.885449][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2500.892364][ T8831] Memory cgroup stats for /syz3: [ 2500.892468][ T8831] anon 77242368 [ 2500.892468][ T8831] file 2179072 [ 2500.892468][ T8831] kernel_stack 1703936 [ 2500.892468][ T8831] slab 7548928 [ 2500.892468][ T8831] sock 0 [ 2500.892468][ T8831] shmem 2211840 [ 2500.892468][ T8831] file_mapped 135168 [ 2500.892468][ T8831] file_dirty 135168 [ 2500.892468][ T8831] file_writeback 0 [ 2500.892468][ T8831] anon_thp 71303168 [ 2500.892468][ T8831] inactive_anon 2162688 [ 2500.892468][ T8831] active_anon 77266944 [ 2500.892468][ T8831] inactive_file 12288 [ 2500.892468][ T8831] active_file 192512 [ 2500.892468][ T8831] unevictable 0 [ 2500.892468][ T8831] slab_reclaimable 2973696 [ 2500.892468][ T8831] slab_unreclaimable 4575232 [ 2500.892468][ T8831] pgfault 186483 [ 2500.892468][ T8831] pgmajfault 0 [ 2500.892468][ T8831] workingset_refault 0 [ 2500.892468][ T8831] workingset_activate 0 [ 2500.892468][ T8831] workingset_nodereclaim 0 [ 2500.892468][ T8831] pgrefill 151 [ 2500.892468][ T8831] pgscan 463 [ 2500.892468][ T8831] pgsteal 402 [ 2500.987685][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27138,uid=0 [ 2501.003319][ T8831] Memory cgroup out of memory: Killed process 27138 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2501.024047][ T1078] oom_reaper: reaped process 27138 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2501.025499][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2501.047273][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2501.056235][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.066296][ T8831] Call Trace: [ 2501.069604][ T8831] dump_stack+0x172/0x1f0 [ 2501.073926][ T8831] dump_header+0x177/0x1152 [ 2501.078429][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2501.084230][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2501.088897][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2501.094700][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.099987][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.105000][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2501.110613][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2501.116427][ T8831] ? ___ratelimit+0x60/0x595 [ 2501.121009][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2501.126122][ T8831] oom_kill_process.cold+0x10/0x15 [ 2501.131233][ T8831] out_of_memory+0x334/0x1340 [ 2501.135897][ T8831] ? lock_downgrade+0x920/0x920 [ 2501.140739][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2501.146530][ T8831] ? oom_killer_disable+0x280/0x280 [ 2501.151733][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2501.157270][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2501.162202][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2501.167311][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2501.172142][ T8831] try_charge+0xf4b/0x1440 [ 2501.176545][ T8831] ? find_held_lock+0x35/0x130 [ 2501.181311][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2501.186852][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2501.192376][ T8831] ? find_held_lock+0x35/0x130 [ 2501.197131][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2501.202690][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2501.208221][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2501.213398][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2501.218938][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2501.224045][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2501.229402][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2501.234941][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2501.240652][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2501.245838][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.251117][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.256132][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.261170][ T8831] copy_process+0x3f8/0x6880 [ 2501.265756][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.270758][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2501.275767][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.280783][ T8831] ? mark_lock+0xc2/0x1220 [ 2501.285186][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2501.290102][ T8831] ? find_held_lock+0x35/0x130 [ 2501.294868][ T8831] _do_fork+0x146/0xf90 [ 2501.299034][ T8831] ? copy_init_mm+0x20/0x20 [ 2501.303563][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.308571][ T8831] ? _copy_to_user+0x118/0x160 [ 2501.313316][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2501.319556][ T8831] ? put_timespec64+0xda/0x140 [ 2501.324325][ T8831] __x64_sys_clone+0x18d/0x250 [ 2501.329079][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2501.334024][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.339515][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.344629][ T8831] do_syscall_64+0xfa/0x760 [ 2501.349122][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2501.355118][ T8831] RIP: 0033:0x4584ca [ 2501.359021][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2501.378731][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2501.387160][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2501.395129][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2501.403106][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2501.411073][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2501.419489][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2501.430906][ T8831] memory: usage 90804kB, limit 0kB, failcnt 208 [ 2501.437355][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2501.444550][ T8831] Memory cgroup stats for /syz3: [ 2501.444676][ T8831] anon 75034624 [ 2501.444676][ T8831] file 2179072 [ 2501.444676][ T8831] kernel_stack 1638400 [ 2501.444676][ T8831] slab 7548928 [ 2501.444676][ T8831] sock 0 [ 2501.444676][ T8831] shmem 2211840 [ 2501.444676][ T8831] file_mapped 135168 [ 2501.444676][ T8831] file_dirty 135168 [ 2501.444676][ T8831] file_writeback 0 [ 2501.444676][ T8831] anon_thp 69206016 [ 2501.444676][ T8831] inactive_anon 2162688 [ 2501.444676][ T8831] active_anon 75059200 [ 2501.444676][ T8831] inactive_file 12288 [ 2501.444676][ T8831] active_file 192512 [ 2501.444676][ T8831] unevictable 0 [ 2501.444676][ T8831] slab_reclaimable 2973696 [ 2501.444676][ T8831] slab_unreclaimable 4575232 [ 2501.444676][ T8831] pgfault 186483 [ 2501.444676][ T8831] pgmajfault 0 [ 2501.444676][ T8831] workingset_refault 0 [ 2501.444676][ T8831] workingset_activate 0 [ 2501.444676][ T8831] workingset_nodereclaim 0 [ 2501.444676][ T8831] pgrefill 151 [ 2501.444676][ T8831] pgscan 463 [ 2501.444676][ T8831] pgsteal 402 [ 2501.540132][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27032,uid=0 [ 2501.556585][ T8831] Memory cgroup out of memory: Killed process 27032 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2501.576385][ T1078] oom_reaper: reaped process 27032 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2501.577589][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2501.599794][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2501.608736][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2501.618790][ T8831] Call Trace: [ 2501.622092][ T8831] dump_stack+0x172/0x1f0 [ 2501.626424][ T8831] dump_header+0x177/0x1152 [ 2501.630980][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2501.637038][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2501.641695][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2501.647534][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.652799][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.657806][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2501.663752][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2501.669540][ T8831] ? ___ratelimit+0x60/0x595 [ 2501.674116][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2501.679222][ T8831] oom_kill_process.cold+0x10/0x15 [ 2501.684326][ T8831] out_of_memory+0x334/0x1340 [ 2501.688983][ T8831] ? lock_downgrade+0x920/0x920 [ 2501.693832][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2501.699618][ T8831] ? oom_killer_disable+0x280/0x280 [ 2501.704801][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2501.710324][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2501.715245][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2501.720342][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2501.725194][ T8831] try_charge+0xf4b/0x1440 [ 2501.729591][ T8831] ? find_held_lock+0x35/0x130 [ 2501.734338][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2501.739964][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2501.745503][ T8831] ? find_held_lock+0x35/0x130 [ 2501.750354][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2501.755902][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2501.761428][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2501.766608][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2501.772133][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2501.777227][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2501.782580][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2501.788118][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2501.793814][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2501.799007][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.804274][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.809289][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.814307][ T8831] copy_process+0x3f8/0x6880 [ 2501.818893][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.823913][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2501.828916][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.833918][ T8831] ? mark_lock+0xc2/0x1220 [ 2501.838408][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2501.843324][ T8831] ? find_held_lock+0x35/0x130 [ 2501.848077][ T8831] _do_fork+0x146/0xf90 [ 2501.852216][ T8831] ? copy_init_mm+0x20/0x20 [ 2501.856810][ T8831] ? __kasan_check_read+0x11/0x20 [ 2501.861911][ T8831] ? _copy_to_user+0x118/0x160 [ 2501.866659][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2501.872879][ T8831] ? put_timespec64+0xda/0x140 [ 2501.877723][ T8831] __x64_sys_clone+0x18d/0x250 [ 2501.882553][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2501.887395][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2501.892658][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2501.897661][ T8831] do_syscall_64+0xfa/0x760 [ 2501.902178][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2501.908071][ T8831] RIP: 0033:0x4584ca [ 2501.911972][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2501.931903][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2501.940290][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2501.948238][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2501.956196][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2501.964290][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2501.972708][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2501.981929][ T8831] memory: usage 88484kB, limit 0kB, failcnt 214 [ 2501.988283][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2501.995316][ T8831] Memory cgroup stats for /syz3: [ 2501.995417][ T8831] anon 72826880 [ 2501.995417][ T8831] file 2179072 [ 2501.995417][ T8831] kernel_stack 1638400 [ 2501.995417][ T8831] slab 7548928 [ 2501.995417][ T8831] sock 0 [ 2501.995417][ T8831] shmem 2211840 [ 2501.995417][ T8831] file_mapped 135168 [ 2501.995417][ T8831] file_dirty 135168 [ 2501.995417][ T8831] file_writeback 0 [ 2501.995417][ T8831] anon_thp 67108864 [ 2501.995417][ T8831] inactive_anon 2162688 [ 2501.995417][ T8831] active_anon 72851456 [ 2501.995417][ T8831] inactive_file 12288 [ 2501.995417][ T8831] active_file 192512 [ 2501.995417][ T8831] unevictable 0 [ 2501.995417][ T8831] slab_reclaimable 2973696 [ 2501.995417][ T8831] slab_unreclaimable 4575232 [ 2501.995417][ T8831] pgfault 186483 [ 2501.995417][ T8831] pgmajfault 0 [ 2501.995417][ T8831] workingset_refault 0 [ 2501.995417][ T8831] workingset_activate 0 [ 2501.995417][ T8831] workingset_nodereclaim 0 [ 2501.995417][ T8831] pgrefill 151 [ 2501.995417][ T8831] pgscan 463 [ 2501.995417][ T8831] pgsteal 402 [ 2502.094623][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25651,uid=0 [ 2502.111007][ T8831] Memory cgroup out of memory: Killed process 25651 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2502.130683][ T1078] oom_reaper: reaped process 25651 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2502.131898][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2502.154477][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2502.163479][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.173563][ T8831] Call Trace: [ 2502.176851][ T8831] dump_stack+0x172/0x1f0 [ 2502.181162][ T8831] dump_header+0x177/0x1152 [ 2502.185656][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2502.191444][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2502.196099][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2502.201891][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.207162][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2502.212272][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2502.217882][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2502.223703][ T8831] ? ___ratelimit+0x60/0x595 [ 2502.228290][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2502.233632][ T8831] oom_kill_process.cold+0x10/0x15 [ 2502.238727][ T8831] out_of_memory+0x334/0x1340 [ 2502.243384][ T8831] ? lock_downgrade+0x920/0x920 [ 2502.248233][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2502.254111][ T8831] ? oom_killer_disable+0x280/0x280 [ 2502.259301][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2502.264828][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2502.270281][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2502.275374][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2502.280215][ T8831] try_charge+0xf4b/0x1440 [ 2502.284649][ T8831] ? find_held_lock+0x35/0x130 [ 2502.289420][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2502.294952][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2502.300480][ T8831] ? find_held_lock+0x35/0x130 [ 2502.305242][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2502.310774][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2502.316310][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2502.321488][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2502.327013][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2502.332108][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2502.337460][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2502.343591][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2502.349312][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2502.354509][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.359811][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2502.364839][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.369862][ T8831] copy_process+0x3f8/0x6880 [ 2502.374440][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.379467][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2502.384469][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.389471][ T8831] ? mark_lock+0xc2/0x1220 [ 2502.393880][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2502.398810][ T8831] ? find_held_lock+0x35/0x130 [ 2502.403568][ T8831] _do_fork+0x146/0xf90 [ 2502.407727][ T8831] ? copy_init_mm+0x20/0x20 [ 2502.413095][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.418101][ T8831] ? _copy_to_user+0x118/0x160 [ 2502.422861][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2502.429081][ T8831] ? put_timespec64+0xda/0x140 [ 2502.433839][ T8831] __x64_sys_clone+0x18d/0x250 [ 2502.438589][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2502.443424][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.448697][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2502.453744][ T8831] do_syscall_64+0xfa/0x760 [ 2502.458267][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2502.464152][ T8831] RIP: 0033:0x4584ca [ 2502.468036][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2502.487641][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2502.496066][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2502.504026][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2502.512092][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2502.520073][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2502.528046][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2502.537552][ T8831] memory: usage 86164kB, limit 0kB, failcnt 220 [ 2502.543810][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2502.550774][ T8831] Memory cgroup stats for /syz3: [ 2502.550879][ T8831] anon 70619136 [ 2502.550879][ T8831] file 2179072 [ 2502.550879][ T8831] kernel_stack 1572864 [ 2502.550879][ T8831] slab 7548928 [ 2502.550879][ T8831] sock 0 [ 2502.550879][ T8831] shmem 2211840 [ 2502.550879][ T8831] file_mapped 135168 [ 2502.550879][ T8831] file_dirty 135168 [ 2502.550879][ T8831] file_writeback 0 [ 2502.550879][ T8831] anon_thp 65011712 [ 2502.550879][ T8831] inactive_anon 2162688 [ 2502.550879][ T8831] active_anon 70643712 [ 2502.550879][ T8831] inactive_file 12288 [ 2502.550879][ T8831] active_file 192512 [ 2502.550879][ T8831] unevictable 0 [ 2502.550879][ T8831] slab_reclaimable 2973696 [ 2502.550879][ T8831] slab_unreclaimable 4575232 [ 2502.550879][ T8831] pgfault 186483 [ 2502.550879][ T8831] pgmajfault 0 [ 2502.550879][ T8831] workingset_refault 0 [ 2502.550879][ T8831] workingset_activate 0 [ 2502.550879][ T8831] workingset_nodereclaim 0 [ 2502.550879][ T8831] pgrefill 151 [ 2502.550879][ T8831] pgscan 463 [ 2502.550879][ T8831] pgsteal 402 [ 2502.646614][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25641,uid=0 [ 2502.662146][ T8831] Memory cgroup out of memory: Killed process 25641 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2502.682582][ T1078] oom_reaper: reaped process 25641 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2502.683815][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2502.705819][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2502.714753][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2502.724804][ T8831] Call Trace: [ 2502.728082][ T8831] dump_stack+0x172/0x1f0 [ 2502.732392][ T8831] dump_header+0x177/0x1152 [ 2502.736900][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2502.742689][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2502.747342][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2502.753125][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.758388][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2502.763389][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2502.768998][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2502.774793][ T8831] ? ___ratelimit+0x60/0x595 [ 2502.779358][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2502.784455][ T8831] oom_kill_process.cold+0x10/0x15 [ 2502.789546][ T8831] out_of_memory+0x334/0x1340 [ 2502.794210][ T8831] ? lock_downgrade+0x920/0x920 [ 2502.799041][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2502.804825][ T8831] ? oom_killer_disable+0x280/0x280 [ 2502.810531][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2502.816057][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2502.820971][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2502.826061][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2502.830892][ T8831] try_charge+0xf4b/0x1440 [ 2502.835285][ T8831] ? find_held_lock+0x35/0x130 [ 2502.840033][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2502.845555][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2502.851077][ T8831] ? find_held_lock+0x35/0x130 [ 2502.855849][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2502.861395][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2502.866928][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2502.872113][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2502.877645][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2502.882735][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2502.888103][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2502.893634][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2502.899416][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2502.904594][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.909855][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2502.914858][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.919867][ T8831] copy_process+0x3f8/0x6880 [ 2502.924435][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.929446][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2502.934457][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.939457][ T8831] ? mark_lock+0xc2/0x1220 [ 2502.943873][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2502.948811][ T8831] ? find_held_lock+0x35/0x130 [ 2502.953558][ T8831] _do_fork+0x146/0xf90 [ 2502.957692][ T8831] ? copy_init_mm+0x20/0x20 [ 2502.962185][ T8831] ? __kasan_check_read+0x11/0x20 [ 2502.967189][ T8831] ? _copy_to_user+0x118/0x160 [ 2502.971928][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2502.978160][ T8831] ? put_timespec64+0xda/0x140 [ 2502.982908][ T8831] __x64_sys_clone+0x18d/0x250 [ 2502.987650][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2502.992482][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2502.997746][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2503.002751][ T8831] do_syscall_64+0xfa/0x760 [ 2503.007234][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.013102][ T8831] RIP: 0033:0x4584ca [ 2503.016974][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2503.036556][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2503.045030][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2503.052975][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2503.060921][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2503.068870][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2503.076819][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2503.086053][ T8831] memory: usage 83844kB, limit 0kB, failcnt 226 [ 2503.092305][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2503.099241][ T8831] Memory cgroup stats for /syz3: [ 2503.099341][ T8831] anon 68411392 [ 2503.099341][ T8831] file 2179072 [ 2503.099341][ T8831] kernel_stack 1572864 [ 2503.099341][ T8831] slab 7413760 [ 2503.099341][ T8831] sock 0 [ 2503.099341][ T8831] shmem 2211840 [ 2503.099341][ T8831] file_mapped 135168 [ 2503.099341][ T8831] file_dirty 135168 [ 2503.099341][ T8831] file_writeback 0 [ 2503.099341][ T8831] anon_thp 62914560 [ 2503.099341][ T8831] inactive_anon 2162688 [ 2503.099341][ T8831] active_anon 68435968 [ 2503.099341][ T8831] inactive_file 12288 [ 2503.099341][ T8831] active_file 192512 [ 2503.099341][ T8831] unevictable 0 [ 2503.099341][ T8831] slab_reclaimable 2838528 [ 2503.099341][ T8831] slab_unreclaimable 4575232 [ 2503.099341][ T8831] pgfault 186483 [ 2503.099341][ T8831] pgmajfault 0 [ 2503.099341][ T8831] workingset_refault 0 [ 2503.099341][ T8831] workingset_activate 0 [ 2503.099341][ T8831] workingset_nodereclaim 0 [ 2503.099341][ T8831] pgrefill 151 [ 2503.099341][ T8831] pgscan 463 [ 2503.099341][ T8831] pgsteal 402 [ 2503.195792][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=25629,uid=0 [ 2503.211330][ T8831] Memory cgroup out of memory: Killed process 25629 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2503.230320][ T1078] oom_reaper: reaped process 25629 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2503.232835][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2503.253449][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2503.262377][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.272428][ T8831] Call Trace: [ 2503.275716][ T8831] dump_stack+0x172/0x1f0 [ 2503.280030][ T8831] dump_header+0x177/0x1152 [ 2503.284510][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2503.290301][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2503.294954][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2503.300738][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2503.306002][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2503.311004][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2503.316614][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2503.322420][ T8831] ? ___ratelimit+0x60/0x595 [ 2503.327002][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2503.332101][ T8831] oom_kill_process.cold+0x10/0x15 [ 2503.337199][ T8831] out_of_memory+0x334/0x1340 [ 2503.341863][ T8831] ? lock_downgrade+0x920/0x920 [ 2503.346696][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2503.352495][ T8831] ? oom_killer_disable+0x280/0x280 [ 2503.357693][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2503.363217][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2503.368133][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2503.373222][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2503.378100][ T8831] try_charge+0xf4b/0x1440 [ 2503.382509][ T8831] ? find_held_lock+0x35/0x130 [ 2503.387273][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2503.392800][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2503.398326][ T8831] ? find_held_lock+0x35/0x130 [ 2503.403068][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2503.408599][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2503.414734][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2503.419936][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2503.425458][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2503.430549][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2503.435928][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2503.441458][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2503.447175][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2503.452384][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2503.458185][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2503.463186][ T8831] ? __kasan_check_read+0x11/0x20 [ 2503.468189][ T8831] copy_process+0x3f8/0x6880 [ 2503.472757][ T8831] ? __kasan_check_read+0x11/0x20 [ 2503.477759][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2503.482760][ T8831] ? __kasan_check_read+0x11/0x20 [ 2503.487761][ T8831] ? mark_lock+0xc2/0x1220 [ 2503.492166][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2503.497081][ T8831] ? find_held_lock+0x35/0x130 [ 2503.501841][ T8831] _do_fork+0x146/0xf90 [ 2503.505978][ T8831] ? copy_init_mm+0x20/0x20 [ 2503.510461][ T8831] ? __kasan_check_read+0x11/0x20 [ 2503.515464][ T8831] ? _copy_to_user+0x118/0x160 [ 2503.520204][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2503.526420][ T8831] ? put_timespec64+0xda/0x140 [ 2503.531163][ T8831] __x64_sys_clone+0x18d/0x250 [ 2503.535917][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2503.540746][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2503.546008][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2503.551083][ T8831] do_syscall_64+0xfa/0x760 [ 2503.555577][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2503.561480][ T8831] RIP: 0033:0x4584ca [ 2503.565370][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2503.584967][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2503.593360][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2503.601319][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2503.609268][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2503.617231][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2503.625178][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2503.634520][ T8831] memory: usage 81368kB, limit 0kB, failcnt 232 [ 2503.640777][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2503.647728][ T8831] Memory cgroup stats for /syz3: [ 2503.647827][ T8831] anon 66199552 [ 2503.647827][ T8831] file 2179072 [ 2503.647827][ T8831] kernel_stack 1507328 [ 2503.647827][ T8831] slab 7413760 [ 2503.647827][ T8831] sock 0 [ 2503.647827][ T8831] shmem 2211840 [ 2503.647827][ T8831] file_mapped 135168 [ 2503.647827][ T8831] file_dirty 135168 [ 2503.647827][ T8831] file_writeback 0 [ 2503.647827][ T8831] anon_thp 60817408 [ 2503.647827][ T8831] inactive_anon 2162688 [ 2503.647827][ T8831] active_anon 66224128 [ 2503.647827][ T8831] inactive_file 12288 [ 2503.647827][ T8831] active_file 192512 [ 2503.647827][ T8831] unevictable 0 [ 2503.647827][ T8831] slab_reclaimable 2838528 [ 2503.647827][ T8831] slab_unreclaimable 4575232 [ 2503.647827][ T8831] pgfault 186483 [ 2503.647827][ T8831] pgmajfault 0 [ 2503.647827][ T8831] workingset_refault 0 [ 2503.647827][ T8831] workingset_activate 0 [ 2503.647827][ T8831] workingset_nodereclaim 0 [ 2503.647827][ T8831] pgrefill 151 [ 2503.647827][ T8831] pgscan 463 [ 2503.647827][ T8831] pgsteal 402 [ 2503.743083][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=27445,uid=0 [ 2503.758648][ T8831] Memory cgroup out of memory: Killed process 27445 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2503.777633][ T1078] oom_reaper: reaped process 27445 (syz-executor.3), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 2503.780177][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2503.801536][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2503.810468][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2503.820506][ T8831] Call Trace: [ 2503.823786][ T8831] dump_stack+0x172/0x1f0 [ 2503.828100][ T8831] dump_header+0x177/0x1152 [ 2503.832578][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2503.838357][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2503.843009][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2503.848798][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2503.854060][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2503.859075][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2503.864684][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2503.870537][ T8831] ? ___ratelimit+0x60/0x595 [ 2503.875149][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2503.880252][ T8831] oom_kill_process.cold+0x10/0x15 [ 2503.885350][ T8831] out_of_memory+0x334/0x1340 [ 2503.890012][ T8831] ? lock_downgrade+0x920/0x920 [ 2503.894845][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2503.900632][ T8831] ? oom_killer_disable+0x280/0x280 [ 2503.905812][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2503.911335][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2503.916258][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2503.921444][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2503.926275][ T8831] try_charge+0xf4b/0x1440 [ 2503.930667][ T8831] ? find_held_lock+0x35/0x130 [ 2503.935414][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2503.940936][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2503.946469][ T8831] ? find_held_lock+0x35/0x130 [ 2503.951210][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2503.956753][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2503.962278][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2503.967485][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2503.973008][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2503.978109][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2503.983460][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2503.988983][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2503.994714][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2503.999894][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.005165][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.010174][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.015191][ T8831] copy_process+0x3f8/0x6880 [ 2504.019762][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.024762][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2504.029771][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.034772][ T8831] ? mark_lock+0xc2/0x1220 [ 2504.039167][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2504.044093][ T8831] ? find_held_lock+0x35/0x130 [ 2504.048858][ T8831] _do_fork+0x146/0xf90 [ 2504.052996][ T8831] ? copy_init_mm+0x20/0x20 [ 2504.057480][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.062659][ T8831] ? _copy_to_user+0x118/0x160 [ 2504.067401][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2504.073618][ T8831] ? put_timespec64+0xda/0x140 [ 2504.078375][ T8831] __x64_sys_clone+0x18d/0x250 [ 2504.083119][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2504.087955][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.093216][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.098222][ T8831] do_syscall_64+0xfa/0x760 [ 2504.102709][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2504.108576][ T8831] RIP: 0033:0x4584ca [ 2504.112446][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2504.132032][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2504.140430][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2504.148391][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2504.156352][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2504.164320][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2504.172270][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2504.182462][ T8831] memory: usage 79048kB, limit 0kB, failcnt 238 [ 2504.189211][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2504.196123][ T8831] Memory cgroup stats for /syz3: [ 2504.196220][ T8831] anon 63991808 [ 2504.196220][ T8831] file 2179072 [ 2504.196220][ T8831] kernel_stack 1507328 [ 2504.196220][ T8831] slab 7413760 [ 2504.196220][ T8831] sock 0 [ 2504.196220][ T8831] shmem 2211840 [ 2504.196220][ T8831] file_mapped 135168 [ 2504.196220][ T8831] file_dirty 135168 [ 2504.196220][ T8831] file_writeback 0 [ 2504.196220][ T8831] anon_thp 58720256 [ 2504.196220][ T8831] inactive_anon 2162688 [ 2504.196220][ T8831] active_anon 64016384 [ 2504.196220][ T8831] inactive_file 12288 [ 2504.196220][ T8831] active_file 192512 [ 2504.196220][ T8831] unevictable 0 [ 2504.196220][ T8831] slab_reclaimable 2838528 [ 2504.196220][ T8831] slab_unreclaimable 4575232 [ 2504.196220][ T8831] pgfault 186483 [ 2504.196220][ T8831] pgmajfault 0 [ 2504.196220][ T8831] workingset_refault 0 [ 2504.196220][ T8831] workingset_activate 0 [ 2504.196220][ T8831] workingset_nodereclaim 0 [ 2504.196220][ T8831] pgrefill 151 [ 2504.196220][ T8831] pgscan 463 [ 2504.196220][ T8831] pgsteal 402 [ 2504.291786][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17198,uid=0 [ 2504.307385][ T8831] Memory cgroup out of memory: Killed process 17198 (syz-executor.3) total-vm:72716kB, anon-rss:2208kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2504.326792][ T1078] oom_reaper: reaped process 17198 (syz-executor.3), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 2504.328307][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2504.350859][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2504.359957][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.370016][ T8831] Call Trace: [ 2504.373303][ T8831] dump_stack+0x172/0x1f0 [ 2504.377652][ T8831] dump_header+0x177/0x1152 [ 2504.382184][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2504.387999][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2504.392658][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2504.398463][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.403734][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.408747][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2504.414398][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2504.420756][ T8831] ? ___ratelimit+0x60/0x595 [ 2504.425493][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2504.431026][ T8831] oom_kill_process.cold+0x10/0x15 [ 2504.436181][ T8831] out_of_memory+0x334/0x1340 [ 2504.440859][ T8831] ? lock_downgrade+0x920/0x920 [ 2504.445705][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2504.451507][ T8831] ? oom_killer_disable+0x280/0x280 [ 2504.456766][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2504.462344][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2504.467323][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2504.472479][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2504.477331][ T8831] try_charge+0xf4b/0x1440 [ 2504.481732][ T8831] ? find_held_lock+0x35/0x130 [ 2504.486485][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2504.492025][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2504.497552][ T8831] ? find_held_lock+0x35/0x130 [ 2504.502296][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2504.507939][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2504.513590][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2504.518794][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2504.524323][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2504.529427][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2504.534798][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2504.540324][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2504.546032][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2504.551216][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.556487][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.561504][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.566517][ T8831] copy_process+0x3f8/0x6880 [ 2504.571120][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.576157][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2504.581182][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.586194][ T8831] ? mark_lock+0xc2/0x1220 [ 2504.590608][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2504.595546][ T8831] ? find_held_lock+0x35/0x130 [ 2504.600303][ T8831] _do_fork+0x146/0xf90 [ 2504.604461][ T8831] ? copy_init_mm+0x20/0x20 [ 2504.608988][ T8831] ? __kasan_check_read+0x11/0x20 [ 2504.614008][ T8831] ? _copy_to_user+0x118/0x160 [ 2504.618769][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2504.625002][ T8831] ? put_timespec64+0xda/0x140 [ 2504.629762][ T8831] __x64_sys_clone+0x18d/0x250 [ 2504.634530][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2504.639366][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.644644][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.649652][ T8831] do_syscall_64+0xfa/0x760 [ 2504.654414][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2504.660326][ T8831] RIP: 0033:0x4584ca [ 2504.664225][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2504.683814][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2504.692622][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2504.700596][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2504.708569][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2504.716539][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2504.724494][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2504.733853][ T8831] memory: usage 76716kB, limit 0kB, failcnt 244 [ 2504.740245][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2504.747233][ T8831] Memory cgroup stats for /syz3: [ 2504.747333][ T8831] anon 61779968 [ 2504.747333][ T8831] file 2179072 [ 2504.747333][ T8831] kernel_stack 1441792 [ 2504.747333][ T8831] slab 7413760 [ 2504.747333][ T8831] sock 0 [ 2504.747333][ T8831] shmem 2211840 [ 2504.747333][ T8831] file_mapped 135168 [ 2504.747333][ T8831] file_dirty 135168 [ 2504.747333][ T8831] file_writeback 0 [ 2504.747333][ T8831] anon_thp 56623104 [ 2504.747333][ T8831] inactive_anon 2162688 [ 2504.747333][ T8831] active_anon 61804544 [ 2504.747333][ T8831] inactive_file 12288 [ 2504.747333][ T8831] active_file 192512 [ 2504.747333][ T8831] unevictable 0 [ 2504.747333][ T8831] slab_reclaimable 2838528 [ 2504.747333][ T8831] slab_unreclaimable 4575232 [ 2504.747333][ T8831] pgfault 186483 [ 2504.747333][ T8831] pgmajfault 0 [ 2504.747333][ T8831] workingset_refault 0 [ 2504.747333][ T8831] workingset_activate 0 [ 2504.747333][ T8831] workingset_nodereclaim 0 [ 2504.747333][ T8831] pgrefill 151 [ 2504.747333][ T8831] pgscan 463 [ 2504.747333][ T8831] pgsteal 402 [ 2504.843508][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19082,uid=0 [ 2504.859147][ T8831] Memory cgroup out of memory: Killed process 19082 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2504.878426][ T1078] oom_reaper: reaped process 19082 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2504.880205][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2504.901766][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2504.910773][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2504.920829][ T8831] Call Trace: [ 2504.924125][ T8831] dump_stack+0x172/0x1f0 [ 2504.928448][ T8831] dump_header+0x177/0x1152 [ 2504.932932][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2504.938724][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2504.943416][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2504.949205][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2504.954470][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2504.959474][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2504.965085][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2504.970880][ T8831] ? ___ratelimit+0x60/0x595 [ 2504.975447][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2504.980574][ T8831] oom_kill_process.cold+0x10/0x15 [ 2504.985832][ T8831] out_of_memory+0x334/0x1340 [ 2504.990510][ T8831] ? lock_downgrade+0x920/0x920 [ 2504.995353][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2505.001138][ T8831] ? oom_killer_disable+0x280/0x280 [ 2505.006566][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2505.012103][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2505.017024][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2505.022228][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2505.027102][ T8831] try_charge+0xf4b/0x1440 [ 2505.031518][ T8831] ? find_held_lock+0x35/0x130 [ 2505.036272][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2505.041812][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2505.047351][ T8831] ? find_held_lock+0x35/0x130 [ 2505.052109][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2505.057643][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2505.063171][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2505.068355][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2505.073892][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2505.078998][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2505.084353][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2505.089882][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2505.095595][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2505.100777][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2505.106051][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2505.111065][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.116078][ T8831] copy_process+0x3f8/0x6880 [ 2505.120665][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.125670][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2505.130671][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.135687][ T8831] ? mark_lock+0xc2/0x1220 [ 2505.140086][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2505.145001][ T8831] ? find_held_lock+0x35/0x130 [ 2505.149762][ T8831] _do_fork+0x146/0xf90 [ 2505.153897][ T8831] ? copy_init_mm+0x20/0x20 [ 2505.158385][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.163389][ T8831] ? _copy_to_user+0x118/0x160 [ 2505.168149][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2505.174456][ T8831] ? put_timespec64+0xda/0x140 [ 2505.179215][ T8831] __x64_sys_clone+0x18d/0x250 [ 2505.184006][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2505.188857][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2505.194144][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2505.199170][ T8831] do_syscall_64+0xfa/0x760 [ 2505.203659][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2505.209584][ T8831] RIP: 0033:0x4584ca [ 2505.213461][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2505.233072][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2505.241474][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2505.249576][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2505.257528][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2505.265549][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2505.273499][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2505.282750][ T8831] memory: usage 74396kB, limit 0kB, failcnt 250 [ 2505.289108][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2505.296071][ T8831] Memory cgroup stats for /syz3: [ 2505.296181][ T8831] anon 59564032 [ 2505.296181][ T8831] file 2179072 [ 2505.296181][ T8831] kernel_stack 1441792 [ 2505.296181][ T8831] slab 7413760 [ 2505.296181][ T8831] sock 0 [ 2505.296181][ T8831] shmem 2211840 [ 2505.296181][ T8831] file_mapped 135168 [ 2505.296181][ T8831] file_dirty 135168 [ 2505.296181][ T8831] file_writeback 0 [ 2505.296181][ T8831] anon_thp 54525952 [ 2505.296181][ T8831] inactive_anon 2162688 [ 2505.296181][ T8831] active_anon 59588608 [ 2505.296181][ T8831] inactive_file 12288 [ 2505.296181][ T8831] active_file 192512 [ 2505.296181][ T8831] unevictable 0 [ 2505.296181][ T8831] slab_reclaimable 2838528 [ 2505.296181][ T8831] slab_unreclaimable 4575232 [ 2505.296181][ T8831] pgfault 186483 [ 2505.296181][ T8831] pgmajfault 0 [ 2505.296181][ T8831] workingset_refault 0 [ 2505.296181][ T8831] workingset_activate 0 [ 2505.296181][ T8831] workingset_nodereclaim 0 [ 2505.296181][ T8831] pgrefill 151 [ 2505.296181][ T8831] pgscan 463 [ 2505.296181][ T8831] pgsteal 402 [ 2505.392092][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19072,uid=0 [ 2505.407683][ T8831] Memory cgroup out of memory: Killed process 19072 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2505.426895][ T1078] oom_reaper: reaped process 19072 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2505.428524][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2505.450108][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2505.459062][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2505.469125][ T8831] Call Trace: [ 2505.472543][ T8831] dump_stack+0x172/0x1f0 [ 2505.476914][ T8831] dump_header+0x177/0x1152 [ 2505.481407][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2505.487242][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2505.491916][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2505.497720][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2505.502995][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2505.508002][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2505.513613][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2505.519398][ T8831] ? ___ratelimit+0x60/0x595 [ 2505.523974][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2505.529077][ T8831] oom_kill_process.cold+0x10/0x15 [ 2505.534430][ T8831] out_of_memory+0x334/0x1340 [ 2505.539088][ T8831] ? lock_downgrade+0x920/0x920 [ 2505.543920][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2505.549705][ T8831] ? oom_killer_disable+0x280/0x280 [ 2505.554891][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2505.560527][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2505.565445][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2505.570558][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2505.575408][ T8831] try_charge+0xf4b/0x1440 [ 2505.579802][ T8831] ? find_held_lock+0x35/0x130 [ 2505.584552][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2505.590077][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2505.595602][ T8831] ? find_held_lock+0x35/0x130 [ 2505.600358][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2505.605901][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2505.611457][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2505.616643][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2505.622200][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2505.627374][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2505.632743][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2505.638286][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2505.643999][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2505.649303][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2505.654608][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2505.659636][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.665173][ T8831] copy_process+0x3f8/0x6880 [ 2505.669757][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.674787][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2505.679822][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.684851][ T8831] ? mark_lock+0xc2/0x1220 [ 2505.689397][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2505.696076][ T8831] ? find_held_lock+0x35/0x130 [ 2505.700853][ T8831] _do_fork+0x146/0xf90 [ 2505.704994][ T8831] ? copy_init_mm+0x20/0x20 [ 2505.709658][ T8831] ? __kasan_check_read+0x11/0x20 [ 2505.714661][ T8831] ? _copy_to_user+0x118/0x160 [ 2505.719421][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2505.725647][ T8831] ? put_timespec64+0xda/0x140 [ 2505.730475][ T8831] __x64_sys_clone+0x18d/0x250 [ 2505.735259][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2505.740105][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2505.746157][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2505.751168][ T8831] do_syscall_64+0xfa/0x760 [ 2505.755658][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2505.761572][ T8831] RIP: 0033:0x4584ca [ 2505.765471][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2505.785060][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2505.793452][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2505.801401][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2505.809371][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2505.817329][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2505.825291][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2505.835440][ T8831] memory: usage 72076kB, limit 0kB, failcnt 256 [ 2505.841697][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2505.848659][ T8831] Memory cgroup stats for /syz3: [ 2505.848769][ T8831] anon 57356288 [ 2505.848769][ T8831] file 2179072 [ 2505.848769][ T8831] kernel_stack 1376256 [ 2505.848769][ T8831] slab 7413760 [ 2505.848769][ T8831] sock 0 [ 2505.848769][ T8831] shmem 2211840 [ 2505.848769][ T8831] file_mapped 135168 [ 2505.848769][ T8831] file_dirty 135168 [ 2505.848769][ T8831] file_writeback 0 [ 2505.848769][ T8831] anon_thp 52428800 [ 2505.848769][ T8831] inactive_anon 2162688 [ 2505.848769][ T8831] active_anon 57380864 [ 2505.848769][ T8831] inactive_file 12288 [ 2505.848769][ T8831] active_file 192512 [ 2505.848769][ T8831] unevictable 0 [ 2505.848769][ T8831] slab_reclaimable 2838528 [ 2505.848769][ T8831] slab_unreclaimable 4575232 [ 2505.848769][ T8831] pgfault 186483 [ 2505.848769][ T8831] pgmajfault 0 [ 2505.848769][ T8831] workingset_refault 0 [ 2505.848769][ T8831] workingset_activate 0 [ 2505.848769][ T8831] workingset_nodereclaim 0 [ 2505.848769][ T8831] pgrefill 151 [ 2505.848769][ T8831] pgscan 463 [ 2505.848769][ T8831] pgsteal 402 [ 2505.943774][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19038,uid=0 [ 2505.960129][ T8831] Memory cgroup out of memory: Killed process 19038 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2505.980622][ T1078] oom_reaper: reaped process 19038 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2505.980878][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2506.003808][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2506.012758][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.022800][ T8831] Call Trace: [ 2506.026096][ T8831] dump_stack+0x172/0x1f0 [ 2506.030422][ T8831] dump_header+0x177/0x1152 [ 2506.034943][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2506.040741][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2506.045395][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2506.051181][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.056465][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.061482][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2506.067098][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2506.072886][ T8831] ? ___ratelimit+0x60/0x595 [ 2506.077976][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2506.083070][ T8831] oom_kill_process.cold+0x10/0x15 [ 2506.088191][ T8831] out_of_memory+0x334/0x1340 [ 2506.092848][ T8831] ? lock_downgrade+0x920/0x920 [ 2506.097682][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2506.103464][ T8831] ? oom_killer_disable+0x280/0x280 [ 2506.108646][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2506.114169][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2506.119107][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2506.124197][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2506.129024][ T8831] try_charge+0xf4b/0x1440 [ 2506.133418][ T8831] ? find_held_lock+0x35/0x130 [ 2506.138162][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2506.143702][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2506.149247][ T8831] ? find_held_lock+0x35/0x130 [ 2506.153993][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2506.159524][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2506.165067][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2506.170259][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2506.176745][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2506.181842][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2506.187199][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2506.192726][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2506.198423][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2506.203601][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.208866][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.213869][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.218881][ T8831] copy_process+0x3f8/0x6880 [ 2506.223460][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.228464][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2506.233480][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.238481][ T8831] ? mark_lock+0xc2/0x1220 [ 2506.242880][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2506.247794][ T8831] ? find_held_lock+0x35/0x130 [ 2506.252558][ T8831] _do_fork+0x146/0xf90 [ 2506.256700][ T8831] ? copy_init_mm+0x20/0x20 [ 2506.261202][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.266207][ T8831] ? _copy_to_user+0x118/0x160 [ 2506.270951][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2506.277175][ T8831] ? put_timespec64+0xda/0x140 [ 2506.281943][ T8831] __x64_sys_clone+0x18d/0x250 [ 2506.286690][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2506.291524][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.296799][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.301810][ T8831] do_syscall_64+0xfa/0x760 [ 2506.306317][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2506.312187][ T8831] RIP: 0033:0x4584ca [ 2506.316077][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2506.335670][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2506.344070][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2506.352039][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2506.359992][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2506.367973][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2506.375934][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2506.386560][ T8831] memory: usage 69752kB, limit 0kB, failcnt 262 [ 2506.394289][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2506.401126][ T8831] Memory cgroup stats for /syz3: [ 2506.401212][ T8831] anon 55148544 [ 2506.401212][ T8831] file 2179072 [ 2506.401212][ T8831] kernel_stack 1376256 [ 2506.401212][ T8831] slab 7413760 [ 2506.401212][ T8831] sock 0 [ 2506.401212][ T8831] shmem 2211840 [ 2506.401212][ T8831] file_mapped 135168 [ 2506.401212][ T8831] file_dirty 135168 [ 2506.401212][ T8831] file_writeback 0 [ 2506.401212][ T8831] anon_thp 50331648 [ 2506.401212][ T8831] inactive_anon 2162688 [ 2506.401212][ T8831] active_anon 55173120 [ 2506.401212][ T8831] inactive_file 12288 [ 2506.401212][ T8831] active_file 192512 [ 2506.401212][ T8831] unevictable 0 [ 2506.401212][ T8831] slab_reclaimable 2838528 [ 2506.401212][ T8831] slab_unreclaimable 4575232 [ 2506.401212][ T8831] pgfault 186483 [ 2506.401212][ T8831] pgmajfault 0 [ 2506.401212][ T8831] workingset_refault 0 [ 2506.401212][ T8831] workingset_activate 0 [ 2506.401212][ T8831] workingset_nodereclaim 0 [ 2506.401212][ T8831] pgrefill 151 [ 2506.401212][ T8831] pgscan 463 [ 2506.401212][ T8831] pgsteal 402 [ 2506.496631][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19032,uid=0 [ 2506.512344][ T8831] Memory cgroup out of memory: Killed process 19032 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2506.533563][ T1078] oom_reaper: reaped process 19032 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2506.533935][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2506.556685][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2506.566587][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2506.576634][ T8831] Call Trace: [ 2506.579932][ T8831] dump_stack+0x172/0x1f0 [ 2506.584253][ T8831] dump_header+0x177/0x1152 [ 2506.588747][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2506.594546][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2506.599210][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2506.605021][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.610287][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.615306][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2506.620940][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2506.626746][ T8831] ? ___ratelimit+0x60/0x595 [ 2506.631329][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2506.636435][ T8831] oom_kill_process.cold+0x10/0x15 [ 2506.641531][ T8831] out_of_memory+0x334/0x1340 [ 2506.646237][ T8831] ? lock_downgrade+0x920/0x920 [ 2506.651069][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2506.656868][ T8831] ? oom_killer_disable+0x280/0x280 [ 2506.662101][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2506.667626][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2506.672543][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2506.677637][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2506.682469][ T8831] try_charge+0xf4b/0x1440 [ 2506.686876][ T8831] ? find_held_lock+0x35/0x130 [ 2506.691623][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2506.697148][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2506.702680][ T8831] ? find_held_lock+0x35/0x130 [ 2506.707424][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2506.712957][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2506.718482][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2506.723662][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2506.729184][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2506.734275][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2506.739628][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2506.745153][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2506.750849][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2506.756049][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.761345][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.766412][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.771429][ T8831] copy_process+0x3f8/0x6880 [ 2506.776003][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.781009][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2506.786034][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.791035][ T8831] ? mark_lock+0xc2/0x1220 [ 2506.795436][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2506.800349][ T8831] ? find_held_lock+0x35/0x130 [ 2506.805108][ T8831] _do_fork+0x146/0xf90 [ 2506.809265][ T8831] ? copy_init_mm+0x20/0x20 [ 2506.813761][ T8831] ? __kasan_check_read+0x11/0x20 [ 2506.818790][ T8831] ? _copy_to_user+0x118/0x160 [ 2506.823535][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2506.829756][ T8831] ? put_timespec64+0xda/0x140 [ 2506.834505][ T8831] __x64_sys_clone+0x18d/0x250 [ 2506.839249][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2506.844097][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2506.849576][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2506.854629][ T8831] do_syscall_64+0xfa/0x760 [ 2506.859228][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2506.865110][ T8831] RIP: 0033:0x4584ca [ 2506.868987][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2506.888572][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2506.896963][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2506.905085][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2506.913048][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2506.920998][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2506.929100][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2506.938458][ T8831] memory: usage 67432kB, limit 0kB, failcnt 268 [ 2506.944802][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2506.951646][ T8831] Memory cgroup stats for /syz3: [ 2506.951771][ T8831] anon 52940800 [ 2506.951771][ T8831] file 2179072 [ 2506.951771][ T8831] kernel_stack 1310720 [ 2506.951771][ T8831] slab 7413760 [ 2506.951771][ T8831] sock 0 [ 2506.951771][ T8831] shmem 2211840 [ 2506.951771][ T8831] file_mapped 135168 [ 2506.951771][ T8831] file_dirty 135168 [ 2506.951771][ T8831] file_writeback 0 [ 2506.951771][ T8831] anon_thp 48234496 [ 2506.951771][ T8831] inactive_anon 2162688 [ 2506.951771][ T8831] active_anon 52965376 [ 2506.951771][ T8831] inactive_file 12288 [ 2506.951771][ T8831] active_file 192512 [ 2506.951771][ T8831] unevictable 0 [ 2506.951771][ T8831] slab_reclaimable 2838528 [ 2506.951771][ T8831] slab_unreclaimable 4575232 [ 2506.951771][ T8831] pgfault 186483 [ 2506.951771][ T8831] pgmajfault 0 [ 2506.951771][ T8831] workingset_refault 0 [ 2506.951771][ T8831] workingset_activate 0 [ 2506.951771][ T8831] workingset_nodereclaim 0 [ 2506.951771][ T8831] pgrefill 151 [ 2506.951771][ T8831] pgscan 463 [ 2506.951771][ T8831] pgsteal 402 [ 2507.046997][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19025,uid=0 [ 2507.062638][ T8831] Memory cgroup out of memory: Killed process 19025 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2507.081710][ T1078] oom_reaper: reaped process 19025 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2507.084354][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2507.104739][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2507.113670][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.123732][ T8831] Call Trace: [ 2507.127017][ T8831] dump_stack+0x172/0x1f0 [ 2507.131330][ T8831] dump_header+0x177/0x1152 [ 2507.135814][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2507.141612][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2507.146280][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2507.152068][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.157342][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.162360][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2507.167971][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2507.173754][ T8831] ? ___ratelimit+0x60/0x595 [ 2507.178338][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2507.183427][ T8831] oom_kill_process.cold+0x10/0x15 [ 2507.188636][ T8831] out_of_memory+0x334/0x1340 [ 2507.193408][ T8831] ? lock_downgrade+0x920/0x920 [ 2507.198266][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2507.204067][ T8831] ? oom_killer_disable+0x280/0x280 [ 2507.209265][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2507.214800][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2507.219844][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2507.224972][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2507.229874][ T8831] try_charge+0xf4b/0x1440 [ 2507.234288][ T8831] ? find_held_lock+0x35/0x130 [ 2507.239054][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2507.244589][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2507.250121][ T8831] ? find_held_lock+0x35/0x130 [ 2507.254875][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2507.260415][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2507.265947][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2507.271128][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2507.276657][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2507.281750][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2507.287104][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2507.292626][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2507.298320][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2507.303497][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.308800][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.313822][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.318847][ T8831] copy_process+0x3f8/0x6880 [ 2507.323427][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.328438][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2507.333450][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.338454][ T8831] ? mark_lock+0xc2/0x1220 [ 2507.342855][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2507.347769][ T8831] ? find_held_lock+0x35/0x130 [ 2507.352518][ T8831] _do_fork+0x146/0xf90 [ 2507.356666][ T8831] ? copy_init_mm+0x20/0x20 [ 2507.361151][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.366173][ T8831] ? _copy_to_user+0x118/0x160 [ 2507.370916][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2507.377140][ T8831] ? put_timespec64+0xda/0x140 [ 2507.381885][ T8831] __x64_sys_clone+0x18d/0x250 [ 2507.386644][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2507.391478][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.396757][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.401786][ T8831] do_syscall_64+0xfa/0x760 [ 2507.406373][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.412255][ T8831] RIP: 0033:0x4584ca [ 2507.416132][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2507.435780][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2507.444185][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2507.452167][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2507.460131][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2507.468098][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2507.476061][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2507.485384][ T8831] memory: usage 65112kB, limit 0kB, failcnt 274 [ 2507.491662][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2507.498638][ T8831] Memory cgroup stats for /syz3: [ 2507.498765][ T8831] anon 50733056 [ 2507.498765][ T8831] file 2179072 [ 2507.498765][ T8831] kernel_stack 1310720 [ 2507.498765][ T8831] slab 7413760 [ 2507.498765][ T8831] sock 0 [ 2507.498765][ T8831] shmem 2211840 [ 2507.498765][ T8831] file_mapped 135168 [ 2507.498765][ T8831] file_dirty 135168 [ 2507.498765][ T8831] file_writeback 0 [ 2507.498765][ T8831] anon_thp 46137344 [ 2507.498765][ T8831] inactive_anon 2162688 [ 2507.498765][ T8831] active_anon 50757632 [ 2507.498765][ T8831] inactive_file 12288 [ 2507.498765][ T8831] active_file 192512 [ 2507.498765][ T8831] unevictable 0 [ 2507.498765][ T8831] slab_reclaimable 2838528 [ 2507.498765][ T8831] slab_unreclaimable 4575232 [ 2507.498765][ T8831] pgfault 186483 [ 2507.498765][ T8831] pgmajfault 0 [ 2507.498765][ T8831] workingset_refault 0 [ 2507.498765][ T8831] workingset_activate 0 [ 2507.498765][ T8831] workingset_nodereclaim 0 [ 2507.498765][ T8831] pgrefill 151 [ 2507.498765][ T8831] pgscan 463 [ 2507.498765][ T8831] pgsteal 402 [ 2507.594245][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=19015,uid=0 [ 2507.609912][ T8831] Memory cgroup out of memory: Killed process 19015 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2507.629762][ T1078] oom_reaper: reaped process 19015 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2507.631481][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2507.653922][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2507.662876][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2507.672932][ T8831] Call Trace: [ 2507.676220][ T8831] dump_stack+0x172/0x1f0 [ 2507.680536][ T8831] dump_header+0x177/0x1152 [ 2507.685020][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2507.690825][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2507.695484][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2507.701273][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.706545][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.711553][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2507.717168][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2507.722980][ T8831] ? ___ratelimit+0x60/0x595 [ 2507.727582][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2507.732701][ T8831] oom_kill_process.cold+0x10/0x15 [ 2507.737944][ T8831] out_of_memory+0x334/0x1340 [ 2507.742669][ T8831] ? lock_downgrade+0x920/0x920 [ 2507.747532][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2507.753334][ T8831] ? oom_killer_disable+0x280/0x280 [ 2507.758519][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2507.764043][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2507.768962][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2507.774054][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2507.778889][ T8831] try_charge+0xf4b/0x1440 [ 2507.783285][ T8831] ? find_held_lock+0x35/0x130 [ 2507.788035][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2507.793572][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2507.799115][ T8831] ? find_held_lock+0x35/0x130 [ 2507.803877][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2507.809411][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2507.815023][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2507.820260][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2507.825866][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2507.831204][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2507.836575][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2507.842111][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2507.848080][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2507.853281][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.858545][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.863561][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.868573][ T8831] copy_process+0x3f8/0x6880 [ 2507.873488][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.878490][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2507.883508][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.888523][ T8831] ? mark_lock+0xc2/0x1220 [ 2507.892934][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2507.897850][ T8831] ? find_held_lock+0x35/0x130 [ 2507.902616][ T8831] _do_fork+0x146/0xf90 [ 2507.906752][ T8831] ? copy_init_mm+0x20/0x20 [ 2507.911276][ T8831] ? __kasan_check_read+0x11/0x20 [ 2507.916311][ T8831] ? _copy_to_user+0x118/0x160 [ 2507.921071][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2507.927300][ T8831] ? put_timespec64+0xda/0x140 [ 2507.932064][ T8831] __x64_sys_clone+0x18d/0x250 [ 2507.936830][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2507.941665][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2507.946930][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2507.951943][ T8831] do_syscall_64+0xfa/0x760 [ 2507.956430][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2507.962299][ T8831] RIP: 0033:0x4584ca [ 2507.966177][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2507.985764][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2507.994165][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2508.002123][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2508.010941][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2508.018890][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2508.026839][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2508.036232][ T8831] memory: usage 62780kB, limit 0kB, failcnt 280 [ 2508.042493][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2508.049542][ T8831] Memory cgroup stats for /syz3: [ 2508.049649][ T8831] anon 48513024 [ 2508.049649][ T8831] file 2179072 [ 2508.049649][ T8831] kernel_stack 1245184 [ 2508.049649][ T8831] slab 7413760 [ 2508.049649][ T8831] sock 0 [ 2508.049649][ T8831] shmem 2211840 [ 2508.049649][ T8831] file_mapped 135168 [ 2508.049649][ T8831] file_dirty 135168 [ 2508.049649][ T8831] file_writeback 0 [ 2508.049649][ T8831] anon_thp 44040192 [ 2508.049649][ T8831] inactive_anon 2162688 [ 2508.049649][ T8831] active_anon 48537600 [ 2508.049649][ T8831] inactive_file 12288 [ 2508.049649][ T8831] active_file 192512 [ 2508.049649][ T8831] unevictable 0 [ 2508.049649][ T8831] slab_reclaimable 2838528 [ 2508.049649][ T8831] slab_unreclaimable 4575232 [ 2508.049649][ T8831] pgfault 186483 [ 2508.049649][ T8831] pgmajfault 0 [ 2508.049649][ T8831] workingset_refault 0 [ 2508.049649][ T8831] workingset_activate 0 [ 2508.049649][ T8831] workingset_nodereclaim 0 [ 2508.049649][ T8831] pgrefill 151 [ 2508.049649][ T8831] pgscan 463 [ 2508.049649][ T8831] pgsteal 402 [ 2508.144724][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17313,uid=0 [ 2508.160269][ T8831] Memory cgroup out of memory: Killed process 17313 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2508.179353][ T1078] oom_reaper: reaped process 17313 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2508.181889][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2508.202499][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2508.211436][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.221502][ T8831] Call Trace: [ 2508.224782][ T8831] dump_stack+0x172/0x1f0 [ 2508.229156][ T8831] dump_header+0x177/0x1152 [ 2508.233652][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2508.239434][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2508.244154][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2508.249990][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2508.255254][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2508.260268][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2508.265878][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2508.271689][ T8831] ? ___ratelimit+0x60/0x595 [ 2508.276255][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2508.281442][ T8831] oom_kill_process.cold+0x10/0x15 [ 2508.286532][ T8831] out_of_memory+0x334/0x1340 [ 2508.291185][ T8831] ? lock_downgrade+0x920/0x920 [ 2508.296018][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2508.301798][ T8831] ? oom_killer_disable+0x280/0x280 [ 2508.306977][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2508.312523][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2508.317442][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2508.322535][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2508.327370][ T8831] try_charge+0xf4b/0x1440 [ 2508.331763][ T8831] ? find_held_lock+0x35/0x130 [ 2508.336522][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2508.342044][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2508.347616][ T8831] ? find_held_lock+0x35/0x130 [ 2508.352390][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2508.357932][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2508.363478][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2508.368671][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2508.374341][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2508.379481][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2508.384847][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2508.390383][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2508.396096][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2508.401283][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2508.406550][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2508.411599][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.416653][ T8831] copy_process+0x3f8/0x6880 [ 2508.421223][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.426223][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2508.431220][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.436222][ T8831] ? mark_lock+0xc2/0x1220 [ 2508.440617][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2508.445528][ T8831] ? find_held_lock+0x35/0x130 [ 2508.450278][ T8831] _do_fork+0x146/0xf90 [ 2508.454448][ T8831] ? copy_init_mm+0x20/0x20 [ 2508.458950][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.463951][ T8831] ? _copy_to_user+0x118/0x160 [ 2508.468693][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2508.474909][ T8831] ? put_timespec64+0xda/0x140 [ 2508.479651][ T8831] __x64_sys_clone+0x18d/0x250 [ 2508.484433][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2508.489263][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2508.494522][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2508.499536][ T8831] do_syscall_64+0xfa/0x760 [ 2508.504027][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2508.509895][ T8831] RIP: 0033:0x4584ca [ 2508.513786][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2508.533399][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2508.541795][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2508.549766][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2508.557768][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2508.565722][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2508.573676][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2508.582766][ T8831] memory: usage 60380kB, limit 0kB, failcnt 286 [ 2508.589070][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2508.595965][ T8831] Memory cgroup stats for /syz3: [ 2508.596070][ T8831] anon 46305280 [ 2508.596070][ T8831] file 2179072 [ 2508.596070][ T8831] kernel_stack 1245184 [ 2508.596070][ T8831] slab 7278592 [ 2508.596070][ T8831] sock 0 [ 2508.596070][ T8831] shmem 2211840 [ 2508.596070][ T8831] file_mapped 135168 [ 2508.596070][ T8831] file_dirty 135168 [ 2508.596070][ T8831] file_writeback 0 [ 2508.596070][ T8831] anon_thp 41943040 [ 2508.596070][ T8831] inactive_anon 2162688 [ 2508.596070][ T8831] active_anon 46329856 [ 2508.596070][ T8831] inactive_file 12288 [ 2508.596070][ T8831] active_file 192512 [ 2508.596070][ T8831] unevictable 0 [ 2508.596070][ T8831] slab_reclaimable 2838528 [ 2508.596070][ T8831] slab_unreclaimable 4440064 [ 2508.596070][ T8831] pgfault 186483 [ 2508.596070][ T8831] pgmajfault 0 [ 2508.596070][ T8831] workingset_refault 0 [ 2508.596070][ T8831] workingset_activate 0 [ 2508.596070][ T8831] workingset_nodereclaim 0 [ 2508.596070][ T8831] pgrefill 151 [ 2508.596070][ T8831] pgscan 463 [ 2508.596070][ T8831] pgsteal 402 [ 2508.691028][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17293,uid=0 [ 2508.707148][ T8831] Memory cgroup out of memory: Killed process 17293 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2508.728169][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2508.731989][ T1078] oom_reaper: reaped process 17293 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2508.740027][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2508.740036][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2508.740046][ T8831] Call Trace: [ 2508.773884][ T8831] dump_stack+0x172/0x1f0 [ 2508.778197][ T8831] dump_header+0x177/0x1152 [ 2508.782679][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2508.788468][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2508.793132][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2508.798929][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2508.804193][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2508.809205][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2508.814819][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2508.820603][ T8831] ? ___ratelimit+0x60/0x595 [ 2508.825181][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2508.830298][ T8831] oom_kill_process.cold+0x10/0x15 [ 2508.836012][ T8831] out_of_memory+0x334/0x1340 [ 2508.840675][ T8831] ? lock_downgrade+0x920/0x920 [ 2508.845512][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2508.851302][ T8831] ? oom_killer_disable+0x280/0x280 [ 2508.856483][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2508.862006][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2508.866930][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2508.872019][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2508.876848][ T8831] try_charge+0xf4b/0x1440 [ 2508.881238][ T8831] ? find_held_lock+0x35/0x130 [ 2508.885982][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2508.891504][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2508.897114][ T8831] ? find_held_lock+0x35/0x130 [ 2508.901855][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2508.907414][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2508.912938][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2508.918116][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2508.923639][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2508.928743][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2508.934113][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2508.939645][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2508.945427][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2508.950606][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2508.955867][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2508.960866][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.965870][ T8831] copy_process+0x3f8/0x6880 [ 2508.970447][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.975457][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2508.980458][ T8831] ? __kasan_check_read+0x11/0x20 [ 2508.985460][ T8831] ? mark_lock+0xc2/0x1220 [ 2508.989865][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2508.994809][ T8831] ? find_held_lock+0x35/0x130 [ 2508.999556][ T8831] _do_fork+0x146/0xf90 [ 2509.003689][ T8831] ? copy_init_mm+0x20/0x20 [ 2509.008172][ T8831] ? __kasan_check_read+0x11/0x20 [ 2509.013179][ T8831] ? _copy_to_user+0x118/0x160 [ 2509.017923][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2509.024145][ T8831] ? put_timespec64+0xda/0x140 [ 2509.028888][ T8831] __x64_sys_clone+0x18d/0x250 [ 2509.033628][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2509.038474][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2509.043745][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2509.048758][ T8831] do_syscall_64+0xfa/0x760 [ 2509.053256][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2509.059131][ T8831] RIP: 0033:0x4584ca [ 2509.063002][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2509.082581][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2509.090966][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2509.098999][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2509.106947][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2509.114906][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2509.122852][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2509.133198][ T8831] memory: usage 58052kB, limit 0kB, failcnt 292 [ 2509.139529][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2509.146458][ T8831] Memory cgroup stats for /syz3: [ 2509.146558][ T8831] anon 44097536 [ 2509.146558][ T8831] file 2179072 [ 2509.146558][ T8831] kernel_stack 1179648 [ 2509.146558][ T8831] slab 7278592 [ 2509.146558][ T8831] sock 0 [ 2509.146558][ T8831] shmem 2211840 [ 2509.146558][ T8831] file_mapped 135168 [ 2509.146558][ T8831] file_dirty 135168 [ 2509.146558][ T8831] file_writeback 0 [ 2509.146558][ T8831] anon_thp 39845888 [ 2509.146558][ T8831] inactive_anon 2162688 [ 2509.146558][ T8831] active_anon 44122112 [ 2509.146558][ T8831] inactive_file 12288 [ 2509.146558][ T8831] active_file 192512 [ 2509.146558][ T8831] unevictable 0 [ 2509.146558][ T8831] slab_reclaimable 2838528 [ 2509.146558][ T8831] slab_unreclaimable 4440064 [ 2509.146558][ T8831] pgfault 186483 [ 2509.146558][ T8831] pgmajfault 0 [ 2509.146558][ T8831] workingset_refault 0 [ 2509.146558][ T8831] workingset_activate 0 [ 2509.146558][ T8831] workingset_nodereclaim 0 [ 2509.146558][ T8831] pgrefill 151 [ 2509.146558][ T8831] pgscan 463 [ 2509.146558][ T8831] pgsteal 402 [ 2509.243002][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17287,uid=0 [ 2509.259348][ T8831] Memory cgroup out of memory: Killed process 17287 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2509.278844][ T1078] oom_reaper: reaped process 17287 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2509.280024][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2509.301954][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2509.310903][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.320938][ T8831] Call Trace: [ 2509.324216][ T8831] dump_stack+0x172/0x1f0 [ 2509.328535][ T8831] dump_header+0x177/0x1152 [ 2509.333016][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2509.338824][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2509.343483][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2509.349290][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2509.354555][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2509.359558][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2509.365165][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2509.370948][ T8831] ? ___ratelimit+0x60/0x595 [ 2509.375515][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2509.380619][ T8831] oom_kill_process.cold+0x10/0x15 [ 2509.385735][ T8831] out_of_memory+0x334/0x1340 [ 2509.390393][ T8831] ? lock_downgrade+0x920/0x920 [ 2509.397229][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2509.403031][ T8831] ? oom_killer_disable+0x280/0x280 [ 2509.408261][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2509.413798][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2509.418716][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2509.423822][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2509.428659][ T8831] try_charge+0xf4b/0x1440 [ 2509.433053][ T8831] ? find_held_lock+0x35/0x130 [ 2509.437808][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2509.443339][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2509.448861][ T8831] ? find_held_lock+0x35/0x130 [ 2509.453601][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2509.459133][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2509.464655][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2509.469832][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2509.475375][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2509.480464][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2509.485814][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2509.491337][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2509.497034][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2509.502213][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2509.507476][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2509.512478][ T8831] ? __kasan_check_read+0x11/0x20 [ 2509.517498][ T8831] copy_process+0x3f8/0x6880 [ 2509.522066][ T8831] ? __kasan_check_read+0x11/0x20 [ 2509.527065][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2509.532063][ T8831] ? __kasan_check_read+0x11/0x20 [ 2509.537064][ T8831] ? mark_lock+0xc2/0x1220 [ 2509.541460][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2509.546495][ T8831] ? find_held_lock+0x35/0x130 [ 2509.551280][ T8831] _do_fork+0x146/0xf90 [ 2509.555427][ T8831] ? copy_init_mm+0x20/0x20 [ 2509.559915][ T8831] ? __kasan_check_read+0x11/0x20 [ 2509.564939][ T8831] ? _copy_to_user+0x118/0x160 [ 2509.569697][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2509.575922][ T8831] ? put_timespec64+0xda/0x140 [ 2509.580668][ T8831] __x64_sys_clone+0x18d/0x250 [ 2509.585408][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2509.590251][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2509.595528][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2509.600532][ T8831] do_syscall_64+0xfa/0x760 [ 2509.605026][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2509.610891][ T8831] RIP: 0033:0x4584ca [ 2509.614763][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2509.634354][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2509.642748][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2509.650705][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2509.658651][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2509.666598][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2509.674546][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2509.683698][ T8831] memory: usage 55720kB, limit 0kB, failcnt 298 [ 2509.690009][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2509.696908][ T8831] Memory cgroup stats for /syz3: [ 2509.697014][ T8831] anon 41877504 [ 2509.697014][ T8831] file 2179072 [ 2509.697014][ T8831] kernel_stack 1179648 [ 2509.697014][ T8831] slab 7278592 [ 2509.697014][ T8831] sock 0 [ 2509.697014][ T8831] shmem 2211840 [ 2509.697014][ T8831] file_mapped 135168 [ 2509.697014][ T8831] file_dirty 135168 [ 2509.697014][ T8831] file_writeback 0 [ 2509.697014][ T8831] anon_thp 37748736 [ 2509.697014][ T8831] inactive_anon 2162688 [ 2509.697014][ T8831] active_anon 41902080 [ 2509.697014][ T8831] inactive_file 12288 [ 2509.697014][ T8831] active_file 192512 [ 2509.697014][ T8831] unevictable 0 [ 2509.697014][ T8831] slab_reclaimable 2838528 [ 2509.697014][ T8831] slab_unreclaimable 4440064 [ 2509.697014][ T8831] pgfault 186483 [ 2509.697014][ T8831] pgmajfault 0 [ 2509.697014][ T8831] workingset_refault 0 [ 2509.697014][ T8831] workingset_activate 0 [ 2509.697014][ T8831] workingset_nodereclaim 0 [ 2509.697014][ T8831] pgrefill 151 [ 2509.697014][ T8831] pgscan 463 [ 2509.697014][ T8831] pgsteal 402 [ 2509.795591][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17191,uid=0 [ 2509.811832][ T8831] Memory cgroup out of memory: Killed process 17191 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2509.832296][ T1078] oom_reaper: reaped process 17191 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2509.832459][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2509.855345][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2509.864274][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2509.874320][ T8831] Call Trace: [ 2509.877593][ T8831] dump_stack+0x172/0x1f0 [ 2509.881905][ T8831] dump_header+0x177/0x1152 [ 2509.886406][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2509.892198][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2509.896859][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2509.902656][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2509.907924][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2509.912930][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2509.918561][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2509.924345][ T8831] ? ___ratelimit+0x60/0x595 [ 2509.928911][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2509.934011][ T8831] oom_kill_process.cold+0x10/0x15 [ 2509.939101][ T8831] out_of_memory+0x334/0x1340 [ 2509.943767][ T8831] ? lock_downgrade+0x920/0x920 [ 2509.948600][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2509.954394][ T8831] ? oom_killer_disable+0x280/0x280 [ 2509.959582][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2509.965103][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2509.970018][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2509.975106][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2509.979946][ T8831] try_charge+0xf4b/0x1440 [ 2509.984354][ T8831] ? find_held_lock+0x35/0x130 [ 2509.989099][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2509.994969][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2510.000490][ T8831] ? find_held_lock+0x35/0x130 [ 2510.005231][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2510.010760][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2510.016283][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2510.021461][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2510.026984][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2510.032082][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2510.037965][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2510.043487][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2510.049181][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2510.054361][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2510.059622][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2510.064638][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.069650][ T8831] copy_process+0x3f8/0x6880 [ 2510.074225][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.079315][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2510.084314][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.089313][ T8831] ? mark_lock+0xc2/0x1220 [ 2510.093716][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2510.098627][ T8831] ? find_held_lock+0x35/0x130 [ 2510.103372][ T8831] _do_fork+0x146/0xf90 [ 2510.107507][ T8831] ? copy_init_mm+0x20/0x20 [ 2510.111987][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.116987][ T8831] ? _copy_to_user+0x118/0x160 [ 2510.121729][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2510.127982][ T8831] ? put_timespec64+0xda/0x140 [ 2510.132726][ T8831] __x64_sys_clone+0x18d/0x250 [ 2510.137478][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2510.142339][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2510.147599][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2510.152601][ T8831] do_syscall_64+0xfa/0x760 [ 2510.157087][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2510.162953][ T8831] RIP: 0033:0x4584ca [ 2510.166837][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2510.186424][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2510.194811][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2510.202756][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2510.210703][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2510.218650][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2510.226607][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2510.235920][ T8831] memory: usage 53388kB, limit 0kB, failcnt 304 [ 2510.242185][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2510.249148][ T8831] Memory cgroup stats for /syz3: [ 2510.249257][ T8831] anon 39657472 [ 2510.249257][ T8831] file 2179072 [ 2510.249257][ T8831] kernel_stack 1114112 [ 2510.249257][ T8831] slab 7278592 [ 2510.249257][ T8831] sock 0 [ 2510.249257][ T8831] shmem 2211840 [ 2510.249257][ T8831] file_mapped 135168 [ 2510.249257][ T8831] file_dirty 135168 [ 2510.249257][ T8831] file_writeback 0 [ 2510.249257][ T8831] anon_thp 35651584 [ 2510.249257][ T8831] inactive_anon 2162688 [ 2510.249257][ T8831] active_anon 39682048 [ 2510.249257][ T8831] inactive_file 12288 [ 2510.249257][ T8831] active_file 192512 [ 2510.249257][ T8831] unevictable 0 [ 2510.249257][ T8831] slab_reclaimable 2838528 [ 2510.249257][ T8831] slab_unreclaimable 4440064 [ 2510.249257][ T8831] pgfault 186483 [ 2510.249257][ T8831] pgmajfault 0 [ 2510.249257][ T8831] workingset_refault 0 [ 2510.249257][ T8831] workingset_activate 0 [ 2510.249257][ T8831] workingset_nodereclaim 0 [ 2510.249257][ T8831] pgrefill 151 [ 2510.249257][ T8831] pgscan 463 [ 2510.249257][ T8831] pgsteal 402 [ 2510.344880][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17137,uid=0 [ 2510.360425][ T8831] Memory cgroup out of memory: Killed process 17137 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2510.379371][ T1078] oom_reaper: reaped process 17137 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2510.381845][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2510.402440][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2510.411367][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.421401][ T8831] Call Trace: [ 2510.424674][ T8831] dump_stack+0x172/0x1f0 [ 2510.429010][ T8831] dump_header+0x177/0x1152 [ 2510.433486][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2510.439267][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2510.443943][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2510.449726][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2510.454990][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2510.460079][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2510.465687][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2510.471471][ T8831] ? ___ratelimit+0x60/0x595 [ 2510.476045][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2510.481135][ T8831] oom_kill_process.cold+0x10/0x15 [ 2510.486224][ T8831] out_of_memory+0x334/0x1340 [ 2510.490877][ T8831] ? lock_downgrade+0x920/0x920 [ 2510.495709][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2510.501492][ T8831] ? oom_killer_disable+0x280/0x280 [ 2510.506672][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2510.512197][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2510.517113][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2510.522202][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2510.527054][ T8831] try_charge+0xf4b/0x1440 [ 2510.531455][ T8831] ? find_held_lock+0x35/0x130 [ 2510.536204][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2510.541726][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2510.547260][ T8831] ? find_held_lock+0x35/0x130 [ 2510.552021][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2510.557558][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2510.563092][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2510.568280][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2510.573803][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2510.578893][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2510.584337][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2510.589858][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2510.595554][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2510.600732][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2510.606081][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2510.611167][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.616208][ T8831] copy_process+0x3f8/0x6880 [ 2510.620804][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.625816][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2510.630820][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.635824][ T8831] ? mark_lock+0xc2/0x1220 [ 2510.640222][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2510.645136][ T8831] ? find_held_lock+0x35/0x130 [ 2510.649886][ T8831] _do_fork+0x146/0xf90 [ 2510.654031][ T8831] ? copy_init_mm+0x20/0x20 [ 2510.658517][ T8831] ? __kasan_check_read+0x11/0x20 [ 2510.663519][ T8831] ? _copy_to_user+0x118/0x160 [ 2510.668274][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2510.674507][ T8831] ? put_timespec64+0xda/0x140 [ 2510.679268][ T8831] __x64_sys_clone+0x18d/0x250 [ 2510.684022][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2510.688921][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2510.694186][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2510.699304][ T8831] do_syscall_64+0xfa/0x760 [ 2510.703796][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2510.709664][ T8831] RIP: 0033:0x4584ca [ 2510.713536][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2510.733118][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2510.741749][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2510.749718][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2510.757677][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2510.765734][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2510.773685][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2510.782720][ T8831] memory: usage 51068kB, limit 0kB, failcnt 310 [ 2510.789037][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2510.795949][ T8831] Memory cgroup stats for /syz3: [ 2510.796056][ T8831] anon 37449728 [ 2510.796056][ T8831] file 2179072 [ 2510.796056][ T8831] kernel_stack 1114112 [ 2510.796056][ T8831] slab 7278592 [ 2510.796056][ T8831] sock 0 [ 2510.796056][ T8831] shmem 2211840 [ 2510.796056][ T8831] file_mapped 135168 [ 2510.796056][ T8831] file_dirty 135168 [ 2510.796056][ T8831] file_writeback 0 [ 2510.796056][ T8831] anon_thp 33554432 [ 2510.796056][ T8831] inactive_anon 2162688 [ 2510.796056][ T8831] active_anon 37474304 [ 2510.796056][ T8831] inactive_file 12288 [ 2510.796056][ T8831] active_file 192512 [ 2510.796056][ T8831] unevictable 0 [ 2510.796056][ T8831] slab_reclaimable 2838528 [ 2510.796056][ T8831] slab_unreclaimable 4440064 [ 2510.796056][ T8831] pgfault 186483 [ 2510.796056][ T8831] pgmajfault 0 [ 2510.796056][ T8831] workingset_refault 0 [ 2510.796056][ T8831] workingset_activate 0 [ 2510.796056][ T8831] workingset_nodereclaim 0 [ 2510.796056][ T8831] pgrefill 151 [ 2510.796056][ T8831] pgscan 463 [ 2510.796056][ T8831] pgsteal 402 [ 2510.891459][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17111,uid=0 [ 2510.907017][ T8831] Memory cgroup out of memory: Killed process 17111 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2510.927128][ T1078] oom_reaper: reaped process 17111 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2510.927671][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2510.951074][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2510.960002][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2510.970039][ T8831] Call Trace: [ 2510.973348][ T8831] dump_stack+0x172/0x1f0 [ 2510.977658][ T8831] dump_header+0x177/0x1152 [ 2510.982143][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2510.987924][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2510.992577][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2510.998376][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.003654][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.008665][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2511.014283][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2511.020467][ T8831] ? ___ratelimit+0x60/0x595 [ 2511.025033][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2511.030121][ T8831] oom_kill_process.cold+0x10/0x15 [ 2511.035231][ T8831] out_of_memory+0x334/0x1340 [ 2511.039914][ T8831] ? lock_downgrade+0x920/0x920 [ 2511.044752][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2511.050545][ T8831] ? oom_killer_disable+0x280/0x280 [ 2511.055731][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2511.061262][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2511.066197][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2511.071298][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2511.076564][ T8831] try_charge+0xf4b/0x1440 [ 2511.080956][ T8831] ? find_held_lock+0x35/0x130 [ 2511.085704][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2511.091235][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2511.096759][ T8831] ? find_held_lock+0x35/0x130 [ 2511.101499][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2511.107027][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2511.112550][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2511.117725][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2511.123257][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2511.128349][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2511.133702][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2511.139225][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2511.144939][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2511.150113][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.155377][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.160384][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.165473][ T8831] copy_process+0x3f8/0x6880 [ 2511.170039][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.175049][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2511.180059][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.185062][ T8831] ? mark_lock+0xc2/0x1220 [ 2511.189468][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2511.194382][ T8831] ? find_held_lock+0x35/0x130 [ 2511.199138][ T8831] _do_fork+0x146/0xf90 [ 2511.203284][ T8831] ? copy_init_mm+0x20/0x20 [ 2511.207767][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.212770][ T8831] ? _copy_to_user+0x118/0x160 [ 2511.217512][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2511.223737][ T8831] ? put_timespec64+0xda/0x140 [ 2511.228480][ T8831] __x64_sys_clone+0x18d/0x250 [ 2511.233230][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2511.238060][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.243330][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.248335][ T8831] do_syscall_64+0xfa/0x760 [ 2511.252818][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2511.258687][ T8831] RIP: 0033:0x4584ca [ 2511.262558][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2511.282253][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2511.290680][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2511.298631][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2511.306740][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2511.314702][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2511.322667][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2511.332786][ T8831] memory: usage 48748kB, limit 0kB, failcnt 316 [ 2511.339107][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2511.346032][ T8831] Memory cgroup stats for /syz3: [ 2511.346138][ T8831] anon 35241984 [ 2511.346138][ T8831] file 2179072 [ 2511.346138][ T8831] kernel_stack 1048576 [ 2511.346138][ T8831] slab 7278592 [ 2511.346138][ T8831] sock 0 [ 2511.346138][ T8831] shmem 2211840 [ 2511.346138][ T8831] file_mapped 135168 [ 2511.346138][ T8831] file_dirty 135168 [ 2511.346138][ T8831] file_writeback 0 [ 2511.346138][ T8831] anon_thp 31457280 [ 2511.346138][ T8831] inactive_anon 2162688 [ 2511.346138][ T8831] active_anon 35266560 [ 2511.346138][ T8831] inactive_file 12288 [ 2511.346138][ T8831] active_file 192512 [ 2511.346138][ T8831] unevictable 0 [ 2511.346138][ T8831] slab_reclaimable 2838528 [ 2511.346138][ T8831] slab_unreclaimable 4440064 [ 2511.346138][ T8831] pgfault 186483 [ 2511.346138][ T8831] pgmajfault 0 [ 2511.346138][ T8831] workingset_refault 0 [ 2511.346138][ T8831] workingset_activate 0 [ 2511.346138][ T8831] workingset_nodereclaim 0 [ 2511.346138][ T8831] pgrefill 151 [ 2511.346138][ T8831] pgscan 463 [ 2511.346138][ T8831] pgsteal 402 [ 2511.441566][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17095,uid=0 [ 2511.457135][ T8831] Memory cgroup out of memory: Killed process 17095 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2511.477034][ T1078] oom_reaper: reaped process 17095 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2511.477699][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2511.500277][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2511.509211][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2511.519350][ T8831] Call Trace: [ 2511.522635][ T8831] dump_stack+0x172/0x1f0 [ 2511.526977][ T8831] dump_header+0x177/0x1152 [ 2511.531471][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2511.537255][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2511.541908][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2511.547693][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.552956][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.558212][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2511.563830][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2511.569618][ T8831] ? ___ratelimit+0x60/0x595 [ 2511.574191][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2511.579286][ T8831] oom_kill_process.cold+0x10/0x15 [ 2511.584378][ T8831] out_of_memory+0x334/0x1340 [ 2511.589031][ T8831] ? lock_downgrade+0x920/0x920 [ 2511.593862][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2511.599646][ T8831] ? oom_killer_disable+0x280/0x280 [ 2511.604840][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2511.610360][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2511.615278][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2511.620366][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2511.625197][ T8831] try_charge+0xf4b/0x1440 [ 2511.629596][ T8831] ? find_held_lock+0x35/0x130 [ 2511.634341][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2511.639859][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2511.645380][ T8831] ? find_held_lock+0x35/0x130 [ 2511.650130][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2511.655669][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2511.661190][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2511.666368][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2511.671893][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2511.676982][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2511.682330][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2511.687854][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2511.693545][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2511.698722][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.703984][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.708982][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.713985][ T8831] copy_process+0x3f8/0x6880 [ 2511.718552][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.723552][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2511.728587][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.733592][ T8831] ? mark_lock+0xc2/0x1220 [ 2511.737988][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2511.742901][ T8831] ? find_held_lock+0x35/0x130 [ 2511.747666][ T8831] _do_fork+0x146/0xf90 [ 2511.751800][ T8831] ? copy_init_mm+0x20/0x20 [ 2511.756294][ T8831] ? __kasan_check_read+0x11/0x20 [ 2511.761295][ T8831] ? _copy_to_user+0x118/0x160 [ 2511.766036][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2511.772253][ T8831] ? put_timespec64+0xda/0x140 [ 2511.776997][ T8831] __x64_sys_clone+0x18d/0x250 [ 2511.781737][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2511.786568][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2511.791916][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2511.796921][ T8831] do_syscall_64+0xfa/0x760 [ 2511.802704][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2511.808581][ T8831] RIP: 0033:0x4584ca [ 2511.812456][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2511.832051][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2511.840441][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2511.848399][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2511.856346][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2511.864294][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2511.872249][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2511.881371][ T8831] memory: usage 46428kB, limit 0kB, failcnt 322 [ 2511.887684][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2511.894592][ T8831] Memory cgroup stats for /syz3: [ 2511.894696][ T8831] anon 33034240 [ 2511.894696][ T8831] file 2179072 [ 2511.894696][ T8831] kernel_stack 1048576 [ 2511.894696][ T8831] slab 7278592 [ 2511.894696][ T8831] sock 0 [ 2511.894696][ T8831] shmem 2211840 [ 2511.894696][ T8831] file_mapped 135168 [ 2511.894696][ T8831] file_dirty 135168 [ 2511.894696][ T8831] file_writeback 0 [ 2511.894696][ T8831] anon_thp 29360128 [ 2511.894696][ T8831] inactive_anon 2162688 [ 2511.894696][ T8831] active_anon 33058816 [ 2511.894696][ T8831] inactive_file 12288 [ 2511.894696][ T8831] active_file 192512 [ 2511.894696][ T8831] unevictable 0 [ 2511.894696][ T8831] slab_reclaimable 2838528 [ 2511.894696][ T8831] slab_unreclaimable 4440064 [ 2511.894696][ T8831] pgfault 186483 [ 2511.894696][ T8831] pgmajfault 0 [ 2511.894696][ T8831] workingset_refault 0 [ 2511.894696][ T8831] workingset_activate 0 [ 2511.894696][ T8831] workingset_nodereclaim 0 [ 2511.894696][ T8831] pgrefill 151 [ 2511.894696][ T8831] pgscan 463 [ 2511.894696][ T8831] pgsteal 402 [ 2511.991199][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17083,uid=0 [ 2512.006776][ T8831] Memory cgroup out of memory: Killed process 17083 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2512.026912][ T1078] oom_reaper: reaped process 17083 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2512.027375][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2512.050422][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2512.059358][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.069413][ T8831] Call Trace: [ 2512.072692][ T8831] dump_stack+0x172/0x1f0 [ 2512.077004][ T8831] dump_header+0x177/0x1152 [ 2512.081484][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2512.087265][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2512.091916][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2512.097700][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.102964][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.107967][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2512.113575][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2512.119355][ T8831] ? ___ratelimit+0x60/0x595 [ 2512.123918][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2512.129265][ T8831] oom_kill_process.cold+0x10/0x15 [ 2512.134353][ T8831] out_of_memory+0x334/0x1340 [ 2512.139003][ T8831] ? lock_downgrade+0x920/0x920 [ 2512.143860][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2512.149666][ T8831] ? oom_killer_disable+0x280/0x280 [ 2512.154847][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2512.160375][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2512.165290][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2512.170379][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2512.175210][ T8831] try_charge+0xf4b/0x1440 [ 2512.179601][ T8831] ? find_held_lock+0x35/0x130 [ 2512.184361][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2512.189883][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2512.195429][ T8831] ? find_held_lock+0x35/0x130 [ 2512.200300][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2512.205925][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2512.211468][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2512.216668][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2512.222214][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2512.227314][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2512.232672][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2512.238202][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2512.243897][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2512.249077][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.254336][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.259334][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.264338][ T8831] copy_process+0x3f8/0x6880 [ 2512.268907][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.273915][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2512.278915][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.283913][ T8831] ? mark_lock+0xc2/0x1220 [ 2512.288311][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2512.293226][ T8831] ? find_held_lock+0x35/0x130 [ 2512.297973][ T8831] _do_fork+0x146/0xf90 [ 2512.302105][ T8831] ? copy_init_mm+0x20/0x20 [ 2512.306767][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.311768][ T8831] ? _copy_to_user+0x118/0x160 [ 2512.316508][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2512.322724][ T8831] ? put_timespec64+0xda/0x140 [ 2512.327466][ T8831] __x64_sys_clone+0x18d/0x250 [ 2512.332206][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2512.337040][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.342305][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.347311][ T8831] do_syscall_64+0xfa/0x760 [ 2512.351805][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.357672][ T8831] RIP: 0033:0x4584ca [ 2512.361542][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2512.381132][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2512.389580][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2512.397535][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2512.405516][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2512.413466][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2512.421416][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2512.430637][ T8831] memory: usage 44108kB, limit 0kB, failcnt 328 [ 2512.436958][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2512.443796][ T8831] Memory cgroup stats for /syz3: [ 2512.443872][ T8831] anon 30826496 [ 2512.443872][ T8831] file 2179072 [ 2512.443872][ T8831] kernel_stack 983040 [ 2512.443872][ T8831] slab 7278592 [ 2512.443872][ T8831] sock 0 [ 2512.443872][ T8831] shmem 2211840 [ 2512.443872][ T8831] file_mapped 135168 [ 2512.443872][ T8831] file_dirty 135168 [ 2512.443872][ T8831] file_writeback 0 [ 2512.443872][ T8831] anon_thp 27262976 [ 2512.443872][ T8831] inactive_anon 2162688 [ 2512.443872][ T8831] active_anon 30851072 [ 2512.443872][ T8831] inactive_file 12288 [ 2512.443872][ T8831] active_file 192512 [ 2512.443872][ T8831] unevictable 0 [ 2512.443872][ T8831] slab_reclaimable 2838528 [ 2512.443872][ T8831] slab_unreclaimable 4440064 [ 2512.443872][ T8831] pgfault 186483 [ 2512.443872][ T8831] pgmajfault 0 [ 2512.443872][ T8831] workingset_refault 0 [ 2512.443872][ T8831] workingset_activate 0 [ 2512.443872][ T8831] workingset_nodereclaim 0 [ 2512.443872][ T8831] pgrefill 151 [ 2512.443872][ T8831] pgscan 463 [ 2512.443872][ T8831] pgsteal 402 [ 2512.539784][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17066,uid=0 [ 2512.556245][ T8831] Memory cgroup out of memory: Killed process 17066 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2512.578080][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2512.582185][ T1078] oom_reaper: reaped process 17066 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2512.589961][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2512.609871][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2512.619924][ T8831] Call Trace: [ 2512.623208][ T8831] dump_stack+0x172/0x1f0 [ 2512.627519][ T8831] dump_header+0x177/0x1152 [ 2512.632050][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2512.637834][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2512.642486][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2512.648352][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.653616][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.658741][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2512.664350][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2512.670131][ T8831] ? ___ratelimit+0x60/0x595 [ 2512.674705][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2512.679794][ T8831] oom_kill_process.cold+0x10/0x15 [ 2512.684987][ T8831] out_of_memory+0x334/0x1340 [ 2512.689639][ T8831] ? lock_downgrade+0x920/0x920 [ 2512.694479][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2512.700262][ T8831] ? oom_killer_disable+0x280/0x280 [ 2512.705442][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2512.710962][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2512.715879][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2512.720968][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2512.726061][ T8831] try_charge+0xf4b/0x1440 [ 2512.730451][ T8831] ? find_held_lock+0x35/0x130 [ 2512.735202][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2512.740723][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2512.746245][ T8831] ? find_held_lock+0x35/0x130 [ 2512.750986][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2512.756528][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2512.762054][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2512.767230][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2512.772758][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2512.777866][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2512.783230][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2512.788753][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2512.794463][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2512.799980][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.805244][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.810258][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.815264][ T8831] copy_process+0x3f8/0x6880 [ 2512.819833][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.824833][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2512.829833][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.834836][ T8831] ? mark_lock+0xc2/0x1220 [ 2512.839233][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2512.844147][ T8831] ? find_held_lock+0x35/0x130 [ 2512.848905][ T8831] _do_fork+0x146/0xf90 [ 2512.853042][ T8831] ? copy_init_mm+0x20/0x20 [ 2512.857523][ T8831] ? __kasan_check_read+0x11/0x20 [ 2512.862530][ T8831] ? _copy_to_user+0x118/0x160 [ 2512.867271][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2512.873487][ T8831] ? put_timespec64+0xda/0x140 [ 2512.878233][ T8831] __x64_sys_clone+0x18d/0x250 [ 2512.882984][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2512.887814][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2512.893085][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2512.898097][ T8831] do_syscall_64+0xfa/0x760 [ 2512.902579][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2512.908451][ T8831] RIP: 0033:0x4584ca [ 2512.912331][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2512.931921][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2512.940323][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2512.948278][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2512.956227][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2512.964524][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2512.974143][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2512.983180][ T8831] memory: usage 41788kB, limit 0kB, failcnt 334 [ 2512.989496][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2512.996421][ T8831] Memory cgroup stats for /syz3: [ 2512.996521][ T8831] anon 28618752 [ 2512.996521][ T8831] file 2179072 [ 2512.996521][ T8831] kernel_stack 983040 [ 2512.996521][ T8831] slab 7278592 [ 2512.996521][ T8831] sock 0 [ 2512.996521][ T8831] shmem 2211840 [ 2512.996521][ T8831] file_mapped 135168 [ 2512.996521][ T8831] file_dirty 135168 [ 2512.996521][ T8831] file_writeback 0 [ 2512.996521][ T8831] anon_thp 25165824 [ 2512.996521][ T8831] inactive_anon 2162688 [ 2512.996521][ T8831] active_anon 28643328 [ 2512.996521][ T8831] inactive_file 12288 [ 2512.996521][ T8831] active_file 192512 [ 2512.996521][ T8831] unevictable 0 [ 2512.996521][ T8831] slab_reclaimable 2838528 [ 2512.996521][ T8831] slab_unreclaimable 4440064 [ 2512.996521][ T8831] pgfault 186483 [ 2512.996521][ T8831] pgmajfault 0 [ 2512.996521][ T8831] workingset_refault 0 [ 2512.996521][ T8831] workingset_activate 0 [ 2512.996521][ T8831] workingset_nodereclaim 0 [ 2512.996521][ T8831] pgrefill 151 [ 2512.996521][ T8831] pgscan 463 [ 2512.996521][ T8831] pgsteal 402 [ 2513.091898][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17058,uid=0 [ 2513.107442][ T8831] Memory cgroup out of memory: Killed process 17058 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2513.128310][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2513.132888][ T1078] oom_reaper: reaped process 17058 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2513.141039][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2513.160192][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.170245][ T8831] Call Trace: [ 2513.173532][ T8831] dump_stack+0x172/0x1f0 [ 2513.177848][ T8831] dump_header+0x177/0x1152 [ 2513.182329][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2513.188109][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2513.192768][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2513.198553][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.203816][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.208817][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2513.214451][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2513.220232][ T8831] ? ___ratelimit+0x60/0x595 [ 2513.224800][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2513.229890][ T8831] oom_kill_process.cold+0x10/0x15 [ 2513.234978][ T8831] out_of_memory+0x334/0x1340 [ 2513.239631][ T8831] ? lock_downgrade+0x920/0x920 [ 2513.244462][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2513.250247][ T8831] ? oom_killer_disable+0x280/0x280 [ 2513.255428][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2513.260947][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2513.265863][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2513.270956][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2513.275794][ T8831] try_charge+0xf4b/0x1440 [ 2513.280186][ T8831] ? find_held_lock+0x35/0x130 [ 2513.285380][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2513.290913][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2513.296526][ T8831] ? find_held_lock+0x35/0x130 [ 2513.301268][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2513.306812][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2513.312342][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2513.317525][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2513.323057][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2513.328160][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2513.333512][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2513.339042][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2513.344740][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2513.349925][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.355188][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.360188][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.365192][ T8831] copy_process+0x3f8/0x6880 [ 2513.369760][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.374791][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2513.379798][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.384815][ T8831] ? mark_lock+0xc2/0x1220 [ 2513.389231][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2513.394173][ T8831] ? find_held_lock+0x35/0x130 [ 2513.398936][ T8831] _do_fork+0x146/0xf90 [ 2513.403080][ T8831] ? copy_init_mm+0x20/0x20 [ 2513.407562][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.412563][ T8831] ? _copy_to_user+0x118/0x160 [ 2513.417309][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2513.423526][ T8831] ? put_timespec64+0xda/0x140 [ 2513.428268][ T8831] __x64_sys_clone+0x18d/0x250 [ 2513.433010][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2513.437843][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.443104][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.448123][ T8831] do_syscall_64+0xfa/0x760 [ 2513.452606][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2513.458476][ T8831] RIP: 0033:0x4584ca [ 2513.462349][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2513.481931][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2513.490326][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2513.498274][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2513.506235][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2513.514203][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2513.522196][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2513.531472][ T8831] memory: usage 39412kB, limit 0kB, failcnt 340 [ 2513.537814][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2513.544795][ T8831] Memory cgroup stats for /syz3: [ 2513.544896][ T8831] anon 26411008 [ 2513.544896][ T8831] file 2179072 [ 2513.544896][ T8831] kernel_stack 917504 [ 2513.544896][ T8831] slab 7278592 [ 2513.544896][ T8831] sock 0 [ 2513.544896][ T8831] shmem 2211840 [ 2513.544896][ T8831] file_mapped 135168 [ 2513.544896][ T8831] file_dirty 135168 [ 2513.544896][ T8831] file_writeback 0 [ 2513.544896][ T8831] anon_thp 23068672 [ 2513.544896][ T8831] inactive_anon 2162688 [ 2513.544896][ T8831] active_anon 26435584 [ 2513.544896][ T8831] inactive_file 12288 [ 2513.544896][ T8831] active_file 192512 [ 2513.544896][ T8831] unevictable 0 [ 2513.544896][ T8831] slab_reclaimable 2838528 [ 2513.544896][ T8831] slab_unreclaimable 4440064 [ 2513.544896][ T8831] pgfault 186483 [ 2513.544896][ T8831] pgmajfault 0 [ 2513.544896][ T8831] workingset_refault 0 [ 2513.544896][ T8831] workingset_activate 0 [ 2513.544896][ T8831] workingset_nodereclaim 0 [ 2513.544896][ T8831] pgrefill 151 [ 2513.544896][ T8831] pgscan 463 [ 2513.544896][ T8831] pgsteal 402 [ 2513.640328][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16921,uid=0 [ 2513.655891][ T8831] Memory cgroup out of memory: Killed process 16921 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2513.676086][ T1078] oom_reaper: reaped process 16921 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2513.676576][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2513.699147][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2513.708084][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2513.718154][ T8831] Call Trace: [ 2513.721432][ T8831] dump_stack+0x172/0x1f0 [ 2513.725745][ T8831] dump_header+0x177/0x1152 [ 2513.730227][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2513.736019][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2513.740673][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2513.746460][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.751732][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.756738][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2513.762345][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2513.768126][ T8831] ? ___ratelimit+0x60/0x595 [ 2513.772712][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2513.777810][ T8831] oom_kill_process.cold+0x10/0x15 [ 2513.783091][ T8831] out_of_memory+0x334/0x1340 [ 2513.787752][ T8831] ? lock_downgrade+0x920/0x920 [ 2513.792598][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2513.798382][ T8831] ? oom_killer_disable+0x280/0x280 [ 2513.803562][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2513.809093][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2513.814017][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2513.819107][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2513.823937][ T8831] try_charge+0xf4b/0x1440 [ 2513.828327][ T8831] ? find_held_lock+0x35/0x130 [ 2513.833075][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2513.838605][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2513.844133][ T8831] ? find_held_lock+0x35/0x130 [ 2513.848878][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2513.854495][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2513.860019][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2513.865195][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2513.870717][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2513.875816][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2513.881164][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2513.886697][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2513.892392][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2513.897579][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.902841][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.907843][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.912863][ T8831] copy_process+0x3f8/0x6880 [ 2513.917526][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.922529][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2513.927537][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.932536][ T8831] ? mark_lock+0xc2/0x1220 [ 2513.936951][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2513.941865][ T8831] ? find_held_lock+0x35/0x130 [ 2513.946614][ T8831] _do_fork+0x146/0xf90 [ 2513.950787][ T8831] ? copy_init_mm+0x20/0x20 [ 2513.955345][ T8831] ? __kasan_check_read+0x11/0x20 [ 2513.960357][ T8831] ? _copy_to_user+0x118/0x160 [ 2513.965122][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2513.971357][ T8831] ? put_timespec64+0xda/0x140 [ 2513.976108][ T8831] __x64_sys_clone+0x18d/0x250 [ 2513.980853][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2513.985704][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2513.991039][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2513.996084][ T8831] do_syscall_64+0xfa/0x760 [ 2514.000573][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2514.006445][ T8831] RIP: 0033:0x4584ca [ 2514.010323][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2514.030172][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2514.038559][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2514.046526][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2514.054479][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2514.062529][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2514.070504][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2514.080755][ T8831] memory: usage 37092kB, limit 0kB, failcnt 346 [ 2514.087080][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2514.093916][ T8831] Memory cgroup stats for /syz3: [ 2514.094032][ T8831] anon 24203264 [ 2514.094032][ T8831] file 2179072 [ 2514.094032][ T8831] kernel_stack 917504 [ 2514.094032][ T8831] slab 7278592 [ 2514.094032][ T8831] sock 0 [ 2514.094032][ T8831] shmem 2211840 [ 2514.094032][ T8831] file_mapped 135168 [ 2514.094032][ T8831] file_dirty 135168 [ 2514.094032][ T8831] file_writeback 0 [ 2514.094032][ T8831] anon_thp 20971520 [ 2514.094032][ T8831] inactive_anon 2162688 [ 2514.094032][ T8831] active_anon 24227840 [ 2514.094032][ T8831] inactive_file 12288 [ 2514.094032][ T8831] active_file 192512 [ 2514.094032][ T8831] unevictable 0 [ 2514.094032][ T8831] slab_reclaimable 2838528 [ 2514.094032][ T8831] slab_unreclaimable 4440064 [ 2514.094032][ T8831] pgfault 186483 [ 2514.094032][ T8831] pgmajfault 0 [ 2514.094032][ T8831] workingset_refault 0 [ 2514.094032][ T8831] workingset_activate 0 [ 2514.094032][ T8831] workingset_nodereclaim 0 [ 2514.094032][ T8831] pgrefill 151 [ 2514.094032][ T8831] pgscan 463 [ 2514.094032][ T8831] pgsteal 402 [ 2514.189856][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16909,uid=0 [ 2514.205590][ T8831] Memory cgroup out of memory: Killed process 16909 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2514.227953][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2514.232559][ T1078] oom_reaper: reaped process 16909 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2514.239861][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2514.259773][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.269849][ T8831] Call Trace: [ 2514.273140][ T8831] dump_stack+0x172/0x1f0 [ 2514.277453][ T8831] dump_header+0x177/0x1152 [ 2514.281933][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2514.287719][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2514.292372][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2514.298158][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2514.303436][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2514.308440][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2514.314052][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2514.319836][ T8831] ? ___ratelimit+0x60/0x595 [ 2514.324402][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2514.329492][ T8831] oom_kill_process.cold+0x10/0x15 [ 2514.334581][ T8831] out_of_memory+0x334/0x1340 [ 2514.339969][ T8831] ? lock_downgrade+0x920/0x920 [ 2514.344804][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2514.350587][ T8831] ? oom_killer_disable+0x280/0x280 [ 2514.355772][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2514.361295][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2514.366228][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2514.371425][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2514.376273][ T8831] try_charge+0xf4b/0x1440 [ 2514.380844][ T8831] ? find_held_lock+0x35/0x130 [ 2514.385840][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2514.391564][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2514.397148][ T8831] ? find_held_lock+0x35/0x130 [ 2514.401921][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2514.407472][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2514.413158][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2514.418351][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2514.423896][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2514.429012][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2514.434376][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2514.439912][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2514.445628][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2514.451155][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2514.456436][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2514.461438][ T8831] ? __kasan_check_read+0x11/0x20 [ 2514.466449][ T8831] copy_process+0x3f8/0x6880 [ 2514.471031][ T8831] ? __kasan_check_read+0x11/0x20 [ 2514.476034][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2514.481035][ T8831] ? __kasan_check_read+0x11/0x20 [ 2514.486121][ T8831] ? mark_lock+0xc2/0x1220 [ 2514.490520][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2514.495446][ T8831] ? find_held_lock+0x35/0x130 [ 2514.500195][ T8831] _do_fork+0x146/0xf90 [ 2514.504336][ T8831] ? copy_init_mm+0x20/0x20 [ 2514.508906][ T8831] ? __kasan_check_read+0x11/0x20 [ 2514.513908][ T8831] ? _copy_to_user+0x118/0x160 [ 2514.518650][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2514.524958][ T8831] ? put_timespec64+0xda/0x140 [ 2514.529737][ T8831] __x64_sys_clone+0x18d/0x250 [ 2514.534488][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2514.539386][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2514.544688][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2514.549725][ T8831] do_syscall_64+0xfa/0x760 [ 2514.554234][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2514.560113][ T8831] RIP: 0033:0x4584ca [ 2514.564002][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2514.583586][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2514.591984][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2514.599943][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2514.607909][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2514.615965][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2514.623913][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2514.633210][ T8831] memory: usage 34772kB, limit 0kB, failcnt 352 [ 2514.639552][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2514.646991][ T8831] Memory cgroup stats for /syz3: [ 2514.647090][ T8831] anon 21995520 [ 2514.647090][ T8831] file 2179072 [ 2514.647090][ T8831] kernel_stack 851968 [ 2514.647090][ T8831] slab 7278592 [ 2514.647090][ T8831] sock 0 [ 2514.647090][ T8831] shmem 2211840 [ 2514.647090][ T8831] file_mapped 135168 [ 2514.647090][ T8831] file_dirty 135168 [ 2514.647090][ T8831] file_writeback 0 [ 2514.647090][ T8831] anon_thp 18874368 [ 2514.647090][ T8831] inactive_anon 2162688 [ 2514.647090][ T8831] active_anon 22020096 [ 2514.647090][ T8831] inactive_file 12288 [ 2514.647090][ T8831] active_file 192512 [ 2514.647090][ T8831] unevictable 0 [ 2514.647090][ T8831] slab_reclaimable 2838528 [ 2514.647090][ T8831] slab_unreclaimable 4440064 [ 2514.647090][ T8831] pgfault 186483 [ 2514.647090][ T8831] pgmajfault 0 [ 2514.647090][ T8831] workingset_refault 0 [ 2514.647090][ T8831] workingset_activate 0 [ 2514.647090][ T8831] workingset_nodereclaim 0 [ 2514.647090][ T8831] pgrefill 151 [ 2514.647090][ T8831] pgscan 463 [ 2514.647090][ T8831] pgsteal 402 [ 2514.748081][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=16899,uid=0 [ 2514.763623][ T8831] Memory cgroup out of memory: Killed process 16899 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2514.783536][ T1078] oom_reaper: reaped process 16899 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2514.784241][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2514.806559][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2514.815486][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2514.825521][ T8831] Call Trace: [ 2514.828801][ T8831] dump_stack+0x172/0x1f0 [ 2514.833121][ T8831] dump_header+0x177/0x1152 [ 2514.837602][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2514.843383][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2514.848036][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2514.853821][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2514.859082][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2514.864119][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2514.869742][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2514.875525][ T8831] ? ___ratelimit+0x60/0x595 [ 2514.880183][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2514.885272][ T8831] oom_kill_process.cold+0x10/0x15 [ 2514.890359][ T8831] out_of_memory+0x334/0x1340 [ 2514.895012][ T8831] ? lock_downgrade+0x920/0x920 [ 2514.899840][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2514.905622][ T8831] ? oom_killer_disable+0x280/0x280 [ 2514.910805][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2514.916328][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2514.921515][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2514.926611][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2514.931442][ T8831] try_charge+0xf4b/0x1440 [ 2514.936356][ T8831] ? find_held_lock+0x35/0x130 [ 2514.941363][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2514.946884][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2514.952409][ T8831] ? find_held_lock+0x35/0x130 [ 2514.957150][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2514.962681][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2514.968206][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2514.973651][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2514.979171][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2514.984266][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2514.989614][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2514.995135][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2515.000833][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2515.006011][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.011273][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.016271][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.021284][ T8831] copy_process+0x3f8/0x6880 [ 2515.025850][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.030851][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2515.035850][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.040848][ T8831] ? mark_lock+0xc2/0x1220 [ 2515.045258][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2515.050170][ T8831] ? find_held_lock+0x35/0x130 [ 2515.054922][ T8831] _do_fork+0x146/0xf90 [ 2515.059054][ T8831] ? copy_init_mm+0x20/0x20 [ 2515.063544][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.068561][ T8831] ? _copy_to_user+0x118/0x160 [ 2515.073309][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2515.079535][ T8831] ? put_timespec64+0xda/0x140 [ 2515.084283][ T8831] __x64_sys_clone+0x18d/0x250 [ 2515.089034][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2515.093864][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.099125][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.104133][ T8831] do_syscall_64+0xfa/0x760 [ 2515.108614][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2515.114481][ T8831] RIP: 0033:0x4584ca [ 2515.118352][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2515.138018][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2515.146465][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2515.154430][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2515.162402][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2515.170372][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2515.178321][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2515.187426][ T8831] memory: usage 32440kB, limit 0kB, failcnt 358 [ 2515.194699][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2515.201537][ T8831] Memory cgroup stats for /syz3: [ 2515.201664][ T8831] anon 19775488 [ 2515.201664][ T8831] file 2179072 [ 2515.201664][ T8831] kernel_stack 851968 [ 2515.201664][ T8831] slab 7278592 [ 2515.201664][ T8831] sock 0 [ 2515.201664][ T8831] shmem 2211840 [ 2515.201664][ T8831] file_mapped 135168 [ 2515.201664][ T8831] file_dirty 135168 [ 2515.201664][ T8831] file_writeback 0 [ 2515.201664][ T8831] anon_thp 16777216 [ 2515.201664][ T8831] inactive_anon 2162688 [ 2515.201664][ T8831] active_anon 19800064 [ 2515.201664][ T8831] inactive_file 12288 [ 2515.201664][ T8831] active_file 192512 [ 2515.201664][ T8831] unevictable 0 [ 2515.201664][ T8831] slab_reclaimable 2838528 [ 2515.201664][ T8831] slab_unreclaimable 4440064 [ 2515.201664][ T8831] pgfault 186483 [ 2515.201664][ T8831] pgmajfault 0 [ 2515.201664][ T8831] workingset_refault 0 [ 2515.201664][ T8831] workingset_activate 0 [ 2515.201664][ T8831] workingset_nodereclaim 0 [ 2515.201664][ T8831] pgrefill 151 [ 2515.201664][ T8831] pgscan 463 [ 2515.201664][ T8831] pgsteal 402 [ 2515.296898][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11090,uid=0 [ 2515.312440][ T8831] Memory cgroup out of memory: Killed process 11090 (syz-executor.3) total-vm:72716kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2515.331571][ T1078] oom_reaper: reaped process 11090 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2515.334642][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2515.354801][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2515.363733][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.373783][ T8831] Call Trace: [ 2515.377096][ T8831] dump_stack+0x172/0x1f0 [ 2515.381411][ T8831] dump_header+0x177/0x1152 [ 2515.385908][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2515.391698][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2515.396380][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2515.402186][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.407473][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.412487][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2515.418117][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2515.424005][ T8831] ? ___ratelimit+0x60/0x595 [ 2515.428578][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2515.433684][ T8831] oom_kill_process.cold+0x10/0x15 [ 2515.438798][ T8831] out_of_memory+0x334/0x1340 [ 2515.443455][ T8831] ? lock_downgrade+0x920/0x920 [ 2515.448290][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2515.454163][ T8831] ? oom_killer_disable+0x280/0x280 [ 2515.459344][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2515.464896][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2515.469822][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2515.474911][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2515.479827][ T8831] try_charge+0xf4b/0x1440 [ 2515.484220][ T8831] ? find_held_lock+0x35/0x130 [ 2515.488967][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2515.494489][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2515.500010][ T8831] ? find_held_lock+0x35/0x130 [ 2515.504760][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2515.510289][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2515.515814][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2515.521040][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2515.526582][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2515.531676][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2515.537041][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2515.542567][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2515.548275][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2515.553469][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.558747][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.563819][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.568832][ T8831] copy_process+0x3f8/0x6880 [ 2515.573403][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.578442][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2515.583494][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.588546][ T8831] ? mark_lock+0xc2/0x1220 [ 2515.592943][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2515.597855][ T8831] ? find_held_lock+0x35/0x130 [ 2515.602601][ T8831] _do_fork+0x146/0xf90 [ 2515.606736][ T8831] ? copy_init_mm+0x20/0x20 [ 2515.611368][ T8831] ? __kasan_check_read+0x11/0x20 [ 2515.616389][ T8831] ? _copy_to_user+0x118/0x160 [ 2515.621265][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2515.627493][ T8831] ? put_timespec64+0xda/0x140 [ 2515.632248][ T8831] __x64_sys_clone+0x18d/0x250 [ 2515.637034][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2515.641931][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.647200][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.652212][ T8831] do_syscall_64+0xfa/0x760 [ 2515.656698][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2515.662567][ T8831] RIP: 0033:0x4584ca [ 2515.666442][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2515.686032][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2515.694423][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2515.702369][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2515.710326][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2515.718274][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2515.726221][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2515.735425][ T8831] memory: usage 30096kB, limit 0kB, failcnt 364 [ 2515.741672][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2515.748608][ T8831] Memory cgroup stats for /syz3: [ 2515.748705][ T8831] anon 17551360 [ 2515.748705][ T8831] file 2179072 [ 2515.748705][ T8831] kernel_stack 786432 [ 2515.748705][ T8831] slab 7278592 [ 2515.748705][ T8831] sock 0 [ 2515.748705][ T8831] shmem 2211840 [ 2515.748705][ T8831] file_mapped 135168 [ 2515.748705][ T8831] file_dirty 135168 [ 2515.748705][ T8831] file_writeback 0 [ 2515.748705][ T8831] anon_thp 14680064 [ 2515.748705][ T8831] inactive_anon 2162688 [ 2515.748705][ T8831] active_anon 17575936 [ 2515.748705][ T8831] inactive_file 12288 [ 2515.748705][ T8831] active_file 192512 [ 2515.748705][ T8831] unevictable 0 [ 2515.748705][ T8831] slab_reclaimable 2838528 [ 2515.748705][ T8831] slab_unreclaimable 4440064 [ 2515.748705][ T8831] pgfault 186483 [ 2515.748705][ T8831] pgmajfault 0 [ 2515.748705][ T8831] workingset_refault 0 [ 2515.748705][ T8831] workingset_activate 0 [ 2515.748705][ T8831] workingset_nodereclaim 0 [ 2515.748705][ T8831] pgrefill 151 [ 2515.748705][ T8831] pgscan 463 [ 2515.748705][ T8831] pgsteal 402 [ 2515.843658][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=11054,uid=0 [ 2515.859201][ T8831] Memory cgroup out of memory: Killed process 11054 (syz-executor.3) total-vm:72716kB, anon-rss:2200kB, file-rss:35784kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2515.878158][ T1078] oom_reaper: reaped process 11054 (syz-executor.3), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB [ 2515.880582][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2515.901253][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2515.910188][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2515.920223][ T8831] Call Trace: [ 2515.923496][ T8831] dump_stack+0x172/0x1f0 [ 2515.927809][ T8831] dump_header+0x177/0x1152 [ 2515.932290][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2515.938072][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2515.942722][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2515.948504][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2515.953783][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2515.958789][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2515.964401][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2515.970201][ T8831] ? ___ratelimit+0x60/0x595 [ 2515.974769][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2515.979855][ T8831] oom_kill_process.cold+0x10/0x15 [ 2515.984952][ T8831] out_of_memory+0x334/0x1340 [ 2515.989607][ T8831] ? lock_downgrade+0x920/0x920 [ 2515.994448][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2516.000315][ T8831] ? oom_killer_disable+0x280/0x280 [ 2516.005506][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2516.011027][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2516.015941][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2516.021035][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2516.025864][ T8831] try_charge+0xf4b/0x1440 [ 2516.030266][ T8831] ? find_held_lock+0x35/0x130 [ 2516.035019][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2516.040538][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2516.046071][ T8831] ? find_held_lock+0x35/0x130 [ 2516.050813][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2516.056340][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2516.061871][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2516.067049][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2516.072574][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2516.077663][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2516.083107][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2516.088635][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2516.094338][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2516.099512][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2516.104773][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2516.109772][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.114786][ T8831] copy_process+0x3f8/0x6880 [ 2516.119369][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.124379][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2516.129375][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.134373][ T8831] ? mark_lock+0xc2/0x1220 [ 2516.138782][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2516.143705][ T8831] ? find_held_lock+0x35/0x130 [ 2516.148455][ T8831] _do_fork+0x146/0xf90 [ 2516.152598][ T8831] ? copy_init_mm+0x20/0x20 [ 2516.157083][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.162085][ T8831] ? _copy_to_user+0x118/0x160 [ 2516.166832][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2516.173056][ T8831] ? put_timespec64+0xda/0x140 [ 2516.177821][ T8831] __x64_sys_clone+0x18d/0x250 [ 2516.182563][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2516.187393][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2516.192652][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2516.197657][ T8831] do_syscall_64+0xfa/0x760 [ 2516.202139][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2516.208003][ T8831] RIP: 0033:0x4584ca [ 2516.211877][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2516.231551][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2516.239937][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2516.247899][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2516.255844][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2516.263797][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2516.271745][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2516.281690][ T8831] memory: usage 27752kB, limit 0kB, failcnt 370 [ 2516.288012][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2516.294922][ T8831] Memory cgroup stats for /syz3: [ 2516.295023][ T8831] anon 15319040 [ 2516.295023][ T8831] file 2179072 [ 2516.295023][ T8831] kernel_stack 786432 [ 2516.295023][ T8831] slab 7278592 [ 2516.295023][ T8831] sock 0 [ 2516.295023][ T8831] shmem 2211840 [ 2516.295023][ T8831] file_mapped 135168 [ 2516.295023][ T8831] file_dirty 135168 [ 2516.295023][ T8831] file_writeback 0 [ 2516.295023][ T8831] anon_thp 12582912 [ 2516.295023][ T8831] inactive_anon 2162688 [ 2516.295023][ T8831] active_anon 15343616 [ 2516.295023][ T8831] inactive_file 12288 [ 2516.295023][ T8831] active_file 192512 [ 2516.295023][ T8831] unevictable 0 [ 2516.295023][ T8831] slab_reclaimable 2838528 [ 2516.295023][ T8831] slab_unreclaimable 4440064 [ 2516.295023][ T8831] pgfault 186483 [ 2516.295023][ T8831] pgmajfault 0 [ 2516.295023][ T8831] workingset_refault 0 [ 2516.295023][ T8831] workingset_activate 0 [ 2516.295023][ T8831] workingset_nodereclaim 0 [ 2516.295023][ T8831] pgrefill 151 [ 2516.295023][ T8831] pgscan 463 [ 2516.295023][ T8831] pgsteal 402 [ 2516.390131][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=17220,uid=0 [ 2516.406502][ T8831] Memory cgroup out of memory: Killed process 17220 (syz-executor.3) total-vm:72584kB, anon-rss:2200kB, file-rss:35780kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2516.426797][ T1078] oom_reaper: reaped process 17220 (syz-executor.3), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 2516.427058][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2516.450026][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2516.459002][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2516.469034][ T8831] Call Trace: [ 2516.472308][ T8831] dump_stack+0x172/0x1f0 [ 2516.476622][ T8831] dump_header+0x177/0x1152 [ 2516.481111][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2516.486893][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2516.491549][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2516.497332][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2516.502592][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2516.507598][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2516.513208][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2516.519000][ T8831] ? ___ratelimit+0x60/0x595 [ 2516.523567][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2516.528655][ T8831] oom_kill_process.cold+0x10/0x15 [ 2516.533763][ T8831] out_of_memory+0x334/0x1340 [ 2516.538433][ T8831] ? lock_downgrade+0x920/0x920 [ 2516.543276][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2516.549075][ T8831] ? oom_killer_disable+0x280/0x280 [ 2516.554262][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2516.559792][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2516.564719][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2516.569813][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2516.574674][ T8831] try_charge+0xf4b/0x1440 [ 2516.579138][ T8831] ? find_held_lock+0x35/0x130 [ 2516.583883][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2516.589408][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2516.594933][ T8831] ? find_held_lock+0x35/0x130 [ 2516.599679][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2516.605216][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2516.610739][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2516.615920][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2516.621441][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2516.626533][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2516.631883][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2516.637406][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2516.643101][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2516.648276][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2516.653540][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2516.658540][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.663544][ T8831] copy_process+0x3f8/0x6880 [ 2516.668113][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.673114][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2516.678111][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.683112][ T8831] ? mark_lock+0xc2/0x1220 [ 2516.687509][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2516.692422][ T8831] ? find_held_lock+0x35/0x130 [ 2516.697170][ T8831] _do_fork+0x146/0xf90 [ 2516.701305][ T8831] ? copy_init_mm+0x20/0x20 [ 2516.705788][ T8831] ? __kasan_check_read+0x11/0x20 [ 2516.710790][ T8831] ? _copy_to_user+0x118/0x160 [ 2516.715534][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2516.721752][ T8831] ? put_timespec64+0xda/0x140 [ 2516.726495][ T8831] __x64_sys_clone+0x18d/0x250 [ 2516.731238][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2516.736071][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2516.741330][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2516.746341][ T8831] do_syscall_64+0xfa/0x760 [ 2516.750837][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2516.756731][ T8831] RIP: 0033:0x4584ca [ 2516.760603][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2516.780276][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2516.788663][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2516.797219][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2516.805166][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2516.813118][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2516.821083][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2516.831661][ T8831] memory: usage 25432kB, limit 0kB, failcnt 376 [ 2516.838017][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2516.844932][ T8831] Memory cgroup stats for /syz3: [ 2516.845029][ T8831] anon 13103104 [ 2516.845029][ T8831] file 2179072 [ 2516.845029][ T8831] kernel_stack 720896 [ 2516.845029][ T8831] slab 7278592 [ 2516.845029][ T8831] sock 0 [ 2516.845029][ T8831] shmem 2211840 [ 2516.845029][ T8831] file_mapped 135168 [ 2516.845029][ T8831] file_dirty 135168 [ 2516.845029][ T8831] file_writeback 0 [ 2516.845029][ T8831] anon_thp 10485760 [ 2516.845029][ T8831] inactive_anon 2162688 [ 2516.845029][ T8831] active_anon 13127680 [ 2516.845029][ T8831] inactive_file 12288 [ 2516.845029][ T8831] active_file 192512 [ 2516.845029][ T8831] unevictable 0 [ 2516.845029][ T8831] slab_reclaimable 2838528 [ 2516.845029][ T8831] slab_unreclaimable 4440064 [ 2516.845029][ T8831] pgfault 186483 [ 2516.845029][ T8831] pgmajfault 0 [ 2516.845029][ T8831] workingset_refault 0 [ 2516.845029][ T8831] workingset_activate 0 [ 2516.845029][ T8831] workingset_nodereclaim 0 [ 2516.845029][ T8831] pgrefill 151 [ 2516.845029][ T8831] pgscan 463 [ 2516.845029][ T8831] pgsteal 402 [ 2516.939861][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=24139,uid=0 [ 2516.956238][ T8831] Memory cgroup out of memory: Killed process 24139 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2516.977133][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2516.982035][ T1078] oom_reaper: reaped process 24139 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2516.989007][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2517.008916][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.019316][ T8831] Call Trace: [ 2517.022596][ T8831] dump_stack+0x172/0x1f0 [ 2517.026909][ T8831] dump_header+0x177/0x1152 [ 2517.031389][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2517.037171][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2517.041826][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2517.047610][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.052881][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.057899][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2517.063510][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2517.069292][ T8831] ? ___ratelimit+0x60/0x595 [ 2517.073858][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2517.078960][ T8831] oom_kill_process.cold+0x10/0x15 [ 2517.084049][ T8831] out_of_memory+0x334/0x1340 [ 2517.088703][ T8831] ? lock_downgrade+0x920/0x920 [ 2517.093535][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2517.099317][ T8831] ? oom_killer_disable+0x280/0x280 [ 2517.104515][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2517.110037][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2517.114971][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2517.120159][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2517.125025][ T8831] try_charge+0xf4b/0x1440 [ 2517.129431][ T8831] ? find_held_lock+0x35/0x130 [ 2517.134641][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2517.140946][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2517.146473][ T8831] ? find_held_lock+0x35/0x130 [ 2517.151216][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2517.156750][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2517.162279][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2517.167456][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2517.172981][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2517.178172][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2517.183551][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2517.189088][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2517.194787][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2517.199987][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.205266][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.210265][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.215268][ T8831] copy_process+0x3f8/0x6880 [ 2517.219837][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.224836][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2517.229833][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.234844][ T8831] ? mark_lock+0xc2/0x1220 [ 2517.239240][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2517.244202][ T8831] ? find_held_lock+0x35/0x130 [ 2517.248966][ T8831] _do_fork+0x146/0xf90 [ 2517.253157][ T8831] ? copy_init_mm+0x20/0x20 [ 2517.257692][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.262705][ T8831] ? _copy_to_user+0x118/0x160 [ 2517.267447][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2517.273664][ T8831] ? put_timespec64+0xda/0x140 [ 2517.278406][ T8831] __x64_sys_clone+0x18d/0x250 [ 2517.283161][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2517.288007][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.293335][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.298402][ T8831] do_syscall_64+0xfa/0x760 [ 2517.302896][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2517.309139][ T8831] RIP: 0033:0x4584ca [ 2517.313013][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2517.332615][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2517.341036][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2517.348992][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2517.356942][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2517.364888][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2517.372835][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2517.381899][ T8831] memory: usage 23128kB, limit 0kB, failcnt 382 [ 2517.388355][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2517.395299][ T8831] Memory cgroup stats for /syz3: [ 2517.395394][ T8831] anon 10903552 [ 2517.395394][ T8831] file 2179072 [ 2517.395394][ T8831] kernel_stack 720896 [ 2517.395394][ T8831] slab 7278592 [ 2517.395394][ T8831] sock 0 [ 2517.395394][ T8831] shmem 2211840 [ 2517.395394][ T8831] file_mapped 135168 [ 2517.395394][ T8831] file_dirty 135168 [ 2517.395394][ T8831] file_writeback 0 [ 2517.395394][ T8831] anon_thp 8388608 [ 2517.395394][ T8831] inactive_anon 2162688 [ 2517.395394][ T8831] active_anon 10928128 [ 2517.395394][ T8831] inactive_file 12288 [ 2517.395394][ T8831] active_file 192512 [ 2517.395394][ T8831] unevictable 0 [ 2517.395394][ T8831] slab_reclaimable 2838528 [ 2517.395394][ T8831] slab_unreclaimable 4440064 [ 2517.395394][ T8831] pgfault 186483 [ 2517.395394][ T8831] pgmajfault 0 [ 2517.395394][ T8831] workingset_refault 0 [ 2517.395394][ T8831] workingset_activate 0 [ 2517.395394][ T8831] workingset_nodereclaim 0 [ 2517.395394][ T8831] pgrefill 151 [ 2517.395394][ T8831] pgscan 463 [ 2517.395394][ T8831] pgsteal 402 [ 2517.490251][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21755,uid=0 [ 2517.506957][ T8831] Memory cgroup out of memory: Killed process 21755 (syz-executor.3) total-vm:72716kB, anon-rss:2224kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2517.526245][ T1078] oom_reaper: reaped process 21755 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2517.527719][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2517.549731][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2517.558658][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2517.568693][ T8831] Call Trace: [ 2517.572053][ T8831] dump_stack+0x172/0x1f0 [ 2517.576364][ T8831] dump_header+0x177/0x1152 [ 2517.580845][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2517.586626][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2517.591412][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2517.597199][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.602466][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.607467][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2517.613076][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2517.618858][ T8831] ? ___ratelimit+0x60/0x595 [ 2517.623423][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2517.628519][ T8831] oom_kill_process.cold+0x10/0x15 [ 2517.633611][ T8831] out_of_memory+0x334/0x1340 [ 2517.638265][ T8831] ? lock_downgrade+0x920/0x920 [ 2517.643104][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2517.648885][ T8831] ? oom_killer_disable+0x280/0x280 [ 2517.654075][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2517.659603][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2517.664521][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2517.669613][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2517.674463][ T8831] try_charge+0xf4b/0x1440 [ 2517.678864][ T8831] ? find_held_lock+0x35/0x130 [ 2517.683621][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2517.689153][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2517.694677][ T8831] ? find_held_lock+0x35/0x130 [ 2517.699420][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2517.704953][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2517.710488][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2517.715667][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2517.721202][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2517.726293][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2517.731653][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2517.737177][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2517.742883][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2517.748061][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.753331][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.758333][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.763354][ T8831] copy_process+0x3f8/0x6880 [ 2517.767925][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.772926][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2517.777925][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.782926][ T8831] ? mark_lock+0xc2/0x1220 [ 2517.787324][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2517.792235][ T8831] ? find_held_lock+0x35/0x130 [ 2517.796984][ T8831] _do_fork+0x146/0xf90 [ 2517.801136][ T8831] ? copy_init_mm+0x20/0x20 [ 2517.805629][ T8831] ? __kasan_check_read+0x11/0x20 [ 2517.810633][ T8831] ? _copy_to_user+0x118/0x160 [ 2517.815379][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2517.821598][ T8831] ? put_timespec64+0xda/0x140 [ 2517.826346][ T8831] __x64_sys_clone+0x18d/0x250 [ 2517.831097][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2517.835930][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2517.841196][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2517.846224][ T8831] do_syscall_64+0xfa/0x760 [ 2517.850720][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2517.856599][ T8831] RIP: 0033:0x4584ca [ 2517.860468][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2517.880050][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2517.888440][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2517.896394][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2517.904347][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2517.912295][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2517.920242][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2517.929521][ T8831] memory: usage 20824kB, limit 0kB, failcnt 388 [ 2517.935856][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2517.942694][ T8831] Memory cgroup stats for /syz3: [ 2517.942819][ T8831] anon 8704000 [ 2517.942819][ T8831] file 2179072 [ 2517.942819][ T8831] kernel_stack 655360 [ 2517.942819][ T8831] slab 7278592 [ 2517.942819][ T8831] sock 0 [ 2517.942819][ T8831] shmem 2211840 [ 2517.942819][ T8831] file_mapped 135168 [ 2517.942819][ T8831] file_dirty 135168 [ 2517.942819][ T8831] file_writeback 0 [ 2517.942819][ T8831] anon_thp 6291456 [ 2517.942819][ T8831] inactive_anon 2162688 [ 2517.942819][ T8831] active_anon 8728576 [ 2517.942819][ T8831] inactive_file 12288 [ 2517.942819][ T8831] active_file 192512 [ 2517.942819][ T8831] unevictable 0 [ 2517.942819][ T8831] slab_reclaimable 2838528 [ 2517.942819][ T8831] slab_unreclaimable 4440064 [ 2517.942819][ T8831] pgfault 186483 [ 2517.942819][ T8831] pgmajfault 0 [ 2517.942819][ T8831] workingset_refault 0 [ 2517.942819][ T8831] workingset_activate 0 [ 2517.942819][ T8831] workingset_nodereclaim 0 [ 2517.942819][ T8831] pgrefill 151 [ 2517.942819][ T8831] pgscan 463 [ 2517.942819][ T8831] pgsteal 402 [ 2518.037705][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21750,uid=0 [ 2518.053258][ T8831] Memory cgroup out of memory: Killed process 21750 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2518.072143][ T1078] oom_reaper: reaped process 21750 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2518.074677][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2518.095570][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2518.104499][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.114544][ T8831] Call Trace: [ 2518.117815][ T8831] dump_stack+0x172/0x1f0 [ 2518.122123][ T8831] dump_header+0x177/0x1152 [ 2518.126601][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2518.132381][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2518.137041][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2518.142839][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.148114][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.153117][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2518.158728][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2518.164515][ T8831] ? ___ratelimit+0x60/0x595 [ 2518.169080][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2518.174170][ T8831] oom_kill_process.cold+0x10/0x15 [ 2518.179257][ T8831] out_of_memory+0x334/0x1340 [ 2518.183910][ T8831] ? lock_downgrade+0x920/0x920 [ 2518.188742][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2518.194523][ T8831] ? oom_killer_disable+0x280/0x280 [ 2518.199703][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2518.206964][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2518.211878][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2518.216969][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2518.221801][ T8831] try_charge+0xf4b/0x1440 [ 2518.226193][ T8831] ? find_held_lock+0x35/0x130 [ 2518.230940][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2518.236461][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2518.241981][ T8831] ? find_held_lock+0x35/0x130 [ 2518.247021][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2518.253810][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2518.259390][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2518.264705][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2518.270249][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2518.275359][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2518.280720][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2518.286279][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2518.291986][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2518.297168][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.302477][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.307496][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.312527][ T8831] copy_process+0x3f8/0x6880 [ 2518.317108][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.322114][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2518.327115][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.332146][ T8831] ? mark_lock+0xc2/0x1220 [ 2518.336584][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2518.341535][ T8831] ? find_held_lock+0x35/0x130 [ 2518.347528][ T8831] _do_fork+0x146/0xf90 [ 2518.351671][ T8831] ? copy_init_mm+0x20/0x20 [ 2518.356203][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.361208][ T8831] ? _copy_to_user+0x118/0x160 [ 2518.366062][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2518.372295][ T8831] ? put_timespec64+0xda/0x140 [ 2518.377050][ T8831] __x64_sys_clone+0x18d/0x250 [ 2518.381792][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2518.386636][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.391911][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.396924][ T8831] do_syscall_64+0xfa/0x760 [ 2518.401411][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2518.407287][ T8831] RIP: 0033:0x4584ca [ 2518.411161][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2518.430882][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2518.439465][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2518.447445][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2518.455405][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2518.463463][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2518.471418][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2518.480643][ T8831] memory: usage 18464kB, limit 0kB, failcnt 394 [ 2518.486973][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2518.494732][ T8831] Memory cgroup stats for /syz3: [ 2518.494839][ T8831] anon 6479872 [ 2518.494839][ T8831] file 2179072 [ 2518.494839][ T8831] kernel_stack 655360 [ 2518.494839][ T8831] slab 7278592 [ 2518.494839][ T8831] sock 0 [ 2518.494839][ T8831] shmem 2211840 [ 2518.494839][ T8831] file_mapped 135168 [ 2518.494839][ T8831] file_dirty 135168 [ 2518.494839][ T8831] file_writeback 0 [ 2518.494839][ T8831] anon_thp 4194304 [ 2518.494839][ T8831] inactive_anon 2162688 [ 2518.494839][ T8831] active_anon 6504448 [ 2518.494839][ T8831] inactive_file 12288 [ 2518.494839][ T8831] active_file 192512 [ 2518.494839][ T8831] unevictable 0 [ 2518.494839][ T8831] slab_reclaimable 2838528 [ 2518.494839][ T8831] slab_unreclaimable 4440064 [ 2518.494839][ T8831] pgfault 186483 [ 2518.494839][ T8831] pgmajfault 0 [ 2518.494839][ T8831] workingset_refault 0 [ 2518.494839][ T8831] workingset_activate 0 [ 2518.494839][ T8831] workingset_nodereclaim 0 [ 2518.494839][ T8831] pgrefill 151 [ 2518.494839][ T8831] pgscan 463 [ 2518.494839][ T8831] pgsteal 402 [ 2518.590036][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20197,uid=0 [ 2518.606119][ T8831] Memory cgroup out of memory: Killed process 20197 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2518.627976][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2518.631581][ T1078] oom_reaper: reaped process 20197 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2518.640414][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2518.660530][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2518.670814][ T8831] Call Trace: [ 2518.674103][ T8831] dump_stack+0x172/0x1f0 [ 2518.678426][ T8831] dump_header+0x177/0x1152 [ 2518.682909][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2518.688739][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2518.693405][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2518.699368][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.704631][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.709633][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2518.715243][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2518.721116][ T8831] ? ___ratelimit+0x60/0x595 [ 2518.725692][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2518.730785][ T8831] oom_kill_process.cold+0x10/0x15 [ 2518.735904][ T8831] out_of_memory+0x334/0x1340 [ 2518.740586][ T8831] ? lock_downgrade+0x920/0x920 [ 2518.745751][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2518.751539][ T8831] ? oom_killer_disable+0x280/0x280 [ 2518.756722][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2518.762244][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2518.767207][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2518.772333][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2518.778305][ T8831] try_charge+0xf4b/0x1440 [ 2518.782707][ T8831] ? find_held_lock+0x35/0x130 [ 2518.787505][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2518.793041][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2518.798566][ T8831] ? find_held_lock+0x35/0x130 [ 2518.803325][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2518.808859][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2518.814425][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2518.819616][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2518.825143][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2518.830239][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2518.835595][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2518.841119][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2518.846927][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2518.852408][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.860034][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.865131][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.870138][ T8831] copy_process+0x3f8/0x6880 [ 2518.874727][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.879753][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2518.884757][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.889766][ T8831] ? mark_lock+0xc2/0x1220 [ 2518.894165][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2518.899303][ T8831] ? find_held_lock+0x35/0x130 [ 2518.904056][ T8831] _do_fork+0x146/0xf90 [ 2518.908201][ T8831] ? copy_init_mm+0x20/0x20 [ 2518.912684][ T8831] ? __kasan_check_read+0x11/0x20 [ 2518.917696][ T8831] ? _copy_to_user+0x118/0x160 [ 2518.922446][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2518.928773][ T8831] ? put_timespec64+0xda/0x140 [ 2518.933525][ T8831] __x64_sys_clone+0x18d/0x250 [ 2518.938276][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2518.943117][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2518.948381][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2518.953386][ T8831] do_syscall_64+0xfa/0x760 [ 2518.957870][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2518.963837][ T8831] RIP: 0033:0x4584ca [ 2518.967714][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2518.987302][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2518.995864][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2519.003826][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2519.011862][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2519.019819][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2519.027767][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2519.037065][ T8831] memory: usage 16152kB, limit 0kB, failcnt 400 [ 2519.043405][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2519.050339][ T8831] Memory cgroup stats for /syz3: [ 2519.050445][ T8831] anon 4268032 [ 2519.050445][ T8831] file 2179072 [ 2519.050445][ T8831] kernel_stack 589824 [ 2519.050445][ T8831] slab 7278592 [ 2519.050445][ T8831] sock 0 [ 2519.050445][ T8831] shmem 2211840 [ 2519.050445][ T8831] file_mapped 135168 [ 2519.050445][ T8831] file_dirty 135168 [ 2519.050445][ T8831] file_writeback 0 [ 2519.050445][ T8831] anon_thp 2097152 [ 2519.050445][ T8831] inactive_anon 2162688 [ 2519.050445][ T8831] active_anon 4292608 [ 2519.050445][ T8831] inactive_file 12288 [ 2519.050445][ T8831] active_file 192512 [ 2519.050445][ T8831] unevictable 0 [ 2519.050445][ T8831] slab_reclaimable 2838528 [ 2519.050445][ T8831] slab_unreclaimable 4440064 [ 2519.050445][ T8831] pgfault 186483 [ 2519.050445][ T8831] pgmajfault 0 [ 2519.050445][ T8831] workingset_refault 0 [ 2519.050445][ T8831] workingset_activate 0 [ 2519.050445][ T8831] workingset_nodereclaim 0 [ 2519.050445][ T8831] pgrefill 151 [ 2519.050445][ T8831] pgscan 463 [ 2519.050445][ T8831] pgsteal 402 [ 2519.150987][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20178,uid=0 [ 2519.167207][ T8831] Memory cgroup out of memory: Killed process 20178 (syz-executor.3) total-vm:72584kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:1000 [ 2519.188267][ T8831] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 2519.191928][ T1078] oom_reaper: reaped process 20178 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2519.200208][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2519.220136][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2519.230319][ T8831] Call Trace: [ 2519.233655][ T8831] dump_stack+0x172/0x1f0 [ 2519.238126][ T8831] dump_header+0x177/0x1152 [ 2519.242677][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2519.249191][ T8831] ? ___ratelimit+0x2c8/0x595 [ 2519.253857][ T8831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2519.259654][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2519.264959][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2519.269991][ T8831] ? pagefault_out_of_memory+0x11c/0x11c [ 2519.275609][ T8831] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2519.281397][ T8831] ? ___ratelimit+0x60/0x595 [ 2519.285963][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2519.291318][ T8831] oom_kill_process.cold+0x10/0x15 [ 2519.296478][ T8831] out_of_memory+0x334/0x1340 [ 2519.301166][ T8831] ? lock_downgrade+0x920/0x920 [ 2519.306072][ T8831] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2519.311911][ T8831] ? oom_killer_disable+0x280/0x280 [ 2519.317134][ T8831] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2519.322837][ T8831] ? memcg_stat_show+0xc30/0xc30 [ 2519.327758][ T8831] ? do_raw_spin_unlock+0x57/0x270 [ 2519.332861][ T8831] ? _raw_spin_unlock+0x28/0x40 [ 2519.337704][ T8831] try_charge+0xf4b/0x1440 [ 2519.342099][ T8831] ? find_held_lock+0x35/0x130 [ 2519.346870][ T8831] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2519.352424][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2519.358080][ T8831] ? find_held_lock+0x35/0x130 [ 2519.362893][ T8831] ? get_mem_cgroup_from_mm+0x139/0x310 [ 2519.368502][ T8831] __memcg_kmem_charge_memcg+0x7c/0x130 [ 2519.374040][ T8831] ? memcg_kmem_put_cache+0x50/0x50 [ 2519.379221][ T8831] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2519.384756][ T8831] __memcg_kmem_charge+0x13a/0x3a0 [ 2519.389851][ T8831] __alloc_pages_nodemask+0x4f5/0x910 [ 2519.395205][ T8831] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2519.400731][ T8831] ? __alloc_pages_slowpath+0x2920/0x2920 [ 2519.406437][ T8831] ? percpu_ref_put_many+0xb1/0x180 [ 2519.411615][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2519.416890][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2519.421902][ T8831] ? __kasan_check_read+0x11/0x20 [ 2519.426907][ T8831] copy_process+0x3f8/0x6880 [ 2519.431476][ T8831] ? __kasan_check_read+0x11/0x20 [ 2519.436499][ T8831] ? __lock_acquire+0x16f2/0x4a00 [ 2519.441534][ T8831] ? __kasan_check_read+0x11/0x20 [ 2519.446713][ T8831] ? mark_lock+0xc2/0x1220 [ 2519.451143][ T8831] ? __cleanup_sighand+0x60/0x60 [ 2519.456816][ T8831] ? find_held_lock+0x35/0x130 [ 2519.461600][ T8831] _do_fork+0x146/0xf90 [ 2519.465757][ T8831] ? copy_init_mm+0x20/0x20 [ 2519.470389][ T8831] ? __kasan_check_read+0x11/0x20 [ 2519.475408][ T8831] ? _copy_to_user+0x118/0x160 [ 2519.480202][ T8831] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2519.486513][ T8831] ? put_timespec64+0xda/0x140 [ 2519.491297][ T8831] __x64_sys_clone+0x18d/0x250 [ 2519.496310][ T8831] ? __ia32_sys_vfork+0xc0/0xc0 [ 2519.501148][ T8831] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2519.506509][ T8831] ? trace_hardirqs_on+0x67/0x240 [ 2519.512035][ T8831] do_syscall_64+0xfa/0x760 [ 2519.516529][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2519.522398][ T8831] RIP: 0033:0x4584ca [ 2519.526284][ T8831] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 2519.545975][ T8831] RSP: 002b:00007ffce16d2f40 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2519.554377][ T8831] RAX: ffffffffffffffda RBX: 00007ffce16d2f40 RCX: 00000000004584ca [ 2519.562502][ T8831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2519.570456][ T8831] RBP: 00007ffce16d2f80 R08: 0000000000000001 R09: 0000000002936940 [ 2519.578779][ T8831] R10: 0000000002936c10 R11: 0000000000000246 R12: 0000000000000001 [ 2519.586841][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffce16d2fd0 [ 2519.597467][ T8831] memory: usage 13868kB, limit 0kB, failcnt 406 [ 2519.604287][ T8831] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2519.611161][ T8831] Memory cgroup stats for /syz3: [ 2519.611296][ T8831] anon 2080768 [ 2519.611296][ T8831] file 2179072 [ 2519.611296][ T8831] kernel_stack 589824 [ 2519.611296][ T8831] slab 7278592 [ 2519.611296][ T8831] sock 0 [ 2519.611296][ T8831] shmem 2211840 [ 2519.611296][ T8831] file_mapped 135168 [ 2519.611296][ T8831] file_dirty 135168 [ 2519.611296][ T8831] file_writeback 0 [ 2519.611296][ T8831] anon_thp 0 [ 2519.611296][ T8831] inactive_anon 2162688 [ 2519.611296][ T8831] active_anon 2105344 [ 2519.611296][ T8831] inactive_file 12288 [ 2519.611296][ T8831] active_file 192512 [ 2519.611296][ T8831] unevictable 0 [ 2519.611296][ T8831] slab_reclaimable 2838528 [ 2519.611296][ T8831] slab_unreclaimable 4440064 [ 2519.611296][ T8831] pgfault 186483 [ 2519.611296][ T8831] pgmajfault 0 [ 2519.611296][ T8831] workingset_refault 0 [ 2519.611296][ T8831] workingset_activate 0 [ 2519.611296][ T8831] workingset_nodereclaim 0 [ 2519.611296][ T8831] pgrefill 151 [ 2519.611296][ T8831] pgscan 463 [ 2519.611296][ T8831] pgsteal 402 [ 2519.707436][ T8831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=8831,uid=0 [ 2519.722914][ T8831] Memory cgroup out of memory: Killed process 8831 (syz-executor.3) total-vm:72452kB, anon-rss:124kB, file-rss:35776kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2519.741842][ T1078] oom_reaper: reaped process 8831 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 05:15:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:15:58 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@showexec='showexec'}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 05:15:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:58 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) 05:15:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='uid_map\x00') sendfile(r0, r1, 0x0, 0xa808) 05:15:58 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:15:58 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:58 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:15:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) open(0x0, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x3) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xb, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = open(0x0, 0x68042, 0x0) write$P9_RSTATu(r4, 0x0, 0x0) fallocate(r4, 0x0, 0xffff, 0x9) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x7ffffff7) 05:15:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:15:59 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:15:59 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) 05:15:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) shutdown(r0, 0x400000000000001) 05:15:59 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) 05:15:59 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa03018, 0x0) ftruncate(r0, 0x0) [ 2522.465817][T20507] device bridge_slave_1 left promiscuous mode [ 2522.472262][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2522.515866][T20507] device bridge_slave_0 left promiscuous mode [ 2522.522244][T20507] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:01 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) 05:16:01 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:01 executing program 2: syz_open_dev$admmidi(0x0, 0x0, 0x24040) sysinfo(&(0x7f0000000000)=""/22) getpgid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags}) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:16:01 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2525.558776][T20507] device hsr_slave_0 left promiscuous mode [ 2525.610343][T20507] device hsr_slave_1 left promiscuous mode [ 2525.677360][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2525.691819][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2525.704295][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2525.752498][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2525.830656][T20507] bond0 (unregistering): Released all slaves [ 2525.917790][T13112] IPVS: ftp: loaded support on port[0] = 21 [ 2526.142224][T13112] chnl_net:caif_netlink_parms(): no params data found [ 2526.203526][T13112] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.218086][T13112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.228573][T13112] device bridge_slave_0 entered promiscuous mode [ 2526.241429][T13112] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.251515][T13112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.264079][T13112] device bridge_slave_1 entered promiscuous mode [ 2526.302112][T13112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2526.319888][T13112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2526.362767][T13112] team0: Port device team_slave_0 added [ 2526.372592][T13112] team0: Port device team_slave_1 added [ 2526.461214][T13112] device hsr_slave_0 entered promiscuous mode [ 2526.514592][T13112] device hsr_slave_1 entered promiscuous mode [ 2526.584265][T13112] debugfs: Directory 'hsr0' with parent '/' already present! [ 2526.610452][T13112] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.618762][T13112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.626290][T13112] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.633367][T13112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2526.714905][T13112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2526.736885][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2526.752933][T30459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.761622][T30459] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.788482][T13112] 8021q: adding VLAN 0 to HW filter on device team0 [ 2526.802892][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2526.818928][T30459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2526.826124][T30459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2526.865424][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2526.874737][ T3154] bridge0: port 2(bridge_slave_1) entered blocking state [ 2526.881805][ T3154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2526.892141][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2526.900876][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2526.910031][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2526.919705][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2526.931969][T13112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2526.948378][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2526.962599][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2526.988953][T13112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2527.341876][T13245] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 2527.395261][T13245] CPU: 0 PID: 13245 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2527.404428][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2527.414583][T13245] Call Trace: [ 2527.417899][T13245] dump_stack+0x172/0x1f0 [ 2527.422234][T13245] dump_header+0x177/0x1152 [ 2527.426743][T13245] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2527.432554][T13245] ? ___ratelimit+0x2c8/0x595 [ 2527.437217][T13245] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2527.443018][T13245] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2527.448306][T13245] ? trace_hardirqs_on+0x67/0x240 [ 2527.453333][T13245] ? pagefault_out_of_memory+0x11c/0x11c [ 2527.458964][T13245] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2527.464792][T13245] ? ___ratelimit+0x60/0x595 [ 2527.469385][T13245] ? do_raw_spin_unlock+0x57/0x270 [ 2527.474509][T13245] oom_kill_process.cold+0x10/0x15 [ 2527.479617][T13245] out_of_memory+0x334/0x1340 [ 2527.484304][T13245] ? lock_downgrade+0x920/0x920 [ 2527.489341][T13245] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2527.495155][T13245] ? oom_killer_disable+0x280/0x280 [ 2527.500370][T13245] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2527.506203][T13245] ? memcg_stat_show+0xc30/0xc30 [ 2527.511144][T13245] ? do_raw_spin_unlock+0x57/0x270 [ 2527.516246][T13245] ? _raw_spin_unlock+0x28/0x40 [ 2527.521128][T13245] try_charge+0xf4b/0x1440 [ 2527.525581][T13245] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2527.531134][T13245] ? percpu_ref_tryget_live+0x10c/0x290 [ 2527.536677][T13245] ? rcu_read_lock_held+0x9c/0xb0 [ 2527.541694][T13245] ? __kasan_check_read+0x11/0x20 [ 2527.546739][T13245] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2527.552314][T13245] mem_cgroup_try_charge+0x136/0x590 [ 2527.557720][T13245] __add_to_page_cache_locked+0x43f/0xec0 [ 2527.563744][T13245] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2527.569743][T13245] ? __kasan_check_read+0x11/0x20 [ 2527.574790][T13245] ? __filemap_set_wb_err+0x2b0/0x2b0 [ 2527.580210][T13245] ? __alloc_pages_nodemask+0x661/0x910 [ 2527.585843][T13245] ? xas_descend+0x144/0x370 [ 2527.590447][T13245] ? shadow_lru_isolate+0x430/0x430 [ 2527.595643][T13245] add_to_page_cache_lru+0x1d8/0x790 [ 2527.601019][T13245] ? add_to_page_cache_locked+0x40/0x40 [ 2527.606569][T13245] ? __page_cache_alloc+0x116/0x490 [ 2527.611824][T13245] pagecache_get_page+0x3c6/0xa00 [ 2527.616924][T13245] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2527.622457][T13245] grab_cache_page_write_begin+0x75/0xb0 [ 2527.628090][T13245] ext4_da_write_begin+0x33b/0xc00 [ 2527.633245][T13245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2527.639522][T13245] ? ext4_write_begin+0xd80/0xd80 [ 2527.644555][T13245] ? copyin+0x150/0x150 [ 2527.648820][T13245] generic_perform_write+0x23b/0x540 [ 2527.654157][T13245] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 2527.662227][T13245] ? current_time+0x110/0x110 [ 2527.666906][T13245] ? generic_write_check_limits.isra.0+0x270/0x270 [ 2527.673486][T13245] ? aa_file_perm+0x40b/0xdd0 [ 2527.678240][T13245] __generic_file_write_iter+0x25e/0x630 [ 2527.683861][T13245] ext4_file_write_iter+0x317/0x13c0 [ 2527.689143][T13245] ? __kasan_check_read+0x11/0x20 [ 2527.694441][T13245] ? ext4_release_file+0x380/0x380 [ 2527.699547][T13245] ? mark_lock+0xc2/0x1220 [ 2527.703950][T13245] ? __kasan_check_read+0x11/0x20 [ 2527.708968][T13245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2527.715208][T13245] ? iov_iter_init+0xee/0x220 [ 2527.719883][T13245] new_sync_write+0x4d3/0x770 [ 2527.724561][T13245] ? new_sync_read+0x800/0x800 [ 2527.729341][T13245] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2527.735495][T13245] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 2527.740766][T13245] __vfs_write+0xe1/0x110 [ 2527.745092][T13245] vfs_write+0x268/0x5d0 [ 2527.749346][T13245] ksys_write+0x14f/0x290 [ 2527.753670][T13245] ? __ia32_sys_read+0xb0/0xb0 [ 2527.758428][T13245] ? do_syscall_64+0x26/0x760 [ 2527.763106][T13245] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.769179][T13245] ? do_syscall_64+0x26/0x760 [ 2527.773992][T13245] __x64_sys_write+0x73/0xb0 [ 2527.778601][T13245] do_syscall_64+0xfa/0x760 [ 2527.783098][T13245] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2527.788989][T13245] RIP: 0033:0x459ef9 [ 2527.792895][T13245] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2527.812727][T13245] RSP: 002b:00007fd0f52f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2527.821234][T13245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2527.829300][T13245] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 2527.837363][T13245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2527.845333][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd0f52f96d4 [ 2527.853317][T13245] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2527.865566][T13245] memory: usage 9240kB, limit 0kB, failcnt 434 [ 2527.871763][T13245] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2527.878892][T13245] Memory cgroup stats for /syz3: [ 2527.879008][T13245] anon 2154496 [ 2527.879008][T13245] file 217088 [ 2527.879008][T13245] kernel_stack 65536 [ 2527.879008][T13245] slab 7139328 [ 2527.879008][T13245] sock 0 [ 2527.879008][T13245] shmem 180224 [ 2527.879008][T13245] file_mapped 135168 [ 2527.879008][T13245] file_dirty 0 [ 2527.879008][T13245] file_writeback 0 [ 2527.879008][T13245] anon_thp 2097152 [ 2527.879008][T13245] inactive_anon 135168 [ 2527.879008][T13245] active_anon 2191360 [ 2527.879008][T13245] inactive_file 86016 [ 2527.879008][T13245] active_file 57344 [ 2527.879008][T13245] unevictable 0 [ 2527.879008][T13245] slab_reclaimable 2838528 [ 2527.879008][T13245] slab_unreclaimable 4300800 [ 2527.879008][T13245] pgfault 186582 [ 2527.879008][T13245] pgmajfault 0 [ 2527.879008][T13245] workingset_refault 0 [ 2527.879008][T13245] workingset_activate 0 [ 2527.879008][T13245] workingset_nodereclaim 0 [ 2527.879008][T13245] pgrefill 1132 [ 2527.879008][T13245] pgscan 5503 [ 2527.879008][T13245] pgsteal 1338 [ 2527.975392][T13245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13243,uid=0 [ 2527.992669][T13245] Memory cgroup out of memory: Killed process 13243 (syz-executor.3) total-vm:72720kB, anon-rss:2196kB, file-rss:35804kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2528.012322][ T1078] oom_reaper: reaped process 13243 (syz-executor.3), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 05:16:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(r4, 0x0, 0x0) 05:16:06 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:06 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:06 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:06 executing program 2: r0 = syz_open_dev$admmidi(0x0, 0x0, 0x24040) sysinfo(&(0x7f0000000000)=""/22) getpgid(0xffffffffffffffff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x00', @ifru_flags}) connect$nfc_llcp(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x20, 0xeeb11e6e6c129f87, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x1f, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 05:16:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:06 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2528.154478][T13112] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2528.206297][T13112] CPU: 0 PID: 13112 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2528.215384][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2528.225469][T13112] Call Trace: [ 2528.228775][T13112] dump_stack+0x172/0x1f0 [ 2528.233143][T13112] dump_header+0x177/0x1152 [ 2528.237672][T13112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2528.243479][T13112] ? ___ratelimit+0x2c8/0x595 [ 2528.248159][T13112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2528.253971][T13112] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2528.259269][T13112] ? trace_hardirqs_on+0x67/0x240 [ 2528.264323][T13112] ? pagefault_out_of_memory+0x11c/0x11c [ 2528.269959][T13112] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2528.275769][T13112] ? ___ratelimit+0x60/0x595 [ 2528.280359][T13112] ? do_raw_spin_unlock+0x57/0x270 [ 2528.285476][T13112] oom_kill_process.cold+0x10/0x15 [ 2528.290593][T13112] out_of_memory+0x334/0x1340 [ 2528.295274][T13112] ? lock_downgrade+0x920/0x920 [ 2528.300133][T13112] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2528.305949][T13112] ? oom_killer_disable+0x280/0x280 [ 2528.311159][T13112] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2528.316712][T13112] ? memcg_stat_show+0xc30/0xc30 [ 2528.321656][T13112] ? do_raw_spin_unlock+0x57/0x270 [ 2528.326858][T13112] ? _raw_spin_unlock+0x28/0x40 [ 2528.331720][T13112] try_charge+0xf4b/0x1440 [ 2528.336173][T13112] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2528.341722][T13112] ? percpu_ref_tryget_live+0x10c/0x290 [ 2528.347275][T13112] ? rcu_read_lock_held+0x9c/0xb0 [ 2528.352303][T13112] ? __kasan_check_read+0x11/0x20 [ 2528.357336][T13112] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2528.362887][T13112] mem_cgroup_try_charge+0x136/0x590 [ 2528.368184][T13112] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2528.373807][T13112] wp_page_copy+0x407/0x1860 [ 2528.378386][T13112] ? find_held_lock+0x35/0x130 [ 2528.383268][T13112] ? do_wp_page+0x53b/0x1540 [ 2528.387949][T13112] ? do_page_mkwrite+0x5b0/0x5b0 [ 2528.392884][T13112] ? lock_downgrade+0x920/0x920 [ 2528.397738][T13112] ? swp_swapcount+0x540/0x540 [ 2528.402492][T13112] ? __kasan_check_read+0x11/0x20 [ 2528.407513][T13112] ? do_raw_spin_unlock+0x57/0x270 [ 2528.412609][T13112] do_wp_page+0x543/0x1540 [ 2528.417015][T13112] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2528.422551][T13112] __handle_mm_fault+0x23a9/0x3fd0 [ 2528.427651][T13112] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2528.433180][T13112] ? handle_mm_fault+0x292/0xa90 [ 2528.438199][T13112] ? handle_mm_fault+0x7dd/0xa90 [ 2528.443120][T13112] ? __kasan_check_read+0x11/0x20 [ 2528.448132][T13112] handle_mm_fault+0x3b2/0xa90 [ 2528.452899][T13112] __do_page_fault+0x536/0xdd0 [ 2528.457651][T13112] do_page_fault+0x38/0x590 [ 2528.462142][T13112] page_fault+0x39/0x40 [ 2528.466367][T13112] RIP: 0033:0x430fd6 [ 2528.470332][T13112] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5d 64 00 85 c0 0f 84 [ 2528.489917][T13112] RSP: 002b:00007ffe952e8920 EFLAGS: 00010206 [ 2528.496049][T13112] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 05:16:06 executing program 2: 05:16:06 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) [ 2528.504003][T13112] RDX: 0000000001e1d930 RSI: 0000000001e25970 RDI: 0000000000000003 [ 2528.511959][T13112] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001e1c940 [ 2528.519929][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2528.527885][T13112] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 05:16:07 executing program 2: [ 2528.553199][T13112] memory: usage 6860kB, limit 0kB, failcnt 443 05:16:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2528.581379][T13112] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2528.603265][T13112] Memory cgroup stats for /syz3: [ 2528.603368][T13112] anon 53248 [ 2528.603368][T13112] file 217088 [ 2528.603368][T13112] kernel_stack 0 [ 2528.603368][T13112] slab 7139328 [ 2528.603368][T13112] sock 0 [ 2528.603368][T13112] shmem 180224 [ 2528.603368][T13112] file_mapped 135168 [ 2528.603368][T13112] file_dirty 0 [ 2528.603368][T13112] file_writeback 0 [ 2528.603368][T13112] anon_thp 0 [ 2528.603368][T13112] inactive_anon 135168 [ 2528.603368][T13112] active_anon 90112 [ 2528.603368][T13112] inactive_file 86016 [ 2528.603368][T13112] active_file 57344 [ 2528.603368][T13112] unevictable 0 [ 2528.603368][T13112] slab_reclaimable 2838528 [ 2528.603368][T13112] slab_unreclaimable 4300800 [ 2528.603368][T13112] pgfault 186615 [ 2528.603368][T13112] pgmajfault 0 [ 2528.603368][T13112] workingset_refault 0 [ 2528.603368][T13112] workingset_activate 0 [ 2528.603368][T13112] workingset_nodereclaim 0 [ 2528.603368][T13112] pgrefill 1132 [ 2528.603368][T13112] pgscan 5503 [ 2528.603368][T13112] pgsteal 1338 [ 2528.603368][T13112] pgactivate 1584 [ 2528.714790][T13112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13112,uid=0 [ 2528.737715][T13112] Memory cgroup out of memory: Killed process 13112 (syz-executor.3) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:122880kB oom_score_adj:0 05:16:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(r4, 0x0, 0x0) 05:16:07 executing program 2: 05:16:07 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:07 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2530.355751][T20507] device bridge_slave_1 left promiscuous mode [ 2530.362057][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2530.405945][T20507] device bridge_slave_0 left promiscuous mode [ 2530.412457][T20507] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:09 executing program 2: 05:16:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) write$cgroup_int(r4, 0x0, 0x0) 05:16:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 05:16:09 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r1, r3, 0x0, 0xb) 05:16:09 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xe0) 05:16:10 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2533.034665][T20507] device hsr_slave_0 left promiscuous mode [ 2533.064430][T20507] device hsr_slave_1 left promiscuous mode [ 2533.113982][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2533.127839][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2533.138969][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2533.200581][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2533.302734][T20507] bond0 (unregistering): Released all slaves [ 2533.400894][T13425] IPVS: ftp: loaded support on port[0] = 21 [ 2533.544626][T13425] chnl_net:caif_netlink_parms(): no params data found [ 2533.578247][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 2533.585487][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 2533.593219][T13425] device bridge_slave_0 entered promiscuous mode [ 2533.651482][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 2533.658733][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 2533.672926][T13425] device bridge_slave_1 entered promiscuous mode [ 2533.701057][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2533.719727][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2533.751546][T13425] team0: Port device team_slave_0 added [ 2533.763462][T13425] team0: Port device team_slave_1 added [ 2533.847941][T13425] device hsr_slave_0 entered promiscuous mode [ 2533.894656][T13425] device hsr_slave_1 entered promiscuous mode [ 2533.944254][T13425] debugfs: Directory 'hsr0' with parent '/' already present! [ 2533.971452][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 2533.978596][T13425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2533.986002][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 2533.993063][T13425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2534.069591][T13425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2534.091890][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2534.107840][T30459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2534.120404][T30459] bridge0: port 2(bridge_slave_1) entered disabled state [ 2534.142239][T13425] 8021q: adding VLAN 0 to HW filter on device team0 [ 2534.154780][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2534.163267][T30459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2534.170540][T30459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2534.189946][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2534.202638][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 2534.209754][T12708] bridge0: port 2(bridge_slave_1) entered forwarding state 05:16:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:12 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000004780)='/dev/input/mouse#\x00', 0x8, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0xfffffffffffffe69) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000047c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xf3, 0x6}, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x12) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x208000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)="143eb7c975d45ae3b1127a4dec010570c439ecb0c1588ef195299675cbbd964698dd9b8916df68f49cb50300a414db81b767fd03afa882a79a2944a3bf63094a5e8be8f4652704a8f8", 0x4}, 0x20) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x3f, 0x1) pipe2$9p(0x0, 0x0) getresgid(0x0, &(0x7f0000000540), 0x0) 05:16:12 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) [ 2534.235970][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2534.245386][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2534.261930][T13425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2534.273471][T13425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2534.325579][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2534.333827][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2534.358678][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2534.369719][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2534.484606][T13425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2534.828947][T13551] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2534.840401][T13551] CPU: 0 PID: 13551 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2534.849447][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2534.859509][T13551] Call Trace: [ 2534.862810][T13551] dump_stack+0x172/0x1f0 [ 2534.867162][T13551] dump_header+0x177/0x1152 [ 2534.871671][T13551] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2534.877489][T13551] ? ___ratelimit+0x2c8/0x595 [ 2534.882172][T13551] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2534.888001][T13551] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2534.893299][T13551] ? trace_hardirqs_on+0x67/0x240 [ 2534.898334][T13551] ? pagefault_out_of_memory+0x11c/0x11c [ 2534.903972][T13551] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2534.909786][T13551] ? ___ratelimit+0x60/0x595 [ 2534.914381][T13551] ? do_raw_spin_unlock+0x57/0x270 [ 2534.919507][T13551] oom_kill_process.cold+0x10/0x15 [ 2534.924630][T13551] out_of_memory+0x334/0x1340 [ 2534.929305][T13551] ? cgroup_file_notify+0x140/0x1b0 [ 2534.934607][T13551] ? oom_killer_disable+0x280/0x280 [ 2534.939815][T13551] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2534.945351][T13551] ? memcg_stat_show+0xc30/0xc30 [ 2534.950457][T13551] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2534.956371][T13551] ? cgroup_file_notify+0x140/0x1b0 [ 2534.961634][T13551] memory_max_write+0x262/0x3a0 [ 2534.966497][T13551] ? mem_cgroup_write+0x370/0x370 [ 2534.971514][T13551] ? lock_acquire+0x190/0x410 [ 2534.976182][T13551] ? kernfs_fop_write+0x1df/0x4a0 [ 2534.981200][T13551] cgroup_file_write+0x241/0x790 [ 2534.986314][T13551] ? mem_cgroup_write+0x370/0x370 [ 2534.991346][T13551] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2534.996972][T13551] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2535.002591][T13551] kernfs_fop_write+0x270/0x4a0 [ 2535.007436][T13551] __vfs_write+0x8a/0x110 [ 2535.011761][T13551] ? kernfs_fop_open+0xd80/0xd80 [ 2535.016695][T13551] vfs_write+0x268/0x5d0 [ 2535.020937][T13551] ksys_write+0x14f/0x290 [ 2535.025265][T13551] ? __ia32_sys_read+0xb0/0xb0 [ 2535.030018][T13551] ? do_syscall_64+0x26/0x760 [ 2535.034679][T13551] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2535.040727][T13551] ? do_syscall_64+0x26/0x760 [ 2535.045396][T13551] __x64_sys_write+0x73/0xb0 [ 2535.049986][T13551] do_syscall_64+0xfa/0x760 [ 2535.054494][T13551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2535.060370][T13551] RIP: 0033:0x459ef9 [ 2535.064260][T13551] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2535.083850][T13551] RSP: 002b:00007f42d793bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2535.092246][T13551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2535.100200][T13551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2535.108154][T13551] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2535.116204][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42d793c6d4 [ 2535.124159][T13551] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2535.141143][T13551] memory: usage 9080kB, limit 0kB, failcnt 458 [ 2535.147427][T13551] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2535.158401][T13551] Memory cgroup stats for /syz3: [ 2535.158481][T13551] anon 2183168 [ 2535.158481][T13551] file 40960 [ 2535.158481][T13551] kernel_stack 65536 [ 2535.158481][T13551] slab 6868992 [ 2535.158481][T13551] sock 0 [ 2535.158481][T13551] shmem 180224 [ 2535.158481][T13551] file_mapped 135168 [ 2535.158481][T13551] file_dirty 135168 [ 2535.158481][T13551] file_writeback 0 [ 2535.158481][T13551] anon_thp 2097152 [ 2535.158481][T13551] inactive_anon 135168 [ 2535.158481][T13551] active_anon 2183168 [ 2535.158481][T13551] inactive_file 131072 [ 2535.158481][T13551] active_file 167936 [ 2535.158481][T13551] unevictable 0 [ 2535.158481][T13551] slab_reclaimable 2838528 [ 2535.158481][T13551] slab_unreclaimable 4030464 [ 2535.158481][T13551] pgfault 186681 [ 2535.158481][T13551] pgmajfault 0 [ 2535.158481][T13551] workingset_refault 0 [ 2535.158481][T13551] workingset_activate 0 [ 2535.158481][T13551] workingset_nodereclaim 0 [ 2535.158481][T13551] pgrefill 2203 [ 2535.158481][T13551] pgscan 8548 [ 2535.158481][T13551] pgsteal 1777 [ 2535.262281][T13551] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13549,uid=0 [ 2535.286166][T13551] Memory cgroup out of memory: Killed process 13549 (syz-executor.3) total-vm:72720kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2535.312128][ T1078] oom_reaper: reaped process 13549 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 05:16:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:13 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, 0x0, 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:13 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000004780)='/dev/input/mouse#\x00', 0x8, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0xfffffffffffffe69) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000047c0)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xf3, 0x6}, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x12) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x208000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000300)="143eb7c975d45ae3b1127a4dec010570c439ecb0c1588ef195299675cbbd964698dd9b8916df68f49cb50300a414db81b767fd03afa882a79a2944a3bf63094a5e8be8f4652704a8f8", 0x4}, 0x20) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x3f, 0x1) pipe2$9p(0x0, 0x0) getresgid(0x0, &(0x7f0000000540), 0x0) 05:16:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) [ 2535.447661][T13425] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2535.494354][T13425] CPU: 1 PID: 13425 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2535.503416][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2535.513566][T13425] Call Trace: [ 2535.516874][T13425] dump_stack+0x172/0x1f0 [ 2535.521218][T13425] dump_header+0x177/0x1152 [ 2535.525730][T13425] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2535.531538][T13425] ? ___ratelimit+0x2c8/0x595 [ 2535.536223][T13425] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2535.542039][T13425] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2535.547463][T13425] ? trace_hardirqs_on+0x67/0x240 [ 2535.552518][T13425] ? pagefault_out_of_memory+0x11c/0x11c [ 2535.558148][T13425] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2535.558162][T13425] ? ___ratelimit+0x60/0x595 [ 2535.558173][T13425] ? do_raw_spin_unlock+0x57/0x270 [ 2535.558188][T13425] oom_kill_process.cold+0x10/0x15 [ 2535.558202][T13425] out_of_memory+0x334/0x1340 [ 2535.558216][T13425] ? lock_downgrade+0x920/0x920 [ 2535.558234][T13425] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 05:16:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x0, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2535.558248][T13425] ? oom_killer_disable+0x280/0x280 [ 2535.558270][T13425] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2535.558286][T13425] ? memcg_stat_show+0xc30/0xc30 [ 2535.609810][T13425] ? do_raw_spin_unlock+0x57/0x270 [ 2535.614932][T13425] ? _raw_spin_unlock+0x28/0x40 [ 2535.619830][T13425] try_charge+0xf4b/0x1440 [ 2535.624267][T13425] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2535.629822][T13425] ? percpu_ref_tryget_live+0x10c/0x290 [ 2535.635382][T13425] ? rcu_read_lock_held+0x9c/0xb0 05:16:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2535.640421][T13425] ? __kasan_check_read+0x11/0x20 [ 2535.645467][T13425] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2535.651051][T13425] mem_cgroup_try_charge+0x136/0x590 [ 2535.656363][T13425] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2535.662012][T13425] wp_page_copy+0x407/0x1860 [ 2535.666614][T13425] ? find_held_lock+0x35/0x130 [ 2535.671390][T13425] ? do_wp_page+0x53b/0x1540 [ 2535.675991][T13425] ? do_page_mkwrite+0x5b0/0x5b0 [ 2535.680938][T13425] ? lock_downgrade+0x920/0x920 [ 2535.685802][T13425] ? swp_swapcount+0x540/0x540 [ 2535.690576][T13425] ? __kasan_check_read+0x11/0x20 [ 2535.695607][T13425] ? do_raw_spin_unlock+0x57/0x270 [ 2535.700759][T13425] do_wp_page+0x543/0x1540 [ 2535.705178][T13425] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2535.705201][T13425] __handle_mm_fault+0x23a9/0x3fd0 [ 2535.705221][T13425] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2535.705236][T13425] ? handle_mm_fault+0x292/0xa90 [ 2535.705258][T13425] ? handle_mm_fault+0x7dd/0xa90 [ 2535.705276][T13425] ? __kasan_check_read+0x11/0x20 [ 2535.736113][T13425] handle_mm_fault+0x3b2/0xa90 [ 2535.740891][T13425] __do_page_fault+0x536/0xdd0 [ 2535.745672][T13425] do_page_fault+0x38/0x590 [ 2535.750213][T13425] page_fault+0x39/0x40 [ 2535.754373][T13425] RIP: 0033:0x430fd6 [ 2535.758276][T13425] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5d 64 00 85 c0 0f 84 [ 2535.777904][T13425] RSP: 002b:00007ffd35833170 EFLAGS: 00010206 [ 2535.783978][T13425] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 05:16:14 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2535.791956][T13425] RDX: 0000000001faa930 RSI: 0000000001fb2970 RDI: 0000000000000003 [ 2535.799937][T13425] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001fa9940 [ 2535.807942][T13425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2535.815920][T13425] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2536.044352][T13425] memory: usage 6636kB, limit 0kB, failcnt 467 [ 2536.051782][T13425] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2536.066973][T13425] Memory cgroup stats for /syz3: [ 2536.067109][T13425] anon 98304 [ 2536.067109][T13425] file 40960 [ 2536.067109][T13425] kernel_stack 0 [ 2536.067109][T13425] slab 6868992 [ 2536.067109][T13425] sock 0 [ 2536.067109][T13425] shmem 180224 [ 2536.067109][T13425] file_mapped 135168 [ 2536.067109][T13425] file_dirty 135168 [ 2536.067109][T13425] file_writeback 0 [ 2536.067109][T13425] anon_thp 0 [ 2536.067109][T13425] inactive_anon 135168 [ 2536.067109][T13425] active_anon 98304 [ 2536.067109][T13425] inactive_file 131072 [ 2536.067109][T13425] active_file 167936 [ 2536.067109][T13425] unevictable 0 [ 2536.067109][T13425] slab_reclaimable 2838528 [ 2536.067109][T13425] slab_unreclaimable 4030464 [ 2536.067109][T13425] pgfault 186681 [ 2536.067109][T13425] pgmajfault 0 [ 2536.067109][T13425] workingset_refault 0 [ 2536.067109][T13425] workingset_activate 0 [ 2536.067109][T13425] workingset_nodereclaim 0 [ 2536.067109][T13425] pgrefill 2203 [ 2536.067109][T13425] pgscan 8548 [ 2536.067109][T13425] pgsteal 1777 [ 2536.166750][T13425] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13425,uid=0 [ 2536.189382][T13425] Memory cgroup out of memory: Killed process 13425 (syz-executor.3) total-vm:72456kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2536.240530][ T1078] oom_reaper: reaped process 13425 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 05:16:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='nv\x00R\xad\xb4n\f\x8f\x06\x9a[\x817\xbb\x1c\xb4\a\x8bq\xc8\xe6xb3U\xbd\xc8V\x95\xe7)\x9b\x98+\xf5#p\xfa\xaf\xca\x92^\x88\x9c\xe2>\xf0Daw\xd8w\xf9)\x1a\"\toV\xae\x8eS;w\xba\x16\xa3\xb0E\xdb\x7f^5\x0fy\xbb\x95i\xe5\xd3E{\xf7\x04\xb9sz\x80\xea\x93S\xce\xdb\xc9S`\xe4g\xb1\nt\xd4\xe6IG\xc7\xbe\xd2\fQ\x06^\xf9\xb3I:\xdc\x01\xbb\xfa\xc6$\xc1\xef\xec\xe85\x9e(\x01\x9b\xab\xc5\xa1*\x1e\x010\xd1Q,\xa1\xd9\xa9\xc7\xf0\xd9\x7f\xd3\xa7\xbe\xb4Y\xeeS\r\xe3+s\x15\xb2e\xe5_\xef\xbb,m\xea\x0ef:\x8b\x13\xbc\x10\xfb\x90\xe0\xcb\xcf\x03\xb4Z`\x16[\x04\x90\xe7\xcb\xe8\xd6\xb9\x85\xabpI\xd5R\xd9\xef*\xcd;?]\xe1O\xe0\xc7oh\xbb\xa3\xec\xb1\xa5\xc3\v\xb9\xa7\xf7\xaf\xfe\xbb\xc5\x93Gno\xe8\x00[\x03\xd1\xfa\x1a\bZ\xb8\xc1W9^e\xd3oju\xce\x90>e\x17\x1c\x92F\xe2/9\x81\b\xec\xf2[z\xe2\xae\"\xf9\xc2y\x14@\v\xf9\xad\xcf\x96\xf8\a5\xf1\x17\xb1\xbd\x88B\xc4\xea\xe6\xc0\xa6\xe5\x7f\xbe\xe3H\x1e)\xb1\xc7\xa4R,\t]\x18\x9e)\x1c+\x97\xef\xa1m\x10\x15\x9b\xaf\xb6\x9d-\xe0g', 0x13b) 05:16:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:15 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, 0x0, 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:15 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:16 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 05:16:16 executing program 2: 05:16:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:16 executing program 2: 05:16:16 executing program 2: 05:16:16 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, 0x0, 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2538.645666][T20507] device bridge_slave_1 left promiscuous mode [ 2538.655853][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2538.695380][T20507] device bridge_slave_0 left promiscuous mode [ 2538.702953][T20507] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:18 executing program 2: [ 2540.784517][T20507] device hsr_slave_0 left promiscuous mode [ 2540.844254][T20507] device hsr_slave_1 left promiscuous mode [ 2540.924996][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2540.937321][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2540.948652][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2540.999800][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2541.081664][T20507] bond0 (unregistering): Released all slaves [ 2541.173668][T13821] IPVS: ftp: loaded support on port[0] = 21 [ 2541.253596][T13821] chnl_net:caif_netlink_parms(): no params data found [ 2541.360762][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.375636][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.383835][T13821] device bridge_slave_0 entered promiscuous mode [ 2541.398754][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2541.409712][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.421794][T13821] device bridge_slave_1 entered promiscuous mode [ 2541.463513][T13821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2541.484489][T13821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2541.523205][T13821] team0: Port device team_slave_0 added [ 2541.532370][T13821] team0: Port device team_slave_1 added [ 2541.688710][T13821] device hsr_slave_0 entered promiscuous mode [ 2541.735637][T13821] device hsr_slave_1 entered promiscuous mode [ 2541.774270][T13821] debugfs: Directory 'hsr0' with parent '/' already present! [ 2541.797948][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2541.805129][T13821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2541.812546][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.819700][T13821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2541.878818][T13821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2541.896121][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2541.905846][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 2541.913959][ T702] bridge0: port 2(bridge_slave_1) entered disabled state [ 2541.933054][T13821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2541.946843][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2541.956433][ T702] bridge0: port 1(bridge_slave_0) entered blocking state [ 2541.963532][ T702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2541.986900][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2541.997010][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.004211][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2542.026903][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2542.036485][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2542.045741][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2542.061190][T13821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2542.073253][T13821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2542.083974][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2542.093555][ T8832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2542.120913][T13821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2542.423210][T13834] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 2542.443454][T13834] CPU: 0 PID: 13834 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2542.452543][T13834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2542.462597][T13834] Call Trace: [ 2542.466014][T13834] dump_stack+0x172/0x1f0 [ 2542.470350][T13834] dump_header+0x177/0x1152 [ 2542.474848][T13834] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2542.480735][T13834] ? ___ratelimit+0x2c8/0x595 [ 2542.485408][T13834] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2542.491213][T13834] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2542.496481][T13834] ? trace_hardirqs_on+0x67/0x240 [ 2542.501494][T13834] ? pagefault_out_of_memory+0x11c/0x11c [ 2542.507122][T13834] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2542.512920][T13834] ? ___ratelimit+0x60/0x595 [ 2542.517498][T13834] ? do_raw_spin_unlock+0x57/0x270 [ 2542.522604][T13834] oom_kill_process.cold+0x10/0x15 [ 2542.527710][T13834] out_of_memory+0x334/0x1340 [ 2542.532378][T13834] ? lock_downgrade+0x920/0x920 [ 2542.537218][T13834] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2542.543009][T13834] ? oom_killer_disable+0x280/0x280 [ 2542.548661][T13834] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2542.554217][T13834] ? memcg_stat_show+0xc30/0xc30 [ 2542.559140][T13834] ? do_raw_spin_unlock+0x57/0x270 [ 2542.564236][T13834] ? _raw_spin_unlock+0x28/0x40 [ 2542.569075][T13834] try_charge+0xf4b/0x1440 [ 2542.573484][T13834] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2542.579058][T13834] ? percpu_ref_tryget_live+0x10c/0x290 [ 2542.584602][T13834] ? rcu_read_lock_held+0x9c/0xb0 [ 2542.589608][T13834] ? __kasan_check_read+0x11/0x20 [ 2542.594625][T13834] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2542.600156][T13834] mem_cgroup_try_charge+0x136/0x590 [ 2542.605603][T13834] __add_to_page_cache_locked+0x43f/0xec0 [ 2542.611305][T13834] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2542.617274][T13834] ? __kasan_check_read+0x11/0x20 [ 2542.622287][T13834] ? __filemap_set_wb_err+0x2b0/0x2b0 [ 2542.627636][T13834] ? __alloc_pages_nodemask+0x661/0x910 [ 2542.633162][T13834] ? xas_descend+0x144/0x370 [ 2542.637752][T13834] ? shadow_lru_isolate+0x430/0x430 [ 2542.642934][T13834] add_to_page_cache_lru+0x1d8/0x790 [ 2542.648218][T13834] ? add_to_page_cache_locked+0x40/0x40 [ 2542.653746][T13834] ? __page_cache_alloc+0x116/0x490 [ 2542.658940][T13834] pagecache_get_page+0x3c6/0xa00 [ 2542.663945][T13834] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2542.669470][T13834] grab_cache_page_write_begin+0x75/0xb0 [ 2542.675091][T13834] ext4_da_write_begin+0x33b/0xc00 [ 2542.680195][T13834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2542.686771][T13834] ? ext4_write_begin+0xd80/0xd80 [ 2542.692469][T13834] ? copyin+0x150/0x150 [ 2542.696614][T13834] generic_perform_write+0x23b/0x540 [ 2542.701881][T13834] ? timestamp_truncate+0x2f0/0x2f0 [ 2542.707065][T13834] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 2542.715129][T13834] ? current_time+0x110/0x110 [ 2542.719805][T13834] ? generic_write_check_limits.isra.0+0x270/0x270 [ 2542.726297][T13834] ? aa_file_perm+0x40b/0xdd0 [ 2542.730961][T13834] __generic_file_write_iter+0x25e/0x630 [ 2542.736618][T13834] ext4_file_write_iter+0x317/0x13c0 [ 2542.741903][T13834] ? __kasan_check_read+0x11/0x20 [ 2542.746923][T13834] ? ext4_release_file+0x380/0x380 [ 2542.752018][T13834] ? mark_lock+0xc2/0x1220 [ 2542.756424][T13834] ? __kasan_check_read+0x11/0x20 [ 2542.761427][T13834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2542.767648][T13834] ? iov_iter_init+0xee/0x220 [ 2542.772328][T13834] new_sync_write+0x4d3/0x770 [ 2542.776998][T13834] ? new_sync_read+0x800/0x800 [ 2542.781774][T13834] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2542.787962][T13834] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 2542.793237][T13834] __vfs_write+0xe1/0x110 [ 2542.797550][T13834] vfs_write+0x268/0x5d0 [ 2542.801775][T13834] ksys_write+0x14f/0x290 [ 2542.806114][T13834] ? __ia32_sys_read+0xb0/0xb0 [ 2542.810861][T13834] ? do_syscall_64+0x26/0x760 [ 2542.815517][T13834] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2542.821646][T13834] ? do_syscall_64+0x26/0x760 [ 2542.826313][T13834] __x64_sys_write+0x73/0xb0 [ 2542.830887][T13834] do_syscall_64+0xfa/0x760 [ 2542.835376][T13834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2542.841341][T13834] RIP: 0033:0x459ef9 [ 2542.845220][T13834] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2542.864898][T13834] RSP: 002b:00007f49180b9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2542.873319][T13834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2542.881296][T13834] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 2542.889257][T13834] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2542.897219][T13834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49180ba6d4 [ 2542.905186][T13834] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2542.922069][T13834] memory: usage 8808kB, limit 0kB, failcnt 488 [ 2542.928377][T13834] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2542.935593][T13834] Memory cgroup stats for /syz3: [ 2542.935716][T13834] anon 2191360 [ 2542.935716][T13834] file 188416 [ 2542.935716][T13834] kernel_stack 65536 [ 2542.935716][T13834] slab 6598656 [ 2542.935716][T13834] sock 0 [ 2542.935716][T13834] shmem 180224 [ 2542.935716][T13834] file_mapped 135168 [ 2542.935716][T13834] file_dirty 135168 [ 2542.935716][T13834] file_writeback 0 [ 2542.935716][T13834] anon_thp 2097152 [ 2542.935716][T13834] inactive_anon 135168 [ 2542.935716][T13834] active_anon 2191360 [ 2542.935716][T13834] inactive_file 0 [ 2542.935716][T13834] active_file 110592 [ 2542.935716][T13834] unevictable 0 [ 2542.935716][T13834] slab_reclaimable 2838528 [ 2542.935716][T13834] slab_unreclaimable 3760128 [ 2542.935716][T13834] pgfault 186747 [ 2542.935716][T13834] pgmajfault 0 [ 2542.935716][T13834] workingset_refault 0 [ 2542.935716][T13834] workingset_activate 0 [ 2542.935716][T13834] workingset_nodereclaim 0 [ 2542.935716][T13834] pgrefill 2449 [ 2542.935716][T13834] pgscan 10145 [ 2542.935716][T13834] pgsteal 2912 [ 2543.031138][T13834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13833,uid=0 [ 2543.048909][T13834] Memory cgroup out of memory: Killed process 13833 (syz-executor.3) total-vm:72720kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2543.071579][ T1078] oom_reaper: reaped process 13833 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 05:16:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:21 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:21 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:21 executing program 2: [ 2543.151258][T13821] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2543.177084][T13821] CPU: 0 PID: 13821 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2543.186134][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2543.196173][T13821] Call Trace: [ 2543.199449][T13821] dump_stack+0x172/0x1f0 [ 2543.203779][T13821] dump_header+0x177/0x1152 [ 2543.208269][T13821] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2543.214077][T13821] ? ___ratelimit+0x2c8/0x595 [ 2543.218768][T13821] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2543.224556][T13821] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2543.229843][T13821] ? trace_hardirqs_on+0x67/0x240 [ 2543.234849][T13821] ? pagefault_out_of_memory+0x11c/0x11c [ 2543.240459][T13821] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2543.246245][T13821] ? ___ratelimit+0x60/0x595 [ 2543.250812][T13821] ? do_raw_spin_unlock+0x57/0x270 [ 2543.255907][T13821] oom_kill_process.cold+0x10/0x15 [ 2543.260998][T13821] out_of_memory+0x334/0x1340 [ 2543.265657][T13821] ? lock_downgrade+0x920/0x920 [ 2543.270489][T13821] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2543.276275][T13821] ? oom_killer_disable+0x280/0x280 [ 2543.281460][T13821] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2543.286986][T13821] ? memcg_stat_show+0xc30/0xc30 [ 2543.292090][T13821] ? do_raw_spin_unlock+0x57/0x270 [ 2543.297215][T13821] ? _raw_spin_unlock+0x28/0x40 [ 2543.302060][T13821] try_charge+0xf4b/0x1440 [ 2543.306470][T13821] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2543.312013][T13821] ? percpu_ref_tryget_live+0x10c/0x290 [ 2543.317543][T13821] ? rcu_read_lock_held+0x9c/0xb0 [ 2543.322555][T13821] ? __kasan_check_read+0x11/0x20 [ 2543.327568][T13821] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2543.333101][T13821] mem_cgroup_try_charge+0x136/0x590 [ 2543.338375][T13821] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2543.343992][T13821] wp_page_copy+0x407/0x1860 [ 2543.348567][T13821] ? find_held_lock+0x35/0x130 [ 2543.353311][T13821] ? do_wp_page+0x53b/0x1540 [ 2543.357892][T13821] ? do_page_mkwrite+0x5b0/0x5b0 [ 2543.362815][T13821] ? lock_downgrade+0x920/0x920 [ 2543.367677][T13821] ? swp_swapcount+0x540/0x540 [ 2543.372426][T13821] ? __kasan_check_read+0x11/0x20 [ 2543.377432][T13821] ? do_raw_spin_unlock+0x57/0x270 [ 2543.382617][T13821] do_wp_page+0x543/0x1540 [ 2543.387019][T13821] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2543.392379][T13821] __handle_mm_fault+0x23a9/0x3fd0 [ 2543.397480][T13821] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2543.403156][T13821] ? handle_mm_fault+0x292/0xa90 [ 2543.408101][T13821] ? handle_mm_fault+0x7dd/0xa90 [ 2543.413046][T13821] ? __kasan_check_read+0x11/0x20 [ 2543.418064][T13821] handle_mm_fault+0x3b2/0xa90 [ 2543.422824][T13821] __do_page_fault+0x536/0xdd0 [ 2543.427581][T13821] do_page_fault+0x38/0x590 [ 2543.432071][T13821] page_fault+0x39/0x40 [ 2543.436220][T13821] RIP: 0033:0x430fd6 [ 2543.440102][T13821] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5d 64 00 85 c0 0f 84 [ 2543.459819][T13821] RSP: 002b:00007ffef6a83130 EFLAGS: 00010206 [ 2543.465880][T13821] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2543.473842][T13821] RDX: 00000000013fd930 RSI: 0000000001405970 RDI: 0000000000000003 [ 2543.481799][T13821] RBP: 0000000000008041 R08: 0000000000000001 R09: 00000000013fc940 [ 2543.489754][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 05:16:21 executing program 2: [ 2543.497709][T13821] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 05:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:22 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x121}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:16:22 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2543.654320][T13821] memory: usage 6408kB, limit 0kB, failcnt 499 [ 2543.660534][T13821] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2543.692426][T13821] Memory cgroup stats for /syz3: [ 2543.692526][T13821] anon 0 [ 2543.692526][T13821] file 188416 [ 2543.692526][T13821] kernel_stack 0 [ 2543.692526][T13821] slab 6598656 [ 2543.692526][T13821] sock 0 [ 2543.692526][T13821] shmem 180224 [ 2543.692526][T13821] file_mapped 135168 [ 2543.692526][T13821] file_dirty 135168 [ 2543.692526][T13821] file_writeback 0 [ 2543.692526][T13821] anon_thp 0 [ 2543.692526][T13821] inactive_anon 135168 [ 2543.692526][T13821] active_anon 0 [ 2543.692526][T13821] inactive_file 0 [ 2543.692526][T13821] active_file 110592 [ 2543.692526][T13821] unevictable 0 [ 2543.692526][T13821] slab_reclaimable 2838528 05:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 2543.692526][T13821] slab_unreclaimable 3760128 [ 2543.692526][T13821] pgfault 186780 [ 2543.692526][T13821] pgmajfault 0 [ 2543.692526][T13821] workingset_refault 0 [ 2543.692526][T13821] workingset_activate 0 [ 2543.692526][T13821] workingset_nodereclaim 0 [ 2543.692526][T13821] pgrefill 2449 [ 2543.692526][T13821] pgscan 10145 [ 2543.692526][T13821] pgsteal 2912 [ 2543.692526][T13821] pgactivate 3333 [ 2543.717327][T13821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=13821,uid=0 05:16:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:22 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 2543.837563][T13857] ptrace attach of "/root/syz-executor.2"[13856] was attempted by "/root/syz-executor.2"[13857] 05:16:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 2544.115748][T13821] Memory cgroup out of memory: Killed process 13821 (syz-executor.3) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2544.134577][ T1078] oom_reaper: reaped process 13821 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 05:16:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x227c, 0x0) 05:16:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:23 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080), 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:23 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:16:23 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:23 executing program 2: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") sendmmsg(r0, &(0x7f0000002dc0), 0x49a, 0x4ffe0) 05:16:23 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080), 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080), 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:24 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9}, {0x0, 0x0, 0x0, [], 0x3}, {}, {0x5, 0x4, 0x9}, {0x5, 0x0, 0x3}, {0x3, 0x0, 0x1}, {0x80000001, 0x0, 0x7}, {0x5, 0x0, 0x3, [], 0x81}, {0x0, 0x0, 0x0, [], 0x7ba}, {0x0, 0x0, 0x0, [], 0x3657e047}, {}, {0x0, 0x0, 0x0, [], 0x8}]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_getres(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:16:24 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) [ 2547.118342][T14143] IPVS: ftp: loaded support on port[0] = 21 [ 2547.146136][T20507] device bridge_slave_1 left promiscuous mode [ 2547.152458][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2547.215282][T20507] device bridge_slave_0 left promiscuous mode [ 2547.221580][T20507] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:26 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2549.284675][T20507] device hsr_slave_0 left promiscuous mode [ 2549.364284][T20507] device hsr_slave_1 left promiscuous mode [ 2549.412388][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2549.426926][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2549.440467][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2549.483584][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2549.571809][T20507] bond0 (unregistering): Released all slaves [ 2549.720292][T14143] chnl_net:caif_netlink_parms(): no params data found [ 2549.749763][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 2549.756931][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 2549.765029][T14143] device bridge_slave_0 entered promiscuous mode [ 2549.772661][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2549.779818][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 2549.787994][T14143] device bridge_slave_1 entered promiscuous mode [ 2549.854654][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2549.867321][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2549.890562][T14143] team0: Port device team_slave_0 added [ 2549.898051][T14143] team0: Port device team_slave_1 added [ 2549.957260][T14143] device hsr_slave_0 entered promiscuous mode [ 2550.004645][T14143] device hsr_slave_1 entered promiscuous mode [ 2550.044232][T14143] debugfs: Directory 'hsr0' with parent '/' already present! [ 2550.071432][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.078578][T14143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2550.085986][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.093052][T14143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2550.151305][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2550.167109][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2550.176155][T30459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2550.184015][T30459] bridge0: port 2(bridge_slave_1) entered disabled state [ 2550.199867][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.213254][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2550.222547][T30459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.229663][T30459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2550.257305][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2550.266641][T27605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.273699][T27605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2550.282562][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2550.293758][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2550.310798][T14143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2550.322231][T14143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2550.335705][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2550.343694][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2550.354751][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2550.375587][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2550.388082][T14143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2550.680702][T14163] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2550.714318][T14163] CPU: 0 PID: 14163 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2550.723391][T14163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2550.733449][T14163] Call Trace: [ 2550.736753][T14163] dump_stack+0x172/0x1f0 [ 2550.741114][T14163] dump_header+0x177/0x1152 [ 2550.745624][T14163] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2550.751455][T14163] ? ___ratelimit+0x2c8/0x595 [ 2550.756133][T14163] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2550.761948][T14163] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2550.767246][T14163] ? trace_hardirqs_on+0x67/0x240 [ 2550.772279][T14163] ? pagefault_out_of_memory+0x11c/0x11c [ 2550.777916][T14163] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2550.783725][T14163] ? ___ratelimit+0x60/0x595 [ 2550.788315][T14163] ? do_raw_spin_unlock+0x57/0x270 [ 2550.793442][T14163] oom_kill_process.cold+0x10/0x15 [ 2550.798566][T14163] out_of_memory+0x334/0x1340 [ 2550.803265][T14163] ? cgroup_file_notify+0x140/0x1b0 [ 2550.808494][T14163] ? oom_killer_disable+0x280/0x280 [ 2550.814857][T14163] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2550.820408][T14163] ? memcg_stat_show+0xc30/0xc30 [ 2550.825365][T14163] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2550.831175][T14163] ? cgroup_file_notify+0x140/0x1b0 [ 2550.836390][T14163] memory_max_write+0x262/0x3a0 [ 2550.841260][T14163] ? mem_cgroup_write+0x370/0x370 [ 2550.846291][T14163] ? lock_acquire+0x190/0x410 [ 2550.850974][T14163] ? kernfs_fop_write+0x1df/0x4a0 [ 2550.856020][T14163] cgroup_file_write+0x241/0x790 [ 2550.860970][T14163] ? mem_cgroup_write+0x370/0x370 [ 2550.866803][T14163] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2550.872441][T14163] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2550.878058][T14163] kernfs_fop_write+0x270/0x4a0 [ 2550.883680][T14163] __vfs_write+0x8a/0x110 [ 2550.887993][T14163] ? kernfs_fop_open+0xd80/0xd80 [ 2550.892918][T14163] vfs_write+0x268/0x5d0 [ 2550.897154][T14163] ksys_write+0x14f/0x290 [ 2550.901481][T14163] ? __ia32_sys_read+0xb0/0xb0 [ 2550.906240][T14163] ? do_syscall_64+0x26/0x760 [ 2550.910906][T14163] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2550.916996][T14163] ? do_syscall_64+0x26/0x760 [ 2550.921667][T14163] __x64_sys_write+0x73/0xb0 [ 2550.926264][T14163] do_syscall_64+0xfa/0x760 [ 2550.930769][T14163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2550.936645][T14163] RIP: 0033:0x459ef9 [ 2550.940524][T14163] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2550.960118][T14163] RSP: 002b:00007f7dc1b85c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2550.968535][T14163] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2550.976491][T14163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2550.984446][T14163] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2550.992402][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7dc1b866d4 [ 2551.000452][T14163] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2551.022999][T14163] memory: usage 6348kB, limit 0kB, failcnt 513 [ 2551.029339][T14163] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2551.036363][T14163] Memory cgroup stats for /syz3: [ 2551.036481][T14163] anon 2093056 [ 2551.036481][T14163] file 167936 [ 2551.036481][T14163] kernel_stack 65536 [ 2551.036481][T14163] slab 4288512 [ 2551.036481][T14163] sock 0 [ 2551.036481][T14163] shmem 180224 [ 2551.036481][T14163] file_mapped 135168 [ 2551.036481][T14163] file_dirty 135168 [ 2551.036481][T14163] file_writeback 0 [ 2551.036481][T14163] anon_thp 2097152 [ 2551.036481][T14163] inactive_anon 135168 [ 2551.036481][T14163] active_anon 2093056 [ 2551.036481][T14163] inactive_file 167936 [ 2551.036481][T14163] active_file 0 [ 2551.036481][T14163] unevictable 0 [ 2551.036481][T14163] slab_reclaimable 1892352 [ 2551.036481][T14163] slab_unreclaimable 2396160 [ 2551.036481][T14163] pgfault 186813 [ 2551.036481][T14163] pgmajfault 0 [ 2551.036481][T14163] workingset_refault 0 [ 2551.036481][T14163] workingset_activate 0 [ 2551.036481][T14163] workingset_nodereclaim 0 [ 2551.036481][T14163] pgrefill 2449 [ 2551.036481][T14163] pgscan 10834 [ 2551.036481][T14163] pgsteal 3409 [ 2551.133028][T14163] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14161,uid=0 [ 2551.149534][T14163] Memory cgroup out of memory: Killed process 14161 (syz-executor.3) total-vm:72720kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2551.169784][ T1078] oom_reaper: reaped process 14161 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:16:29 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4020aeb2, &(0x7f0000000000)) 05:16:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 2551.310320][T14143] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2551.361934][T14143] CPU: 1 PID: 14143 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2551.371012][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2551.381069][T14143] Call Trace: [ 2551.384366][T14143] dump_stack+0x172/0x1f0 [ 2551.388715][T14143] dump_header+0x177/0x1152 [ 2551.393228][T14143] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2551.399048][T14143] ? ___ratelimit+0x2c8/0x595 [ 2551.403722][T14143] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2551.409529][T14143] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2551.414824][T14143] ? trace_hardirqs_on+0x67/0x240 [ 2551.419863][T14143] ? pagefault_out_of_memory+0x11c/0x11c [ 2551.425499][T14143] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2551.431304][T14143] ? ___ratelimit+0x60/0x595 [ 2551.435889][T14143] ? do_raw_spin_unlock+0x57/0x270 [ 2551.441002][T14143] oom_kill_process.cold+0x10/0x15 [ 2551.446154][T14143] out_of_memory+0x334/0x1340 [ 2551.450826][T14143] ? lock_downgrade+0x920/0x920 [ 2551.455689][T14143] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2551.461498][T14143] ? oom_killer_disable+0x280/0x280 [ 2551.466716][T14143] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2551.472267][T14143] ? memcg_stat_show+0xc30/0xc30 [ 2551.477219][T14143] ? do_raw_spin_unlock+0x57/0x270 [ 2551.482343][T14143] ? _raw_spin_unlock+0x28/0x40 [ 2551.487208][T14143] try_charge+0xf4b/0x1440 [ 2551.491651][T14143] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2551.497201][T14143] ? percpu_ref_tryget_live+0x10c/0x290 [ 2551.502757][T14143] ? rcu_read_lock_held+0x9c/0xb0 [ 2551.507791][T14143] ? __kasan_check_read+0x11/0x20 [ 2551.512825][T14143] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2551.518374][T14143] mem_cgroup_try_charge+0x136/0x590 [ 2551.523665][T14143] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2551.529304][T14143] __handle_mm_fault+0x1ec9/0x3fd0 [ 2551.534431][T14143] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2551.539984][T14143] ? handle_mm_fault+0x292/0xa90 [ 2551.544937][T14143] ? handle_mm_fault+0x7dd/0xa90 [ 2551.549887][T14143] ? __kasan_check_read+0x11/0x20 [ 2551.554923][T14143] handle_mm_fault+0x3b2/0xa90 [ 2551.559696][T14143] __do_page_fault+0x536/0xdd0 [ 2551.564471][T14143] do_page_fault+0x38/0x590 [ 2551.568978][T14143] page_fault+0x39/0x40 [ 2551.573130][T14143] RIP: 0033:0x457e91 [ 2551.577025][T14143] Code: 48 81 ec 98 00 00 00 0f 05 48 3d 00 f0 ff ff 48 89 c3 0f 87 e9 00 00 00 85 db 0f 88 2f 01 00 00 48 89 e2 89 de bf 01 00 00 00 ba 13 00 00 85 c0 0f 88 98 00 00 00 8b 44 24 18 25 00 f0 00 00 [ 2551.596624][T14143] RSP: 002b:00007ffc6ffd6ff0 EFLAGS: 00010206 [ 2551.602702][T14143] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000457e70 05:16:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2551.602714][T14143] RDX: 00007ffc6ffd6ff0 RSI: 0000000000000003 RDI: 0000000000000001 [ 2551.618632][T14143] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000103f940 [ 2551.627735][T14143] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc6ffd81d0 [ 2551.635737][T14143] R13: 00007ffc6ffd81c0 R14: 0000000000000000 R15: 00007ffc6ffd81d0 05:16:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(r0) 05:16:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2551.984247][T14143] memory: usage 3952kB, limit 0kB, failcnt 522 [ 2551.991744][T14143] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.030055][T14143] Memory cgroup stats for /syz3: [ 2552.030167][T14143] anon 0 [ 2552.030167][T14143] file 32768 [ 2552.030167][T14143] kernel_stack 65536 [ 2552.030167][T14143] slab 4288512 [ 2552.030167][T14143] sock 0 [ 2552.030167][T14143] shmem 180224 [ 2552.030167][T14143] file_mapped 135168 [ 2552.030167][T14143] file_dirty 135168 [ 2552.030167][T14143] file_writeback 0 [ 2552.030167][T14143] anon_thp 0 [ 2552.030167][T14143] inactive_anon 135168 [ 2552.030167][T14143] active_anon 0 [ 2552.030167][T14143] inactive_file 32768 [ 2552.030167][T14143] active_file 0 [ 2552.030167][T14143] unevictable 0 [ 2552.030167][T14143] slab_reclaimable 1892352 [ 2552.030167][T14143] slab_unreclaimable 2396160 [ 2552.030167][T14143] pgfault 186813 [ 2552.030167][T14143] pgmajfault 0 [ 2552.030167][T14143] workingset_refault 0 [ 2552.030167][T14143] workingset_activate 0 [ 2552.030167][T14143] workingset_nodereclaim 0 [ 2552.030167][T14143] pgrefill 2449 [ 2552.030167][T14143] pgscan 10834 [ 2552.030167][T14143] pgsteal 3442 [ 2552.030167][T14143] pgactivate 3498 [ 2552.137470][T14143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14143,uid=0 [ 2552.164744][T14143] Memory cgroup out of memory: Killed process 14143 (syz-executor.3) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2552.193373][ T1078] oom_reaper: reaped process 14143 (syz-executor.3), now anon-rss:0kB, file-rss:33936kB, shmem-rss:0kB 05:16:30 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:31 executing program 2: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nls']) 05:16:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2553.995456][T20507] device bridge_slave_1 left promiscuous mode [ 2554.001745][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2554.055465][T20507] device bridge_slave_0 left promiscuous mode [ 2554.061716][T20507] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:32 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 05:16:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:32 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/69, 0x45) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:16:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) readlinkat(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=""/69, 0x45) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:16:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) [ 2557.148547][T20507] device hsr_slave_0 left promiscuous mode [ 2557.204257][T20507] device hsr_slave_1 left promiscuous mode [ 2557.252400][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2557.266072][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2557.278242][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2557.341649][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2557.433126][T20507] bond0 (unregistering): Released all slaves 05:16:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:36 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:36 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xffffff4d) lseek(0xffffffffffffffff, 0x0, 0x0) write$FUSE_LK(r1, 0x0, 0xbe885bc9f06b131a) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0x979cf437399e988, 0x60, 0x0, 0xffffff23) [ 2557.541537][T14250] IPVS: ftp: loaded support on port[0] = 21 [ 2557.859003][T14250] chnl_net:caif_netlink_parms(): no params data found [ 2557.976069][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2557.996490][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.013729][T14250] device bridge_slave_0 entered promiscuous mode [ 2558.033509][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.048583][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.066166][T14250] device bridge_slave_1 entered promiscuous mode [ 2558.117825][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2558.141183][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2558.198336][T14250] team0: Port device team_slave_0 added [ 2558.216245][T14250] team0: Port device team_slave_1 added [ 2558.307330][T14250] device hsr_slave_0 entered promiscuous mode [ 2558.344631][T14250] device hsr_slave_1 entered promiscuous mode [ 2558.385240][T14250] debugfs: Directory 'hsr0' with parent '/' already present! [ 2558.416394][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.423504][T14250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.430921][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.438055][T14250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2558.600997][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 2558.609046][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 2558.646037][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2558.684316][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2558.692618][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2558.710386][T14250] 8021q: adding VLAN 0 to HW filter on device team0 [ 2558.728765][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2558.738148][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2558.747694][T30459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2558.754814][T30459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2558.778264][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2558.790174][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2558.802163][T27605] bridge0: port 2(bridge_slave_1) entered blocking state [ 2558.809309][T27605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2558.819794][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2558.829191][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2558.838578][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2558.848401][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2558.858247][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2558.876789][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2558.886270][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2558.910438][T14250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2558.923373][T14250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2558.943101][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2558.952224][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2558.961224][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2558.970658][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2558.979413][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2558.998923][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2559.278168][T14273] syz-executor.3 invoked oom-killer: gfp_mask=0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), order=0, oom_score_adj=1000 [ 2559.298310][T14273] CPU: 0 PID: 14273 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2559.307357][T14273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2559.317573][T14273] Call Trace: [ 2559.321204][T14273] dump_stack+0x172/0x1f0 [ 2559.325606][T14273] dump_header+0x177/0x1152 [ 2559.331075][T14273] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2559.337032][T14273] ? ___ratelimit+0x2c8/0x595 [ 2559.341699][T14273] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2559.347600][T14273] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2559.353144][T14273] ? trace_hardirqs_on+0x67/0x240 [ 2559.358171][T14273] ? pagefault_out_of_memory+0x11c/0x11c [ 2559.363962][T14273] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2559.369779][T14273] ? ___ratelimit+0x60/0x595 [ 2559.374365][T14273] ? do_raw_spin_unlock+0x57/0x270 [ 2559.379476][T14273] oom_kill_process.cold+0x10/0x15 [ 2559.384581][T14273] out_of_memory+0x334/0x1340 [ 2559.389276][T14273] ? lock_downgrade+0x920/0x920 [ 2559.394135][T14273] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2559.399951][T14273] ? oom_killer_disable+0x280/0x280 [ 2559.405145][T14273] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2559.410696][T14273] ? memcg_stat_show+0xc30/0xc30 [ 2559.415631][T14273] ? do_raw_spin_unlock+0x57/0x270 [ 2559.420734][T14273] ? _raw_spin_unlock+0x28/0x40 [ 2559.425708][T14273] try_charge+0xf4b/0x1440 [ 2559.430173][T14273] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2559.435733][T14273] ? percpu_ref_tryget_live+0x10c/0x290 [ 2559.441264][T14273] ? rcu_read_lock_held+0x9c/0xb0 [ 2559.446273][T14273] ? __kasan_check_read+0x11/0x20 [ 2559.451302][T14273] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2559.456934][T14273] mem_cgroup_try_charge+0x136/0x590 [ 2559.462497][T14273] __add_to_page_cache_locked+0x43f/0xec0 [ 2559.468206][T14273] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 2559.474692][T14273] ? __kasan_check_read+0x11/0x20 [ 2559.479790][T14273] ? __filemap_set_wb_err+0x2b0/0x2b0 [ 2559.485144][T14273] ? __alloc_pages_nodemask+0x661/0x910 [ 2559.490687][T14273] ? xas_descend+0x144/0x370 [ 2559.495266][T14273] ? shadow_lru_isolate+0x430/0x430 [ 2559.500626][T14273] add_to_page_cache_lru+0x1d8/0x790 [ 2559.505909][T14273] ? add_to_page_cache_locked+0x40/0x40 [ 2559.511440][T14273] ? __page_cache_alloc+0x116/0x490 [ 2559.516646][T14273] pagecache_get_page+0x3c6/0xa00 [ 2559.521652][T14273] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 2559.527179][T14273] grab_cache_page_write_begin+0x75/0xb0 [ 2559.532814][T14273] ext4_da_write_begin+0x33b/0xc00 [ 2559.537909][T14273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2559.544135][T14273] ? ext4_write_begin+0xd80/0xd80 [ 2559.549191][T14273] ? copyin+0x150/0x150 [ 2559.553346][T14273] generic_perform_write+0x23b/0x540 [ 2559.558651][T14273] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4b0/0x4b0 [ 2559.566701][T14273] ? current_time+0x110/0x110 [ 2559.571363][T14273] ? generic_write_check_limits.isra.0+0x270/0x270 [ 2559.577868][T14273] ? aa_file_perm+0x40b/0xdd0 [ 2559.582544][T14273] __generic_file_write_iter+0x25e/0x630 [ 2559.588165][T14273] ext4_file_write_iter+0x317/0x13c0 [ 2559.593432][T14273] ? __kasan_check_read+0x11/0x20 [ 2559.598477][T14273] ? ext4_release_file+0x380/0x380 [ 2559.603589][T14273] ? mark_lock+0xc2/0x1220 [ 2559.607991][T14273] ? __kasan_check_read+0x11/0x20 [ 2559.613144][T14273] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2559.619379][T14273] ? iov_iter_init+0xee/0x220 [ 2559.624245][T14273] new_sync_write+0x4d3/0x770 [ 2559.628903][T14273] ? new_sync_read+0x800/0x800 [ 2559.633654][T14273] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2559.639904][T14273] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 2559.645189][T14273] __vfs_write+0xe1/0x110 [ 2559.649501][T14273] vfs_write+0x268/0x5d0 [ 2559.653902][T14273] ksys_write+0x14f/0x290 [ 2559.658308][T14273] ? __ia32_sys_read+0xb0/0xb0 [ 2559.663055][T14273] ? do_syscall_64+0x26/0x760 [ 2559.668589][T14273] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2559.674651][T14273] ? do_syscall_64+0x26/0x760 [ 2559.679332][T14273] __x64_sys_write+0x73/0xb0 [ 2559.683915][T14273] do_syscall_64+0xfa/0x760 [ 2559.688420][T14273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2559.694318][T14273] RIP: 0033:0x459ef9 [ 2559.698213][T14273] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2559.717809][T14273] RSP: 002b:00007f1777dd3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2559.726577][T14273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2559.734557][T14273] RDX: 00000000ffffff43 RSI: 0000000020000080 RDI: 0000000000000003 [ 2559.742513][T14273] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2559.750469][T14273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1777dd46d4 [ 2559.759552][T14273] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2559.777622][T14273] memory: usage 5352kB, limit 0kB, failcnt 535 [ 2559.783842][T14273] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2559.790854][T14273] Memory cgroup stats for /syz3: [ 2559.791042][T14273] anon 2142208 [ 2559.791042][T14273] file 94208 [ 2559.791042][T14273] kernel_stack 65536 [ 2559.791042][T14273] slab 3067904 [ 2559.791042][T14273] sock 0 [ 2559.791042][T14273] shmem 180224 [ 2559.791042][T14273] file_mapped 135168 [ 2559.791042][T14273] file_dirty 0 [ 2559.791042][T14273] file_writeback 0 [ 2559.791042][T14273] anon_thp 2097152 [ 2559.791042][T14273] inactive_anon 135168 [ 2559.791042][T14273] active_anon 2142208 [ 2559.791042][T14273] inactive_file 45056 [ 2559.791042][T14273] active_file 237568 [ 2559.791042][T14273] unevictable 0 [ 2559.791042][T14273] slab_reclaimable 1486848 [ 2559.791042][T14273] slab_unreclaimable 1581056 [ 2559.791042][T14273] pgfault 186879 [ 2559.791042][T14273] pgmajfault 0 [ 2559.791042][T14273] workingset_refault 0 [ 2559.791042][T14273] workingset_activate 0 [ 2559.791042][T14273] workingset_nodereclaim 0 [ 2559.791042][T14273] pgrefill 2666 [ 2559.791042][T14273] pgscan 11837 [ 2559.791042][T14273] pgsteal 3786 [ 2559.887282][T14273] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14272,uid=0 [ 2559.902878][T14273] Memory cgroup out of memory: Killed process 14272 (syz-executor.3) total-vm:72720kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:135168kB oom_score_adj:1000 [ 2559.922896][ T1078] oom_reaper: reaped process 14272 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 05:16:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:38 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e2800", 0x26}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:38 executing program 2: 05:16:38 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) 05:16:38 executing program 2: 05:16:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 2560.039252][T14250] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 05:16:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 2560.115234][T14250] CPU: 1 PID: 14250 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2560.124388][T14250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2560.134441][T14250] Call Trace: [ 2560.137737][T14250] dump_stack+0x172/0x1f0 [ 2560.142508][T14250] dump_header+0x177/0x1152 [ 2560.147011][T14250] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2560.152816][T14250] ? ___ratelimit+0x2c8/0x595 [ 2560.157494][T14250] ? _raw_spin_unlock_irqrestore+0x66/0xe0 05:16:38 executing program 2: [ 2560.163301][T14250] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2560.168587][T14250] ? trace_hardirqs_on+0x67/0x240 [ 2560.173622][T14250] ? pagefault_out_of_memory+0x11c/0x11c [ 2560.179260][T14250] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2560.185068][T14250] ? ___ratelimit+0x60/0x595 [ 2560.189671][T14250] ? do_raw_spin_unlock+0x57/0x270 [ 2560.194785][T14250] oom_kill_process.cold+0x10/0x15 [ 2560.200075][T14250] out_of_memory+0x334/0x1340 [ 2560.204752][T14250] ? lock_downgrade+0x920/0x920 [ 2560.209611][T14250] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 05:16:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 2560.215438][T14250] ? oom_killer_disable+0x280/0x280 [ 2560.220656][T14250] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2560.226211][T14250] ? memcg_stat_show+0xc30/0xc30 [ 2560.231162][T14250] ? do_raw_spin_unlock+0x57/0x270 [ 2560.236282][T14250] ? _raw_spin_unlock+0x28/0x40 [ 2560.241142][T14250] try_charge+0xf4b/0x1440 [ 2560.245572][T14250] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2560.251124][T14250] ? percpu_ref_tryget_live+0x10c/0x290 [ 2560.256671][T14250] ? rcu_read_lock_held+0x9c/0xb0 05:16:38 executing program 2: [ 2560.261703][T14250] ? __kasan_check_read+0x11/0x20 [ 2560.266732][T14250] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2560.272283][T14250] mem_cgroup_try_charge+0x136/0x590 [ 2560.277583][T14250] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2560.283223][T14250] __handle_mm_fault+0x1ec9/0x3fd0 [ 2560.288351][T14250] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2560.293908][T14250] ? handle_mm_fault+0x292/0xa90 [ 2560.298872][T14250] ? handle_mm_fault+0x7dd/0xa90 [ 2560.303822][T14250] ? __kasan_check_read+0x11/0x20 [ 2560.308859][T14250] handle_mm_fault+0x3b2/0xa90 [ 2560.313629][T14250] __do_page_fault+0x536/0xdd0 [ 2560.318404][T14250] do_page_fault+0x38/0x590 [ 2560.322915][T14250] page_fault+0x39/0x40 [ 2560.327070][T14250] RIP: 0033:0x403a42 [ 2560.330963][T14250] Code: 55 41 54 49 89 fc 55 53 48 81 ec b8 10 00 00 64 48 8b 04 25 28 00 00 00 48 89 84 24 a8 10 00 00 31 c0 be 02 00 00 00 4c 89 e7 d9 8e 05 00 85 c0 0f 84 00 03 00 00 4c 89 e7 e8 f9 43 05 00 48 [ 2560.350565][T14250] RSP: 002b:00007ffcf551fe50 EFLAGS: 00010246 [ 2560.356632][T14250] RAX: 0000000000000000 RBX: 0000000000270cea RCX: 00000000004139b0 [ 2560.364608][T14250] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffcf5520f80 [ 2560.372588][T14250] RBP: 0000000000000002 R08: 0000000000000001 R09: 000000000275f940 [ 2560.381521][T14250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf5520f80 [ 2560.389499][T14250] R13: 00007ffcf5520f70 R14: 0000000000000000 R15: 00007ffcf5520f80 [ 2560.433191][T14250] memory: usage 2952kB, limit 0kB, failcnt 544 [ 2560.454415][T14250] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2560.481897][T14250] Memory cgroup stats for /syz3: [ 2560.482013][T14250] anon 53248 [ 2560.482013][T14250] file 94208 [ 2560.482013][T14250] kernel_stack 0 [ 2560.482013][T14250] slab 3067904 [ 2560.482013][T14250] sock 0 [ 2560.482013][T14250] shmem 180224 [ 2560.482013][T14250] file_mapped 135168 [ 2560.482013][T14250] file_dirty 0 [ 2560.482013][T14250] file_writeback 0 [ 2560.482013][T14250] anon_thp 0 [ 2560.482013][T14250] inactive_anon 135168 [ 2560.482013][T14250] active_anon 53248 [ 2560.482013][T14250] inactive_file 45056 [ 2560.482013][T14250] active_file 102400 [ 2560.482013][T14250] unevictable 0 [ 2560.482013][T14250] slab_reclaimable 1486848 [ 2560.482013][T14250] slab_unreclaimable 1581056 [ 2560.482013][T14250] pgfault 186879 [ 2560.482013][T14250] pgmajfault 0 [ 2560.482013][T14250] workingset_refault 0 [ 2560.482013][T14250] workingset_activate 0 [ 2560.482013][T14250] workingset_nodereclaim 0 [ 2560.482013][T14250] pgrefill 2666 [ 2560.482013][T14250] pgscan 11837 [ 2560.482013][T14250] pgsteal 3786 [ 2560.584906][T14250] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14250,uid=0 [ 2560.607010][T14250] Memory cgroup out of memory: Killed process 14250 (syz-executor.3) total-vm:72456kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2560.632521][ T1078] oom_reaper: reaped process 14250 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 05:16:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:39 executing program 2: 05:16:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r2, 0x0, 0x1) 05:16:39 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 05:16:39 executing program 2: 05:16:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:39 executing program 2: pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 05:16:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:39 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0", 0x39}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:39 executing program 2: syz_genetlink_get_family_id$SEG6(0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x800000009, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x60ffffffffff, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 05:16:40 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000100)) 05:16:40 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, r3, 0x0, 0x1) 05:16:40 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) ftruncate(r0, 0x0) 05:16:40 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) sendfile(r0, r3, 0x0, 0x1) [ 2563.326163][T14463] IPVS: ftp: loaded support on port[0] = 21 [ 2563.335422][T20507] device bridge_slave_1 left promiscuous mode [ 2563.341673][T20507] bridge0: port 2(bridge_slave_1) entered disabled state [ 2563.395226][T20507] device bridge_slave_0 left promiscuous mode [ 2563.401571][T20507] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.284623][T20507] device hsr_slave_0 left promiscuous mode [ 2565.334466][T20507] device hsr_slave_1 left promiscuous mode [ 2565.413401][T20507] team0 (unregistering): Port device team_slave_1 removed [ 2565.428387][T20507] team0 (unregistering): Port device team_slave_0 removed [ 2565.439329][T20507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2565.501935][T20507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2565.571258][T20507] bond0 (unregistering): Released all slaves [ 2565.771981][T14463] chnl_net:caif_netlink_parms(): no params data found [ 2565.860827][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2565.869708][T14463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.878161][T14463] device bridge_slave_0 entered promiscuous mode [ 2565.886879][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.894037][T14463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.902968][T14463] device bridge_slave_1 entered promiscuous mode [ 2565.928103][T14463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2565.940011][T14463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2565.989300][T14463] team0: Port device team_slave_0 added [ 2565.998236][T14463] team0: Port device team_slave_1 added [ 2566.076943][T14463] device hsr_slave_0 entered promiscuous mode [ 2566.152126][T14463] device hsr_slave_1 entered promiscuous mode [ 2566.204279][T14463] debugfs: Directory 'hsr0' with parent '/' already present! [ 2566.233951][T14463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.241110][T14463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2566.248573][T14463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.255684][T14463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2566.341356][T14463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2566.372463][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2566.383916][T27605] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.398795][T27605] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.416132][T14463] 8021q: adding VLAN 0 to HW filter on device team0 [ 2566.435294][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2566.450836][T27605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.457962][T27605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2566.495190][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2566.510611][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.517752][T12708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2566.534072][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2566.562690][T14463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2566.594208][T14463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2566.607975][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2566.624908][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2566.633389][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2566.655300][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2566.663681][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2566.688260][T14463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2567.012199][T14472] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2567.022586][T14472] CPU: 0 PID: 14472 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2567.031640][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.041705][T14472] Call Trace: [ 2567.045025][T14472] dump_stack+0x172/0x1f0 [ 2567.049359][T14472] dump_header+0x177/0x1152 [ 2567.053848][T14472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2567.059651][T14472] ? ___ratelimit+0x2c8/0x595 [ 2567.064328][T14472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2567.070131][T14472] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2567.075403][T14472] ? trace_hardirqs_on+0x67/0x240 [ 2567.080412][T14472] ? pagefault_out_of_memory+0x11c/0x11c [ 2567.086030][T14472] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2567.091834][T14472] ? ___ratelimit+0x60/0x595 [ 2567.096495][T14472] ? do_raw_spin_unlock+0x57/0x270 [ 2567.101610][T14472] oom_kill_process.cold+0x10/0x15 [ 2567.106738][T14472] out_of_memory+0x334/0x1340 [ 2567.111418][T14472] ? cgroup_file_notify+0x140/0x1b0 [ 2567.116605][T14472] ? oom_killer_disable+0x280/0x280 [ 2567.121809][T14472] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2567.127340][T14472] ? memcg_stat_show+0xc30/0xc30 [ 2567.132266][T14472] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2567.138064][T14472] ? cgroup_file_notify+0x140/0x1b0 [ 2567.143252][T14472] memory_max_write+0x262/0x3a0 [ 2567.148092][T14472] ? mem_cgroup_write+0x370/0x370 [ 2567.153096][T14472] ? lock_acquire+0x190/0x410 [ 2567.157758][T14472] ? kernfs_fop_write+0x1df/0x4a0 [ 2567.162779][T14472] cgroup_file_write+0x241/0x790 [ 2567.167711][T14472] ? mem_cgroup_write+0x370/0x370 [ 2567.172720][T14472] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2567.178355][T14472] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2567.183978][T14472] kernfs_fop_write+0x270/0x4a0 [ 2567.188836][T14472] __vfs_write+0x8a/0x110 [ 2567.193147][T14472] ? kernfs_fop_open+0xd80/0xd80 [ 2567.198075][T14472] vfs_write+0x268/0x5d0 [ 2567.202305][T14472] ksys_write+0x14f/0x290 [ 2567.206716][T14472] ? __ia32_sys_read+0xb0/0xb0 [ 2567.211468][T14472] ? do_syscall_64+0x26/0x760 [ 2567.216133][T14472] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2567.222184][T14472] ? do_syscall_64+0x26/0x760 [ 2567.226852][T14472] __x64_sys_write+0x73/0xb0 [ 2567.231432][T14472] do_syscall_64+0xfa/0x760 [ 2567.235921][T14472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2567.241792][T14472] RIP: 0033:0x459ef9 [ 2567.245669][T14472] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2567.265255][T14472] RSP: 002b:00007f5fb7679c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2567.273647][T14472] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2567.281652][T14472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2567.289608][T14472] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2567.297573][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5fb767a6d4 [ 2567.305533][T14472] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2567.316870][T14472] memory: usage 4920kB, limit 0kB, failcnt 562 [ 2567.323061][T14472] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2567.330629][T14472] Memory cgroup stats for /syz3: [ 2567.330736][T14472] anon 2154496 [ 2567.330736][T14472] file 98304 [ 2567.330736][T14472] kernel_stack 65536 [ 2567.330736][T14472] slab 2662400 [ 2567.330736][T14472] sock 0 [ 2567.330736][T14472] shmem 180224 [ 2567.330736][T14472] file_mapped 135168 [ 2567.330736][T14472] file_dirty 0 [ 2567.330736][T14472] file_writeback 0 [ 2567.330736][T14472] anon_thp 2097152 [ 2567.330736][T14472] inactive_anon 135168 [ 2567.330736][T14472] active_anon 2154496 [ 2567.330736][T14472] inactive_file 20480 [ 2567.330736][T14472] active_file 65536 [ 2567.330736][T14472] unevictable 0 [ 2567.330736][T14472] slab_reclaimable 1351680 [ 2567.330736][T14472] slab_unreclaimable 1310720 [ 2567.330736][T14472] pgfault 186978 [ 2567.330736][T14472] pgmajfault 0 [ 2567.330736][T14472] workingset_refault 0 [ 2567.330736][T14472] workingset_activate 0 [ 2567.330736][T14472] workingset_nodereclaim 0 [ 2567.330736][T14472] pgrefill 2951 [ 2567.330736][T14472] pgscan 14176 [ 2567.330736][T14472] pgsteal 4887 [ 2567.425031][T14472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14470,uid=0 [ 2567.456410][T14472] Memory cgroup out of memory: Killed process 14470 (syz-executor.3) total-vm:72720kB, anon-rss:2140kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:143360kB oom_score_adj:1000 [ 2567.479748][ T1078] oom_reaper: reaped process 14470 (syz-executor.3), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB 05:16:46 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:46 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) sendfile(r0, r3, 0x0, 0x1) 05:16:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0x0) 05:16:46 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) ftruncate(r0, 0x0) [ 2567.563131][T14463] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 05:16:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) [ 2567.644328][T14463] CPU: 0 PID: 14463 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2567.653389][T14463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2567.663447][T14463] Call Trace: [ 2567.666750][T14463] dump_stack+0x172/0x1f0 [ 2567.671090][T14463] dump_header+0x177/0x1152 [ 2567.675594][T14463] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2567.681399][T14463] ? ___ratelimit+0x2c8/0x595 [ 2567.686084][T14463] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2567.691902][T14463] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2567.697123][T14485] ptrace attach of "/root/syz-executor.1"[14484] was attempted by "/root/syz-executor.1"[14485] [ 2567.697196][T14463] ? trace_hardirqs_on+0x67/0x240 [ 2567.712615][T14463] ? pagefault_out_of_memory+0x11c/0x11c [ 2567.718257][T14463] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2567.724073][T14463] ? ___ratelimit+0x60/0x595 [ 2567.728655][T14463] ? do_raw_spin_unlock+0x57/0x270 [ 2567.733767][T14463] oom_kill_process.cold+0x10/0x15 [ 2567.738881][T14463] out_of_memory+0x334/0x1340 [ 2567.743561][T14463] ? lock_downgrade+0x920/0x920 [ 2567.748444][T14463] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2567.754263][T14463] ? oom_killer_disable+0x280/0x280 [ 2567.759474][T14463] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2567.765135][T14463] ? memcg_stat_show+0xc30/0xc30 [ 2567.770089][T14463] ? do_raw_spin_unlock+0x57/0x270 [ 2567.775208][T14463] ? _raw_spin_unlock+0x28/0x40 [ 2567.780074][T14463] try_charge+0xf4b/0x1440 [ 2567.784523][T14463] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2567.790071][T14463] ? percpu_ref_tryget_live+0x10c/0x290 [ 2567.795625][T14463] ? rcu_read_lock_held+0x9c/0xb0 [ 2567.800645][T14463] ? __kasan_check_read+0x11/0x20 [ 2567.806629][T14463] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2567.812180][T14463] mem_cgroup_try_charge+0x136/0x590 [ 2567.817469][T14463] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2567.823101][T14463] wp_page_copy+0x407/0x1860 [ 2567.827693][T14463] ? find_held_lock+0x35/0x130 [ 2567.828747][T14491] ptrace attach of "/root/syz-executor.1"[14490] was attempted by "/root/syz-executor.1"[14491] [ 2567.832451][T14463] ? do_wp_page+0x53b/0x1540 [ 2567.832467][T14463] ? do_page_mkwrite+0x5b0/0x5b0 [ 2567.832485][T14463] ? lock_downgrade+0x920/0x920 [ 2567.857213][T14463] ? swp_swapcount+0x540/0x540 [ 2567.861981][T14463] ? __kasan_check_read+0x11/0x20 [ 2567.866998][T14463] ? do_raw_spin_unlock+0x57/0x270 [ 2567.867016][T14463] do_wp_page+0x543/0x1540 [ 2567.867034][T14463] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2567.867062][T14463] __handle_mm_fault+0x23a9/0x3fd0 [ 2567.887000][T14463] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2567.892555][T14463] ? handle_mm_fault+0x292/0xa90 [ 2567.892586][T14463] ? handle_mm_fault+0x7dd/0xa90 [ 2567.902432][T14463] ? __kasan_check_read+0x11/0x20 [ 2567.907458][T14463] handle_mm_fault+0x3b2/0xa90 [ 2567.912224][T14463] __do_page_fault+0x536/0xdd0 [ 2567.917000][T14463] do_page_fault+0x38/0x590 [ 2567.921509][T14463] page_fault+0x39/0x40 [ 2567.925672][T14463] RIP: 0033:0x430fd6 05:16:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:46 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b", 0x43}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 05:16:46 executing program 2: pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) [ 2567.929566][T14463] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5d 64 00 85 c0 0f 84 [ 2567.949184][T14463] RSP: 002b:00007ffe8bd14530 EFLAGS: 00010206 [ 2567.955249][T14463] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 [ 2567.963219][T14463] RDX: 000000000122a930 RSI: 0000000001232970 RDI: 0000000000000003 [ 2567.971195][T14463] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000001229940 [ 2567.979177][T14463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2567.987148][T14463] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2568.086610][T14505] ptrace attach of "/root/syz-executor.1"[14504] was attempted by "/root/syz-executor.1"[14505] [ 2568.166241][T14463] memory: usage 2536kB, limit 0kB, failcnt 571 [ 2568.172465][T14463] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2568.221600][T14463] Memory cgroup stats for /syz3: [ 2568.221739][T14463] anon 24576 [ 2568.221739][T14463] file 98304 [ 2568.221739][T14463] kernel_stack 65536 [ 2568.221739][T14463] slab 2662400 [ 2568.221739][T14463] sock 0 [ 2568.221739][T14463] shmem 180224 [ 2568.221739][T14463] file_mapped 135168 [ 2568.221739][T14463] file_dirty 0 [ 2568.221739][T14463] file_writeback 0 [ 2568.221739][T14463] anon_thp 0 [ 2568.221739][T14463] inactive_anon 135168 [ 2568.221739][T14463] active_anon 24576 [ 2568.221739][T14463] inactive_file 20480 [ 2568.221739][T14463] active_file 65536 [ 2568.221739][T14463] unevictable 0 [ 2568.221739][T14463] slab_reclaimable 1351680 [ 2568.221739][T14463] slab_unreclaimable 1310720 [ 2568.221739][T14463] pgfault 186978 [ 2568.221739][T14463] pgmajfault 0 [ 2568.221739][T14463] workingset_refault 0 [ 2568.221739][T14463] workingset_activate 0 [ 2568.221739][T14463] workingset_nodereclaim 0 [ 2568.221739][T14463] pgrefill 2951 [ 2568.221739][T14463] pgscan 14176 [ 2568.221739][T14463] pgsteal 4887 [ 2568.367704][T14463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14463,uid=0 [ 2568.393396][T14463] Memory cgroup out of memory: Killed process 14463 (syz-executor.3) total-vm:72456kB, anon-rss:68kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 05:16:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, 0x0) sendfile(r0, r3, 0x0, 0x1) 05:16:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 05:16:47 executing program 2: pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:16:47 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) 05:16:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:47 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) 05:16:47 executing program 2: pipe(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770000000000200000f07000000000000000a4000000000000000000", 0xffffffe5}], 0x2) 05:16:47 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f", 0x48}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:47 executing program 2: r0 = memfd_create(&(0x7f00000003c0)='\x00\xac\xb0\xfc\xe7\xc7R\xe3\x8al\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\xa9u\xd6\x03\x16\x9d\xb3j\x05\xed\x1f\xa9\x19\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9\xbf\xefo\xa4\xcb\'\n>\xa1\x9c\x86x\x1c\x9f\x84\x195\x82\x17w|\xdb6\x90\x15\xb4\x0f\x06+L^l\x17\x8bX\x939\x1b\xdf\xfd\x8bF:m\x9e\x82]6#sf\x01\x02\x05DT\xfd{\xd7\\\xea\x06\xc4\x87\xe3R#.`\xc0\b`\x14\x96\x83l\xf7*\x82\xf5\x8d\x12\xc5\n\x8b\xba\x93-\x84\x01W\xecX\x11|\x897e\xb9\x1f', 0x5) fallocate(r0, 0x0, 0x0, 0x1) 05:16:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x30, &(0x7f00000004c0)={'filter\x00\x00\x02\x00', 0x7, 0x4, 0x480, 0x140, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, 0x0, {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev, @multicast1}}}, {{@arp={@multicast1, @multicast1, 0x0, 0x0, @mac=@dev, {}, @mac=@local, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan0\x00', 'veth1_to_hsr\x00'}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) 05:16:48 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 2570.755586][T24391] device bridge_slave_1 left promiscuous mode [ 2570.761851][T24391] bridge0: port 2(bridge_slave_1) entered disabled state [ 2570.825129][T24391] device bridge_slave_0 left promiscuous mode [ 2570.831316][T24391] bridge0: port 1(bridge_slave_0) entered disabled state 05:16:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 05:16:50 executing program 2: write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|\x1c\xb0\xa6z\xd1\xa9\xb0\xfd`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') umount2(0x0, 0x4) 05:16:50 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) 05:16:50 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 2573.274561][T24391] device hsr_slave_0 left promiscuous mode [ 2573.314249][T24391] device hsr_slave_1 left promiscuous mode [ 2573.363168][T24391] team0 (unregistering): Port device team_slave_1 removed [ 2573.378286][T24391] team0 (unregistering): Port device team_slave_0 removed [ 2573.391387][T24391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2573.431678][T24391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2573.516248][T24391] bond0 (unregistering): Released all slaves [ 2573.640264][T14655] IPVS: ftp: loaded support on port[0] = 21 [ 2573.787571][T14655] chnl_net:caif_netlink_parms(): no params data found [ 2573.843080][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2573.850352][T14655] bridge0: port 1(bridge_slave_0) entered disabled state [ 2573.864787][T14655] device bridge_slave_0 entered promiscuous mode [ 2573.873223][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2573.886997][T14655] bridge0: port 2(bridge_slave_1) entered disabled state [ 2573.898287][T14655] device bridge_slave_1 entered promiscuous mode [ 2573.923394][T14655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2573.936612][T14655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2573.962903][T14655] team0: Port device team_slave_0 added [ 2573.972047][T14655] team0: Port device team_slave_1 added [ 2574.041869][T14655] device hsr_slave_0 entered promiscuous mode [ 2574.094694][T14655] device hsr_slave_1 entered promiscuous mode [ 2574.144317][T14655] debugfs: Directory 'hsr0' with parent '/' already present! [ 2574.179565][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.186735][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2574.194156][T14655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.201226][T14655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.260301][T14655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2574.277460][ T3154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2574.288521][ T3154] bridge0: port 1(bridge_slave_0) entered disabled state [ 2574.297168][ T3154] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.320109][T14655] 8021q: adding VLAN 0 to HW filter on device team0 [ 2574.333642][T27605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2574.343795][T27605] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.350987][T27605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.369312][T30459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2574.377944][T30459] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.385074][T30459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2574.406133][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2574.415579][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2574.424698][T12708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2574.438260][T14655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2574.464197][T14655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2574.486070][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2574.495071][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2574.503818][ T702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2574.523596][T14655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2574.887500][T14788] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2574.914302][T14788] CPU: 1 PID: 14788 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2574.923352][T14788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2574.933434][T14788] Call Trace: [ 2574.936734][T14788] dump_stack+0x172/0x1f0 [ 2574.941102][T14788] dump_header+0x177/0x1152 [ 2574.945609][T14788] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2574.951411][T14788] ? ___ratelimit+0x2c8/0x595 [ 2574.956080][T14788] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2574.961881][T14788] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2574.967161][T14788] ? trace_hardirqs_on+0x67/0x240 [ 2574.972187][T14788] ? pagefault_out_of_memory+0x11c/0x11c [ 2574.977814][T14788] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2574.983628][T14788] ? ___ratelimit+0x60/0x595 [ 2574.988196][T14788] ? do_raw_spin_unlock+0x57/0x270 [ 2574.993289][T14788] oom_kill_process.cold+0x10/0x15 [ 2574.998379][T14788] out_of_memory+0x334/0x1340 [ 2575.003032][T14788] ? cgroup_file_notify+0x140/0x1b0 [ 2575.008217][T14788] ? oom_killer_disable+0x280/0x280 [ 2575.013400][T14788] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2575.018923][T14788] ? memcg_stat_show+0xc30/0xc30 [ 2575.023848][T14788] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2575.029664][T14788] ? cgroup_file_notify+0x140/0x1b0 [ 2575.034856][T14788] memory_max_write+0x262/0x3a0 [ 2575.039689][T14788] ? mem_cgroup_write+0x370/0x370 [ 2575.044704][T14788] ? lock_acquire+0x190/0x410 [ 2575.049369][T14788] ? kernfs_fop_write+0x1df/0x4a0 [ 2575.054389][T14788] cgroup_file_write+0x241/0x790 [ 2575.059332][T14788] ? mem_cgroup_write+0x370/0x370 [ 2575.064349][T14788] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2575.069976][T14788] ? cgroup_migrate_add_task+0x8a0/0x8a0 [ 2575.075593][T14788] kernfs_fop_write+0x270/0x4a0 [ 2575.080434][T14788] __vfs_write+0x8a/0x110 [ 2575.084748][T14788] ? kernfs_fop_open+0xd80/0xd80 [ 2575.089700][T14788] vfs_write+0x268/0x5d0 [ 2575.093945][T14788] ksys_write+0x14f/0x290 [ 2575.098332][T14788] ? __ia32_sys_read+0xb0/0xb0 [ 2575.103085][T14788] ? do_syscall_64+0x26/0x760 [ 2575.107796][T14788] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.113851][T14788] ? do_syscall_64+0x26/0x760 [ 2575.118521][T14788] __x64_sys_write+0x73/0xb0 [ 2575.123097][T14788] do_syscall_64+0xfa/0x760 [ 2575.127592][T14788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.133490][T14788] RIP: 0033:0x459ef9 [ 2575.137384][T14788] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2575.156997][T14788] RSP: 002b:00007f7e90923c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2575.165826][T14788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459ef9 [ 2575.173774][T14788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2575.181816][T14788] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2575.189779][T14788] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e909246d4 [ 2575.197733][T14788] R13: 00000000004ca4f4 R14: 00000000004e23a8 R15: 00000000ffffffff [ 2575.217073][T14788] memory: usage 4668kB, limit 0kB, failcnt 587 [ 2575.223243][T14788] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2575.230797][T14788] Memory cgroup stats for /syz3: [ 2575.230927][T14788] anon 2162688 [ 2575.230927][T14788] file 143360 [ 2575.230927][T14788] kernel_stack 131072 [ 2575.230927][T14788] slab 2527232 [ 2575.230927][T14788] sock 0 [ 2575.230927][T14788] shmem 180224 [ 2575.230927][T14788] file_mapped 135168 [ 2575.230927][T14788] file_dirty 0 [ 2575.230927][T14788] file_writeback 0 [ 2575.230927][T14788] anon_thp 2097152 [ 2575.230927][T14788] inactive_anon 135168 [ 2575.230927][T14788] active_anon 2162688 [ 2575.230927][T14788] inactive_file 94208 [ 2575.230927][T14788] active_file 45056 [ 2575.230927][T14788] unevictable 0 [ 2575.230927][T14788] slab_reclaimable 1351680 [ 2575.230927][T14788] slab_unreclaimable 1175552 [ 2575.230927][T14788] pgfault 187077 [ 2575.230927][T14788] pgmajfault 0 [ 2575.230927][T14788] workingset_refault 0 [ 2575.230927][T14788] workingset_activate 0 [ 2575.230927][T14788] workingset_nodereclaim 0 [ 2575.230927][T14788] pgrefill 3400 [ 2575.230927][T14788] pgscan 16959 [ 2575.230927][T14788] pgsteal 5767 [ 2575.334197][T14788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14786,uid=0 [ 2575.354374][T14788] Memory cgroup out of memory: Killed process 14786 (syz-executor.3) total-vm:72720kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:139264kB oom_score_adj:1000 [ 2575.383287][ T1078] oom_reaper: reaped process 14786 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 05:16:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(r4, 0x0, 0x0) 05:16:53 executing program 2: 05:16:53 executing program 0: 05:16:53 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(0xffffffffffffffff, r2, 0x0, 0x1) 05:16:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653a8990785363940aed12f0000db2f00000022f1f169a4000000000000009f1f8175442ce71022fe50377a22cbccb0353cffd7a7c0c91f00e5f9cc2d3fbf0322168078aba9d7ae45b0051a1221af2765a9567bb821942c00279bd612811df1fcaa94a96d58db92af7f9298918ae95b745777a1968e48d46358c8735e3b009f9d01000000000000005b5895e126de3d6d7c6949c6a87cf3ab2fbe80d1028d6e727a596c761e274e8f7bf745addbe19bd7642d38323564278e0132d1dfda6a254b9c2fa9c5d27796310a13c91878b74c9d615ae752a67e9373b0bc80f98c", 0xde}], 0x4, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 05:16:53 executing program 0: [ 2575.493732][T14655] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 2575.534428][T14655] CPU: 1 PID: 14655 Comm: syz-executor.3 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2575.543495][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2575.553553][T14655] Call Trace: [ 2575.556838][T14655] dump_stack+0x172/0x1f0 [ 2575.561151][T14655] dump_header+0x177/0x1152 [ 2575.565635][T14655] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2575.571430][T14655] ? ___ratelimit+0x2c8/0x595 [ 2575.576086][T14655] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 2575.581877][T14655] ? lockdep_hardirqs_on+0x421/0x5e0 [ 2575.587147][T14655] ? trace_hardirqs_on+0x67/0x240 [ 2575.592154][T14655] ? pagefault_out_of_memory+0x11c/0x11c [ 2575.597766][T14655] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 2575.603553][T14655] ? ___ratelimit+0x60/0x595 [ 2575.608120][T14655] ? do_raw_spin_unlock+0x57/0x270 [ 2575.613225][T14655] oom_kill_process.cold+0x10/0x15 [ 2575.618496][T14655] out_of_memory+0x334/0x1340 [ 2575.623150][T14655] ? lock_downgrade+0x920/0x920 [ 2575.627990][T14655] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 2575.633779][T14655] ? oom_killer_disable+0x280/0x280 [ 2575.638977][T14655] mem_cgroup_out_of_memory+0x1d8/0x240 [ 2575.644507][T14655] ? memcg_stat_show+0xc30/0xc30 [ 2575.649429][T14655] ? do_raw_spin_unlock+0x57/0x270 [ 2575.654523][T14655] ? _raw_spin_unlock+0x28/0x40 [ 2575.659358][T14655] try_charge+0xf4b/0x1440 [ 2575.663761][T14655] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 2575.669297][T14655] ? percpu_ref_tryget_live+0x10c/0x290 [ 2575.674826][T14655] ? rcu_read_lock_held+0x9c/0xb0 [ 2575.679831][T14655] ? __kasan_check_read+0x11/0x20 [ 2575.684839][T14655] ? get_mem_cgroup_from_mm+0x151/0x310 [ 2575.690365][T14655] mem_cgroup_try_charge+0x136/0x590 [ 2575.695638][T14655] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 2575.701252][T14655] wp_page_copy+0x407/0x1860 [ 2575.705825][T14655] ? find_held_lock+0x35/0x130 [ 2575.710571][T14655] ? do_wp_page+0x53b/0x1540 [ 2575.715145][T14655] ? do_page_mkwrite+0x5b0/0x5b0 [ 2575.720063][T14655] ? lock_downgrade+0x920/0x920 [ 2575.724899][T14655] ? swp_swapcount+0x540/0x540 [ 2575.729645][T14655] ? __kasan_check_read+0x11/0x20 [ 2575.734820][T14655] ? do_raw_spin_unlock+0x57/0x270 [ 2575.739937][T14655] do_wp_page+0x543/0x1540 [ 2575.744338][T14655] ? finish_mkwrite_fault+0x6a0/0x6a0 [ 2575.749697][T14655] __handle_mm_fault+0x23a9/0x3fd0 [ 2575.754803][T14655] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2575.760332][T14655] ? handle_mm_fault+0x292/0xa90 [ 2575.765257][T14655] ? handle_mm_fault+0x7dd/0xa90 [ 2575.770181][T14655] ? __kasan_check_read+0x11/0x20 [ 2575.775188][T14655] handle_mm_fault+0x3b2/0xa90 [ 2575.779954][T14655] __do_page_fault+0x536/0xdd0 [ 2575.784702][T14655] do_page_fault+0x38/0x590 [ 2575.789189][T14655] page_fault+0x39/0x40 [ 2575.793324][T14655] RIP: 0033:0x430fd6 [ 2575.797203][T14655] Code: 1f 44 00 00 48 29 e8 31 c9 48 81 fb 40 66 71 00 0f 95 c1 48 8d 34 2a 48 83 cd 01 48 c1 e1 02 48 83 c8 01 48 09 e9 48 89 73 58 <48> 89 4a 08 48 89 46 08 48 8d 4a 10 8b 05 0c 5d 64 00 85 c0 0f 84 [ 2575.816789][T14655] RSP: 002b:00007fffbb0aa430 EFLAGS: 00010206 [ 2575.822834][T14655] RAX: 0000000000019691 RBX: 0000000000716640 RCX: 0000000000008041 05:16:54 executing program 2: socket$key(0xf, 0x3, 0x2) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="147e8d880054093ff86b"], 0xa}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 05:16:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a3", 0x4a}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) [ 2575.834789][T14655] RDX: 0000000002139930 RSI: 0000000002141970 RDI: 0000000000000003 [ 2575.842740][T14655] RBP: 0000000000008041 R08: 0000000000000001 R09: 0000000002138940 [ 2575.850693][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000716698 [ 2575.858644][T14655] R13: 0000000000716698 R14: 0000000000000000 R15: 0000000000002710 [ 2575.928952][T14655] memory: usage 2220kB, limit 0kB, failcnt 596 05:16:54 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 05:16:54 executing program 0: [ 2575.973917][T14655] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2575.999481][T14802] ptrace attach of "/root/syz-executor.2"[14801] was attempted by "/root/syz-executor.2"[14802] [ 2576.015490][T14655] Memory cgroup stats for /syz3: [ 2576.015598][T14655] anon 0 [ 2576.015598][T14655] file 143360 [ 2576.015598][T14655] kernel_stack 65536 [ 2576.015598][T14655] slab 2527232 [ 2576.015598][T14655] sock 0 [ 2576.015598][T14655] shmem 180224 [ 2576.015598][T14655] file_mapped 135168 [ 2576.015598][T14655] file_dirty 0 [ 2576.015598][T14655] file_writeback 0 [ 2576.015598][T14655] anon_thp 0 [ 2576.015598][T14655] inactive_anon 135168 [ 2576.015598][T14655] active_anon 0 [ 2576.015598][T14655] inactive_file 94208 [ 2576.015598][T14655] active_file 45056 [ 2576.015598][T14655] unevictable 0 [ 2576.015598][T14655] slab_reclaimable 1351680 [ 2576.015598][T14655] slab_unreclaimable 1175552 [ 2576.015598][T14655] pgfault 187077 [ 2576.015598][T14655] pgmajfault 0 [ 2576.015598][T14655] workingset_refault 0 [ 2576.015598][T14655] workingset_activate 0 [ 2576.015598][T14655] workingset_nodereclaim 0 [ 2576.015598][T14655] pgrefill 3400 [ 2576.015598][T14655] pgscan 16959 [ 2576.015598][T14655] pgsteal 5767 [ 2576.015598][T14655] pgactivate 5610 05:16:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000028c0)=[{{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f00000007c0)=""/95, 0x5f}, {&(0x7f0000000840)=""/98, 0x62}, {&(0x7f0000000540)=""/172, 0x2c}, {0x0}, {&(0x7f0000000ac0)=""/237, 0xed}], 0x6}, 0x401}, {{0x0, 0x35f, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000c40)=""/213, 0xcd}, 0xe0f5}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xa4) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "212f52f501e62bf8", "58b6e32ba7ada806611b0e8d2d70a8ac4fcd398496b32c6be2223a280f637381", "ee2f21ff", "8bb68ad6e417fb85"}, 0x38) socket(0x840000000002, 0x3, 0x200000000000ff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0xa4) r10 = syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r11, r10, 0x0, 0x400000a4) ioctl$KVM_TPR_ACCESS_REPORTING(r10, 0xc028ae92, &(0x7f0000000080)={0x2}) r12 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r7, r12, 0x0, 0x320f) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="300000000300010000000000000000ee033b85f79319dafb5e06000000000000000f0000129ed059bff5688aa8d4000d1a24bf69ff0bb965d5dd34bbbb9957e2c55a4508c9b6307f7a18c9e9386d375253a094227d93aa34a77ce66985aa0bc0c35e60ebe32594ed7904000000000000003a2d92341fd3e41c1505063ababde9cff1b6909d"], 0x30) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x1f, 0x6, @local}, 0x14) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2576.020573][T14655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=14655,uid=0 [ 2576.276533][T14655] Memory cgroup out of memory: Killed process 14655 (syz-executor.3) total-vm:72456kB, anon-rss:72kB, file-rss:34832kB, shmem-rss:0kB, UID:0 pgtables:126976kB oom_score_adj:0 [ 2576.295606][ T1078] oom_reaper: reaped process 14655 (syz-executor.3), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 05:16:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0xffffff43) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x9, 0x0, 0x1, 0x40, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000016c0)={0x0, 0x70, 0x1, 0x40, 0x7f, 0xfe, 0x0, 0x0, 0x22001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000}, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x801c581f, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={r1, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x802, 0x88) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0096616, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 05:16:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, 0x0) 05:16:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a", 0x4b}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002540), 0x4000000000004da, 0x12046, 0x0) 05:16:55 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) 05:16:55 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77) clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2011, 0x0) ftruncate(r0, 0x0) [ 2576.778122][T14824] ================================================================== [ 2576.786765][T14824] BUG: KASAN: use-after-free in nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.795099][T14824] Read of size 1 at addr ffff888065620e04 by task syz-executor.0/14824 [ 2576.803315][T14824] [ 2576.805635][T14824] CPU: 1 PID: 14824 Comm: syz-executor.0 Not tainted 5.4.0-rc4-next-20191023 #0 [ 2576.814633][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2576.824670][T14824] Call Trace: [ 2576.827953][T14824] dump_stack+0x172/0x1f0 [ 2576.832295][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.838263][T14824] print_address_description.constprop.0.cold+0xd4/0x30b [ 2576.845266][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.851227][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.857465][T14824] __kasan_report.cold+0x1b/0x41 [ 2576.862388][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.868354][T14824] kasan_report+0x12/0x20 [ 2576.872665][T14824] __asan_report_load1_noabort+0x14/0x20 [ 2576.878285][T14824] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2576.884076][T14824] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 2576.890477][T14824] ? ipv6_find_tlv+0x280/0x280 [ 2576.895290][T14824] ? nf_nat_inet_fn+0x211/0x8b0 [ 2576.900126][T14824] nf_confirm+0x3d8/0x4d0 [ 2576.904873][T14824] ipv6_confirm+0x1e4/0x3a0 [ 2576.909368][T14824] ? ipv4_confirm+0x240/0x240 [ 2576.914069][T14824] ? ip6table_mangle_hook+0xbf/0x6c0 [ 2576.919379][T14824] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2576.925518][T14824] nf_hook_slow+0xbc/0x1e0 [ 2576.929958][T14824] ip6_input+0x209/0x3f0 [ 2576.934185][T14824] ? ip6_input_finish+0x170/0x170 [ 2576.939196][T14824] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2576.945335][T14824] ? ip6_protocol_deliver_rcu+0x1670/0x1670 [ 2576.951214][T14824] ? rcu_read_lock_held_common+0x130/0x130 [ 2576.957005][T14824] ip6_sublist_rcv_finish+0x9b/0x2d0 [ 2576.962280][T14824] ip6_sublist_rcv+0x513/0x930 [ 2576.967042][T14824] ? ip6_rcv_finish+0x310/0x310 [ 2576.976320][T14824] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 2576.982201][T14824] ipv6_list_rcv+0x373/0x4b0 [ 2576.986776][T14824] ? ipv6_rcv+0x420/0x420 [ 2576.991091][T14824] ? ipv6_rcv+0x420/0x420 [ 2576.995457][T14824] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 2577.001423][T14824] ? ktime_get_with_offset+0x135/0x360 [ 2577.006864][T14824] ? ktime_get_with_offset+0x135/0x360 [ 2577.012310][T14824] ? process_backlog+0x750/0x750 [ 2577.017233][T14824] ? lock_acquire+0x190/0x410 [ 2577.021893][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.026905][T14824] netif_receive_skb_list_internal+0x7eb/0xe50 [ 2577.033046][T14824] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 2577.039182][T14824] ? ipv6_gro_receive+0x96f/0x14f0 [ 2577.044282][T14824] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2577.050556][T14824] ? eth_type_trans+0x3a5/0x760 [ 2577.055408][T14824] gro_normal_list.part.0+0x1e/0xb0 [ 2577.060598][T14824] gro_normal_one+0x184/0x1d0 [ 2577.065260][T14824] napi_gro_frags+0x915/0xd00 [ 2577.069987][T14824] tun_get_user+0x2e8e/0x3f80 [ 2577.074647][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.079666][T14824] ? tun_build_skb.isra.0+0x1380/0x1380 [ 2577.085202][T14824] ? rcu_read_lock_held+0x9c/0xb0 [ 2577.090211][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.095235][T14824] tun_chr_write_iter+0xbd/0x156 [ 2577.100157][T14824] do_iter_readv_writev+0x5f8/0x8f0 [ 2577.105344][T14824] ? no_seek_end_llseek_size+0x70/0x70 [ 2577.110788][T14824] ? apparmor_file_permission+0x25/0x30 [ 2577.116318][T14824] ? rw_verify_area+0x126/0x360 [ 2577.121152][T14824] do_iter_write+0x184/0x610 [ 2577.125721][T14824] ? dup_iter+0x260/0x260 [ 2577.130043][T14824] vfs_writev+0x1b3/0x2f0 [ 2577.134353][T14824] ? vfs_iter_write+0xb0/0xb0 [ 2577.139009][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.144051][T14824] ? ksys_dup3+0x3e0/0x3e0 [ 2577.148450][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.153458][T14824] ? __fget_light+0x1a9/0x230 [ 2577.158118][T14824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2577.164345][T14824] do_writev+0x15b/0x330 [ 2577.168586][T14824] ? vfs_writev+0x2f0/0x2f0 [ 2577.173072][T14824] ? do_syscall_64+0x26/0x760 [ 2577.177732][T14824] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.183779][T14824] ? do_syscall_64+0x26/0x760 [ 2577.188442][T14824] __x64_sys_writev+0x75/0xb0 [ 2577.193101][T14824] do_syscall_64+0xfa/0x760 [ 2577.197602][T14824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.203476][T14824] RIP: 0033:0x459db1 [ 2577.207353][T14824] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 2577.227036][T14824] RSP: 002b:00007f16c92d8ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 2577.235440][T14824] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000459db1 [ 2577.243392][T14824] RDX: 0000000000000001 RSI: 00007f16c92d8c00 RDI: 00000000000000f0 [ 2577.251346][T14824] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2577.259307][T14824] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f16c92d96d4 [ 2577.267264][T14824] R13: 00000000004c922e R14: 00000000004e0860 R15: 00000000ffffffff [ 2577.275229][T14824] [ 2577.277538][T14824] Allocated by task 14824: [ 2577.281939][T14824] save_stack+0x23/0x90 [ 2577.286074][T14824] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2577.291690][T14824] kasan_krealloc+0x84/0xc0 [ 2577.296173][T14824] krealloc+0xa6/0xd0 [ 2577.300135][T14824] nf_ct_ext_add+0x2c7/0x630 [ 2577.304704][T14824] init_conntrack.isra.0+0x5ed/0x11a0 [ 2577.310053][T14824] nf_conntrack_in+0xd94/0x1460 [ 2577.314897][T14824] ipv6_conntrack_in+0x1e/0x30 [ 2577.319641][T14824] nf_hook_slow+0xbc/0x1e0 [ 2577.324046][T14824] nf_hook_slow_list+0x1d9/0x480 [ 2577.328967][T14824] ip6_sublist_rcv+0x677/0x930 [ 2577.333713][T14824] ipv6_list_rcv+0x373/0x4b0 [ 2577.338296][T14824] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 2577.344276][T14824] netif_receive_skb_list_internal+0x7eb/0xe50 [ 2577.350470][T14824] gro_normal_list.part.0+0x1e/0xb0 [ 2577.355694][T14824] gro_normal_one+0x184/0x1d0 [ 2577.360365][T14824] napi_gro_frags+0x915/0xd00 [ 2577.365028][T14824] tun_get_user+0x2e8e/0x3f80 [ 2577.369711][T14824] tun_chr_write_iter+0xbd/0x156 [ 2577.374630][T14824] do_iter_readv_writev+0x5f8/0x8f0 [ 2577.379939][T14824] do_iter_write+0x184/0x610 [ 2577.384516][T14824] vfs_writev+0x1b3/0x2f0 [ 2577.388836][T14824] do_writev+0x15b/0x330 [ 2577.393067][T14824] __x64_sys_writev+0x75/0xb0 [ 2577.397729][T14824] do_syscall_64+0xfa/0x760 [ 2577.402217][T14824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.408082][T14824] [ 2577.410391][T14824] Freed by task 14824: [ 2577.414444][T14824] save_stack+0x23/0x90 [ 2577.418580][T14824] __kasan_slab_free+0x102/0x150 [ 2577.423505][T14824] kasan_slab_free+0xe/0x10 [ 2577.427988][T14824] kfree+0x10a/0x2c0 [ 2577.431893][T14824] nf_ct_ext_destroy+0x2ab/0x2e0 [ 2577.436814][T14824] nf_conntrack_free+0x8f/0xe0 [ 2577.441576][T14824] destroy_conntrack+0x1a2/0x270 [ 2577.446520][T14824] nf_conntrack_destroy+0xed/0x230 [ 2577.451630][T14824] __nf_conntrack_confirm+0x21ca/0x2830 [ 2577.457173][T14824] nf_confirm+0x3e7/0x4d0 [ 2577.461482][T14824] ipv6_confirm+0x1e4/0x3a0 [ 2577.465965][T14824] nf_hook_slow+0xbc/0x1e0 [ 2577.470365][T14824] ip6_input+0x209/0x3f0 [ 2577.474674][T14824] ip6_sublist_rcv_finish+0x9b/0x2d0 [ 2577.479936][T14824] ip6_sublist_rcv+0x513/0x930 [ 2577.484682][T14824] ipv6_list_rcv+0x373/0x4b0 [ 2577.489254][T14824] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 2577.495227][T14824] netif_receive_skb_list_internal+0x7eb/0xe50 [ 2577.501359][T14824] gro_normal_list.part.0+0x1e/0xb0 [ 2577.506541][T14824] gro_normal_one+0x184/0x1d0 [ 2577.511198][T14824] napi_gro_frags+0x915/0xd00 [ 2577.515867][T14824] tun_get_user+0x2e8e/0x3f80 [ 2577.520522][T14824] tun_chr_write_iter+0xbd/0x156 [ 2577.525439][T14824] do_iter_readv_writev+0x5f8/0x8f0 [ 2577.530617][T14824] do_iter_write+0x184/0x610 [ 2577.535184][T14824] vfs_writev+0x1b3/0x2f0 [ 2577.539615][T14824] do_writev+0x15b/0x330 [ 2577.543853][T14824] __x64_sys_writev+0x75/0xb0 [ 2577.548550][T14824] do_syscall_64+0xfa/0x760 [ 2577.553060][T14824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.558930][T14824] [ 2577.561240][T14824] The buggy address belongs to the object at ffff888065620e00 [ 2577.561240][T14824] which belongs to the cache kmalloc-128 of size 128 [ 2577.575272][T14824] The buggy address is located 4 bytes inside of [ 2577.575272][T14824] 128-byte region [ffff888065620e00, ffff888065620e80) [ 2577.588349][T14824] The buggy address belongs to the page: [ 2577.593970][T14824] page:ffffea0001958800 refcount:1 mapcount:0 mapping:ffff8880aa400700 index:0x0 [ 2577.603059][T14824] flags: 0x1fffc0000000200(slab) [ 2577.607980][T14824] raw: 01fffc0000000200 ffffea0002748d88 ffffea000293d1c8 ffff8880aa400700 [ 2577.616547][T14824] raw: 0000000000000000 ffff888065620000 0000000100000010 0000000000000000 [ 2577.625106][T14824] page dumped because: kasan: bad access detected [ 2577.631492][T14824] [ 2577.633796][T14824] Memory state around the buggy address: [ 2577.640362][T14824] ffff888065620d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 2577.648403][T14824] ffff888065620d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2577.656454][T14824] >ffff888065620e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2577.664489][T14824] ^ [ 2577.668536][T14824] ffff888065620e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2577.676577][T14824] ffff888065620f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 2577.684613][T14824] ================================================================== [ 2577.692649][T14824] Disabling lock debugging due to kernel taint [ 2577.699021][T14824] Kernel panic - not syncing: panic_on_warn set ... [ 2577.705614][T14824] CPU: 1 PID: 14824 Comm: syz-executor.0 Tainted: G B 5.4.0-rc4-next-20191023 #0 [ 2577.716014][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.726078][T14824] Call Trace: [ 2577.729378][T14824] dump_stack+0x172/0x1f0 [ 2577.733710][T14824] panic+0x2e3/0x75c [ 2577.737601][T14824] ? add_taint.cold+0x16/0x16 [ 2577.742289][T14824] ? trace_hardirqs_on+0x5e/0x240 [ 2577.747316][T14824] ? trace_hardirqs_on+0x5e/0x240 [ 2577.752349][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2577.758340][T14824] end_report+0x47/0x4f [ 2577.762507][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2577.768503][T14824] __kasan_report.cold+0xe/0x41 [ 2577.773435][T14824] ? nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2577.779401][T14824] kasan_report+0x12/0x20 [ 2577.783713][T14824] __asan_report_load1_noabort+0x14/0x20 [ 2577.789325][T14824] nf_ct_deliver_cached_events+0x5c3/0x6d0 [ 2577.795128][T14824] ? nf_ct_expect_unregister_notifier+0x140/0x140 [ 2577.801522][T14824] ? ipv6_find_tlv+0x280/0x280 [ 2577.806266][T14824] ? nf_nat_inet_fn+0x211/0x8b0 [ 2577.811115][T14824] nf_confirm+0x3d8/0x4d0 [ 2577.815426][T14824] ipv6_confirm+0x1e4/0x3a0 [ 2577.819993][T14824] ? ipv4_confirm+0x240/0x240 [ 2577.824649][T14824] ? ip6table_mangle_hook+0xbf/0x6c0 [ 2577.829914][T14824] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2577.836049][T14824] nf_hook_slow+0xbc/0x1e0 [ 2577.840448][T14824] ip6_input+0x209/0x3f0 [ 2577.844670][T14824] ? ip6_input_finish+0x170/0x170 [ 2577.849671][T14824] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2577.855813][T14824] ? ip6_protocol_deliver_rcu+0x1670/0x1670 [ 2577.862040][T14824] ? rcu_read_lock_held_common+0x130/0x130 [ 2577.867827][T14824] ip6_sublist_rcv_finish+0x9b/0x2d0 [ 2577.873091][T14824] ip6_sublist_rcv+0x513/0x930 [ 2577.877835][T14824] ? ip6_rcv_finish+0x310/0x310 [ 2577.882669][T14824] ? ip6_rcv_finish_core.isra.0+0x590/0x590 [ 2577.888545][T14824] ipv6_list_rcv+0x373/0x4b0 [ 2577.893117][T14824] ? ipv6_rcv+0x420/0x420 [ 2577.897436][T14824] ? ipv6_rcv+0x420/0x420 [ 2577.901745][T14824] __netif_receive_skb_list_core+0x1a2/0x9d0 [ 2577.907705][T14824] ? ktime_get_with_offset+0x135/0x360 [ 2577.913154][T14824] ? ktime_get_with_offset+0x135/0x360 [ 2577.918603][T14824] ? process_backlog+0x750/0x750 [ 2577.923527][T14824] ? lock_acquire+0x190/0x410 [ 2577.928196][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.933211][T14824] netif_receive_skb_list_internal+0x7eb/0xe50 [ 2577.939358][T14824] ? __netif_receive_skb_list_core+0x9d0/0x9d0 [ 2577.945494][T14824] ? ipv6_gro_receive+0x96f/0x14f0 [ 2577.950591][T14824] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2577.956811][T14824] ? eth_type_trans+0x3a5/0x760 [ 2577.961642][T14824] gro_normal_list.part.0+0x1e/0xb0 [ 2577.966819][T14824] gro_normal_one+0x184/0x1d0 [ 2577.971475][T14824] napi_gro_frags+0x915/0xd00 [ 2577.977092][T14824] tun_get_user+0x2e8e/0x3f80 [ 2577.981748][T14824] ? __kasan_check_read+0x11/0x20 [ 2577.986758][T14824] ? tun_build_skb.isra.0+0x1380/0x1380 [ 2577.992286][T14824] ? rcu_read_lock_held+0x9c/0xb0 [ 2577.997286][T14824] ? __kasan_check_read+0x11/0x20 [ 2578.002297][T14824] tun_chr_write_iter+0xbd/0x156 [ 2578.007215][T14824] do_iter_readv_writev+0x5f8/0x8f0 [ 2578.015260][T14824] ? no_seek_end_llseek_size+0x70/0x70 [ 2578.020700][T14824] ? apparmor_file_permission+0x25/0x30 [ 2578.026225][T14824] ? rw_verify_area+0x126/0x360 [ 2578.031057][T14824] do_iter_write+0x184/0x610 [ 2578.035625][T14824] ? dup_iter+0x260/0x260 [ 2578.039945][T14824] vfs_writev+0x1b3/0x2f0 [ 2578.044251][T14824] ? vfs_iter_write+0xb0/0xb0 [ 2578.048904][T14824] ? __kasan_check_read+0x11/0x20 [ 2578.053915][T14824] ? ksys_dup3+0x3e0/0x3e0 [ 2578.058310][T14824] ? __kasan_check_read+0x11/0x20 [ 2578.063311][T14824] ? __fget_light+0x1a9/0x230 [ 2578.067969][T14824] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.074185][T14824] do_writev+0x15b/0x330 [ 2578.078853][T14824] ? vfs_writev+0x2f0/0x2f0 [ 2578.083336][T14824] ? do_syscall_64+0x26/0x760 [ 2578.087993][T14824] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2578.094049][T14824] ? do_syscall_64+0x26/0x760 [ 2578.098708][T14824] __x64_sys_writev+0x75/0xb0 [ 2578.103374][T14824] do_syscall_64+0xfa/0x760 [ 2578.107868][T14824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2578.113739][T14824] RIP: 0033:0x459db1 [ 2578.117616][T14824] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 e4 b7 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 2578.137197][T14824] RSP: 002b:00007f16c92d8ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 2578.145590][T14824] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000459db1 [ 2578.153539][T14824] RDX: 0000000000000001 RSI: 00007f16c92d8c00 RDI: 00000000000000f0 [ 2578.161488][T14824] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2578.169438][T14824] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f16c92d96d4 [ 2578.177390][T14824] R13: 00000000004c922e R14: 00000000004e0860 R15: 00000000ffffffff [ 2578.186876][T14824] Kernel Offset: disabled [ 2578.191231][T14824] Rebooting in 86400 seconds..